last executing test programs: 3m15.279362322s ago: executing program 1 (id=631): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) 3m15.197125458s ago: executing program 1 (id=633): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) lseek(r1, 0x2, 0x0) read(r1, &(0x7f0000000400), 0x1000) 3m15.075919049s ago: executing program 1 (id=635): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) write(r0, &(0x7f0000000000)="0100000000000007e0", 0x9) 3m15.027660038s ago: executing program 1 (id=636): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 3m14.985967936s ago: executing program 1 (id=638): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x502e}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3m14.616311863s ago: executing program 1 (id=639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000002000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1b, 0x0, 0xfee00d00}]}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000001000)={0x1, 0x0, [{0x839}]}) 3m14.579729981s ago: executing program 32 (id=639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000002000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1b, 0x0, 0xfee00d00}]}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000001000)={0x1, 0x0, [{0x839}]}) 2m33.055363936s ago: executing program 4 (id=1251): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) 2m32.99457097s ago: executing program 4 (id=1253): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x15e) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x5000003a, r1, 0x0) fcntl$notify(r0, 0x402, 0x21) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) 2m32.963814769s ago: executing program 4 (id=1255): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c700000000d97899514e64e36cad5eba82010b2d149ac02e5f07000000000000000000000000000000000000000000009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0eead478e46c8ca3e4c5d2b3cb4ad48c830e8003c45f5b2dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cde97565d509effc252599b26555355d7955f551df82ea475a711ec56d00000000a89c7533c9955fd63cd00cb83d1228"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x40000000}]}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$FUSE(r2, &(0x7f00000025c0)={0x2020}, 0x2020) 2m32.892697089s ago: executing program 4 (id=1257): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x950d3, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) 2m32.890458694s ago: executing program 4 (id=1258): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="070000000000000000000c0000001c00038008000400001000000800020020000000080005007180"], 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") write(0xffffffffffffffff, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a312031323820", 0x34) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e010000380100000132") 2m31.90599001s ago: executing program 4 (id=1267): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 2m31.790421068s ago: executing program 33 (id=1267): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 41.805478667s ago: executing program 5 (id=2478): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x54, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e04, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10003}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 41.711215436s ago: executing program 5 (id=2480): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 40.797357806s ago: executing program 5 (id=2483): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[], 0x268}, 0x1, 0x0, 0x0, 0x40001}, 0x800) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x142, 0x0, 0x0) 40.715795866s ago: executing program 5 (id=2485): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x80000, 0x0) 40.715550348s ago: executing program 5 (id=2486): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x50, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000004dc0)={0xb, 0x400000000045, 0xffffffff80000000, 0x5, 0x80000002, 0x7cca, 0x6, 0x5, 0x1000000000002, 0x4, 0x38000000000000, 0x6, 0x1000, 0x8c, 0xd01, 0x0, 0x4, 0x4000007fffd, 0x774, 0xfffffffffffffeff, 0x2, 0x9, 0x1, 0x9014, 0x11, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 40.56867422s ago: executing program 5 (id=2490): msgget$private(0x0, 0x3ac) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) 40.451548907s ago: executing program 34 (id=2490): msgget$private(0x0, 0x3ac) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) 3.606791836s ago: executing program 2 (id=2826): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x104, 0xaa180) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000040)=0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000002cc0)=""/4104, 0x1008}], 0x1) 2.379949923s ago: executing program 6 (id=2834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ptrace$setregs(0xd, 0x0, 0xfffffffffffffffc, &(0x7f0000000480)="186076") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000fe0000/0x1000)=nil, 0x1000, 0xc) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="2ef30faab981050000b80133000082000000000f300f20e035004000000f22e00f20e035010000000f22e00f20d835080000000f22d8c74424000c0000000f788649000000c7442406000000000f011c24650f017871660feb8c380060000066ed66baa100ec", 0x66}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.170757685s ago: executing program 6 (id=2836): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000001000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x403, 0x70bd6a, 0x0, {0x0, 0x0, 0x0, r2, 0x428a4}}, 0x20}}, 0x0) 2.019613946s ago: executing program 6 (id=2837): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xaaaa) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 1.848805021s ago: executing program 6 (id=2839): r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000380)=""/131, 0x83) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_usb_disconnect(r0) 1.409509824s ago: executing program 2 (id=2841): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000240)={0x2, 0x0, {&(0x7f0000000040)=""/35, 0x23, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000680)={0x2, 0x0, {&(0x7f00000004c0)=""/238, 0xee, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000440)={0x2, 0x0, {&(0x7f0000000080)=""/58, 0x3a, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) 1.284607029s ago: executing program 2 (id=2842): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet6(r0, &(0x7f00000004c0)="2b98", 0x2, 0x8015, 0x0, 0x0) 1.284167283s ago: executing program 2 (id=2843): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_clone3(0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=""/162, 0xa2}, 0x80200000}], 0x1, 0x10103, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 1.168745483s ago: executing program 2 (id=2844): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.00953082s ago: executing program 6 (id=2846): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x22102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x15) ioctl(r0, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c00)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c20)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c30)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xf9) 596.056305ms ago: executing program 3 (id=2850): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)}], 0x1) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 488.997547ms ago: executing program 6 (id=2851): accept(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) read(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$snddsp(r1, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) 479.276209ms ago: executing program 0 (id=2852): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) write(r1, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000480)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x1}, 0x10) write(r1, &(0x7f0000000a00)='\x00', 0x1) 421.993815ms ago: executing program 3 (id=2853): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x400, 0xe4, 0x4a, 0x0, 0x2}) 421.675136ms ago: executing program 0 (id=2854): mbind(&(0x7f0000002000/0x3000)=nil, 0x3000, 0xa002, &(0x7f0000000140)=0x3ff, 0x61, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x22a, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x24, 0xfd, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 353.9245ms ago: executing program 3 (id=2855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe200000000000000000000000000001fe800000000000000000000000000002"], 0x64) 316.545519ms ago: executing program 2 (id=2856): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fe9000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x31}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000240)=0x9d) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 