last executing test programs: 2.60031734s ago: executing program 0 (id=302): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2040084) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x4}, @NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 1.919996676s ago: executing program 2 (id=313): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000002440)=[{&(0x7f0000000180)}], 0x1, 0x2, 0xffffffff) 1.860914395s ago: executing program 2 (id=315): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000001) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_freeze_timeout', 0x0, 0x0) fchown(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'sit0\x00', @random="5692ffb363bb"}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r4 = socket$unix(0x1, 0x2, 0x0) recvmsg(r0, &(0x7f0000000680)={&(0x7f0000000240)=@caif=@dgm, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/149, 0x95}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/89, 0x59}, {&(0x7f0000000540)=""/180, 0xb4}], 0x7, &(0x7f0000000140)}, 0x22) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001c00070c000000000000000007000000", @ANYRES8], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20080094) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1fd6b38443af8512}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x3c}}, 0x4) 1.698673969s ago: executing program 0 (id=319): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xfb) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x3d17, 0x0, 0x200, 0x8, 0x1a, "fc12105588e633bbb1dfe72dace17a32d211ee"}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x20, &(0x7f0000000340)={&(0x7f0000000280)=""/16, 0x10, 0x0, &(0x7f00000002c0)=""/70, 0x46}}, 0x10) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xd) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x40005, 0xab, &(0x7f0000000540)=""/171, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x1080, 0x1}, 0x18, 0x0) r4 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = getpgrp(0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000100)={0x2, r7}) sendmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.650782116s ago: executing program 0 (id=320): syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}], 0x1, 0x3c, 0x3) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x4, &(0x7f0000000140)=@raw=[@ringbuf_query], &(0x7f0000000180)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xe, 0x0, 0x2}, 0x10, 0x45, 0xffffffffffffffff, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x5, 0x3, 0xb, 0xc}, {0x0, 0x1, 0xe, 0xc}, {0x4, 0x2, 0xb, 0xa}, {0x2, 0x2, 0x10}, {0x4, 0x6, 0x3, 0x4}, {0x1, 0x3, 0x3, 0x9}], 0x10, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000100), &(0x7f0000000280)=r3}, 0x20) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x8, 0x7f, 0xb5c}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000007, 0x12, r5, 0x100000000) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000007, 0x12, r5, 0x100000000) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0x605}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x6}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0x605}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x6}]}}}]}, 0x3c}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000000080)={&(0x7f0000000000)=[r1], 0x400000080000001, 0x1, 0xa}) 1.630926202s ago: executing program 0 (id=321): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x4], [0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}, [@TCA_MQPRIO_MODE={0x4, 0x4}]}}}]}, 0x90}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r6}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f00000001c0)={0x1, 0x1ee, "f1ff10", 0x0, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x405, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10408, 0x2140}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000881}, 0x200400c0) 1.530505912s ago: executing program 0 (id=322): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x3, 0x3}, 0xffffffffffffffad) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) (async) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000100)={@un=@abs={0x0, 0x0, 0x4e20}, {&(0x7f0000000000)=""/181, 0xb5}, &(0x7f00000000c0), 0x4}, 0xa0) 1.080639639s ago: executing program 1 (id=328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r2, &(0x7f00000001c0)=""/64, 0x40) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000008ec79926a42fe76f5107b06010800"/28], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x0, 0x0, 0x23, 0x15, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0]}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f00000005c0)={0x0, &(0x7f0000000580)=[{}], r5, 0x0, '\x00', 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000480)={&(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0], 0x1, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000a80)={&(0x7f0000000040), &(0x7f0000000b00)=[{}, {}], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x2, 0xa, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000880)={&(0x7f0000000800)=[0x0], &(0x7f0000000040)=[0x0], 0x1, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000980)={0x700, 0x1, &(0x7f0000000380)=[r8], &(0x7f00000003c0)=[0x4, 0x100], &(0x7f00000008c0)=[r5, r6, r7, r10], &(0x7f00000009c0)=[0x1, 0x4000049, 0xa, 0xfff, 0x7fffffff, 0x7fffffff, 0x7fffffff, 0x8, 0x2, 0x9], 0x0, 0x100000000}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x7c}}, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) dup(r11) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r12, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r12, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r12, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28) sendmsg$inet(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000240)="6ed5", 0x2}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r12, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r12, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYRESOCT=r9, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 980.034322ms ago: executing program 2 (id=329): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x101}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) sendto$inet6(r0, &(0x7f0000000400)="045fb36d46748bc4f82ba4af5ce5b0ef5a18aa45cdd1e6afdd3c5b25430266726b2eb47fbfe6dc900752a04415e2416441bd64301f9190b6b1daa06319832dfe22059f3be602dded223066458eb4b29e", 0x50, 0x1, &(0x7f0000000240)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x6f1dd9aa, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000480)={0x200, {{0x2, 0x4e20, @remote}}, 0x1, 0x4, [{{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}}, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e20, @broadcast}}]}, 0x290) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r5], 0x0, 0x0, 0x0, 0x0, 0x7f}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) sendto$inet6(r2, &(0x7f0000000740)="6e6e0688a184830e1aa4b75cfe9749f781878b289d0c94c4a31acc1af3201eb6205ab5c8e4785a63d7a402053523a20070bf38d49c62cfa702bf4313bc0fdd01369c192b75db7d2c3505f9193154f808ca8035eb09b3a38c0133003cf2737a025f260d96e44f749982466d71e75fc396aa6ee034884279de71fef6761e2b11d791efc9271886c57a12abb179f91b8a9d337e618856fd3c106bf82cda9ab2ddbfa8699293f5b1eea843fa1f4eda7ba9d4091c3a95ee8283c8df0c813f84d15a48ef9c5fd102af801392ef479d9a3b54c6b10d0c3f4f7290a431f5d721c37f83c5072ddc66888d5906e3dc5898b02f24be8713d1", 0xf3, 0x10, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 979.792316ms ago: executing program 1 (id=330): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 979.398803ms ago: executing program 1 (id=331): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000200)) 910.349605ms ago: executing program 1 (id=332): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netpci0\x00', 0x0}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x0, 0x0, 0x1}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe870, 0x0, 0x1, 0x400, 0xfffffff7}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xce}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xda}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xab}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0xa0}}, 0x0) 860.387878ms ago: executing program 1 (id=333): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000100)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [0xc, 0x9], [0x0, 0x0, 0x0, 0x40000], [0x0, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000300)={r5, 0x800, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0x10000000], [0x0, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000002c0)={r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r6, 0x80000}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x3, 0x0, 0xa, 0x1ff, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 760.710878ms ago: executing program 1 (id=334): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04004220"], 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) splice(0xffffffffffffffff, &(0x7f0000000100)=0x7fffffffffffffff, r0, &(0x7f0000000180)=0x5, 0x4, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @remote, 0xe}], 0x1c) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) 680.016571ms ago: executing program 0 (id=335): r0 = io_uring_setup(0x67bb, &(0x7f0000000300)={0x0, 0x4, 0x0, 0xfffffffd}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=rdma0000000000000,pri\x00\x00\x00\x00']) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) r4 = gettid() syz_open_procfs(r4, &(0x7f00000005c0)='setgroups\x00') lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000100)='privport', 0x8, 0x2) getgroups(0x1, &(0x7f0000000200)=[0xee00]) read$FUSE(0xffffffffffffffff, &(0x7f0000001800)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) connect$unix(r3, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000002c0)={&(0x7f0000008280)="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", 0x1000}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2000000020, 0xfffffffffffffffd, 0x80000000000, 0x0, 0x10, 0x4, 0x0, 0x8000, 0x2, r9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x800000, &(0x7f0000000440)={[{@gid={'gid', 0x3d, r5}}, {@gid={'gid', 0x3d, r6}}, {@uid={'uid', 0x3d, r7}}, {@mode={'mode', 0x3d, 0x80000001}}, {@uid={'uid', 0x3d, r9}}, {@mode={'mode', 0x3d, 0x6}}], [{@fsname={'fsname', 0x3d, '!\x99+&'}}, {@subj_type={'subj_type', 0x3d, '9p\x00'}}, {@smackfshat={'smackfshat', 0x3d, '9p\x00'}}, {@pcr={'pcr', 0x3d, 0x40}}]}) 341.14201ms ago: executing program 3 (id=340): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) 340.115381ms ago: executing program 3 (id=341): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x20) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x2080, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2001020, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x10001, 0x0) 211.221916ms ago: executing program 3 (id=342): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000002440)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x2, 0xffffffff) (fail_nth: 2) 130.952094ms ago: executing program 2 (id=343): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="031b28bd7000ffd9df2503"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) 130.629718ms ago: executing program 3 (id=344): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000c00000/0x1000)=nil, 0x1000, 0x16) sendto$inet6(r1, &(0x7f0000000080)="035c09", 0x3, 0x40c0, &(0x7f0000000100)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}, 0x1c) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) close(0x3) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r2, &(0x7f00000040c0)={0x2020}, 0x2020) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) pwritev(r3, &(0x7f0000002440)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x2, 0xffffffff) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0x6, 0x4) 70.955226ms ago: executing program 2 (id=345): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = gettid() r3 = epoll_create(0x400) r4 = eventfd(0x0) epoll_create1(0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x20000010}) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r4, &(0x7f0000000080)={r3, r4}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r1, 0x28543634fae43ad, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) gettid() (async) epoll_create(0x400) (async) eventfd(0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x20000010}) (async) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r4, &(0x7f0000000080)={r3, r4}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r1, 0x28543634fae43ad, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) (async) 70.830631ms ago: executing program 3 (id=346): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x8) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000001200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) 292.196µs ago: executing program 2 (id=347): r0 = socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) getpid() r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000140)=0x2f, 0x4) recvmmsg(r1, &(0x7f0000008880), 0x483, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2000, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) setsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000180)=0x7, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000000000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000c2fc876ac45896292aa37be4c7949c96390390d1533a2a613f2781246cd6c16fa9c0f32c84f30009d79a7c8f5dbae9a583b7f202b72112c3f39dc69583a0c9c8996c5efef017e890098ada2c424573296e50dd1ebdc008b618ca39eec92e1b7a9983445814e"], 0x90) 0s ago: executing program 3 (id=348): r0 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='40::\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sched\x00') write$P9_RLCREATE(r5, 0x0, 0x0) ioctl$CDROM_MEDIA_CHANGED(r5, 0x5325, 0xa7ad) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x27, 0x3}}) socket(0x10, 0x803, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) (async) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='40::\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sched\x00') (async) write$P9_RLCREATE(r5, 0x0, 0x0) (async) ioctl$CDROM_MEDIA_CHANGED(r5, 0x5325, 0xa7ad) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x27, 0x3}}) (async) kernel console output (not intermixed with test programs): -file. Priority:0 extents:1 across:124996k [ 46.469146][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 46.469155][ T40] audit: type=1400 audit(1745525887.544:105): avc: denied { execmem } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.679072][ T40] audit: type=1400 audit(1745525887.754:106): avc: denied { create } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.687766][ T40] audit: type=1400 audit(1745525887.754:107): avc: denied { read write } for pid=5944 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.695124][ T40] audit: type=1400 audit(1745525887.754:108): avc: denied { open } for pid=5944 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.702280][ T40] audit: type=1400 audit(1745525887.764:109): avc: denied { ioctl } for pid=5944 comm="syz-executor" path="socket:[5719]" dev="sockfs" ino=5719 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.723891][ T5300] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.727462][ T5300] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.729765][ T5300] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.732841][ T5300] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.737737][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.749208][ T5950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.751584][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.752636][ T5951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.754574][ T5950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.756609][ T5951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.759427][ T5950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.761290][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.765275][ T5950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.766256][ T5951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.768650][ T5950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.770386][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.778031][ T40] audit: type=1400 audit(1745525887.854:110): avc: denied { read } for pid=5948 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.791448][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.792766][ T40] audit: type=1400 audit(1745525887.854:111): avc: denied { open } for pid=5948 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.797064][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.801364][ T40] audit: type=1400 audit(1745525887.854:112): avc: denied { mounton } for pid=5948 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.804702][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.812894][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.015004][ T40] audit: type=1400 audit(1745525888.094:113): avc: denied { module_request } for pid=5952 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.075867][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 47.100448][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 47.324434][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.327310][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.330312][ T5952] bridge_slave_0: entered allmulticast mode [ 47.333567][ T5952] bridge_slave_0: entered promiscuous mode [ 47.337264][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 47.341713][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.344457][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.347103][ T5948] bridge_slave_0: entered allmulticast mode [ 47.350627][ T5948] bridge_slave_0: entered promiscuous mode [ 47.354405][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 47.361422][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.364658][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.367761][ T5952] bridge_slave_1: entered allmulticast mode [ 47.371487][ T5952] bridge_slave_1: entered promiscuous mode [ 47.398657][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.400895][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.403800][ T5948] bridge_slave_1: entered allmulticast mode [ 47.407397][ T5948] bridge_slave_1: entered promiscuous mode [ 47.473029][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.484552][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.584866][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.612394][ T5952] team0: Port device team_slave_0 added [ 47.619019][ T5952] team0: Port device team_slave_1 added [ 47.646800][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.747205][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.750146][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.760813][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.767664][ T5948] team0: Port device team_slave_0 added [ 47.812992][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.815343][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.823631][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.828098][ T5948] team0: Port device team_slave_1 added [ 47.830145][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.833008][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.836276][ T5953] bridge_slave_0: entered allmulticast mode [ 47.838903][ T5953] bridge_slave_0: entered promiscuous mode [ 47.842407][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.844918][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.847193][ T5953] bridge_slave_1: entered allmulticast mode [ 47.849749][ T5953] bridge_slave_1: entered promiscuous mode [ 47.852519][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.855187][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.857637][ T5944] bridge_slave_0: entered allmulticast mode [ 47.860843][ T5944] bridge_slave_0: entered promiscuous mode [ 47.869499][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.871742][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.873977][ T5944] bridge_slave_1: entered allmulticast mode [ 47.876744][ T5944] bridge_slave_1: entered promiscuous mode [ 47.943633][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.971521][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.976349][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.987761][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.993933][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.996566][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.008393][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.017305][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.144439][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.164113][ T5952] hsr_slave_0: entered promiscuous mode [ 48.167645][ T5952] hsr_slave_1: entered promiscuous mode [ 48.173332][ T5953] team0: Port device team_slave_0 added [ 48.178367][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.206979][ T5953] team0: Port device team_slave_1 added [ 48.263301][ T5944] team0: Port device team_slave_0 added [ 48.270612][ T5944] team0: Port device team_slave_1 added [ 48.324802][ T5948] hsr_slave_0: entered promiscuous mode [ 48.327600][ T5948] hsr_slave_1: entered promiscuous mode [ 48.330491][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.333698][ T5948] Cannot create hsr debugfs directory [ 48.393775][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.396148][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.404229][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.436943][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.439176][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.448143][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.465294][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.468195][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.480099][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.488236][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.491064][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.500900][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.645584][ T5953] hsr_slave_0: entered promiscuous mode [ 48.647783][ T5953] hsr_slave_1: entered promiscuous mode [ 48.649802][ T5953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.652145][ T5953] Cannot create hsr debugfs directory [ 48.659793][ T5944] hsr_slave_0: entered promiscuous mode [ 48.661989][ T5944] hsr_slave_1: entered promiscuous mode [ 48.664080][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.666573][ T5944] Cannot create hsr debugfs directory [ 48.785480][ T5947] Bluetooth: hci1: command tx timeout [ 48.864484][ T5955] Bluetooth: hci3: command tx timeout [ 48.864745][ T5947] Bluetooth: hci0: command tx timeout [ 48.864934][ T5956] Bluetooth: hci2: command tx timeout [ 48.926601][ T5952] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.936333][ T5952] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.948212][ T5952] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.961243][ T5952] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.993589][ T5948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.002247][ T5948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.006823][ T5948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.011310][ T5948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.064347][ T5944] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.069141][ T5944] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.073106][ T5944] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.079509][ T5944] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.126406][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.135776][ T5953] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.140973][ T5953] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.159070][ T5953] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.163572][ T5953] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.186554][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.193225][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.206074][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.208445][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.217909][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.225727][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.228266][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.240515][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.243074][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.251152][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.253523][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.280651][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.309885][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.323571][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.326183][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.342998][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.346148][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.364294][ T40] audit: type=1400 audit(1745525890.434:114): avc: denied { sys_module } for pid=5948 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.377644][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.413198][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.439470][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.442066][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.449425][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.460073][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.462383][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.492354][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.512742][ T5948] veth0_vlan: entered promiscuous mode [ 49.528213][ T5948] veth1_vlan: entered promiscuous mode [ 49.542160][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.553287][ T5952] veth0_vlan: entered promiscuous mode [ 49.566079][ T5952] veth1_vlan: entered promiscuous mode [ 49.568822][ T5948] veth0_macvtap: entered promiscuous mode [ 49.572959][ T5948] veth1_macvtap: entered promiscuous mode [ 49.585184][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.595658][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.599420][ T5948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.602235][ T5948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.605941][ T5948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.609318][ T5948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.625011][ T5944] veth0_vlan: entered promiscuous mode [ 49.629287][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.641413][ T5952] veth0_macvtap: entered promiscuous mode [ 49.651227][ T5952] veth1_macvtap: entered promiscuous mode [ 49.661354][ T5944] veth1_vlan: entered promiscuous mode [ 49.685895][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.686107][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.689613][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.692801][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.697478][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.703206][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.707954][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.711712][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.723885][ T5952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.727391][ T5952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.730146][ T5952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.732972][ T5952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.737860][ T5953] veth0_vlan: entered promiscuous mode [ 49.752426][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.755324][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.760027][ T5953] veth1_vlan: entered promiscuous mode [ 49.769250][ T5944] veth0_macvtap: entered promiscuous mode [ 49.777051][ T5944] veth1_macvtap: entered promiscuous mode [ 49.802526][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.807602][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.810678][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.813951][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.819548][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.823603][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.825117][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.826458][ T5948] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.828355][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.829627][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.834038][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.834049][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.834850][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.851722][ T5944] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.855202][ T5944] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.858271][ T5944] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.861262][ T5944] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.865891][ T5953] veth0_macvtap: entered promiscuous mode [ 49.895237][ T5953] veth1_macvtap: entered promiscuous mode [ 49.898641][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.901388][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.917045][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.920704][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.923779][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.927975][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.931011][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.934525][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.935468][ T6012] loop2: detected capacity change from 0 to 7 [ 49.938553][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.947253][ T6012] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 49.949549][ T6012] loop2: partition table partially beyond EOD, truncated [ 49.952126][ T6012] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 49.956406][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.959658][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.959845][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.978125][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.981157][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.985508][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.988567][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.991710][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.995618][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.004664][ T5953] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.007520][ T5953] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.010212][ T5953] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.012911][ T5953] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.033421][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.037523][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.075953][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.078521][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.116399][ T1201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.118817][ T1201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.130808][ T5360] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 50.133592][ T5360] loop2: partition table partially beyond EOD, truncated [ 50.140352][ T5360] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 50.229784][ T6027] Zero length message leads to an empty skb [ 50.252727][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 50.262845][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 50.264299][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 50.450133][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'. [ 50.475085][ T6060] loop2: detected capacity change from 0 to 7 [ 50.483883][ T6060] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 50.487803][ T6060] loop2: partition table partially beyond EOD, truncated [ 50.490448][ T6060] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 50.574282][ T5991] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.585923][ T5360] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 50.587697][ T5360] loop2: partition table partially beyond EOD, truncated [ 50.590040][ T5360] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 50.596931][ T6066] FAULT_INJECTION: forcing a failure. [ 50.596931][ T6066] name failslab, interval 1, probability 0, space 0, times 1 [ 50.602355][ T6066] CPU: 3 UID: 0 PID: 6066 Comm: syz.0.19 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 50.602370][ T6066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.602376][ T6066] Call Trace: [ 50.602380][ T6066] [ 50.602383][ T6066] dump_stack_lvl+0x16c/0x1f0 [ 50.602402][ T6066] should_fail_ex+0x512/0x640 [ 50.602413][ T6066] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 50.602449][ T6066] should_failslab+0xc2/0x120 [ 50.602462][ T6066] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 50.602472][ T6066] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 50.602484][ T6066] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 50.602500][ T6066] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 50.602513][ T6066] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 50.602528][ T6066] mmu_topup_memory_caches+0x25/0x170 [ 50.602539][ T6066] kvm_mmu_load+0xd9/0x22a0 [ 50.602555][ T6066] ? kvm_apic_has_interrupt+0xb5/0x190 [ 50.602569][ T6066] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 50.602586][ T6066] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 50.602596][ T6066] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 50.602611][ T6066] ? __pfx_kvm_mmu_load+0x10/0x10 [ 50.602626][ T6066] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 50.602638][ T6066] ? kvm_check_and_inject_events+0x71c/0x1310 [ 50.602657][ T6066] vcpu_run+0x33d9/0x52d0 [ 50.602673][ T6066] ? __lock_acquire+0xaa4/0x1ba0 [ 50.602686][ T6066] ? __pfx_vcpu_run+0x10/0x10 [ 50.602710][ T6066] ? fpu_swap_kvm_fpstate+0x235/0x4a0 [ 50.602725][ T6066] ? __local_bh_enable_ip+0xa4/0x120 [ 50.602743][ T6066] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 50.602759][ T6066] kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 50.602783][ T6066] kvm_vcpu_ioctl+0x5e9/0x1680 [ 50.602794][ T6066] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 50.602813][ T6066] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 50.602832][ T6066] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 50.602852][ T6066] ? hook_file_ioctl_common+0x145/0x410 [ 50.602865][ T6066] ? selinux_file_ioctl+0x180/0x270 [ 50.602880][ T6066] ? selinux_file_ioctl+0xb4/0x270 [ 50.602896][ T6066] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 50.602913][ T6066] __x64_sys_ioctl+0x190/0x200 [ 50.602928][ T6066] do_syscall_64+0xcd/0x260 [ 50.602943][ T6066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.602954][ T6066] RIP: 0033:0x7fe91358e969 [ 50.602962][ T6066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.602972][ T6066] RSP: 002b:00007fe9143e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.602982][ T6066] RAX: ffffffffffffffda RBX: 00007fe9137b5fa0 RCX: 00007fe91358e969 [ 50.602988][ T6066] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 50.602994][ T6066] RBP: 00007fe9143e2090 R08: 0000000000000000 R09: 0000000000000000 [ 50.602999][ T6066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.603005][ T6066] R13: 0000000000000000 R14: 00007fe9137b5fa0 R15: 00007ffc26a3f438 [ 50.603017][ T6066] [ 50.632397][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 50.633938][ C3] vkms_vblank_simulate: vblank timer overrun [ 50.663106][ T6074] bridge0: port 3(syz_tun) entered blocking state [ 50.712558][ T6074] bridge0: port 3(syz_tun) entered disabled state [ 50.715266][ T6074] syz_tun: entered allmulticast mode [ 50.718826][ T6074] syz_tun: entered promiscuous mode [ 50.721379][ T6074] bridge0: port 3(syz_tun) entered blocking state [ 50.724137][ T6074] bridge0: port 3(syz_tun) entered forwarding state [ 50.749010][ T5991] usb 7-1: config index 0 descriptor too short (expected 64147, got 36) [ 50.751790][ T5991] usb 7-1: config 23 has too many interfaces: 191, using maximum allowed: 32 [ 50.754847][ T5991] usb 7-1: config 23 has an invalid descriptor of length 48, skipping remainder of the config [ 50.758028][ T5991] usb 7-1: config 23 has 0 interfaces, different from the descriptor's value: 191 [ 50.760991][ T5991] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 50.763846][ T5991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.789894][ T6080] syz.0.22 uses obsolete (PF_INET,SOCK_PACKET) [ 50.944688][ T5947] Bluetooth: hci2: command tx timeout [ 50.944697][ T5955] Bluetooth: hci0: command tx timeout [ 50.979688][ T6085] xt_TCPMSS: Only works on TCP SYN packets [ 50.980980][ T6086] xt_TCPMSS: Only works on TCP SYN packets [ 50.986792][ T5991] usb 7-1: string descriptor 0 read error: -71 [ 50.991690][ T5991] usb 7-1: USB disconnect, device number 2 [ 51.045863][ T6095] xt_hashlimit: size too large, truncated to 1048576 [ 51.098401][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 51.187779][ T6108] mkiss: ax0: crc mode is auto. [ 51.321063][ T6110] loop2: detected capacity change from 0 to 7 [ 51.338922][ T6110] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 51.341167][ T6110] loop2: partition table partially beyond EOD, truncated [ 51.345969][ T6110] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 51.425580][ T5360] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 51.428653][ T5360] loop2: partition table partially beyond EOD, truncated [ 51.431094][ T5360] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 51.481294][ T40] kauditd_printk_skb: 84 callbacks suppressed [ 51.481308][ T40] audit: type=1400 audit(1745525892.554:199): avc: denied { write } for pid=6117 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.494047][ T40] audit: type=1400 audit(1745525892.554:200): avc: denied { ioctl } for pid=6117 comm="syz.1.34" path="socket:[8831]" dev="sockfs" ino=8831 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 51.498734][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 51.507258][ T5987] IPVS: starting estimator thread 0... [ 51.535646][ T40] audit: type=1400 audit(1745525892.604:201): avc: denied { getopt } for pid=6117 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.536960][ T6130] xt_hashlimit: size too large, truncated to 1048576 [ 51.548443][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37'. [ 51.549141][ T40] audit: type=1400 audit(1745525892.614:202): avc: denied { write } for pid=6117 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 51.561491][ T40] audit: type=1400 audit(1745525892.624:203): avc: denied { create } for pid=6127 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 51.575348][ T40] audit: type=1400 audit(1745525892.624:204): avc: denied { write } for pid=6127 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 51.583440][ T40] audit: type=1400 audit(1745525892.654:205): avc: denied { nlmsg_write } for pid=6137 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.591578][ T40] audit: type=1400 audit(1745525892.664:206): avc: denied { bind } for pid=6117 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.603546][ T40] audit: type=1400 audit(1745525892.664:207): avc: denied { name_bind } for pid=6117 comm="syz.1.34" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 51.604414][ T6125] IPVS: using max 44 ests per chain, 105600 per kthread [ 51.610818][ T40] audit: type=1400 audit(1745525892.664:208): avc: denied { node_bind } for pid=6117 comm="syz.1.34" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 51.669736][ T6146] tipc: Can't bind to reserved service type 2 [ 51.731469][ T6153] xt_limit: Overflow, try lower: 1207959552/384 [ 51.740686][ T6148] FAULT_INJECTION: forcing a failure. [ 51.740686][ T6148] name failslab, interval 1, probability 0, space 0, times 0 [ 51.746628][ T6148] CPU: 3 UID: 0 PID: 6148 Comm: syz.0.41 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 51.746644][ T6148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.746650][ T6148] Call Trace: [ 51.746654][ T6148] [ 51.746658][ T6148] dump_stack_lvl+0x16c/0x1f0 [ 51.746675][ T6148] should_fail_ex+0x512/0x640 [ 51.746687][ T6148] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 51.746699][ T6148] should_failslab+0xc2/0x120 [ 51.746711][ T6148] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 51.746720][ T6148] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 51.746732][ T6148] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 51.746760][ T6148] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 51.746773][ T6148] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 51.746789][ T6148] mmu_topup_memory_caches+0x25/0x170 [ 51.746799][ T6148] kvm_mmu_load+0xd9/0x22a0 [ 51.746816][ T6148] ? kvm_apic_has_interrupt+0xb5/0x190 [ 51.746830][ T6148] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 51.746844][ T6148] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 51.746854][ T6148] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 51.746869][ T6148] ? __pfx_kvm_mmu_load+0x10/0x10 [ 51.746885][ T6148] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 51.746897][ T6148] ? kvm_check_and_inject_events+0x71c/0x1310 [ 51.746916][ T6148] vcpu_run+0x33d9/0x52d0 [ 51.746932][ T6148] ? __lock_acquire+0xaa4/0x1ba0 [ 51.746945][ T6148] ? __pfx_vcpu_run+0x10/0x10 [ 51.746962][ T6148] ? fpu_swap_kvm_fpstate+0x235/0x4a0 [ 51.746978][ T6148] ? __local_bh_enable_ip+0xa4/0x120 [ 51.746994][ T6148] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 51.747024][ T6148] kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 51.747049][ T6148] kvm_vcpu_ioctl+0x5e9/0x1680 [ 51.747060][ T6148] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 51.747081][ T6148] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 51.747099][ T6148] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 51.747119][ T6148] ? hook_file_ioctl_common+0x145/0x410 [ 51.747133][ T6148] ? selinux_file_ioctl+0x180/0x270 [ 51.747148][ T6148] ? selinux_file_ioctl+0xb4/0x270 [ 51.747164][ T6148] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 51.747181][ T6148] __x64_sys_ioctl+0x190/0x200 [ 51.747197][ T6148] do_syscall_64+0xcd/0x260 [ 51.747212][ T6148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.747222][ T6148] RIP: 0033:0x7fe91358e969 [ 51.747230][ T6148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.747240][ T6148] RSP: 002b:00007fe9143e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.747249][ T6148] RAX: ffffffffffffffda RBX: 00007fe9137b5fa0 RCX: 00007fe91358e969 [ 51.747256][ T6148] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 51.747261][ T6148] RBP: 00007fe9143e2090 R08: 0000000000000000 R09: 0000000000000000 [ 51.747267][ T6148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.747272][ T6148] R13: 0000000000000000 R14: 00007fe9137b5fa0 R15: 00007ffc26a3f438 [ 51.747285][ T6148] [ 51.766631][ T6153] netlink: 'syz.3.43': attribute type 10 has an invalid length. [ 51.871460][ T6153] bridge0: port 3(syz_tun) entered disabled state [ 51.874597][ T6153] syz_tun: left allmulticast mode [ 51.877323][ T6153] bridge0: port 3(syz_tun) entered disabled state [ 51.882884][ T6153] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 51.910024][ T6165] netlink: 'syz.1.47': attribute type 4 has an invalid length. [ 51.912547][ T6165] netlink: 152 bytes leftover after parsing attributes in process `syz.1.47'. [ 51.922511][ T6165] : renamed from bond0 (while UP) [ 51.947769][ T6168] : entered promiscuous mode [ 52.098267][ T5947] block nbd1: Receive control failed (result -107) [ 52.174214][ T5991] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 52.195785][ T6189] syz.1.51: attempt to access beyond end of device [ 52.195785][ T6189] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 52.200806][ T6189] syz.1.51: attempt to access beyond end of device [ 52.200806][ T6189] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 52.206700][ T6180] nbd1: detected capacity change from 0 to 12 [ 52.208882][ T6189] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 52.213553][ T6189] block nbd1: Dead connection, failed to find a fallback [ 52.218107][ T6189] block nbd1: shutting down sockets [ 52.219999][ T6189] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.223482][ T5962] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.227186][ T5962] Buffer I/O error on dev nbd1, logical block 0, async page read [ 52.231183][ T5962] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.234224][ T6189] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 52.235461][ T5962] Buffer I/O error on dev nbd1, logical block 1, async page read [ 52.241469][ T6189] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.241514][ T5962] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.245871][ T6189] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 52.253334][ T5962] Buffer I/O error on dev nbd1, logical block 2, async page read [ 52.256827][ T6189] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 52.256955][ T5962] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.263459][ T5962] Buffer I/O error on dev nbd1, logical block 3, async page read [ 52.267849][ T5962] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.271545][ T5962] Buffer I/O error on dev nbd1, logical block 0, async page read [ 52.275224][ T5962] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.278957][ T5962] Buffer I/O error on dev nbd1, logical block 1, async page read [ 52.282244][ T5962] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.288046][ T5962] Buffer I/O error on dev nbd1, logical block 2, async page read [ 52.291371][ T5962] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.295432][ T5962] Buffer I/O error on dev nbd1, logical block 3, async page read [ 52.298797][ T5962] Buffer I/O error on dev nbd1, logical block 0, async page read [ 52.302072][ T5962] Buffer I/O error on dev nbd1, logical block 1, async page read [ 52.307088][ T6189] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 52.309675][ T5962] ldm_validate_partition_table(): Disk read failed. [ 52.311151][ T6189] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2, location=2 [ 52.313592][ T5962] Dev nbd1: unable to read RDB block 0 [ 52.320181][ T6189] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 52.321262][ T5962] nbd1: unable to read partition table [ 52.324063][ T6189] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 52.326506][ T5962] nbd1: partition table beyond EOD, truncated [ 52.333116][ T6189] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 52.335378][ T5962] ldm_validate_partition_table(): Disk read failed. [ 52.338094][ T6189] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 52.339698][ T5962] Dev nbd1: unable to read RDB block 0 [ 52.343648][ T6189] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 52.343738][ T6189] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 52.347972][ T5991] usb 8-1: config 16 has an invalid interface number: 4 but max is 1 [ 52.349305][ T5962] nbd1: unable to read partition table [ 52.349385][ T6189] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 52.349429][ T5962] nbd1: partition table beyond EOD, truncated [ 52.353122][ T5991] usb 8-1: config 16 contains an unexpected descriptor of type 0x2, skipping [ 52.366471][ T5991] usb 8-1: config 16 has an invalid descriptor of length 1, skipping remainder of the config [ 52.369688][ T5991] usb 8-1: config 16 has 1 interface, different from the descriptor's value: 2 [ 52.372571][ T5991] usb 8-1: config 16 has no interface number 0 [ 52.374793][ T5991] usb 8-1: config 16 interface 4 has no altsetting 0 [ 52.378381][ T5991] usb 8-1: New USB device found, idVendor=1c9e, idProduct=9b05, bcdDevice=23.17 [ 52.381036][ T5991] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.383523][ T5991] usb 8-1: Product: 媢㯲ꍳ䤗攅날僚沌묖鴿虂蔆煥ﭖ㘄ら㘴銧炎꠮䣷⼔娵⁞护ጸ踔浒㙩占ဴ猭 [ 52.388606][ T5991] usb 8-1: Manufacturer: І [ 52.389984][ T5991] usb 8-1: SerialNumber: 㰁 [ 52.464293][ T5947] Bluetooth: hci1: command tx timeout [ 52.503189][ T6208] xt_hashlimit: size too large, truncated to 1048576 [ 52.564263][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 52.614787][ T5991] usb 8-1: USB disconnect, device number 2 [ 52.681233][ T6230] 9pnet_virtio: no channels available for device syz [ 52.727657][ T6224] loop2: detected capacity change from 0 to 7 [ 52.737843][ T5962] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 52.739906][ T5962] loop2: partition table partially beyond EOD, truncated [ 52.742156][ T5962] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 52.808110][ T6224] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 52.809845][ T6224] loop2: partition table partially beyond EOD, truncated [ 52.812251][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 52.812634][ T6224] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 52.882461][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 52.885629][ T6249] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.903669][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 53.020987][ T6261] Cannot find map_set index 0 as target [ 53.056296][ T6256] netlink: 'syz.0.65': attribute type 15 has an invalid length. [ 53.114424][ T5947] Bluetooth: hci0: command tx timeout [ 53.165949][ T6282] netlink: 'syz.3.71': attribute type 10 has an invalid length. [ 53.168562][ T6282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.173247][ T6282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.178752][ T6282] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 53.219568][ T6286] SELinux: truncated policydb string identifier [ 53.221739][ T6286] SELinux: failed to load policy [ 53.370669][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 53.374751][ T6299] bridge_slave_1: left allmulticast mode [ 53.377312][ T6299] bridge_slave_1: left promiscuous mode [ 53.380393][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.388290][ T6299] bridge_slave_0: left allmulticast mode [ 53.390778][ T6299] bridge_slave_0: left promiscuous mode [ 53.393345][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.434545][ T6010] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 53.587936][ T6010] usb 8-1: too many endpoints for config 1 interface 0 altsetting 0: 46, using maximum allowed: 30 [ 53.592518][ T6010] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 46 [ 53.600304][ T6010] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.604381][ T6010] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 53.607982][ T6010] usb 8-1: SerialNumber: syz [ 53.628955][ T6302] process 'syz.2.78' launched './file0' with NULL argv: empty string added [ 53.824274][ T5947] Bluetooth: hci3: command tx timeout [ 53.894283][ T78] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 54.037224][ T6010] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 