249.951272ms ago: executing program 0 (id=2857): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000104feffff7ffedbdf2500000006", @ANYRES32=r4, @ANYBLOB="600000000020000008000300", @ANYRES32=r2], 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) 214.215581ms ago: executing program 3 (id=2858): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x20a, 0x80000001}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) 166.375957ms ago: executing program 3 (id=2859): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffb}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 106.424242ms ago: executing program 3 (id=2860): write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 92.087152ms ago: executing program 0 (id=2861): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x0, 0x46, 0xfe, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x48}}, 0x0) 4.943344ms ago: executing program 0 (id=2862): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1fb) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing/events/sched/filter\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) write(r0, 0x0, 0x0) 0s ago: executing program 0 (id=2863): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) kernel console output (not intermixed with test programs): 386] do_ip_vs_set_ctl+0x471/0xc90 [ 249.652501][T12386] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 249.652519][T12386] ? rcu_is_watching+0x13/0xc0 [ 249.652562][T12386] ? find_held_lock+0x2b/0x80 [ 249.652589][T12386] ? nf_sockopt_find.isra.0+0x222/0x290 [ 249.652630][T12386] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 249.652673][T12386] ? nf_setsockopt+0x8d/0xf0 [ 249.652698][T12386] nf_setsockopt+0x8d/0xf0 [ 249.652728][T12386] ip_setsockopt+0xcb/0xf0 [ 249.652751][T12386] tcp_setsockopt+0xa7/0x100 [ 249.652776][T12386] smc_setsockopt+0x1b6/0xa40 [ 249.652801][T12386] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 249.652832][T12386] ? __pfx_smc_setsockopt+0x10/0x10 [ 249.652858][T12386] ? __fget_files+0x215/0x3d0 [ 249.652886][T12386] ? selinux_socket_setsockopt+0x6a/0x80 [ 249.652908][T12386] ? __pfx_smc_setsockopt+0x10/0x10 [ 249.652936][T12386] do_sock_setsockopt+0xf3/0x1d0 [ 249.652967][T12386] __sys_setsockopt+0x195/0x220 [ 249.652996][T12386] __x64_sys_setsockopt+0xbd/0x160 [ 249.653019][T12386] ? do_syscall_64+0xae/0x790 [ 249.653037][T12386] ? lockdep_hardirqs_on+0x7d/0x110 [ 249.653056][T12386] do_syscall_64+0x123/0x790 [ 249.653077][T12386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.653096][T12386] RIP: 0033:0x7f19a859e159 [ 249.653112][T12386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.653131][T12386] RSP: 002b:00007f19a94fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 249.653157][T12386] RAX: ffffffffffffffda RBX: 00007f19a8825fa0 RCX: 00007f19a859e159 [ 249.653171][T12386] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 249.653184][T12386] RBP: 00007f19a863506b R08: 0000000000000018 R09: 0000000000000000 [ 249.653196][T12386] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000000 [ 249.653209][T12386] R13: 00007f19a8826038 R14: 00007f19a8825fa0 R15: 00007ffe97cf7be8 [ 249.653236][T12386] [ 249.727743][T12388] FAULT_INJECTION: forcing a failure. [ 249.727743][T12388] name failslab, interval 1, probability 0, space 0, times 0 [ 249.727777][T12388] CPU: 2 UID: 0 PID: 12388 Comm: syz.2.2432 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.727803][T12388] Tainted: [L]=SOFTLOCKUP [ 249.727810][T12388] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.727822][T12388] Call Trace: [ 249.727829][T12388] [ 249.727837][T12388] dump_stack_lvl+0x100/0x190 [ 249.727871][T12388] should_fail_ex.cold+0x5/0xa [ 249.727902][T12388] should_failslab+0xc2/0x120 [ 249.727930][T12388] kmem_cache_alloc_noprof+0x92/0x6a0 [ 249.727958][T12388] ? d_instantiate+0x8a/0xb0 [ 249.727976][T12388] ? alloc_empty_file+0x5b/0x1c0 [ 249.728012][T12388] alloc_empty_file+0x5b/0x1c0 [ 249.728044][T12388] alloc_file_pseudo+0x183/0x290 [ 249.728076][T12388] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 249.728114][T12388] __anon_inode_getfile+0xe8/0x280 [ 249.728141][T12388] bpf_link_prime+0x200/0x4c0 [ 249.728166][T12388] bpf_xdp_link_attach+0x27a/0x8f0 [ 249.728196][T12388] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 249.728223][T12388] ? find_held_lock+0x2b/0x80 [ 249.728252][T12388] ? __fget_files+0x215/0x3d0 [ 249.728292][T12388] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 249.728322][T12388] __sys_bpf+0x3cbf/0x4a30 [ 249.728349][T12388] ? __pfx___sys_bpf+0x10/0x10 [ 249.728368][T12388] ? find_held_lock+0x2b/0x80 [ 249.728395][T12388] ? futex_wake+0x4ea/0x5e0 [ 249.728434][T12388] ? rcu_read_lock_any_held+0x6a/0x90 [ 249.728463][T12388] ? find_held_lock+0x2b/0x80 [ 249.728490][T12388] ? ksys_write+0x190/0x250 [ 249.728510][T12388] ? ksys_write+0x190/0x250 [ 249.728549][T12388] ? __x64_sys_futex+0x34f/0x4d0 [ 249.728576][T12388] ? __x64_sys_futex+0x358/0x4d0 [ 249.728607][T12388] ? xfd_validate_state+0x129/0x190 [ 249.728633][T12388] ? __x64_sys_bpf+0xce/0x140 [ 249.728653][T12388] __x64_sys_bpf+0xce/0x140 [ 249.728676][T12388] ? do_syscall_64+0xae/0x790 [ 249.728698][T12388] do_syscall_64+0x123/0x790 [ 249.728738][T12388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.728761][T12388] RIP: 0033:0x7f19a859e159 [ 249.728780][T12388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.728799][T12388] RSP: 002b:00007f19a94fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 249.728820][T12388] RAX: ffffffffffffffda RBX: 00007f19a8825fa0 RCX: 00007f19a859e159 [ 249.728834][T12388] RDX: 000000000000001c RSI: 0000200000000080 RDI: 000000000000001c [ 249.728847][T12388] RBP: 00007f19a863506b R08: 0000000000000000 R09: 0000000000000000 [ 249.728859][T12388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.728873][T12388] R13: 00007f19a8826038 R14: 00007f19a8825fa0 R15: 00007ffe97cf7be8 [ 249.728902][T12388] [ 250.043119][T12400] syz.0.2435 (12400): drop_caches: 2 [ 250.372064][T12415] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2443'. [ 250.470577][T12419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2445'. [ 250.553243][ T43] audit: type=1400 audit(1790929222.755:858): avc: denied { map } for pid=12420 comm="syz.3.2446" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 250.553542][ T43] audit: type=1400 audit(1790929222.755:859): avc: denied { execute } for pid=12420 comm="syz.3.2446" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 250.758927][T12432] netlink: 'syz.3.2451': attribute type 1 has an invalid length. [ 250.790573][T12432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.918977][T12432] bond1: (slave veth5): Enslaving as an active interface with a down link [ 250.925830][T12438] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 250.930109][T12438] bond1: (slave batadv1): making interface the new active one [ 250.934753][T12438] batadv1: entered promiscuous mode [ 250.938309][T12438] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 251.116732][ T5822] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 251.276020][ T5822] usb 5-1: Using ep0 maxpacket: 16 [ 251.276736][ T5822] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 251.280371][ T5822] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 251.280403][ T5822] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.282908][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.282936][ T5822] usb 5-1: Product: syz [ 251.282953][ T5822] usb 5-1: Manufacturer: syz [ 251.282970][ T5822] usb 5-1: SerialNumber: syz [ 251.289865][ T5822] usb 5-1: config 0 descriptor?? [ 251.350266][T12458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2460'. [ 251.507479][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 251.514530][ T5822] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input30 [ 251.525634][ T5822] imon:send_packet: packet tx failed (-71) [ 251.536280][ T5822] imon 5-1:0.0: panel buttons/knobs setup failed [ 251.616002][ T5822] rc_core: IR keymap rc-imon-pad not found [ 251.616013][ T5822] Registered IR keymap rc-empty [ 251.616055][ T5822] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 251.616065][ T5822] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 251.616295][ T5822] imon:send_packet: packet tx failed (-71) [ 251.646200][ T5822] imon 5-1:0.0: remote input dev register failed [ 251.646293][ T5822] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 251.690599][ T5822] imon 5-1:0.0: unable to initialize intf0, err 0 [ 251.690619][ T5822] imon:imon_probe: failed to initialize context! [ 251.690630][ T5822] imon 5-1:0.0: unable to register, err -19 [ 251.695593][ T5822] usb 5-1: USB disconnect, device number 27 [ 252.017410][ T5822] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 252.167757][ T5822] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 252.168761][ T5822] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 252.168786][ T5822] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 252.168808][ T5822] usb 5-1: config 0 interface 0 has no altsetting 0 [ 252.170681][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.170703][ T5822] usb 5-1: Product: syz [ 252.170716][ T5822] usb 5-1: Manufacturer: syz [ 252.170729][ T5822] usb 5-1: SerialNumber: syz [ 252.173566][ T5822] usb 5-1: config 0 descriptor?? [ 252.174644][T12437] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 252.388475][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 252.390855][ T5822] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input32 [ 252.519870][ T1039] fq: likely mono tstamp with tstamp_type 0 [ 252.520391][ T1039] fq: likely mono tstamp with tstamp_type 0 [ 252.520516][ T1039] fq: likely mono tstamp with tstamp_type 0 [ 252.520609][ T1039] fq: likely mono tstamp with tstamp_type 0 [ 252.520686][ T1039] fq: likely mono tstamp with tstamp_type 0 [ 252.520754][ T1039] fq: likely mono tstamp with tstamp_type 0 [ 252.520855][ T1039] fq: likely mono tstamp with tstamp_type 0 [ 252.520940][ T1039] fq: likely mono tstamp with tstamp_type 0 [ 252.521000][ T1039] fq: likely mono tstamp with tstamp_type 0 [ 252.666061][ T5822] rc_core: IR keymap rc-imon-pad not found [ 252.666079][ T5822] Registered IR keymap rc-empty [ 252.666137][ T5822] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 252.666152][ T5822] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 252.819791][ T5822] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 252.829496][ T5822] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input33 [ 252.838289][ T5822] imon 5-1:0.0: iMON device (15c2:0045, intf0) on usb<5:28> initialized [ 253.003580][ T5822] usb 5-1: USB disconnect, device number 28 [ 253.022255][T12437] imon:display_open: could not find interface for minor 0 [ 253.629761][ T43] audit: type=1400 audit(1790929225.835:860): avc: denied { read } for pid=12513 comm="syz.5.2483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 253.775266][T12364] bond2: (slave syz_tun): Removing an active aggregator [ 253.775618][T12364] bond2: (slave syz_tun): Releasing backup interface [ 253.799080][T12522] bond5: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 253.799102][T12522] bond5: entered allmulticast mode [ 253.801889][T12522] bond5: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 254.069792][ T1039] net_ratelimit: 6 callbacks suppressed [ 254.069817][ T1039] fq: likely mono tstamp with tstamp_type 0 [ 254.070804][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.078095][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.080704][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.091232][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.091867][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.199313][ T5743] Bluetooth: hci3: link tx timeout [ 254.199333][ T5743] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 254.220854][ T5086] Bluetooth: hci3: link tx timeout [ 254.220873][ T5086] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 254.789033][T12534] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.789165][T12534] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.789282][T12534] bridge_slave_0: entered allmulticast mode [ 254.790623][T12534] bridge_slave_0: entered promiscuous mode [ 254.795475][T12534] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.795599][T12534] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.796368][T12534] bridge_slave_1: entered allmulticast mode [ 254.797867][T12534] bridge_slave_1: entered promiscuous mode [ 254.824835][T12534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.829043][T12534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.852711][T12534] team0: Port device team_slave_0 added [ 254.854776][T12534] team0: Port device team_slave_1 added [ 254.884788][T12534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.884809][T12534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.884837][T12534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.887268][T12534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.887284][T12534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.887306][T12534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.925707][T12534] hsr_slave_0: entered promiscuous mode [ 254.926571][T12534] hsr_slave_1: entered promiscuous mode [ 254.927243][T12534] debugfs: 'hsr0' already exists in 'hsr' [ 254.927260][T12534] Cannot create hsr debugfs directory [ 255.016170][ T5086] Bluetooth: hci2: command 0x0406 tx timeout [ 255.151138][T12534] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 255.155190][T12534] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 255.156373][T12534] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 255.161541][T12534] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 255.162217][T12534] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 255.164293][T12534] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 255.164861][T12534] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 255.167144][T12534] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 255.253943][T12534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.269216][T12534] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.275393][ T6869] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.275492][ T6869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.283784][ T6869] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.283865][ T6869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.665626][T12534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.727452][ T43] audit: type=1400 audit(1790929227.935:861): avc: denied { read } for pid=12578 comm="syz.2.2502" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 255.727503][ T43] audit: type=1400 audit(1790929227.935:862): avc: denied { open } for pid=12578 comm="syz.2.2502" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 255.729494][T12580] FAULT_INJECTION: forcing a failure. [ 255.729494][T12580] name failslab, interval 1, probability 0, space 0, times 0 [ 255.729526][T12580] CPU: 0 UID: 0 PID: 12580 Comm: syz.2.2502 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.729553][T12580] Tainted: [L]=SOFTLOCKUP [ 255.729560][T12580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 255.729571][T12580] Call Trace: [ 255.729578][T12580] [ 255.729587][T12580] dump_stack_lvl+0x100/0x190 [ 255.729621][T12580] should_fail_ex.cold+0x5/0xa [ 255.729648][T12580] should_failslab+0xc2/0x120 [ 255.729677][T12580] __kmalloc_cache_noprof+0x91/0x6d0 [ 255.729698][T12580] ? sctp_auth_shkey_create+0x9e/0x210 [ 255.729727][T12580] sctp_auth_shkey_create+0x9e/0x210 [ 255.729751][T12580] sctp_endpoint_new+0x589/0xb20 [ 255.729775][T12580] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 255.729797][T12580] ? lock_acquire+0x1d1/0x380 [ 255.729822][T12580] ? lockdep_init_map_type+0x5c/0x250 [ 255.729849][T12580] sctp_init_sock+0xe2b/0x1300 [ 255.729870][T12580] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 255.729892][T12580] sctp_v6_init_sock+0x16/0x70 [ 255.729912][T12580] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 255.729933][T12580] inet6_create+0xb1a/0x12b0 [ 255.729957][T12580] ? inet6_create+0x7f/0x12b0 [ 255.729983][T12580] __sock_create+0x339/0x860 [ 255.730008][T12580] __sys_socket+0x14d/0x260 [ 255.730030][T12580] ? __pfx___sys_socket+0x10/0x10 [ 255.730058][T12580] __x64_sys_socket+0x72/0xb0 [ 255.730078][T12580] ? lockdep_hardirqs_on+0x7d/0x110 [ 255.730098][T12580] do_syscall_64+0x123/0x790 [ 255.730120][T12580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.730142][T12580] RIP: 0033:0x7f19a859e159 [ 255.730158][T12580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.730177][T12580] RSP: 002b:00007f19a94fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 255.730196][T12580] RAX: ffffffffffffffda RBX: 00007f19a8825fa0 RCX: 00007f19a859e159 [ 255.730209][T12580] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 255.730221][T12580] RBP: 00007f19a863506b R08: 0000000000000000 R09: 0000000000000000 [ 255.730233][T12580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.730245][T12580] R13: 00007f19a8826038 R14: 00007f19a8825fa0 R15: 00007ffe97cf7be8 [ 255.730270][T12580] [ 255.736397][ T43] audit: type=1400 audit(1790929227.935:863): avc: denied { ioctl } for pid=12578 comm="syz.2.2502" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 255.817466][ T1039] fq: likely mono tstamp with tstamp_type 0 [ 255.919852][T12589] FAULT_INJECTION: forcing a failure. [ 255.919852][T12589] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 255.919876][T12589] CPU: 3 UID: 0 PID: 12589 Comm: syz.2.2498 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.919892][T12589] Tainted: [L]=SOFTLOCKUP [ 255.919896][T12589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 255.919903][T12589] Call Trace: [ 255.919908][T12589] [ 255.919913][T12589] dump_stack_lvl+0x100/0x190 [ 255.919941][T12589] should_fail_ex.cold+0x5/0xa [ 255.919957][T12589] ? prepare_alloc_pages+0x16d/0x5b0 [ 255.919977][T12589] should_fail_alloc_page+0xeb/0x140 [ 255.919996][T12589] prepare_alloc_pages+0x1f0/0x5b0 [ 255.920014][T12589] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 255.920028][T12589] ? prepare_alloc_pages+0x1f0/0x5b0 [ 255.920043][T12589] ? unwind_get_return_address+0x59/0xa0 [ 255.920060][T12589] ? rcu_is_watching+0x13/0xc0 [ 255.920076][T12589] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 255.920091][T12589] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 255.920105][T12589] ? __pfx_stack_trace_save+0x10/0x10 [ 255.920117][T12589] ? stack_depot_save_flags+0x27/0x9f0 [ 255.920134][T12589] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 255.920148][T12589] ? kasan_save_stack+0x30/0x50 [ 255.920161][T12589] ? kasan_save_track+0x14/0x30 [ 255.920174][T12589] ? __kasan_kmalloc+0xaa/0xb0 [ 255.920187][T12589] ? __kmalloc_noprof+0x32f/0x840 [ 255.920199][T12589] ? vhost_dev_set_owner+0x190/0xa30 [ 255.920211][T12589] ? vhost_dev_ioctl+0x521/0xe70 [ 255.920224][T12589] ? vhost_vsock_dev_ioctl+0x320/0xb70 [ 255.920243][T12589] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 255.920258][T12589] ? policy_nodemask+0xed/0x4f0 [ 255.920276][T12589] alloc_pages_mpol+0x201/0x550 [ 255.920293][T12589] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 255.920309][T12589] ? lock_acquire+0x1d1/0x380 [ 255.920322][T12589] ? lruvec_stat_mod_folio+0x76/0x2e0 [ 255.920339][T12589] ___kmalloc_large_node+0xe8/0x130 [ 255.920357][T12589] __kmalloc_large_node_noprof+0x1c/0x70 [ 255.920374][T12589] __kmalloc_noprof+0x5a8/0x840 [ 255.920388][T12589] ? trace_kmalloc+0xeb/0x110 [ 255.920403][T12589] ? vhost_dev_set_owner+0x330/0xa30 [ 255.920416][T12589] vhost_dev_set_owner+0x330/0xa30 [ 255.920431][T12589] vhost_dev_ioctl+0x521/0xe70 [ 255.920444][T12589] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 255.920458][T12589] ? do_vfs_ioctl+0x226/0x13e0 [ 255.920471][T12589] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 255.920484][T12589] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 255.920501][T12589] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 255.920519][T12589] vhost_vsock_dev_ioctl+0x320/0xb70 [ 255.920533][T12589] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 255.920548][T12589] ? selinux_file_ioctl+0x13b/0x290 [ 255.920562][T12589] ? selinux_file_ioctl+0xb6/0x290 [ 255.920577][T12589] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 255.920590][T12589] __x64_sys_ioctl+0x18e/0x210 [ 255.920604][T12589] do_syscall_64+0x123/0x790 [ 255.920618][T12589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.920629][T12589] RIP: 0033:0x7f19a859e159 [ 255.920640][T12589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.920651][T12589] RSP: 002b:00007f19a94fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.920663][T12589] RAX: ffffffffffffffda RBX: 00007f19a8825fa0 RCX: 00007f19a859e159 [ 255.920671][T12589] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000004 [ 255.920679][T12589] RBP: 00007f19a863506b R08: 0000000000000000 R09: 0000000000000000 [ 255.920687][T12589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.920694][T12589] R13: 00007f19a8826038 R14: 00007f19a8825fa0 R15: 00007ffe97cf7be8 [ 255.920710][T12589] [ 256.059756][T12534] veth0_vlan: entered promiscuous mode [ 256.070471][T12534] veth1_vlan: entered promiscuous mode [ 256.109610][T12534] veth0_macvtap: entered promiscuous mode [ 256.121716][T12534] veth1_macvtap: entered promiscuous mode [ 256.140126][T12534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.168576][T12534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.222544][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.228686][ T67] Bluetooth: hci0: command tx timeout [ 256.229218][ T67] Bluetooth: hci3: command 0x0406 tx timeout [ 256.413289][T11930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.413311][T11930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.416135][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.416178][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.416207][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.416237][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.489229][T12609] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 256.489282][T12609] overlayfs: failed to set xattr on upper [ 256.489290][T12609] overlayfs: ...falling back to redirect_dir=nofollow. [ 256.489297][T12609] overlayfs: ...falling back to index=off. [ 256.489304][T12609] overlayfs: ...falling back to uuid=null. [ 256.503689][T12609] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 256.543058][T11932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.543081][T11932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.206206][T12649] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 257.822337][T12666] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input34 [ 258.144416][T12684] FAULT_INJECTION: forcing a failure. [ 258.144416][T12684] name failslab, interval 1, probability 0, space 0, times 0 [ 258.144452][T12684] CPU: 3 UID: 0 PID: 12684 Comm: syz.3.2534 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.144486][T12684] Tainted: [L]=SOFTLOCKUP [ 258.144494][T12684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 258.144507][T12684] Call Trace: [ 258.144514][T12684] [ 258.144523][T12684] dump_stack_lvl+0x100/0x190 [ 258.144571][T12684] should_fail_ex.cold+0x5/0xa [ 258.144601][T12684] should_failslab+0xc2/0x120 [ 258.144649][T12684] kmem_cache_alloc_noprof+0x92/0x6a0 [ 258.144678][T12684] ? mempool_init_node+0x2f7/0x6f0 [ 258.144700][T12684] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 258.144722][T12684] mempool_init_node+0x2f7/0x6f0 [ 258.144748][T12684] ? __pfx_mempool_free_slab+0x10/0x10 [ 258.144769][T12684] mempool_create_node_noprof+0xe9/0x1b0 [ 258.144790][T12684] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 258.144813][T12684] ceph_osdc_init+0x48b/0xa00 [ 258.144846][T12684] ceph_create_client+0x281/0x370 [ 258.144871][T12684] ceph_get_tree+0x1a4/0x1fd0 [ 258.144889][T12684] ? bpf_lsm_capable+0x9/0x10 [ 258.144907][T12684] ? security_capable+0x80/0x260 [ 258.144931][T12684] vfs_get_tree+0x92/0x320 [ 258.144948][T12684] vfs_cmd_create+0xd7/0x2a0 [ 258.144968][T12684] __do_sys_fsconfig+0x55a/0xcb0 [ 258.144990][T12684] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 258.145019][T12684] do_syscall_64+0x123/0x790 [ 258.145042][T12684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.145062][T12684] RIP: 0033:0x7fde7cb9e159 [ 258.145078][T12684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.145096][T12684] RSP: 002b:00007fde7dafe028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 258.145114][T12684] RAX: ffffffffffffffda RBX: 00007fde7ce25fa0 RCX: 00007fde7cb9e159 [ 258.145125][T12684] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 258.145136][T12684] RBP: 00007fde7cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 258.145147][T12684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.145158][T12684] R13: 00007fde7ce26038 R14: 00007fde7ce25fa0 R15: 00007ffd8c32efd8 [ 258.145184][T12684] [ 258.298899][ T5086] Bluetooth: hci0: command tx timeout [ 258.299086][T12692] netlink: 'syz.3.2535': attribute type 4 has an invalid length. [ 258.308125][ T43] audit: type=1400 audit(1790929230.505:864): avc: denied { remount } for pid=12691 comm="syz.2.2536" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 258.313812][T12693] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 258.314377][T12695] CIFS: Attempting to mount //127.0.0.1/share [ 258.314841][T12695] CIFS: VFS: Error connecting to socket. Aborting operation. [ 258.314871][T12695] CIFS: VFS: cifs_mount failed w/return code = -101 [ 258.315380][T12679] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.396374][T12700] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 258.626553][ T6879] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 258.778742][ T6879] usb 7-1: not running at top speed; connect to a high speed hub [ 258.778775][ T6879] usb 