54.045770][ T6010] usb 8-1: USB disconnect, device number 3 [ 54.065877][ T78] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 54.068405][ T78] usb 7-1: config 0 has no interface number 0 [ 54.070343][ T78] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 54.073671][ T78] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 54.077308][ T78] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 54.080166][ T78] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.085559][ T78] usb 7-1: config 0 descriptor?? [ 54.091558][ T78] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 54.160452][ T6340] SELinux: Context system_u:object_r:devicekit_exec_t:s0 is not valid (left unmapped). [ 54.290507][ T5987] usb 7-1: USB disconnect, device number 3 [ 54.314617][ T65] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.478990][ T65] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 54.494222][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.496730][ T65] usb 6-1: Product: syz [ 54.498052][ T65] usb 6-1: Manufacturer: syz [ 54.499526][ T65] usb 6-1: SerialNumber: syz [ 54.504740][ T65] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 54.522560][ T65] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 54.544544][ T5947] Bluetooth: hci1: command tx timeout [ 54.668867][ T6359] ======================================================= [ 54.668867][ T6359] WARNING: The mand mount option has been deprecated and [ 54.668867][ T6359] and is ignored by this kernel. Remove the mand [ 54.668867][ T6359] option from the mount to silence this warning. [ 54.668867][ T6359] ======================================================= [ 54.740647][ T6361] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 54.829065][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'. [ 54.835355][ T6370] Bluetooth: MGMT ver 1.23 [ 54.855287][ T6370] 9p: Unknown Cache mode or invalid value fs [ 54.903001][ T6327] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 54.905647][ T6327] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 54.912177][ T6327] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 54.918874][ T6327] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 54.921683][ T6327] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 54.927491][ T6327] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 54.931319][ T6327] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 54.933821][ T6327] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 54.939198][ T6327] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 54.945890][ T6327] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 54.948512][ T6327] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 54.952097][ T6327] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 54.955025][ T6377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.966876][ T6010] usb 6-1: USB disconnect, device number 2 [ 55.416327][ T6404] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 55.421108][ T6404] __nla_validate_parse: 1 callbacks suppressed [ 55.421117][ T6404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.108'. [ 55.505002][ T6410] netlink: 44 bytes leftover after parsing attributes in process `syz.1.111'. [ 55.507974][ T6410] netlink: 44 bytes leftover after parsing attributes in process `syz.1.111'. [ 55.535562][ T6406] FAULT_INJECTION: forcing a failure. [ 55.535562][ T6406] name failslab, interval 1, probability 0, space 0, times 0 [ 55.540712][ T6406] CPU: 0 UID: 0 PID: 6406 Comm: syz.3.109 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 55.540733][ T6406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.540744][ T6406] Call Trace: [ 55.540750][ T6406] [ 55.540757][ T6406] dump_stack_lvl+0x16c/0x1f0 [ 55.540786][ T6406] should_fail_ex+0x512/0x640 [ 55.540805][ T6406] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 55.540825][ T6406] should_failslab+0xc2/0x120 [ 55.540845][ T6406] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 55.540861][ T6406] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 55.540879][ T6406] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 55.540905][ T6406] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 55.540927][ T6406] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 55.540953][ T6406] mmu_topup_memory_caches+0x25/0x170 [ 55.540976][ T6406] kvm_mmu_load+0xd9/0x22a0 [ 55.541003][ T6406] ? kvm_apic_has_interrupt+0xb5/0x190 [ 55.541025][ T6406] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 55.541048][ T6406] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 55.541064][ T6406] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 55.541086][ T6406] ? __pfx_kvm_mmu_load+0x10/0x10 [ 55.541111][ T6406] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 55.541131][ T6406] ? kvm_check_and_inject_events+0x71c/0x1310 [ 55.541162][ T6406] vcpu_run+0x33d9/0x52d0 [ 55.541185][ T6406] ? kvm_mmu_post_init_vm+0x269/0x370 [ 55.541205][ T6406] ? __lock_acquire+0xaa4/0x1ba0 [ 55.541228][ T6406] ? __pfx_vcpu_run+0x10/0x10 [ 55.541258][ T6406] ? fpu_swap_kvm_fpstate+0x235/0x4a0 [ 55.541280][ T6406] ? __local_bh_enable_ip+0xa4/0x120 [ 55.541309][ T6406] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 55.541333][ T6406] kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 55.541365][ T6406] kvm_vcpu_ioctl+0x5e9/0x1680 [ 55.541385][ T6406] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 55.541418][ T6406] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 55.541446][ T6406] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 55.541480][ T6406] ? hook_file_ioctl_common+0x145/0x410 [ 55.541505][ T6406] ? selinux_file_ioctl+0x180/0x270 [ 55.541528][ T6406] ? selinux_file_ioctl+0xb4/0x270 [ 55.541554][ T6406] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 55.541581][ T6406] __x64_sys_ioctl+0x190/0x200 [ 55.541606][ T6406] do_syscall_64+0xcd/0x260 [ 55.541631][ T6406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.541647][ T6406] RIP: 0033:0x7f593238e969 [ 55.541662][ T6406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.541677][ T6406] RSP: 002b:00007f59331bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.541694][ T6406] RAX: ffffffffffffffda RBX: 00007f59325b5fa0 RCX: 00007f593238e969 [ 55.541705][ T6406] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 55.541714][ T6406] RBP: 00007f59331bd090 R08: 0000000000000000 R09: 0000000000000000 [ 55.541723][ T6406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.541733][ T6406] R13: 0000000000000000 R14: 00007f59325b5fa0 R15: 00007ffd6428e6c8 [ 55.541756][ T6406] [ 55.655406][ T65] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 55.657903][ T65] ath9k_htc: Failed to initialize the device [ 55.660800][ T6010] usb 6-1: ath9k_htc: USB layer deinitialized [ 55.669878][ T6416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=6416 comm=syz.1.113 [ 55.870536][ T5944] bond0: (slave syz_tun): Releasing backup interface [ 55.978697][ T1141] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.045646][ T1141] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.125537][ T1141] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.177118][ T6450] overlayfs: failed to resolve './file1': -2 [ 56.183658][ T6447] FAULT_INJECTION: forcing a failure. [ 56.183658][ T6447] name failslab, interval 1, probability 0, space 0, times 0 [ 56.189045][ T6447] CPU: 0 UID: 0 PID: 6447 Comm: syz.2.125 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 56.189069][ T6447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.189078][ T6447] Call Trace: [ 56.189084][ T6447] [ 56.189090][ T6447] dump_stack_lvl+0x16c/0x1f0 [ 56.189118][ T6447] should_fail_ex+0x512/0x640 [ 56.189136][ T6447] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 56.189156][ T6447] should_failslab+0xc2/0x120 [ 56.189174][ T6447] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 56.189190][ T6447] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 56.189208][ T6447] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 56.189233][ T6447] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 56.189255][ T6447] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 56.189280][ T6447] mmu_topup_memory_caches+0x25/0x170 [ 56.189298][ T6447] kvm_mmu_load+0xd9/0x22a0 [ 56.189324][ T6447] ? kvm_apic_has_interrupt+0xb5/0x190 [ 56.189345][ T6447] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 56.189368][ T6447] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 56.189383][ T6447] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 56.189406][ T6447] ? __pfx_kvm_mmu_load+0x10/0x10 [ 56.189430][ T6447] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 56.189449][ T6447] ? kvm_check_and_inject_events+0x71c/0x1310 [ 56.189480][ T6447] vcpu_run+0x33d9/0x52d0 [ 56.189506][ T6447] ? __lock_acquire+0xaa4/0x1ba0 [ 56.189528][ T6447] ? __pfx_vcpu_run+0x10/0x10 [ 56.189557][ T6447] ? fpu_swap_kvm_fpstate+0x235/0x4a0 [ 56.189580][ T6447] ? __local_bh_enable_ip+0xa4/0x120 [ 56.189606][ T6447] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 56.189631][ T6447] kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 56.189662][ T6447] kvm_vcpu_ioctl+0x5e9/0x1680 [ 56.189680][ T6447] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 56.189713][ T6447] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 56.189742][ T6447] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 56.189775][ T6447] ? hook_file_ioctl_common+0x145/0x410 [ 56.189799][ T6447] ? selinux_file_ioctl+0x180/0x270 [ 56.189823][ T6447] ? selinux_file_ioctl+0xb4/0x270 [ 56.189847][ T6447] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 56.189873][ T6447] __x64_sys_ioctl+0x190/0x200 [ 56.189898][ T6447] do_syscall_64+0xcd/0x260 [ 56.189922][ T6447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.189939][ T6447] RIP: 0033:0x7f0f4c38e969 [ 56.189952][ T6447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.189967][ T6447] RSP: 002b:00007f0f4d23f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.189983][ T6447] RAX: ffffffffffffffda RBX: 00007f0f4c5b5fa0 RCX: 00007f0f4c38e969 [ 56.189993][ T6447] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 56.190003][ T6447] RBP: 00007f0f4d23f090 R08: 0000000000000000 R09: 0000000000000000 [ 56.190019][ T6447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 56.190028][ T6447] R13: 0000000000000000 R14: 00007f0f4c5b5fa0 R15: 00007ffd00053d98 [ 56.190051][ T6447] [ 56.270689][ T5955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.329585][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.333221][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.338423][ T1141] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.338722][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.345622][ T6457] warning: `syz.0.127' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 56.349937][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.497972][ T6469] loop2: detected capacity change from 0 to 7 [ 56.503149][ T6469] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 56.505132][ T6469] loop2: partition table partially beyond EOD, truncated [ 56.507464][ T6469] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 56.550837][ T1141] bridge_slave_1: left allmulticast mode [ 56.553870][ T1141] bridge_slave_1: left promiscuous mode [ 56.558479][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.565924][ T1141] bridge_slave_0: left allmulticast mode [ 56.569619][ T1141] bridge_slave_0: left promiscuous mode [ 56.572828][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.602505][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 56.676421][ T40] kauditd_printk_skb: 112 callbacks suppressed [ 56.676436][ T40] audit: type=1400 audit(1745525897.744:321): avc: denied { create } for pid=6482 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 56.688955][ T40] audit: type=1400 audit(1745525897.754:322): avc: denied { read } for pid=6482 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 56.864420][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.868510][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.872742][ T1141] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 56.877255][ T1141] bond0 (unregistering): Released all slaves [ 56.952214][ T1141] : left promiscuous mode [ 56.954511][ T5955] Bluetooth: hci2: command 0x0419 tx timeout [ 56.954561][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout [ 56.998118][ T6496] Illegal XDP return value 4294967294 on prog (id 44) dev N/A, expect packet loss! [ 57.003897][ T6455] chnl_net:caif_netlink_parms(): no params data found [ 57.024454][ T5955] Bluetooth: hci3: command 0x0c1a tx timeout [ 57.070201][ T6507] FAULT_INJECTION: forcing a failure. [ 57.070201][ T6507] name failslab, interval 1, probability 0, space 0, times 0 [ 57.083311][ T6507] CPU: 3 UID: 0 PID: 6507 Comm: syz.1.137 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 57.083328][ T6507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.083334][ T6507] Call Trace: [ 57.083338][ T6507] [ 57.083342][ T6507] dump_stack_lvl+0x16c/0x1f0 [ 57.083360][ T6507] should_fail_ex+0x512/0x640 [ 57.083371][ T6507] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 57.083384][ T6507] should_failslab+0xc2/0x120 [ 57.083396][ T6507] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 57.083405][ T6507] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 57.083417][ T6507] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 57.083433][ T6507] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 57.083446][ T6507] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 57.083461][ T6507] mmu_topup_memory_caches+0x25/0x170 [ 57.083472][ T6507] kvm_mmu_load+0xd9/0x22a0 [ 57.083489][ T6507] ? kvm_apic_has_interrupt+0xb5/0x190 [ 57.083503][ T6507] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 57.083517][ T6507] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 57.083527][ T6507] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 57.083541][ T6507] ? __pfx_kvm_mmu_load+0x10/0x10 [ 57.083556][ T6507] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 57.083568][ T6507] ? kvm_check_and_inject_events+0x71c/0x1310 [ 57.083601][ T6507] vcpu_run+0x33d9/0x52d0 [ 57.083617][ T6507] ? __lock_acquire+0xaa4/0x1ba0 [ 57.083631][ T6507] ? __pfx_vcpu_run+0x10/0x10 [ 57.083648][ T6507] ? fpu_swap_kvm_fpstate+0x235/0x4a0 [ 57.083663][ T6507] ? __local_bh_enable_ip+0xa4/0x120 [ 57.083679][ T6507] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 57.083695][ T6507] kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 57.083714][ T6507] kvm_vcpu_ioctl+0x5e9/0x1680 [ 57.083725][ T6507] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 57.083745][ T6507] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 57.083763][ T6507] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 57.083784][ T6507] ? hook_file_ioctl_common+0x145/0x410 [ 57.083798][ T6507] ? selinux_file_ioctl+0x180/0x270 [ 57.083812][ T6507] ? selinux_file_ioctl+0xb4/0x270 [ 57.083828][ T6507] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 57.083845][ T6507] __x64_sys_ioctl+0x190/0x200 [ 57.083860][ T6507] do_syscall_64+0xcd/0x260 [ 57.083876][ T6507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.083887][ T6507] RIP: 0033:0x7f456658e969 [ 57.083896][ T6507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.083906][ T6507] RSP: 002b:00007f45673b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.083916][ T6507] RAX: ffffffffffffffda RBX: 00007f45667b6080 RCX: 00007f456658e969 [ 57.083922][ T6507] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 57.083927][ T6507] RBP: 00007f45673b0090 R08: 0000000000000000 R09: 0000000000000000 [ 57.083933][ T6507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 57.083944][ T6507] R13: 0000000000000001 R14: 00007f45667b6080 R15: 00007fffbf6d6a98 [ 57.083956][ T6507] [ 57.177088][ C3] vkms_vblank_simulate: vblank timer overrun [ 57.260558][ T6455] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.263548][ T6455] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.267973][ T6455] bridge_slave_0: entered allmulticast mode [ 57.270740][ T6455] bridge_slave_0: entered promiscuous mode [ 57.273842][ T6455] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.277662][ T6455] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.279986][ T6455] bridge_slave_1: entered allmulticast mode [ 57.282581][ T6455] bridge_slave_1: entered promiscuous mode [ 57.337705][ T40] audit: type=1400 audit(1745525898.414:323): avc: denied { unlink } for pid=6516 comm="syz.2.140" name="#1" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 57.344460][ T40] audit: type=1400 audit(1745525898.414:324): avc: denied { mount } for pid=6516 comm="syz.2.140" name="/" dev="overlay" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.400505][ T6455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.406682][ T6455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.466082][ T6455] team0: Port device team_slave_0 added [ 57.470086][ T6455] team0: Port device team_slave_1 added [ 57.528202][ T1141] hsr_slave_0: left promiscuous mode [ 57.532115][ T1141] hsr_slave_1: left promiscuous mode [ 57.534329][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.536962][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.552600][ T1141] veth1_macvtap: left promiscuous mode [ 57.555174][ T1141] veth0_macvtap: left promiscuous mode [ 57.556939][ T1141] veth1_vlan: left promiscuous mode [ 57.558623][ T1141] veth0_vlan: left promiscuous mode [ 57.979447][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 58.031953][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 58.349691][ T6532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.384402][ T5955] Bluetooth: hci0: command tx timeout [ 58.401121][ T6455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.403332][ T6455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.412084][ T6455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.418128][ T6455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.420561][ T6455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.437589][ T6455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.462300][ T6549] Bluetooth: MGMT ver 1.23 [ 58.525695][ T6556] ufs: You didn't specify the type of your ufs filesystem [ 58.525695][ T6556] [ 58.525695][ T6556] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 58.525695][ T6556] [ 58.525695][ T6556] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 58.536828][ T6455] hsr_slave_0: entered promiscuous mode [ 58.537216][ T6556] ufs: failed to set blocksize [ 58.539630][ T6455] hsr_slave_1: entered promiscuous mode [ 58.543099][ T6455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.545585][ T6455] Cannot create hsr debugfs directory [ 58.714346][ T6314] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 58.846669][ T1141] IPVS: stop unused estimator thread 0... [ 58.889378][ T6314] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 58.893181][ T6314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.898135][ T6314] usb 7-1: Product: syz [ 58.900957][ T6314] usb 7-1: Manufacturer: syz [ 58.902978][ T6314] usb 7-1: SerialNumber: syz [ 58.921255][ T40] audit: type=1400 audit(1745525899.994:325): avc: denied { ioctl } for pid=6550 comm="syz.2.146" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.932766][ T6314] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 58.935467][ T40] audit: type=1400 audit(1745525900.014:326): avc: denied { name_bind } for pid=6568 comm="syz.0.147" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 58.945753][ T40] audit: type=1400 audit(1745525900.014:327): avc: denied { search } for pid=5342 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.959914][ T6010] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 59.026945][ T5947] Bluetooth: hci2: command 0x0419 tx timeout [ 59.034536][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout [ 59.059618][ T40] audit: type=1400 audit(1745525900.134:328): avc: denied { bind } for pid=6568 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.114543][ T5947] Bluetooth: hci3: command 0x0c1a tx timeout [ 59.192122][ T6455] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.209282][ T6455] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.220151][ T6455] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.226655][ T6455] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.275330][ T6455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.290608][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'. [ 59.303396][ T6455] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.315379][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.317660][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.329751][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.332777][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.369724][ T6552] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 59.371974][ T6552] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 59.374135][ T6552] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 59.379287][ T5955] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 59.382877][ T6552] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 59.387912][ T6552] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.395642][ T6552] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.437833][ T6314] usb 7-1: USB disconnect, device number 4 [ 59.469316][ T6455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.497634][ T6455] veth0_vlan: entered promiscuous mode [ 59.503481][ T6455] veth1_vlan: entered promiscuous mode [ 59.534764][ T6605] FAULT_INJECTION: forcing a failure. [ 59.534764][ T6605] name failslab, interval 1, probability 0, space 0, times 0 [ 59.536870][ T6455] veth0_macvtap: entered promiscuous mode [ 59.538790][ T6605] CPU: 0 UID: 0 PID: 6605 Comm: syz.1.149 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 59.538805][ T6605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.538811][ T6605] Call Trace: [ 59.538814][ T6605] [ 59.538818][ T6605] dump_stack_lvl+0x16c/0x1f0 [ 59.538836][ T6605] should_fail_ex+0x512/0x640 [ 59.538847][ T6605] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 59.538860][ T6605] should_failslab+0xc2/0x120 [ 59.538872][ T6605] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 59.538881][ T6605] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 59.538893][ T6605] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 59.538910][ T6605] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 59.538923][ T6605] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 59.538938][ T6605] mmu_topup_memory_caches+0x25/0x170 [ 59.538948][ T6605] kvm_mmu_load+0xd9/0x22a0 [ 59.538965][ T6605] ? kvm_apic_has_interrupt+0xb5/0x190 [ 59.538978][ T6605] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 59.538992][ T6605] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 59.539002][ T6605] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 59.539016][ T6605] ? __pfx_kvm_mmu_load+0x10/0x10 [ 59.539032][ T6605] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 59.539044][ T6605] ? kvm_check_and_inject_events+0x71c/0x1310 [ 59.539063][ T6605] vcpu_run+0x33d9/0x52d0 [ 59.539077][ T6605] ? kvm_mmu_post_init_vm+0x269/0x370 [ 59.539088][ T6605] ? __lock_acquire+0xaa4/0x1ba0 [ 59.539102][ T6605] ? __pfx_vcpu_run+0x10/0x10 [ 59.539119][ T6605] ? fpu_swap_kvm_fpstate+0x235/0x4a0 [ 59.539134][ T6605] ? __local_bh_enable_ip+0xa4/0x120 [ 59.539150][ T6605] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 59.539166][ T6605] kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 59.539186][ T6605] kvm_vcpu_ioctl+0x5e9/0x1680 [ 59.539196][ T6605] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 59.539216][ T6605] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 59.539234][ T6605] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 59.539254][ T6605] ? hook_file_ioctl_common+0x145/0x410 [ 59.539268][ T6605] ? selinux_file_ioctl+0x180/0x270 [ 59.539283][ T6605] ? selinux_file_ioctl+0xb4/0x270 [ 59.539299][ T6605] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 59.539316][ T6605] __x64_sys_ioctl+0x190/0x200 [ 59.539331][ T6605] do_syscall_64+0xcd/0x260 [ 59.539346][ T6605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.539357][ T6605] RIP: 0033:0x7f456658e969 [ 59.539365][ T6605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.539375][ T6605] RSP: 002b:00007f45673d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.539384][ T6605] RAX: ffffffffffffffda RBX: 00007f45667b5fa0 RCX: 00007f456658e969 [ 59.539391][ T6605] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 59.539396][ T6605] RBP: 00007f45673d1090 R08: 0000000000000000 R09: 0000000000000000 [ 59.539402][ T6605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.539408][ T6605] R13: 0000000000000000 R14: 00007f45667b5fa0 R15: 00007fffbf6d6a98 [ 59.539420][ T6605] [ 59.661677][ T6455] veth1_macvtap: entered promiscuous mode [ 59.669913][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.673928][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.677818][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.681980][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.685477][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.689208][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.696522][ T6455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.703279][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.706820][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.709925][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.713493][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.717537][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.720833][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.725276][ T6455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.731132][ T6455] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.734706][ T6455] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.737499][ T6455] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.740217][ T6455] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.772317][ T40] audit: type=1400 audit(1745525900.844:329): avc: denied { create } for pid=6613 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.778878][ T40] audit: type=1400 audit(1745525900.844:330): avc: denied { connect } for pid=6613 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.794702][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.797651][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.838594][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.841530][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.848529][ T6620] usb usb1: usbfs: process 6620 (syz.0.152) did not claim interface 0 before use [ 59.854027][ T6620] netlink: 'syz.0.152': attribute type 29 has an invalid length. [ 59.857990][ T6620] netlink: 'syz.0.152': attribute type 29 has an invalid length. [ 59.860752][ T6620] netlink: 500 bytes leftover after parsing attributes in process `syz.0.152'. [ 59.867604][ T6620] tipc: Started in network mode [ 59.869137][ T6620] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 59.872222][ T6620] tipc: Enabling of bearer rejected, failed to enable media [ 59.916876][ T6627] netlink: 56 bytes leftover after parsing attributes in process `syz.0.156'. [ 59.918319][ T6626] netlink: 56 bytes leftover after parsing attributes in process `syz.0.156'. [ 59.933401][ T6622] loop2: detected capacity change from 0 to 7 [ 59.964710][ T5952] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 59.966546][ T5952] loop2: partition table partially beyond EOD, truncated [ 59.968985][ T5952] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 59.978472][ T6630] tipc: Enabled bearer , priority 10 [ 59.984475][ T6010] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 59.986995][ T6010] ath9k_htc: Failed to initialize the device [ 59.991472][ T6314] usb 7-1: ath9k_htc: USB layer deinitialized [ 60.041003][ T6622] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 60.042712][ T6622] loop2: partition table partially beyond EOD, truncated [ 60.045310][ T6622] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 60.070417][ T5955] Bluetooth: hci2: unexpected event for opcode 0x656c [ 60.130909][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 60.156937][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 60.210321][ T6651] kvm: kvm [6650]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x3030303030303030 [ 60.251649][ T6651] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.560309][ T6675] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 60.610745][ T6677] loop2: detected capacity change from 0 to 7 [ 60.618211][ T6677] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 60.620025][ T6677] loop2: partition table partially beyond EOD, truncated [ 60.622326][ T6677] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 60.714848][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 60.774362][ T6010] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.790378][ T6685] trusted_key: encrypted_key: insufficient parameters specified [ 60.934011][ T6010] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 60.938676][ T6010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.942242][ T6010] usb 5-1: Product: syz [ 60.944019][ T6010] usb 5-1: Manufacturer: syz [ 60.948387][ T6010] usb 5-1: SerialNumber: syz [ 60.956352][ T6010] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 60.968361][ T6314] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 61.096461][ T10] tipc: Node number set to 4269801491 [ 61.126084][ T6711] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.281172][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 61.357493][ T6673] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 61.360394][ T6673] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 61.363234][ T6673] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 61.366247][ T6673] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 61.385270][ T836] usb 5-1: USB disconnect, device number 2 [ 61.463615][ T6742] openvswitch: netlink: IP tunnel TTL not specified. [ 61.486028][ T6740] sd 0:0:0:0: PR command failed: 1026 [ 61.487795][ T6740] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.489893][ T6740] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.501433][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'. [ 61.512715][ T6745] raw_sendmsg: syz.2.194 forgot to set AF_INET. Fix it! [ 61.570943][ T6751] netlink: 'syz.2.196': attribute type 62 has an invalid length. [ 61.576058][ T6751] netlink: 364 bytes leftover after parsing attributes in process `syz.2.196'. [ 61.826831][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 61.826846][ T40] audit: type=1326 audit(1745525902.904:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.1.179" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f456652ab39 code=0x7fc00000 [ 61.846092][ T40] audit: type=1400 audit(1745525902.924:361): avc: denied { unmount } for pid=5953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 61.929167][ T40] audit: type=1400 audit(1745525903.004:362): avc: denied { sqpoll } for pid=6784 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.941938][ T6782] overlayfs: statfs failed on './file0' [ 61.942404][ T40] audit: type=1400 audit(1745525903.014:363): avc: denied { setopt } for pid=6784 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 61.949941][ T40] audit: type=1400 audit(1745525903.014:364): avc: denied { getattr } for pid=6781 comm="syz.1.207" name="/" dev="9p" ino=36831275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 61.960541][ T6782] pimreg3: entered allmulticast mode [ 61.973813][ T40] audit: type=1400 audit(1745525903.044:365): avc: denied { getopt } for pid=6784 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 61.980394][ T40] audit: type=1400 audit(1745525903.064:366): avc: denied { write } for pid=6784 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 61.994250][ T6314] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 61.996549][ T6314] ath9k_htc: Failed to initialize the device [ 61.998671][ T836] usb 5-1: ath9k_htc: USB layer deinitialized [ 62.018615][ T6792] gre1: entered promiscuous mode [ 62.020198][ T6792] gre1: entered allmulticast mode [ 62.056760][ T6798] overlay: Bad value for 'workdir' [ 62.067357][ T6799] overlay: Bad value for 'workdir' [ 62.190674][ T6818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.217'. [ 62.344242][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 62.389858][ T40] audit: type=1400 audit(1745525903.464:367): avc: denied { shutdown } for pid=6828 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.405976][ T40] audit: type=1400 audit(1745525903.464:368): avc: denied { name_connect } for pid=6828 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 62.412255][ T5955] Bluetooth: hci2: unexpected event for opcode 0x656c [ 62.436182][ T6833] input: syz1 as /devices/virtual/input/input5 [ 62.439987][ T40] audit: type=1400 audit(1745525903.514:369): avc: denied { ioctl } for pid=6832 comm="syz.1.223" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.488989][ T6835] random: crng reseeded on system resumption [ 62.504267][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 62.514074][ T10] usb 8-1: config 0 has no interfaces? [ 62.521806][ T10] usb 8-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 62.526175][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.529455][ T10] usb 8-1: Product: syz [ 62.531193][ T10] usb 8-1: Manufacturer: syz [ 62.533110][ T10] usb 8-1: SerialNumber: syz [ 62.537494][ T10] usb 8-1: config 0 descriptor?? [ 62.743725][ T6812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.746777][ T6812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.752698][ T6812] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(14944017307879) <= P.seqno(0) <= S.SWH(14944017307953)) and (P.ackno exists or