7-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 258.779716][ T6879] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25702, setting to 64 [ 258.782127][ T6879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.782152][ T6879] usb 7-1: Product: syz [ 258.782167][ T6879] usb 7-1: Manufacturer: syz [ 258.782183][ T6879] usb 7-1: SerialNumber: syz [ 258.786471][T12699] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 258.811270][ T6879] oti6858 7-1:1.0: oti6858 converter detected [ 258.822160][ T6879] usb 7-1: oti6858 converter now attached to ttyUSB0 [ 258.873757][T12679] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.887395][T12708] FAULT_INJECTION: forcing a failure. [ 258.887395][T12708] name failslab, interval 1, probability 0, space 0, times 0 [ 258.887420][T12708] CPU: 3 UID: 0 PID: 12708 Comm: syz.3.2542 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.887437][T12708] Tainted: [L]=SOFTLOCKUP [ 258.887442][T12708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 258.887449][T12708] Call Trace: [ 258.887454][T12708] [ 258.887459][T12708] dump_stack_lvl+0x100/0x190 [ 258.887481][T12708] should_fail_ex.cold+0x5/0xa [ 258.887500][T12708] should_failslab+0xc2/0x120 [ 258.887516][T12708] __kvmalloc_node_noprof+0x113/0x9b0 [ 258.887531][T12708] ? lockdep_init_map_type+0x5c/0x250 [ 258.887545][T12708] ? alloc_netdev_mqs+0xd40/0x15c0 [ 258.887573][T12708] alloc_netdev_mqs+0xd40/0x15c0 [ 258.887593][T12708] ip6gre_tunnel_siocdevprivate+0x6db/0x1180 [ 258.887617][T12708] ? __pfx_ip6gre_tunnel_siocdevprivate+0x10/0x10 [ 258.887639][T12708] ? do_raw_spin_lock+0x128/0x260 [ 258.887660][T12708] ? mark_held_locks+0x40/0x70 [ 258.887674][T12708] ? full_name_hash+0xbc/0x100 [ 258.887695][T12708] dev_ifsioc+0xc71/0x1f80 [ 258.887711][T12708] ? __pfx_dev_ifsioc+0x10/0x10 [ 258.887727][T12708] ? __pfx___mutex_lock+0x10/0x10 [ 258.887742][T12708] ? lock_acquire+0x1d1/0x380 [ 258.887757][T12708] ? dev_load+0x8e/0x240 [ 258.887770][T12708] ? dev_load+0x8e/0x240 [ 258.887788][T12708] dev_ioctl+0x70e/0x10e0 [ 258.887804][T12708] sock_ioctl+0x494/0x6b0 [ 258.887817][T12708] ? __pfx_sock_ioctl+0x10/0x10 [ 258.887833][T12708] ? selinux_file_ioctl+0x13b/0x290 [ 258.887847][T12708] ? selinux_file_ioctl+0xb6/0x290 [ 258.887862][T12708] ? __pfx_sock_ioctl+0x10/0x10 [ 258.887875][T12708] __x64_sys_ioctl+0x18e/0x210 [ 258.887889][T12708] do_syscall_64+0x123/0x790 [ 258.887902][T12708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.887914][T12708] RIP: 0033:0x7fde7cb9e159 [ 258.887924][T12708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.887935][T12708] RSP: 002b:00007fde7dafe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.887949][T12708] RAX: ffffffffffffffda RBX: 00007fde7ce25fa0 RCX: 00007fde7cb9e159 [ 258.887957][T12708] RDX: 0000200000000340 RSI: 00000000000089f1 RDI: 0000000000000004 [ 258.887965][T12708] RBP: 00007fde7cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 258.887971][T12708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.887978][T12708] R13: 00007fde7ce26038 R14: 00007fde7ce25fa0 R15: 00007ffd8c32efd8 [ 258.887999][T12708] [ 259.038997][T12679] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.149265][T12679] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.196750][ T8087] usb 7-1: USB disconnect, device number 25 [ 259.204807][T12716] FAULT_INJECTION: forcing a failure. [ 259.204807][T12716] name failslab, interval 1, probability 0, space 0, times 0 [ 259.204843][T12716] CPU: 3 UID: 0 PID: 12716 Comm: syz.0.2545 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.204864][T12716] Tainted: [L]=SOFTLOCKUP [ 259.204869][T12716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 259.204877][T12716] Call Trace: [ 259.204882][T12716] [ 259.204889][T12716] dump_stack_lvl+0x100/0x190 [ 259.204914][T12716] should_fail_ex.cold+0x5/0xa [ 259.204932][T12716] should_failslab+0xc2/0x120 [ 259.204954][T12716] kmem_cache_alloc_noprof+0x92/0x6a0 [ 259.204971][T12716] ? __asan_memcpy+0x3c/0x60 [ 259.204984][T12716] ? __kernfs_new_node+0xd2/0xa10 [ 259.204999][T12716] __kernfs_new_node+0xd2/0xa10 [ 259.205011][T12716] ? __pfx___kernfs_new_node+0x10/0x10 [ 259.205024][T12716] ? lock_acquire+0x1d1/0x380 [ 259.205038][T12716] ? kernfs_root+0x23/0x2a0 [ 259.205122][T12716] ? find_held_lock+0x2b/0x80 [ 259.205145][T12716] ? kernfs_root+0xee/0x2a0 [ 259.205165][T12716] ? kernfs_root+0xee/0x2a0 [ 259.205188][T12716] kernfs_create_dir_ns+0xa6/0x2b0 [ 259.205207][T12716] sysfs_create_dir_ns+0x13a/0x2b0 [ 259.205273][T12716] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 259.205298][T12716] ? find_held_lock+0x2b/0x80 [ 259.205323][T12716] ? kobject_add_internal+0x25f/0x930 [ 259.205342][T12716] ? kobject_add_internal+0x25f/0x930 [ 259.205362][T12716] ? do_raw_spin_unlock+0x145/0x1e0 [ 259.205381][T12716] kobject_add_internal+0x2c8/0x930 [ 259.205402][T12716] kobject_init_and_add+0x121/0x180 [ 259.205421][T12716] ? __pfx_kobject_init_and_add+0x10/0x10 [ 259.205442][T12716] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 259.205458][T12716] ? lockdep_init_map_type+0x5c/0x250 [ 259.205477][T12716] swnode_register+0x5c9/0x750 [ 259.205496][T12716] fwnode_create_software_node+0x1c8/0x3f0 [ 259.205514][T12716] device_create_managed_software_node+0x103/0x270 [ 259.205535][T12716] iommufd_test+0x3007/0x6600 [ 259.205554][T12716] ? __lock_acquire+0x5c0/0x1f40 [ 259.205573][T12716] ? __lock_acquire+0x5c0/0x1f40 [ 259.205589][T12716] ? __pfx_iommufd_test+0x10/0x10 [ 259.205609][T12716] ? tomoyo_path_number_perm+0x188/0x580 [ 259.205629][T12716] ? lock_acquire+0x1d1/0x380 [ 259.205643][T12716] ? __might_fault+0xc5/0x140 [ 259.205661][T12716] ? find_held_lock+0x2b/0x80 [ 259.205680][T12716] ? __might_fault+0xc5/0x140 [ 259.205699][T12716] iommufd_fops_ioctl+0x358/0x520 [ 259.205719][T12716] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 259.205736][T12716] ? __fget_files+0x34/0x3d0 [ 259.205762][T12716] ? selinux_file_ioctl+0x13b/0x290 [ 259.205780][T12716] ? selinux_file_ioctl+0xb6/0x290 [ 259.205801][T12716] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 259.205827][T12716] __x64_sys_ioctl+0x18e/0x210 [ 259.205843][T12716] do_syscall_64+0x123/0x790 [ 259.205860][T12716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.205876][T12716] RIP: 0033:0x7f91a859e159 [ 259.205973][T12716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.205995][T12716] RSP: 002b:00007f91a9475028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.206013][T12716] RAX: ffffffffffffffda RBX: 00007f91a8825fa0 RCX: 00007f91a859e159 [ 259.206026][T12716] RDX: 0000200000000100 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 259.206035][T12716] RBP: 00007f91a863506b R08: 0000000000000000 R09: 0000000000000000 [ 259.206046][T12716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.206089][T12716] R13: 00007f91a8826038 R14: 00007f91a8825fa0 R15: 00007fff9b96d5b8 [ 259.206108][T12716] [ 259.209195][T12716] kobject: kobject_add_internal failed for node1 (error: -12 parent: software_nodes) [ 259.209283][T12716] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 259.215766][ T8087] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 259.216341][ T8087] oti6858 7-1:1.0: device disconnected [ 259.260550][ T6879] fq: likely mono tstamp with tstamp_type 0 [ 259.329682][T12722] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 259.346715][T11059] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.346759][T11059] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.346785][T11059] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.366136][T11059] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.426906][T12725] lo speed is unknown, defaulting to 1000 [ 259.426955][T12725] lo speed is unknown, defaulting to 1000 [ 259.427102][T12725] FAULT_INJECTION: forcing a failure. [ 259.427102][T12725] name failslab, interval 1, probability 0, space 0, times 0 [ 259.427132][T12725] CPU: 3 UID: 0 PID: 12725 Comm: syz.6.2549 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.427158][T12725] Tainted: [L]=SOFTLOCKUP [ 259.427167][T12725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 259.427179][T12725] Call Trace: [ 259.427186][T12725] [ 259.427195][T12725] dump_stack_lvl+0x100/0x190 [ 259.427229][T12725] should_fail_ex.cold+0x5/0xa [ 259.427257][T12725] should_failslab+0xc2/0x120 [ 259.427282][T12725] kmem_cache_alloc_noprof+0x92/0x6a0 [ 259.427305][T12725] ? __asan_memcpy+0x3c/0x60 [ 259.427322][T12725] ? __kernfs_new_node+0xd2/0xa10 [ 259.427348][T12725] __kernfs_new_node+0xd2/0xa10 [ 259.427370][T12725] ? __pfx___kernfs_new_node+0x10/0x10 [ 259.427392][T12725] ? lock_acquire+0x1d1/0x380 [ 259.427414][T12725] ? kernfs_root+0x23/0x2a0 [ 259.427443][T12725] ? find_held_lock+0x2b/0x80 [ 259.427470][T12725] ? kernfs_root+0xee/0x2a0 [ 259.427501][T12725] ? kernfs_root+0xee/0x2a0 [ 259.427535][T12725] kernfs_create_dir_ns+0xa6/0x2b0 [ 259.427560][T12725] sysfs_create_dir_ns+0x13a/0x2b0 [ 259.427590][T12725] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 259.427615][T12725] ? find_held_lock+0x2b/0x80 [ 259.427644][T12725] ? kobject_add_internal+0x25f/0x930 [ 259.427668][T12725] ? kobject_add_internal+0x25f/0x930 [ 259.427691][T12725] ? net_namespace+0x4d/0x60 [ 259.427712][T12725] ? device_namespace+0x76/0xa0 [ 259.427744][T12725] kobject_add_internal+0x2c8/0x930 [ 259.427772][T12725] kobject_add+0x16a/0x1e0 [ 259.427797][T12725] ? __pfx_kobject_add+0x10/0x10 [ 259.427822][T12725] ? get_device_parent+0x1b3/0x4c0 [ 259.427849][T12725] ? kobject_put+0xb9/0x640 [ 259.427877][T12725] device_add+0x294/0x1970 [ 259.427905][T12725] ? __pfx_device_add+0x10/0x10 [ 259.427927][T12725] ? mutex_init_lockdep+0xf1/0x120 [ 259.427951][T12725] ? rdma_counter_init+0x209/0x400 [ 259.427975][T12725] ib_register_device+0x88c/0xdd0 [ 259.428005][T12725] siw_newlink+0xb44/0xe70 [ 259.428031][T12725] nldev_newlink+0x3b0/0x630 [ 259.428054][T12725] ? __pfx_nldev_newlink+0x10/0x10 [ 259.428143][T12725] ? cred_has_capability.isra.0+0x186/0x300 [ 259.428169][T12725] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 259.428191][T12725] ? lock_acquire+0x1d1/0x380 [ 259.428219][T12725] ? cap_capable+0x107/0x430 [ 259.428240][T12725] ? security_capable+0x80/0x260 [ 259.428260][T12725] ? ns_capable+0xd2/0xf0 [ 259.428277][T12725] ? __pfx_nldev_newlink+0x10/0x10 [ 259.428300][T12725] rdma_nl_rcv_msg+0x392/0x6f0 [ 259.428322][T12725] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 259.428344][T12725] ? __lock_acquire+0x5c0/0x1f40 [ 259.428367][T12725] ? __netlink_lookup+0xa9/0x900 [ 259.428392][T12725] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 259.428416][T12725] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 259.428447][T12725] ? netlink_deliver_tap+0x1ae/0xcc0 [ 259.428474][T12725] netlink_unicast+0x585/0x850 [ 259.428508][T12725] ? __pfx_netlink_unicast+0x10/0x10 [ 259.428540][T12725] netlink_sendmsg+0x8b0/0xda0 [ 259.428571][T12725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.428598][T12725] ? selinux_socket_sendmsg+0x198/0x2f0 [ 259.428625][T12725] ____sys_sendmsg+0xa4d/0xbe0 [ 259.428643][T12725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.428667][T12725] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.428697][T12725] ___sys_sendmsg+0x190/0x1e0 [ 259.428720][T12725] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.428760][T12725] ? futex_wait+0x11e/0x370 [ 259.428791][T12725] ? find_held_lock+0x2b/0x80 [ 259.428836][T12725] __sys_sendmsg+0x160/0x210 [ 259.428864][T12725] ? __pfx___sys_sendmsg+0x10/0x10 [ 259.428902][T12725] do_syscall_64+0x123/0x790 [ 259.428925][T12725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.428945][T12725] RIP: 0033:0x7f871ad9e159 [ 259.428963][T12725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.428980][T12725] RSP: 002b:00007f871bc49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.429000][T12725] RAX: ffffffffffffffda RBX: 00007f871b025fa0 RCX: 00007f871ad9e159 [ 259.429015][T12725] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 259.429030][T12725] RBP: 00007f871ae3506b R08: 0000000000000000 R09: 0000000000000000 [ 259.429040][T12725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.429050][T12725] R13: 00007f871b026038 R14: 00007f871b025fa0 R15: 00007ffd59911bd8 [ 259.429076][T12725] [ 259.429584][T12727] netlink: 'syz.3.2550': attribute type 2 has an invalid length. [ 259.429788][T12725] kobject: kobject_add_internal failed for syz_device_name_32_chars_1234567 (error: -12 parent: infiniband) [ 259.430563][T12725] siw: device registration error -12 [ 259.432368][T12727] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2550'. [ 259.452857][T12725] lo speed is unknown, defaulting to 1000 [ 259.452915][T12725] lo speed is unknown, defaulting to 1000 [ 259.453475][T12725] lo speed is unknown, defaulting to 1000 [ 259.454169][T12725] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 259.454190][T12725] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 259.454214][T12725] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 259.462090][T12725] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 259.487473][T12725] lo speed is unknown, defaulting to 1000 [ 259.489396][T12725] lo speed is unknown, defaulting to 1000 [ 259.491129][T12725] lo speed is unknown, defaulting to 1000 [ 259.492845][T12725] lo speed is unknown, defaulting to 1000 [ 259.494549][T12725] lo speed is unknown, defaulting to 1000 [ 259.502765][T12725] lo speed is unknown, defaulting to 1000 [ 259.504669][T12725] lo speed is unknown, defaulting to 1000 [ 259.512101][T12725] lo speed is unknown, defaulting to 1000 [ 259.942036][T12740] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.2554'. [ 259.942057][T12740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2554'. [ 260.181454][ T1180] IPVS: starting estimator thread 0... [ 260.277521][T12748] IPVS: using max 21 ests per chain, 50400 per kthread [ 260.387606][ T5086] Bluetooth: hci0: command tx timeout [ 260.387707][ T42] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 260.536559][ T42] usb 11-1: Using ep0 maxpacket: 8 [ 260.538953][ T42] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 260.539955][ T42] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.539974][ T42] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 260.540009][ T42] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 260.540031][ T42] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 260.540063][ T42] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.580295][ T42] hub 11-1:1.0: bad descriptor, ignoring hub [ 260.580331][ T42] hub 11-1:1.0: probe with driver hub failed with error -5 [ 260.580773][ T42] cdc_wdm 11-1:1.0: skipping garbage [ 260.580785][ T42] cdc_wdm 11-1:1.0: skipping garbage [ 260.603130][ T42] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 260.603151][ T42] cdc_wdm 11-1:1.0: Unknown control protocol [ 260.782895][T12778] overlay: filesystem on ./bus not supported [ 261.177111][T12745] usb 11-1: reset high-speed USB device number 2 using dummy_hcd [ 261.337600][T12745] usb 11-1: device firmware changed [ 261.340464][ T3267] usb 11-1: USB disconnect, device number 2 [ 261.343129][T12745] cdc_wdm 11-1:1.0: Error autopm - -16 [ 261.445857][T12783] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 261.477631][ T3267] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 261.646014][ T3267] usb 11-1: Using ep0 maxpacket: 8 [ 261.646965][ T3267] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 261.648320][ T3267] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.648341][ T3267] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 261.648375][ T3267] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 261.648463][ T3267] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.674128][ T3267] hub 11-1:1.0: bad descriptor, ignoring hub [ 261.674196][ T3267] hub 11-1:1.0: probe with driver hub failed with error -5 [ 261.677002][ T3267] cdc_wdm 11-1:1.0: skipping garbage [ 261.677018][ T3267] cdc_wdm 11-1:1.0: skipping garbage [ 261.677036][ T3267] cdc_wdm 11-1:1.0: probe with driver cdc_wdm failed with error -22 [ 261.916276][ T5822] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 261.987409][ T3267] usb 11-1: USB disconnect, device number 3 [ 262.066171][ T5822] usb 7-1: Using ep0 maxpacket: 8 [ 262.066982][ T5822] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 262.068123][ T5822] usb 7-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 262.068138][ T5822] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.068151][ T5822] usb 7-1: config 1 has no interface number 0 [ 262.068171][ T5822] usb 7-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 262.068186][ T5822] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 262.068200][ T5822] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 262.069747][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.069761][ T5822] usb 7-1: Product: syz [ 262.069769][ T5822] usb 7-1: Manufacturer: syz [ 262.069777][ T5822] usb 7-1: SerialNumber: syz [ 262.216378][T11059] batadv1: left promiscuous mode [ 262.456378][ T5086] Bluetooth: hci0: command tx timeout [ 262.697831][ T8087] usb 7-1: USB disconnect, device number 26 [ 262.739345][ T43] audit: type=1400 audit(1790929234.945:865): avc: denied { write } for pid=12816 comm="syz.3.2588" name="/" dev="9p" ino=71827633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 262.759647][ T43] audit: type=1800 