LAWL(112790343558583) <= P.ackno(112790343558584) <= S.AWH(112790343558584), sending SYNC... [ 62.763146][ T10] usb 8-1: USB disconnect, device number 4 [ 63.251341][ T6842] netlink: 'syz.1.223': attribute type 1 has an invalid length. [ 63.255328][ T6842] netlink: 224 bytes leftover after parsing attributes in process `syz.1.223'. [ 63.274488][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout [ 63.337980][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.342166][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.346662][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.350442][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.353584][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.357547][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.361143][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.364904][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.382904][ T6860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.230'. [ 63.387605][ T6860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.230'. [ 63.427162][ T5955] Bluetooth: hci0: command 0x040f tx timeout [ 63.427181][ T5947] Bluetooth: hci3: command 0x0c1a tx timeout [ 63.503644][ T6878] vxfs: WRONG superblock magic 00000000 at 1 [ 63.511626][ T6878] vxfs: WRONG superblock magic 00000000 at 8 [ 63.514682][ T6878] vxfs: can't find superblock. [ 63.612009][ T6876] loop2: detected capacity change from 0 to 7 [ 63.620963][ T6876] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 63.623285][ T6876] loop2: partition table partially beyond EOD, truncated [ 63.628646][ T6876] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 63.751367][ T6908] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 63.755923][ T6908] SELinux: failed to load policy [ 63.760657][ T6908] netlink: 'syz.2.245': attribute type 16 has an invalid length. [ 63.766019][ T6908] netlink: 'syz.2.245': attribute type 17 has an invalid length. [ 63.784838][ T6908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 63.792443][ T6912] syz.0.247: attempt to access beyond end of device [ 63.792443][ T6912] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 63.798328][ T6912] gfs2: error -5 reading superblock [ 63.803763][ T6910] FAULT_INJECTION: forcing a failure. [ 63.803763][ T6910] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 63.806721][ T6912] mkiss: ax0: crc mode is auto. [ 63.808668][ T6910] CPU: 2 UID: 0 PID: 6910 Comm: syz.3.246 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 63.808692][ T6910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.808702][ T6910] Call Trace: [ 63.808707][ T6910] [ 63.808713][ T6910] dump_stack_lvl+0x16c/0x1f0 [ 63.808759][ T6910] should_fail_ex+0x512/0x640 [ 63.808784][ T6910] should_fail_alloc_page+0xe7/0x130 [ 63.808804][ T6910] prepare_alloc_pages+0x3c2/0x610 [ 63.808830][ T6910] ? rcu_is_watching+0x12/0xc0 [ 63.808878][ T6910] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 63.808902][ T6910] ? kasan_save_stack+0x42/0x60 [ 63.808916][ T6910] ? kasan_save_stack+0x33/0x60 [ 63.808929][ T6910] ? kasan_save_track+0x14/0x30 [ 63.808942][ T6910] ? __kasan_kmalloc+0xaa/0xb0 [ 63.808954][ T6910] ? __kvmalloc_node_noprof+0x279/0x600 [ 63.808970][ T6910] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 63.808991][ T6910] ? mmu_topup_memory_caches+0xbc/0x170 [ 63.809011][ T6910] ? kvm_mmu_load+0xd9/0x22a0 [ 63.809032][ T6910] ? vcpu_run+0x33d9/0x52d0 [ 63.809056][ T6910] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 63.809078][ T6910] ? kvm_vcpu_ioctl+0x5e9/0x1680 [ 63.809094][ T6910] ? __x64_sys_ioctl+0x190/0x200 [ 63.809121][ T6910] ? do_syscall_64+0xcd/0x260 [ 63.809144][ T6910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.809169][ T6910] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 63.809203][ T6910] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.809222][ T6910] ? policy_nodemask+0xea/0x4e0 [ 63.809242][ T6910] alloc_pages_mpol+0x1fb/0x550 [ 63.809261][ T6910] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 63.809279][ T6910] ? rcu_is_watching+0x12/0xc0 [ 63.809301][ T6910] ? trace_kmalloc+0x2b/0xd0 [ 63.809319][ T6910] ? __kvmalloc_node_noprof+0x296/0x600 [ 63.809333][ T6910] ? trace_kmem_cache_alloc+0x28/0xc0 [ 63.809355][ T6910] alloc_pages_noprof+0x131/0x390 [ 63.809373][ T6910] get_free_pages_noprof+0xc/0x40 [ 63.809391][ T6910] __kvm_mmu_topup_memory_cache+0x278/0x600 [ 63.809416][ T6910] mmu_topup_memory_caches+0xbc/0x170 [ 63.809436][ T6910] kvm_mmu_load+0xd9/0x22a0 [ 63.809467][ T6910] ? kvm_apic_has_interrupt+0xb5/0x190 [ 63.809486][ T6910] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 63.809507][ T6910] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 63.809521][ T6910] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 63.809541][ T6910] ? __pfx_kvm_mmu_load+0x10/0x10 [ 63.809563][ T6910] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 63.809586][ T6910] ? kvm_check_and_inject_events+0x71c/0x1310 [ 63.809617][ T6910] vcpu_run+0x33d9/0x52d0 [ 63.809637][ T6910] ? kvm_mmu_post_init_vm+0x269/0x370 [ 63.809654][ T6910] ? __lock_acquire+0xaa4/0x1ba0 [ 63.809675][ T6910] ? __pfx_vcpu_run+0x10/0x10 [ 63.809702][ T6910] ? fpu_swap_kvm_fpstate+0x235/0x4a0 [ 63.809724][ T6910] ? __local_bh_enable_ip+0xa4/0x120 [ 63.809758][ T6910] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 63.809781][ T6910] kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 63.809811][ T6910] kvm_vcpu_ioctl+0x5e9/0x1680 [ 63.809828][ T6910] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 63.809858][ T6910] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 63.809888][ T6910] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 63.809922][ T6910] ? hook_file_ioctl_common+0x145/0x410 [ 63.809944][ T6910] ? selinux_file_ioctl+0x180/0x270 [ 63.809970][ T6910] ? selinux_file_ioctl+0xb4/0x270 [ 63.809993][ T6910] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 63.810022][ T6910] __x64_sys_ioctl+0x190/0x200 [ 63.810048][ T6910] do_syscall_64+0xcd/0x260 [ 63.810072][ T6910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.810087][ T6910] RIP: 0033:0x7fd3c278e969 [ 63.810100][ T6910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.810114][ T6910] RSP: 002b:00007fd3c05f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.810128][ T6910] RAX: ffffffffffffffda RBX: 00007fd3c29b5fa0 RCX: 00007fd3c278e969 [ 63.810138][ T6910] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 63.810147][ T6910] RBP: 00007fd3c05f6090 R08: 0000000000000000 R09: 0000000000000000 [ 63.810156][ T6910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.810164][ T6910] R13: 0000000000000000 R14: 00007fd3c29b5fa0 R15: 00007ffeee9450b8 [ 63.810187][ T6910] [ 63.888816][ T6917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'. [ 64.082351][ T6927] loop2: detected capacity change from 0 to 7 [ 64.097653][ T6927] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 64.099465][ T6927] loop2: partition table partially beyond EOD, truncated [ 64.101686][ T6927] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 64.139750][ T6932] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 64.151298][ T6932] CIFS mount error: No usable UNC path provided in device string! [ 64.151298][ T6932] [ 64.155251][ T6932] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 64.158594][ T6932] capability: warning: `syz.0.254' uses deprecated v2 capabilities in a way that may be insecure [ 64.200344][ T6936] input: syz0 as /devices/virtual/input/input6 [ 64.223281][ T5360] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 64.226030][ T5360] loop2: partition table partially beyond EOD, truncated [ 64.229248][ T5360] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 64.291651][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 64.307695][ T6940] TCP: out of memory -- consider tuning tcp_mem [ 64.315763][ T6940] sp0: Synchronizing with TNC [ 64.433765][ T6949] FAULT_INJECTION: forcing a failure. [ 64.433765][ T6949] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 64.437709][ T6949] CPU: 2 UID: 0 PID: 6949 Comm: syz.0.259 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 64.437723][ T6949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.437729][ T6949] Call Trace: [ 64.437732][ T6949] [ 64.437736][ T6949] dump_stack_lvl+0x16c/0x1f0 [ 64.437754][ T6949] should_fail_ex+0x512/0x640 [ 64.437767][ T6949] should_fail_alloc_page+0xe7/0x130 [ 64.437780][ T6949] prepare_alloc_pages+0x3c2/0x610 [ 64.437795][ T6949] ? rcu_is_watching+0x12/0xc0 [ 64.437810][ T6949] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 64.437821][ T6949] ? kasan_save_stack+0x42/0x60 [ 64.437830][ T6949] ? kasan_save_stack+0x33/0x60 [ 64.437839][ T6949] ? kasan_save_track+0x14/0x30 [ 64.437847][ T6949] ? __kasan_kmalloc+0xaa/0xb0 [ 64.437855][ T6949] ? __kvmalloc_node_noprof+0x279/0x600 [ 64.437864][ T6949] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 64.437875][ T6949] ? mmu_topup_memory_caches+0xbc/0x170 [ 64.437884][ T6949] ? kvm_mmu_load+0xd9/0x22a0 [ 64.437899][ T6949] ? vcpu_run+0x33d9/0x52d0 [ 64.437913][ T6949] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 64.437933][ T6949] ? kvm_vcpu_ioctl+0x5e9/0x1680 [ 64.437941][ T6949] ? __x64_sys_ioctl+0x190/0x200 [ 64.437954][ T6949] ? do_syscall_64+0xcd/0x260 [ 64.437967][ T6949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.437979][ T6949] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 64.437998][ T6949] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.438011][ T6949] ? policy_nodemask+0xea/0x4e0 [ 64.438024][ T6949] alloc_pages_mpol+0x1fb/0x550 [ 64.438036][ T6949] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 64.438046][ T6949] ? rcu_is_watching+0x12/0xc0 [ 64.438059][ T6949] ? trace_kmalloc+0x2b/0xd0 [ 64.438070][ T6949] ? __kvmalloc_node_noprof+0x296/0x600 [ 64.438079][ T6949] ? trace_kmem_cache_alloc+0x28/0xc0 [ 64.438094][ T6949] alloc_pages_noprof+0x131/0x390 [ 64.438106][ T6949] get_free_pages_noprof+0xc/0x40 [ 64.438118][ T6949] __kvm_mmu_topup_memory_cache+0x278/0x600 [ 64.438133][ T6949] mmu_topup_memory_caches+0xbc/0x170 [ 64.438143][ T6949] kvm_mmu_load+0xd9/0x22a0 [ 64.438159][ T6949] ? kvm_apic_has_interrupt+0xb5/0x190 [ 64.438173][ T6949] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 64.438187][ T6949] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 64.438197][ T6949] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 64.438211][ T6949] ? __pfx_kvm_mmu_load+0x10/0x10 [ 64.438226][ T6949] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 64.438238][ T6949] ? kvm_check_and_inject_events+0x71c/0x1310 [ 64.438257][ T6949] vcpu_run+0x33d9/0x52d0 [ 64.438273][ T6949] ? __lock_acquire+0xaa4/0x1ba0 [ 64.438286][ T6949] ? __pfx_vcpu_run+0x10/0x10 [ 64.438323][ T6949] ? fpu_swap_kvm_fpstate+0x235/0x4a0 [ 64.438338][ T6949] ? __local_bh_enable_ip+0xa4/0x120 [ 64.438355][ T6949] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 64.438370][ T6949] kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 64.438390][ T6949] kvm_vcpu_ioctl+0x5e9/0x1680 [ 64.438401][ T6949] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 64.438421][ T6949] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 64.438438][ T6949] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 64.438459][ T6949] ? hook_file_ioctl_common+0x145/0x410 [ 64.438473][ T6949] ? selinux_file_ioctl+0x180/0x270 [ 64.438488][ T6949] ? selinux_file_ioctl+0xb4/0x270 [ 64.438504][ T6949] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 64.438521][ T6949] __x64_sys_ioctl+0x190/0x200 [ 64.438536][ T6949] do_syscall_64+0xcd/0x260 [ 64.438551][ T6949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.438560][ T6949] RIP: 0033:0x7fe91358e969 [ 64.438569][ T6949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.438579][ T6949] RSP: 002b:00007fe9143e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.438589][ T6949] RAX: ffffffffffffffda RBX: 00007fe9137b5fa0 RCX: 00007fe91358e969 [ 64.438596][ T6949] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 64.438602][ T6949] RBP: 00007fe9143e2090 R08: 0000000000000000 R09: 0000000000000000 [ 64.438608][ T6949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.438614][ T6949] R13: 0000000000000000 R14: 00007fe9137b5fa0 R15: 00007ffc26a3f438 [ 64.438627][ T6949] [ 64.745511][ T6973] loop2: detected capacity change from 0 to 7 [ 64.752902][ T6973] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 64.754885][ T6973] loop2: partition table partially beyond EOD, truncated [ 64.757595][ T6973] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 64.798537][ T6981] batman_adv: batadv0: Adding interface: geneve2 [ 64.801044][ T6981] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 64.884297][ T5987] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 64.959452][ T6993] FAULT_INJECTION: forcing a failure. [ 64.959452][ T6993] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 64.963676][ T6993] CPU: 1 UID: 0 PID: 6993 Comm: syz.1.273 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 64.963690][ T6993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.963697][ T6993] Call Trace: [ 64.963701][ T6993] [ 64.963705][ T6993] dump_stack_lvl+0x16c/0x1f0 [ 64.963738][ T6993] should_fail_ex+0x512/0x640 [ 64.963756][ T6993] should_fail_alloc_page+0xe7/0x130 [ 64.963770][ T6993] prepare_alloc_pages+0x3c2/0x610 [ 64.963785][ T6993] ? rcu_is_watching+0x12/0xc0 [ 64.963799][ T6993] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 64.963811][ T6993] ? kasan_save_stack+0x42/0x60 [ 64.963820][ T6993] ? kasan_save_stack+0x33/0x60 [ 64.963829][ T6993] ? kasan_save_track+0x14/0x30 [ 64.963837][ T6993] ? __kasan_kmalloc+0xaa/0xb0 [ 64.963845][ T6993] ? __kvmalloc_node_noprof+0x279/0x600 [ 64.963855][ T6993] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 64.963866][ T6993] ? mmu_topup_memory_caches+0xbc/0x170 [ 64.963875][ T6993] ? kvm_mmu_load+0xd9/0x22a0 [ 64.963890][ T6993] ? vcpu_run+0x33d9/0x52d0 [ 64.963905][ T6993] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 64.963921][ T6993] ? kvm_vcpu_ioctl+0x5e9/0x1680 [ 64.963929][ T6993] ? __x64_sys_ioctl+0x190/0x200 [ 64.963942][ T6993] ? do_syscall_64+0xcd/0x260 [ 64.963956][ T6993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.963968][ T6993] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 64.963988][ T6993] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.964000][ T6993] ? policy_nodemask+0xea/0x4e0 [ 64.964014][ T6993] alloc_pages_mpol+0x1fb/0x550 [ 64.964026][ T6993] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 64.964036][ T6993] ? rcu_is_watching+0x12/0xc0 [ 64.964048][ T6993] ? trace_kmalloc+0x2b/0xd0 [ 64.964060][ T6993] ? __kvmalloc_node_noprof+0x296/0x600 [ 64.964070][ T6993] ? trace_kmem_cache_alloc+0x28/0xc0 [ 64.964084][ T6993] alloc_pages_noprof+0x131/0x390 [ 64.964096][ T6993] get_free_pages_noprof+0xc/0x40 [ 64.964108][ T6993] __kvm_mmu_topup_memory_cache+0x278/0x600 [ 64.964124][ T6993] mmu_topup_memory_caches+0xbc/0x170 [ 64.964134][ T6993] kvm_mmu_load+0xd9/0x22a0 [ 64.964163][ T6993] ? kvm_apic_has_interrupt+0xb5/0x190 [ 64.964178][ T6993] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 64.964192][ T6993] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 64.964202][ T6993] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 64.964216][ T6993] ? __pfx_kvm_mmu_load+0x10/0x10 [ 64.964232][ T6993] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 64.964244][ T6993] ? kvm_check_and_inject_events+0x71c/0x1310 [ 64.964263][ T6993] vcpu_run+0x33d9/0x52d0 [ 64.964280][ T6993] ? __lock_acquire+0xaa4/0x1ba0 [ 64.964293][ T6993] ? __pfx_vcpu_run+0x10/0x10 [ 64.964311][ T6993] ? fpu_swap_kvm_fpstate+0x235/0x4a0 [ 64.964326][ T6993] ? __local_bh_enable_ip+0xa4/0x120 [ 64.964343][ T6993] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 64.964358][ T6993] kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 64.964379][ T6993] kvm_vcpu_ioctl+0x5e9/0x1680 [ 64.964390][ T6993] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 64.964410][ T6993] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 64.964428][ T6993] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 64.964449][ T6993] ? hook_file_ioctl_common+0x145/0x410 [ 64.964463][ T6993] ? selinux_file_ioctl+0x180/0x270 [ 64.964478][ T6993] ? selinux_file_ioctl+0xb4/0x270 [ 64.964494][ T6993] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 64.964511][ T6993] __x64_sys_ioctl+0x190/0x200 [ 64.964526][ T6993] do_syscall_64+0xcd/0x260 [ 64.964542][ T6993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.964552][ T6993] RIP: 0033:0x7f456658e969 [ 64.964561][ T6993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.964571][ T6993] RSP: 002b:00007f45673d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.964585][ T6993] RAX: ffffffffffffffda RBX: 00007f45667b5fa0 RCX: 00007f456658e969 [ 64.964594][ T6993] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 64.964602][ T6993] RBP: 00007f45673d1090 R08: 0000000000000000 R09: 0000000000000000 [ 64.964610][ T6993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.964617][ T6993] R13: 0000000000000000 R14: 00007f45667b5fa0 R15: 00007fffbf6d6a98 [ 64.964638][ T6993] [ 65.185525][ T5987] usb 7-1: Using ep0 maxpacket: 32 [ 65.188562][ T5987] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.191926][ T5987] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.197571][ T5987] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 65.200366][ T5987] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.204003][ T5987] usb 7-1: config 0 descriptor?? [ 65.484303][ T835] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 65.514263][ T5955] Bluetooth: hci0: command 0x040f tx timeout [ 65.524880][ T7009] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 65.529958][ T7009] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 65.583040][ T7011] loop2: detected capacity change from 0 to 7 [ 65.592073][ T7011] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 65.593840][ T7011] loop2: partition table partially beyond EOD, truncated [ 65.596844][ T7011] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 65.658175][ T835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.662144][ T835] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 65.665966][ T835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.672578][ T5958] udevd[5958]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 65.673893][ T5987] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 65.681935][ T835] usb 6-1: config 0 descriptor?? [ 65.823268][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 65.823268][ T7025] [ 65.831845][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 65.831845][ T7025] [ 65.840078][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 65.840078][ T7025] [ 65.855067][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 65.855067][ T7025] [ 65.864098][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 65.864098][ T7025] [ 65.872544][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 65.872544][ T7025] [ 65.880989][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 65.880989][ T7025] [ 65.887246][ T835] usbhid 6-1:0.0: can't add hid device: -71 [ 65.889157][ T835] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 65.892948][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 65.892948][ T7025] [ 65.899498][ T835] usb 6-1: USB disconnect, device number 3 [ 65.910549][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 65.910549][ T7025] [ 65.921436][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 65.921436][ T7025] [ 65.927050][ T10] usb 7-1: USB disconnect, device number 5 [ 65.929211][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 65.929211][ T7025] [ 65.937963][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 65.937963][ T7025] [ 65.945924][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 65.945924][ T7025] [ 65.952118][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 65.952118][ T7025] [ 65.960488][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 65.960488][ T7025] [ 65.963921][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 65.963921][ T7025] [ 65.973122][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 65.973122][ T7025] [ 65.979312][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 65.979312][ T7025] [ 65.987827][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 65.987827][ T7025] [ 65.994094][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 65.994094][ T7025] [ 66.000418][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 66.000418][ T7025] [ 66.007167][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 66.007167][ T7025] [ 66.013584][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 66.013584][ T7025] [ 66.019788][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 66.019788][ T7025] [ 66.027297][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 66.027297][ T7025] [ 66.033670][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 66.033670][ T7025] [ 66.036849][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 66.036849][ T7025] [ 66.039757][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 66.039757][ T7025] [ 66.042530][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 66.042530][ T7025] [ 66.045577][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 66.045577][ T7025] [ 66.051746][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 66.051746][ T7025] [ 66.054843][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 66.054843][ T7025] [ 66.062343][ T7025] hugetlbfs: Bad value 'e' for mount option 'size' [ 66.062343][ T7025] [ 66.076998][ T7026] cgroup: fork rejected by pids controller in /syz3 [ 66.147518][ T7062] FAULT_INJECTION: forcing a failure. [ 66.147518][ T7062] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 66.151749][ T7062] CPU: 3 UID: 0 PID: 7062 Comm: syz.1.285 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 66.151763][ T7062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.151769][ T7062] Call Trace: [ 66.151774][ T7062] [ 66.151778][ T7062] dump_stack_lvl+0x16c/0x1f0 [ 66.151809][ T7062] should_fail_ex+0x512/0x640 [ 66.151828][ T7062] should_fail_alloc_page+0xe7/0x130 [ 66.151841][ T7062] prepare_alloc_pages+0x3c2/0x610 [ 66.151857][ T7062] ? rcu_is_watching+0x12/0xc0 [ 66.151872][ T7062] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 66.151884][ T7062] ? kasan_save_stack+0x42/0x60 [ 66.151893][ T7062] ? kasan_save_stack+0x33/0x60 [ 66.151902][ T7062] ? kasan_save_track+0x14/0x30 [ 66.151910][ T7062] ? __kasan_kmalloc+0xaa/0xb0 [ 66.151919][ T7062] ? __kvmalloc_node_noprof+0x279/0x600 [ 66.151932][ T7062] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 66.151944][ T7062] ? mmu_topup_memory_caches+0xbc/0x170 [ 66.151954][ T7062] ? kvm_mmu_load+0xd9/0x22a0 [ 66.151969][ T7062] ? vcpu_run+0x33d9/0x52d0 [ 66.151983][ T7062] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 66.151998][ T7062] ? kvm_vcpu_ioctl+0x5e9/0x1680 [ 66.152006][ T7062] ? __x64_sys_ioctl+0x190/0x200 [ 66.152020][ T7062] ? do_syscall_64+0xcd/0x260 [ 66.152034][ T7062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.152046][ T7062] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 66.152065][ T7062] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.152078][ T7062] ? policy_nodemask+0xea/0x4e0 [ 66.152090][ T7062] alloc_pages_mpol+0x1fb/0x550 [ 66.152102][ T7062] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 66.152113][ T7062] ? rcu_is_watching+0x12/0xc0 [ 66.152125][ T7062] ? trace_kmalloc+0x2b/0xd0 [ 66.152136][ T7062] ? __kvmalloc_node_noprof+0x296/0x600 [ 66.152145][ T7062] ? print_track+0x20/0x50 [ 66.152159][ T7062] alloc_pages_noprof+0x131/0x390 [ 66.152171][ T7062] get_free_pages_noprof+0xc/0x40 [ 66.152183][ T7062] __kvm_mmu_topup_memory_cache+0x278/0x600 [ 66.152198][ T7062] mmu_topup_memory_caches+0xbc/0x170 [ 66.152208][ T7062] kvm_mmu_load+0xd9/0x22a0 [ 66.152223][ T7062] ? vmx_flush_tlb_guest+0x157/0x560 [ 66.152234][ T7062] ? kvm_apic_has_interrupt+0xb5/0x190 [ 66.152247][ T7062] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 66.152262][ T7062] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 66.152271][ T7062] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 66.152285][ T7062] ? __pfx_kvm_mmu_load+0x10/0x10 [ 66.152301][ T7062] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 66.152313][ T7062] ? kvm_check_and_inject_events+0x71c/0x1310 [ 66.152332][ T7062] vcpu_run+0x33d9/0x52d0 [ 66.152346][ T7062] ? kvm_mmu_post_init_vm+0x269/0x370 [ 66.152358][ T7062] ? __lock_acquire+0xaa4/0x1ba0 [ 66.152371][ T7062] ? __pfx_vcpu_run+0x10/0x10 [ 66.152389][ T7062] ? fpu_swap_kvm_fpstate+0x235/0x4a0 [ 66.152404][ T7062] ? __local_bh_enable_ip+0xa4/0x120 [ 66.152420][ T7062] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 66.152436][ T7062] kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 66.152456][ T7062] kvm_vcpu_ioctl+0x5e9/0x1680 [ 66.152467][ T7062] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 66.152487][ T7062] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 66.152506][ T7062] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 66.152527][ T7062] ? hook_file_ioctl_common+0x145/0x410 [ 66.152541][ T7062] ? selinux_file_ioctl+0x180/0x270 [ 66.152556][ T7062] ? selinux_file_ioctl+0xb4/0x270 [ 66.152572][ T7062] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 66.152593][ T7062] __x64_sys_ioctl+0x190/0x200 [ 66.152614][ T7062] do_syscall_64+0xcd/0x260 [ 66.152638][ T7062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.152653][ T7062] RIP: 0033:0x7f456658e969 [ 66.152666][ T7062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.152681][ T7062] RSP: 002b:00007f45673d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.152696][ T7062] RAX: ffffffffffffffda RBX: 00007f45667b5fa0 RCX: 00007f456658e969 [ 66.152705][ T7062] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 66.152716][ T7062] RBP: 00007f45673d1090 R08: 0000000000000000 R09: 0000000000000000 [ 66.152727][ T7062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.152736][ T7062] R13: 0000000000000000 R14: 00007f45667b5fa0 R15: 00007fffbf6d6a98 [ 66.152750][ T7062] [ 66.288169][ C3] vkms_vblank_simulate: vblank timer overrun [ 66.462561][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'. [ 66.467567][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'. [ 66.530106][ T7071] : (slave bond_slave_0): Releasing backup interface [ 66.666221][ T5955] block nbd1: Receive control failed (result -107) [ 66.723197][ T7080] block nbd1: shutting down sockets [ 66.796269][ T7090] FAULT_INJECTION: forcing a failure. [ 66.796269][ T7090] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 66.802239][ T7090] CPU: 2 UID: 0 PID: 7090 Comm: syz.1.295 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 66.802262][ T7090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.802272][ T7090] Call Trace: [ 66.802301][ T7090] [ 66.802308][ T7090] dump_stack_lvl+0x16c/0x1f0 [ 66.802350][ T7090] should_fail_ex+0x512/0x640 [ 66.802377][ T7090] should_fail_alloc_page+0xe7/0x130 [ 66.802398][ T7090] prepare_alloc_pages+0x3c2/0x610 [ 66.802420][ T7090] ? rcu_is_watching+0x12/0xc0 [ 66.802442][ T7090] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 66.802461][ T7090] ? kasan_save_stack+0x42/0x60 [ 66.802476][ T7090] ? kasan_save_stack+0x33/0x60 [ 66.802490][ T7090] ? kasan_save_track+0x14/0x30 [ 66.802504][ T7090] ? __kasan_kmalloc+0xaa/0xb0 [ 66.802517][ T7090] ? __kvmalloc_node_noprof+0x279/0x600 [ 66.802531][ T7090] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 66.802548][ T7090] ? mmu_topup_memory_caches+0xbc/0x170 [ 66.802562][ T7090] ? kvm_mmu_load+0xd9/0x22a0 [ 66.802584][ T7090] ? vcpu_run+0x33d9/0x52d0 [ 66.802605][ T7090] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 66.802628][ T7090] ? kvm_vcpu_ioctl+0x5e9/0x1680 [ 66.802640][ T7090] ? __x64_sys_ioctl+0x190/0x200 [ 66.802659][ T7090] ? do_syscall_64+0xcd/0x260 [ 66.802678][ T7090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.802697][ T7090] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 66.802733][ T7090] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.802753][ T7090] ? policy_nodemask+0xea/0x4e0 [ 66.802773][ T7090] alloc_pages_mpol+0x1fb/0x550 [ 66.802793][ T7090] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 66.802808][ T7090] ? rcu_is_watching+0x12/0xc0 [ 66.802826][ T7090] ? trace_kmalloc+0x2b/0xd0 [ 66.802844][ T7090] ? __kvmalloc_node_noprof+0x296/0x600 [ 66.802858][ T7090] ? trace_kmem_cache_alloc+0x28/0xc0 [ 66.802882][ T7090] alloc_pages_noprof+0x131/0x390 [ 66.802905][ T7090] get_free_pages_noprof+0xc/0x40 [ 66.802923][ T7090] __kvm_mmu_topup_memory_cache+0x278/0x600 [ 66.802949][ T7090] mmu_topup_memory_caches+0xbc/0x170 [ 66.802965][ T7090] kvm_mmu_load+0xd9/0x22a0 [ 66.802990][ T7090] ? kvm_apic_has_interrupt+0xb5/0x190 [ 66.803010][ T7090] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 66.803033][ T7090] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 66.803047][ T7090] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 66.803068][ T7090] ? __pfx_kvm_mmu_load+0x10/0x10 [ 66.803092][ T7090] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 66.803111][ T7090] ? kvm_check_and_inject_events+0x71c/0x1310 [ 66.803141][ T7090] vcpu_run+0x33d9/0x52d0 [ 66.803162][ T7090] ? kvm_mmu_post_init_vm+0x269/0x370 [ 66.803180][ T7090] ? __lock_acquire+0xaa4/0x1ba0 [ 66.803203][ T7090] ? __pfx_vcpu_run+0x10/0x10 [ 66.803231][ T7090] ? fpu_swap_kvm_fpstate+0x235/0x4a0 [ 66.803253][ T7090] ? __local_bh_enable_ip+0xa4/0x120 [ 66.803280][ T7090] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 66.803302][ T7090] kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 66.803334][ T7090] kvm_vcpu_ioctl+0x5e9/0x1680 [ 66.803352][ T7090] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 66.803398][ T7090] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 66.803427][ T7090] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 66.803460][ T7090] ? hook_file_ioctl_common+0x145/0x410 [ 66.803484][ T7090] ? selinux_file_ioctl+0x180/0x270 [ 66.803506][ T7090] ? selinux_file_ioctl+0xb4/0x270 [ 66.803531][ T7090] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 66.803556][ T7090] __x64_sys_ioctl+0x190/0x200 [ 66.803580][ T7090] do_syscall_64+0xcd/0x260 [ 66.803603][ T7090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.803619][ T7090] RIP: 0033:0x7f456658e969 [ 66.803632][ T7090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.803646][ T7090] RSP: 002b:00007f45673d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.803662][ T7090] RAX: ffffffffffffffda RBX: 00007f45667b5fa0 RCX: 00007f456658e969 [ 66.803672][ T7090] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 66.803682][ T7090] RBP: 00007f45673d1090 R08: 0000000000000000 R09: 0000000000000000 [ 66.803690][ T7090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.803699][ T7090] R13: 0000000000000000 R14: 00007f45667b5fa0 R15: 00007fffbf6d6a98 [ 66.803722][ T7090] [ 67.024296][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 67.034310][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 67.059518][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 67.059529][ T40] audit: type=1400 audit(1745525908.134:392): avc: denied { create } for pid=7105 comm="syz.2.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 67.060213][ T7106] netlink: 32 bytes leftover after parsing attributes in process `syz.2.301'. [ 67.077952][ T40] audit: type=1400 audit(1745525908.154:393): avc: denied { write } for pid=7105 comm="syz.2.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 67.078153][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 67.126666][ T40] audit: type=1400 audit(1745525908.204:394): avc: denied { write } for pid=7110 comm="syz.1.303" path="socket:[12265]" dev="sockfs" ino=12265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.137000][ T40] audit: type=1400 audit(1745525908.204:395): avc: denied { read } for pid=7110 comm="syz.1.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.221449][ T7123] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 67.507996][ T7128] loop2: detected capacity change from 0 to 7 [ 67.511284][ T7128] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 67.513697][ T7128] loop2: p1 start 898334091 is beyond EOD, truncated [ 67.516038][ T7128] loop2: p2 start 1977531207 is beyond EOD, truncated [ 67.518140][ T7128] loop2: p3 start 3941481957 is beyond EOD, truncated [ 67.520277][ T7128] loop2: p4 start 4257461985 is beyond EOD, truncated [ 67.522521][ T7128] loop2: p5 start 1531435803 is beyond EOD, truncated [ 67.524781][ T7128] loop2: p6 start 1241075386 is beyond EOD, truncated [ 67.526926][ T7128] loop2: p7 start 1680801792 is beyond EOD, truncated [ 67.594616][ T5947] Bluetooth: hci0: command 0x040f tx timeout [ 67.642939][ T5947] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 67.828289][ T7145] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.836851][ T7145] usb usb8: usbfs: process 7145 (syz.3.314) did not claim interface 0 before use [ 68.015871][ T40] audit: type=1400 audit(1745525909.094:396): avc: denied { map } for pid=7160 comm="syz.0.320" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 68.023855][ T40] audit: type=1400 audit(1745525909.094:397): avc: denied { execute } for pid=7160 comm="syz.0.320" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 68.059594][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'. [ 68.160346][ T7173] set match dimension is over the limit! [ 68.167027][ T40] audit: type=1400 audit(1745525909.244:398): avc: denied { read } for pid=7172 comm="syz.3.