audit(1790929234.945:866): pid=12817 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2588" name="file1" dev="9p" ino=71827669 res=0 errno=0 [ 263.010994][T12828] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 263.170757][ T43] audit: type=1400 audit(1790929235.375:867): avc: denied { listen } for pid=12831 comm="syz.6.2595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 263.172492][ T43] audit: type=1400 audit(1790929235.375:868): avc: denied { accept } for pid=12831 comm="syz.6.2595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 263.531514][T12847] FAULT_INJECTION: forcing a failure. [ 263.531514][T12847] name failslab, interval 1, probability 0, space 0, times 0 [ 263.531551][T12847] CPU: 3 UID: 0 PID: 12847 Comm: syz.2.2601 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.531582][T12847] Tainted: [L]=SOFTLOCKUP [ 263.531591][T12847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 263.531603][T12847] Call Trace: [ 263.531611][T12847] [ 263.531620][T12847] dump_stack_lvl+0x100/0x190 [ 263.531655][T12847] should_fail_ex.cold+0x5/0xa [ 263.531687][T12847] should_failslab+0xc2/0x120 [ 263.531715][T12847] __kmalloc_cache_noprof+0x91/0x6d0 [ 263.531735][T12847] ? lockdep_init_map_type+0x5c/0x250 [ 263.531761][T12847] ? slip_open+0x85c/0x1120 [ 263.531800][T12847] slip_open+0x85c/0x1120 [ 263.531833][T12847] ? __pfx_slip_open+0x10/0x10 [ 263.531861][T12847] ? down_write+0x146/0x1f0 [ 263.531890][T12847] ? __pfx_slip_open+0x10/0x10 [ 263.531923][T12847] tty_ldisc_open+0xa2/0x120 [ 263.531984][T12847] tty_set_ldisc+0x325/0x740 [ 263.532011][T12847] tty_ioctl+0x5b2/0x1640 [ 263.532035][T12847] ? __pfx_tty_ioctl+0x10/0x10 [ 263.532057][T12847] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 263.532086][T12847] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 263.532117][T12847] ? __fget_files+0x34/0x3d0 [ 263.532158][T12847] ? selinux_file_ioctl+0x13b/0x290 [ 263.532182][T12847] ? selinux_file_ioctl+0xb6/0x290 [ 263.532208][T12847] ? __pfx_tty_ioctl+0x10/0x10 [ 263.532235][T12847] __x64_sys_ioctl+0x18e/0x210 [ 263.532260][T12847] do_syscall_64+0x123/0x790 [ 263.532285][T12847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.532364][T12847] RIP: 0033:0x7f19a859e159 [ 263.532390][T12847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.532409][T12847] RSP: 002b:00007f19a94fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.532431][T12847] RAX: ffffffffffffffda RBX: 00007f19a8825fa0 RCX: 00007f19a859e159 [ 263.532445][T12847] RDX: 0000200000000480 RSI: 0000000000005423 RDI: 0000000000000003 [ 263.532459][T12847] RBP: 00007f19a863506b R08: 0000000000000000 R09: 0000000000000000 [ 263.532473][T12847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.532486][T12847] R13: 00007f19a8826038 R14: 00007f19a8825fa0 R15: 00007ffe97cf7be8 [ 263.532514][T12847] [ 264.151189][ T43] audit: type=1400 audit(1790929236.355:869): avc: denied { write } for pid=12875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.237542][ T43] audit: type=1400 audit(1790929236.445:870): avc: denied { write } for pid=12880 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.355494][ T43] audit: type=1400 audit(1790929236.555:871): avc: denied { write } for pid=12883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.438508][ T43] audit: type=1400 audit(1790929236.645:872): avc: denied { write } for pid=12888 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.548265][ T43] audit: type=1400 audit(1790929236.755:873): avc: denied { write } for pid=12890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.606451][ T5877] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 264.627781][ T43] audit: type=1400 audit(1790929236.835:874): avc: denied { write } for pid=12893 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.767061][ T5877] usb 11-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 264.767103][ T5877] usb 11-1: too many configurations: 102, using maximum allowed: 8 [ 264.768114][ T5877] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 264.768130][ T5877] usb 11-1: config 1 has no interface number 0 [ 264.768935][ T5877] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 264.768950][ T5877] usb 11-1: config 1 has no interface number 0 [ 264.769721][ T5877] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 264.769736][ T5877] usb 11-1: config 1 has no interface number 0 [ 264.770498][ T5877] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 264.770511][ T5877] usb 11-1: config 1 has no interface number 0 [ 264.771246][ T5877] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 264.771258][ T5877] usb 11-1: config 1 has no interface number 0 [ 264.772012][ T5877] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 264.772030][ T5877] usb 11-1: config 1 has no interface number 0 [ 264.772795][ T5877] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 264.772813][ T5877] usb 11-1: config 1 has no interface number 0 [ 264.773652][ T5877] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 264.773666][ T5877] usb 11-1: config 1 has no interface number 0 [ 264.775184][ T5877] usb 11-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 264.775197][ T5877] usb 11-1: Product: syz [ 264.775204][ T5877] usb 11-1: Manufacturer: syz [ 264.775212][ T5877] usb 11-1: SerialNumber: syz [ 264.779680][ T5877] usb 11-1: 3:0 : does not exist [ 264.779696][ T5877] usb 11-1: 3:0 : does not exist [ 264.937709][T12896] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.938034][T12896] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.987971][T12886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.988360][T12886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.994544][ T3267] usb 11-1: USB disconnect, device number 4 [ 265.016078][ T5086] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 265.031229][T12896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.053475][T12896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.225175][T12896] bond3: left promiscuous mode [ 265.225227][T12896] erspan1: left promiscuous mode [ 265.225394][T12896] bond3: left allmulticast mode [ 265.237056][T12896] erspan1: left allmulticast mode [ 265.252296][T12896] team1: left promiscuous mode [ 265.252315][T12896] team1: left allmulticast mode [ 265.265463][T12896] bond5: left allmulticast mode [ 265.286689][ T9089] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.286729][ T9089] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.286762][ T9089] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.286784][ T9089] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.286815][ T9089] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.286838][ T9089] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.286867][ T9089] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.286890][ T9089] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.802747][T12928] FAULT_INJECTION: forcing a failure. [ 265.802747][T12928] name failslab, interval 1, probability 0, space 0, times 0 [ 265.802782][T12928] CPU: 0 UID: 0 PID: 12928 Comm: syz.0.2623 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.802807][T12928] Tainted: [L]=SOFTLOCKUP [ 265.802814][T12928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 265.802826][T12928] Call Trace: [ 265.802834][T12928] [ 265.802843][T12928] dump_stack_lvl+0x100/0x190 [ 265.802877][T12928] should_fail_ex.cold+0x5/0xa [ 265.802904][T12928] should_failslab+0xc2/0x120 [ 265.802928][T12928] kmem_cache_alloc_noprof+0x92/0x6a0 [ 265.802953][T12928] ? security_file_alloc+0x34/0x2c0 [ 265.802987][T12928] security_file_alloc+0x34/0x2c0 [ 265.803015][T12928] init_file+0x95/0x480 [ 265.803040][T12928] alloc_empty_file+0x79/0x1c0 [ 265.803068][T12928] dentry_open+0x46/0xd0 [ 265.803094][T12928] unix_ioctl+0x20b/0x570 [ 265.803118][T12928] sock_do_ioctl+0x118/0x280 [ 265.803139][T12928] ? __pfx_sock_do_ioctl+0x10/0x10 [ 265.803155][T12928] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 265.803181][T12928] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 265.803202][T12928] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 265.803229][T12928] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 265.803265][T12928] sock_ioctl+0x599/0x6b0 [ 265.803284][T12928] ? __pfx_sock_ioctl+0x10/0x10 [ 265.803333][T12928] ? selinux_file_ioctl+0x13b/0x290 [ 265.803358][T12928] ? selinux_file_ioctl+0xb6/0x290 [ 265.803386][T12928] ? __pfx_sock_ioctl+0x10/0x10 [ 265.803405][T12928] __x64_sys_ioctl+0x18e/0x210 [ 265.803429][T12928] do_syscall_64+0x123/0x790 [ 265.803451][T12928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.803472][T12928] RIP: 0033:0x7f91a859e159 [ 265.803488][T12928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.803506][T12928] RSP: 