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.567906][ T40] audit: type=1400 audit(1745525909.644:399): avc: denied { read } for pid=7181 comm="syz.1.328" path="socket:[15453]" dev="sockfs" ino=15453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.678328][ T7188] netlink: 'syz.1.330': attribute type 2 has an invalid length. [ 68.683133][ T40] audit: type=1400 audit(1745525909.754:400): avc: denied { execheap } for pid=7187 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 68.691288][ T40] audit: type=1400 audit(1745525909.754:401): avc: denied { execute } for pid=7187 comm="syz.1.330" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 68.719954][ T7192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7192 comm=syz.2.329 [ 68.725246][ T7192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=148 sclass=netlink_route_socket pid=7192 comm=syz.2.329 [ 68.729627][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'. [ 68.749235][ T7192] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.752930][ T7192] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.757058][ T7192] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.760531][ T7192] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.764819][ T7192] vxlan0: entered promiscuous mode [ 68.768571][ T7196] netlink: 'syz.1.332': attribute type 4 has an invalid length. [ 68.772693][ T7192] netlink: 'syz.2.329': attribute type 4 has an invalid length. [ 68.779157][ T7192] netlink: 'syz.2.329': attribute type 4 has an invalid length. [ 68.890591][ T5947] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 68.941258][ T7169] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 68.943320][ T7169] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 68.949100][ T7169] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 68.951127][ T7169] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 69.003887][ T7206] 9pnet: Could not find request transport: rdma0000000000000 [ 69.120519][ T7213] loop2: detected capacity change from 0 to 7 [ 69.130347][ T5962] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 69.132481][ T5962] loop2: partition table partially beyond EOD, truncated [ 69.137490][ T5962] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 69.187985][ T7213] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 69.190176][ T7213] loop2: partition table partially beyond EOD, truncated [ 69.193247][ T7213] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 69.271910][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 69.299885][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 69.447395][ T7227] FAULT_INJECTION: forcing a failure. [ 69.447395][ T7227] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 69.452408][ T7227] CPU: 2 UID: 0 PID: 7227 Comm: syz.3.342 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 69.452431][ T7227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.452441][ T7227] Call Trace: [ 69.452449][ T7227] [ 69.452455][ T7227] dump_stack_lvl+0x16c/0x1f0 [ 69.452482][ T7227] should_fail_ex+0x512/0x640 [ 69.452505][ T7227] _copy_from_iter+0x2a4/0x15b0 [ 69.452530][ T7227] ? __pfx__copy_from_iter+0x10/0x10 [ 69.452550][ T7227] ? rcu_is_watching+0x12/0xc0 [ 69.452570][ T7227] ? trace_kmalloc+0x2b/0xd0 [ 69.452589][ T7227] ? __kvmalloc_node_noprof+0x296/0x600 [ 69.452604][ T7227] ? sysctl_head_grab+0x51/0x70 [ 69.452622][ T7227] ? proc_sys_call_handler+0x2a6/0x5c0 [ 69.452648][ T7227] proc_sys_call_handler+0x317/0x5c0 [ 69.452668][ T7227] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 69.452692][ T7227] ? __lock_acquire+0xaa4/0x1ba0 [ 69.452710][ T7227] do_iter_readv_writev+0x654/0x950 [ 69.452735][ T7227] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 69.452769][ T7227] vfs_writev+0x353/0xdc0 [ 69.452791][ T7227] ? get_pid_task+0x106/0x250 [ 69.452814][ T7227] ? __pfx_vfs_writev+0x10/0x10 [ 69.452838][ T7227] ? find_held_lock+0x2b/0x80 [ 69.452874][ T7227] ? __fget_files+0x20e/0x3c0 [ 69.452897][ T7227] ? do_pwritev+0x1af/0x270 [ 69.452925][ T7227] do_pwritev+0x1af/0x270 [ 69.452949][ T7227] ? __pfx_do_pwritev+0x10/0x10 [ 69.452970][ T7227] ? rcu_is_watching+0x12/0xc0 [ 69.452998][ T7227] do_syscall_64+0xcd/0x260 [ 69.453022][ T7227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.453040][ T7227] RIP: 0033:0x7fd3c278e969 [ 69.453053][ T7227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.453069][ T7227] RSP: 002b:00007fd3c05f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 69.453085][ T7227] RAX: ffffffffffffffda RBX: 00007fd3c29b5fa0 RCX: 00007fd3c278e969 [ 69.453096][ T7227] RDX: 0000000000000001 RSI: 0000200000002440 RDI: 0000000000000003 [ 69.453106][ T7227] RBP: 00007fd3c05f6090 R08: 00000000ffffffff R09: 0000000000000000 [ 69.453115][ T7227] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 69.453125][ T7227] R13: 0000000000000000 R14: 00007fd3c29b5fa0 R15: 00007ffeee9450b8 [ 69.453148][ T7227] [ 69.622888][ T7238] loop2: detected capacity change from 0 to 7 [ 69.630748][ T7238] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 69.632967][ T7238] loop2: partition table partially beyond EOD, truncated [ 69.636111][ T7238] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 69.699715][ T5962] [ 69.700569][ T5962] ====================================================== [ 69.702791][ T5962] WARNING: possible circular locking dependency detected [ 69.705421][ T5962] 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 Not tainted [ 69.708455][ T5962] ------------------------------------------------------ [ 69.711132][ T5962] udevd/5962 is trying to acquire lock: [ 69.712836][ T5962] ffff888029e633c8 (kn->active#5){++++}-{0:0}, at: __kernfs_remove+0x271/0x890 [ 69.715652][ T5962] [ 69.715652][ T5962] but task is already holding lock: [ 69.718497][ T5962] ffff888025d0e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 69.721359][ T5962] [ 69.721359][ T5962] which lock already depends on the new lock. [ 69.721359][ T5962] [ 69.724607][ T5962] [ 69.724607][ T5962] the existing dependency chain (in reverse order) is: [ 69.727439][ T5962] [ 69.727439][ T5962] -> #2 (&disk->open_mutex){+.+.}-{4:4}: [ 69.729879][ T5962] __mutex_lock+0x199/0xb90 [ 69.731517][ T5962] bdev_open+0x41a/0xe40 [ 69.733041][ T5962] bdev_file_open_by_dev+0x17d/0x210 [ 69.734929][ T5962] disk_scan_partitions+0x1ed/0x320 [ 69.736766][ T5962] add_disk_fwnode+0x1060/0x13a0 [ 69.738510][ T5962] pmem_attach_disk+0x981/0x1350 [ 69.740237][ T5962] nd_pmem_probe+0x1a9/0x1f0 [ 69.741937][ T5962] nvdimm_bus_probe+0x169/0x5d0 [ 69.743703][ T5962] really_probe+0x23e/0xa90 [ 69.745289][ T5962] __driver_probe_device+0x1de/0x440 [ 69.747159][ T5962] driver_probe_device+0x4c/0x1b0 [ 69.748898][ T5962] __driver_attach+0x283/0x580 [ 69.750588][ T5962] bus_for_each_dev+0x13b/0x1d0 [ 69.752299][ T5962] bus_add_driver+0x2e9/0x690 [ 69.753954][ T5962] driver_register+0x15c/0x4b0 [ 69.755679][ T5962] __nd_driver_register+0x103/0x1a0 [ 69.757472][ T5962] do_one_initcall+0x120/0x6e0 [ 69.759160][ T5962] kernel_init_freeable+0x5c2/0x900 [ 69.760986][ T5962] kernel_init+0x1c/0x2b0 [ 69.762547][ T5962] ret_from_fork+0x45/0x80 [ 69.764143][ T5962] ret_from_fork_asm+0x1a/0x30 [ 69.765813][ T5962] [ 69.765813][ T5962] -> #1 (&nvdimm_namespace_key){+.+.}-{4:4}: [ 69.768388][ T5962] __mutex_lock+0x199/0xb90 [ 69.769993][ T5962] uevent_show+0x187/0x3b0 [ 69.771553][ T5962] dev_attr_show+0x53/0xe0 [ 69.773108][ T5962] sysfs_kf_seq_show+0x213/0x3e0 [ 69.774785][ T5962] seq_read_iter+0x506/0x12c0 [ 69.776399][ T5962] kernfs_fop_read_iter+0x40f/0x5a0 [ 69.778183][ T5962] vfs_read+0x8c8/0xc70 [ 69.779657][ T5962] ksys_read+0x12a/0x240 [ 69.781190][ T5962] do_syscall_64+0xcd/0x260 [ 69.782800][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.784799][ T5962] [ 69.784799][ T5962] -> #0 (kn->active#5){++++}-{0:0}: [ 69.787142][ T5962] __lock_acquire+0x1173/0x1ba0 [ 69.788830][ T5962] lock_acquire+0x179/0x350 [ 69.790434][ T5962] kernfs_drain+0x4af/0x570 [ 69.792039][ T5962] __kernfs_remove+0x271/0x890 [ 69.793730][ T5962] kernfs_remove_by_name_ns+0x68/0x110 [ 69.794484][ T7246] libceph: resolve '40' (ret=-3): failed [ 69.795631][ T5962] device_del+0x381/0x9f0 [ 69.795648][ T5962] drop_partition+0x109/0x1c0 [ 69.795661][ T5962] bdev_disk_changed+0x24f/0x1520 [ 69.795673][ T5962] __loop_clr_fd+0x5c7/0x740 [ 69.795681][ T5962] lo_release+0x139/0x1e0 [ 69.806144][ T5962] blkdev_put_whole+0xad/0xf0 [ 69.808156][ T5962] bdev_release+0x47e/0x6d0 [ 69.809743][ T5962] blkdev_release+0x15/0x20 [ 69.811282][ T5962] __fput+0x3ff/0xb70 [ 69.812630][ T5962] fput_close_sync+0x15e/0x1e0 [ 69.814302][ T5962] __x64_sys_close+0x8b/0x120 [ 69.816027][ T5962] do_syscall_64+0xcd/0x260 [ 69.817968][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.820001][ T5962] [ 69.820001][ T5962] other info that might help us debug this: [ 69.820001][ T5962] [ 69.823165][ T5962] Chain exists of: [ 69.823165][ T5962] kn->active#5 --> &nvdimm_namespace_key --> &disk->open_mutex [ 69.823165][ T5962] [ 69.827246][ T5962] Possible unsafe locking scenario: [ 69.827246][ T5962] [ 69.829693][ T5962] CPU0 CPU1 [ 69.831415][ T5962] ---- ---- [ 69.833105][ T5962] lock(&disk->open_mutex); [ 69.834613][ T5962] lock(&nvdimm_namespace_key); [ 69.836902][ T5962] lock(&disk->open_mutex); [ 69.838956][ T5962] lock(kn->active#5); [ 69.840215][ T5962] [ 69.840215][ T5962] *** DEADLOCK *** [ 69.840215][ T5962] [ 69.842696][ T5962] 1 lock held by udevd/5962: [ 69.844176][ T5962] #0: ffff888025d0e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 69.847147][ T5962] [ 69.847147][ T5962] stack backtrace: [ 69.848998][ T5962] CPU: 2 UID: 0 PID: 5962 Comm: udevd Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 69.849012][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.849019][ T5962] Call Trace: [ 69.849024][ T5962] [ 69.849029][ T5962] dump_stack_lvl+0x116/0x1f0 [ 69.849044][ T5962] print_circular_bug+0x275/0x350 [ 69.849061][ T5962] check_noncircular+0x14c/0x170 [ 69.849077][ T5962] __lock_acquire+0x1173/0x1ba0 [ 69.849088][ T5962] lock_acquire+0x179/0x350 [ 69.849098][ T5962] ? __kernfs_remove+0x271/0x890 [ 69.849110][ T5962] ? up_write+0x1b2/0x520 [ 69.849121][ T5962] kernfs_drain+0x4af/0x570 [ 69.849131][ T5962] ? __kernfs_remove+0x271/0x890 [ 69.849142][ T5962] ? __pfx_kernfs_drain+0x10/0x10 [ 69.849151][ T5962] ? find_held_lock+0x2b/0x80 [ 69.849164][ T5962] ? kernfs_root+0xee/0x2a0 [ 69.849175][ T5962] __kernfs_remove+0x271/0x890 [ 69.849186][ T5962] ? kernfs_find_ns+0x277/0x540 [ 69.849197][ T5962] kernfs_remove_by_name_ns+0x68/0x110 [ 69.849210][ T5962] device_del+0x381/0x9f0 [ 69.849225][ T5962] ? __pfx_device_del+0x10/0x10 [ 69.849241][ T5962] drop_partition+0x109/0x1c0 [ 69.849254][ T5962] bdev_disk_changed+0x24f/0x1520 [ 69.849266][ T5962] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 69.849283][ T5962] ? __pfx_bdev_disk_changed+0x10/0x10 [ 69.849295][ T5962] ? filemap_write_and_wait_range+0x7d/0x130 [ 69.849310][ T5962] __loop_clr_fd+0x5c7/0x740 [ 69.849322][ T5962] ? __pfx___loop_clr_fd+0x10/0x10 [ 69.849331][ T5962] ? lo_release+0x18e/0x1e0 [ 69.849344][ T5962] lo_release+0x139/0x1e0 [ 69.849352][ T5962] ? __pfx_lo_release+0x10/0x10 [ 69.849360][ T5962] blkdev_put_whole+0xad/0xf0 [ 69.849369][ T5962] bdev_release+0x47e/0x6d0 [ 69.849379][ T5962] ? __pfx_blkdev_release+0x10/0x10 [ 69.849389][ T5962] blkdev_release+0x15/0x20 [ 69.849399][ T5962] __fput+0x3ff/0xb70 [ 69.849412][ T5962] fput_close_sync+0x15e/0x1e0 [ 69.849425][ T5962] ? __pfx_fput_close_sync+0x10/0x10 [ 69.849439][ T5962] __x64_sys_close+0x8b/0x120 [ 69.849453][ T5962] do_syscall_64+0xcd/0x260 [ 69.849468][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.849479][ T5962] RIP: 0033:0x7f509b5170a8 [ 69.849488][ T5962] Code: 48 8b 05 83 9d 0d 00 64 c7 00 16 00 00 00 83 c8 ff 48 83 c4 20 5b c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 5b 48 8b 15 51 9d 0d 00 f7 d8 64 89 02 48 83 [ 69.849498][ T5962] RSP: 002b:00007ffcab830bd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 69.849507][ T5962] RAX: ffffffffffffffda RBX: 00007f509b9270e0 RCX: 00007f509b5170a8 [ 69.849513][ T5962] RDX: 000055fe37e42f59 RSI: 00007ffcab8303d8 RDI: 0000000000000008 [ 69.849520][ T5962] RBP: 000055fb6851e210 R08: 0000000000000006 R09: 742f8bdfe0b8c70e [ 69.849526][ T5962] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000002 [ 69.849532][ T5962] R13: 000055fb68522ef0 R14: 0000000000000008 R15: 000055fb684ef2c0 [ 69.849541][ T5962] [ 69.950209][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 70.224360][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout [ 70.944317][ T5947] Bluetooth: hci2: command 0x0419 tx timeout [ 71.024416][ T5947] Bluetooth: hci0: command 0x040f tx timeout [ 71.024453][ T5955] Bluetooth: hci3: command 0x0c1a tx timeout [ 71.106528][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.034737][ T5955] Bluetooth: hci2: command 0x0419 tx timeout [ 73.114398][ T5955] Bluetooth: hci0: command 0x040f tx timeout [ 75.184224][ T5955] Bluetooth: hci0: command 0x040f tx timeout VM DIAGNOSIS: 20:18:30 Registers: info registers vcpu 0 CPU#0 RAX=00000000000510cc RBX=0000000000000000 RCX=ffffffff8b72c419 RDX=ffffed100d4865be RSI=ffffffff8bf46540 RDI=ffffffff8191b751 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000000 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90864b10 R15=0000000000000000 RIP=ffffffff8b72acaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555646a8808 CR3=0000000025356000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe913611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe913611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe913611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe913611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe913611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe913611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe913783488 00007fe913783480 00007fe913783478 00007fe913783450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe9142ed100 00007fe913783440 00007fe913780004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe913783498 00007fe913783490 00007fe913783488 00007fe913783480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 0000000000000390 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88806a6415c0 RCX=ffffffff81af38b9 RDX=ffff8880300e2440 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000003 RSP=ffffc90003c57b30 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100d4c82b9 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88806a53b040 RIP=ffffffff81bb4b38 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd3c05f66c0 ffffffff 00c00000 GS =0000 ffff8880d6ab2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000000 CR3=0000000051670000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc26a3f7c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe913611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe913611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe913611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe913611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe913611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe913611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000390 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 0000000000000390 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854e4b05 RDI=ffffffff9ae264a0 RBP=ffffffff9ae26460 RSP=ffffc90003d770d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000005b R14=ffffffff9ae26460 R15=ffffffff854e4aa0 RIP=ffffffff854e4b2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f509b927280 ffffffff 00c00000 GS =0000 ffff8880d6bb2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd3c05f5f98 CR3=000000004e044000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3c2811a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3c2811a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3c2811a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3c2811aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3c2811b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3c2811c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3c2983488 00007fd3c2983480 00007fd3c2983478 00007fd3c2983450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3c34ed100 00007fd3c2983440 00007fd3c2983458 00007fd3c29834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3c2983498 00007fd3c2983490 00007fd3c2983488 00007fd3c2983480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000004b05c RBX=0000000000000003 RCX=ffffffff8b72c419 RDX=ffffed100d4e65be RSI=ffffffff8bf46540 RDI=ffffffff8191b751 RBP=ffffed1003bd3000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801de98000 R14=ffffffff90864b10 R15=0000000000000000 RIP=ffffffff8b72acaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cb2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5a6c874440 CR3=0000000031f08000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd00054120 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0f4c411a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0f4c411a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0f4c411a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0f4c411aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0f4c411b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0f4c411c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000