002b:00007f91a9475028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.803524][T12928] RAX: ffffffffffffffda RBX: 00007f91a8825fa0 RCX: 00007f91a859e159 [ 265.803536][T12928] RDX: 0000000000000000 RSI: 00000000000089e0 RDI: 0000000000000004 [ 265.803548][T12928] RBP: 00007f91a863506b R08: 0000000000000000 R09: 0000000000000000 [ 265.803561][T12928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.803573][T12928] R13: 00007f91a8826038 R14: 00007f91a8825fa0 R15: 00007fff9b96d5b8 [ 265.803599][T12928] [ 265.858912][T12930] kAFS: No cell specified [ 265.926477][T12934] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1 [ 265.926567][T12934] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 266.074414][T12940] binder: 12939:12940 ioctl c0306201 200000000040 returned -14 [ 266.102927][T12942] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 266.245863][T12947] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 266.285687][T12951] Bluetooth: (null): Too short H5 packet [ 266.378197][T12953] Bluetooth: MGMT ver 1.23 [ 266.457722][ T1039] fq: likely mono tstamp with tstamp_type 0 [ 268.466358][ T67] Bluetooth: hci0: command 0x0401 tx timeout [ 268.477959][ T5086] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 269.566895][T12960] netlink: 'syz.2.2636': attribute type 5 has an invalid length. [ 269.643613][T12992] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 269.744827][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2649'. [ 269.744865][T12999] netlink: 'syz.0.2649': attribute type 11 has an invalid length. [ 269.744880][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2649'. [ 269.745832][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2649'. [ 269.745867][T12999] netlink: 'syz.0.2649': attribute type 11 has an invalid length. [ 269.745883][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2649'. [ 269.850465][T13006] netlink: 'syz.6.2652': attribute type 1 has an invalid length. [ 269.903282][T13007] netlink: 'syz.6.2652': attribute type 1 has an invalid length. [ 269.938776][T13006] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 269.982386][ T5086] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 269.982505][ T5086] Bluetooth: hci0: Injecting HCI hardware error event [ 269.987488][T13007] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 269.993278][ T67] Bluetooth: hci0: hardware error 0x00 [ 270.078131][T13009] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 270.115111][T13011] loop6: detected capacity change from 0 to 2640 [ 270.119416][ T9718] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.119881][ T9718] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.120283][ T9718] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.120652][ T9718] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.121113][ T9718] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.148945][ T67] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 272.619812][T12985] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.156831][T13040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2660'. [ 273.190615][T13044] ref_ctr increment failed for inode: 0x503 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888034dc0000 [ 273.249415][T13047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 273.278333][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 273.278354][ T43] audit: type=1400 audit(1790929245.485:877): avc: denied { write } for pid=13045 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.348831][ T43] audit: type=1400 audit(1790929245.555:878): avc: denied { write } for pid=13054 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.361101][T13053] kvm: pic: level sensitive irq not supported [ 273.579727][ T43] audit: type=1400 audit(1790929245.785:879): avc: denied { write } for pid=13060 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.637683][ T43] audit: type=1400 audit(1790929245.845:880): avc: denied { write } for pid=13063 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.594025][T13077] FAULT_INJECTION: forcing a failure. [ 274.594025][T13077] name failslab, interval 1, probability 0, space 0, times 0 [ 274.594048][T13077] CPU: 2 UID: 0 PID: 13077 Comm: syz.0.2670 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.594064][T13077] Tainted: [L]=SOFTLOCKUP [ 274.594069][T13077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 274.594075][T13077] Call Trace: [ 274.594081][T13077] [ 274.594086][T13077] dump_stack_lvl+0x100/0x190 [ 274.594119][T13077] should_fail_ex.cold+0x5/0xa [ 274.594137][T13077] should_failslab+0xc2/0x120 [ 274.594157][T13077] __kmalloc_noprof+0xfc/0x840 [ 274.594171][T13077] ? l2tp_session_create+0x3a/0xd90 [ 274.594192][T13077] l2tp_session_create+0x3a/0xd90 [ 274.594208][T13077] pppol2tp_connect+0x1454/0x1c20 [ 274.594227][T13077] ? __pfx_pppol2tp_connect+0x10/0x10 [ 274.594242][T13077] ? find_held_lock+0x1/0x80 [ 274.594263][T13077] ? __local_bh_enable_ip+0xa5/0x120 [ 274.594279][T13077] ? selinux_netlbl_socket_connect+0x30/0x40 [ 274.594296][T13077] ? selinux_socket_connect+0x6b/0x80 [ 274.594311][T13077] __sys_connect_file+0x146/0x1a0 [ 274.594327][T13077] __sys_connect+0x141/0x170 [ 274.594340][T13077] ? __pfx___sys_connect+0x10/0x10 [ 274.594362][T13077] __x64_sys_connect+0x72/0xb0 [ 274.594375][T13077] ? lockdep_hardirqs_on+0x7d/0x110 [ 274.594392][T13077] do_syscall_64+0x123/0x790 [ 274.594406][T13077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.594417][T13077] RIP: 0033:0x7f91a859e159 [ 274.594428][T13077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.594438][T13077] RSP: 002b:00007f91a9475028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 274.594450][T13077] RAX: ffffffffffffffda RBX: 00007f91a8825fa0 RCX: 00007f91a859e159 [ 274.594459][T13077] RDX: 000000000000002e RSI: 0000200000000740 RDI: 0000000000000004 [ 274.594467][T13077] RBP: 00007f91a863506b R08: 0000000000000000 R09: 0000000000000000 [ 274.594474][T13077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.594482][T13077] R13: 00007f91a8826038 R14: 00007f91a8825fa0 R15: 00007fff9b96d5b8 [ 274.594497][T13077] [ 274.739987][T13080] kvm: pic: level sensitive irq not supported [ 274.767691][T13085] FAULT_INJECTION: forcing a failure. [ 274.767691][T13085] name failslab, interval 1, probability 0, space 0, times 0 [ 274.767719][T13085] CPU: 2 UID: 0 PID: 13085 Comm: syz.3.2672 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.767745][T13085] Tainted: [L]=SOFTLOCKUP [ 274.767750][T13085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 274.767758][T13085] Call Trace: [ 274.767764][T13085] [ 274.767770][T13085] dump_stack_lvl+0x100/0x190 [ 274.767795][T13085] should_fail_ex.cold+0x5/0xa [ 274.767814][T13085] should_failslab+0xc2/0x120 [ 274.767833][T13085] kmem_cache_alloc_noprof+0x92/0x6a0 [ 274.767850][T13085] ? __kernfs_new_node+0xd2/0xa10 [ 274.767866][T13085] __kernfs_new_node+0xd2/0xa10 [ 274.767881][T13085] ? __pfx___kernfs_new_node+0x10/0x10 [ 274.767895][T13085] ? lock_acquire+0x1d1/0x380 [ 274.767911][T13085] ? kernfs_root+0x23/0x2a0 [ 274.767930][T13085] ? find_held_lock+0x2b/0x80 [ 274.767948][T13085] ? kernfs_root+0xee/0x2a0 [ 274.767966][T13085] ? kernfs_root+0xee/0x2a0 [ 274.767988][T13085] kernfs_new_node+0x117/0x150 [ 274.768005][T13085] kernfs_create_link+0xcc/0x240 [ 274.768024][T13085] sysfs_do_create_link_sd+0x90/0x140 [ 274.768044][T13085] sysfs_create_link+0x61/0xc0 [ 274.768062][T13085] software_node_notify+0x182/0x270 [ 274.768080][T13085] device_add+0x2bc/0x1970 [ 274.768101][T13085] ? __pfx_device_add+0x10/0x10 [ 274.768120][T13085] ? kobject_get+0xbb/0x150 [ 274.768135][T13085] ? __pfx_software_node_get+0x10/0x10 [ 274.768150][T13085] ? software_node_get+0x68/0x90 [ 274.768163][T13085] ? fwnode_handle_get+0x97/0xd0 [ 274.768184][T13085] iommu_mock_device_add+0x7c/0xb0 [ 274.768204][T13085] iommufd_test+0x3038/0x6600 [ 274.768221][T13085] ? __lock_acquire+0x5c0/0x1f40 [ 274.768240][T13085] ? __lock_acquire+0x5c0/0x1f40 [ 274.768254][T13085] ? __pfx_iommufd_test+0x10/0x10 [ 274.768270][T13085] ? tomoyo_path_number_perm+0x188/0x580 [ 274.768287][T13085] ? lock_acquire+0x1d1/0x380 [ 274.768301][T13085] ? __might_fault+0xc5/0x140 [ 274.768314][T13085] ? find_held_lock+0x2b/0x80 [ 274.768332][T13085] ? __might_fault+0xc5/0x140 [ 274.768350][T13085] iommufd_fops_ioctl+0x358/0x520 [ 274.768369][T13085] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 274.768386][T13085] ? __fget_files+0x34/0x3d0 [ 274.768409][T13085] ? selinux_file_ioctl+0x13b/0x290 [ 274.768425][T13085] ? selinux_file_ioctl+0xb6/0x290 [ 274.768441][T13085] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 274.768460][T13085] __x64_sys_ioctl+0x18e/0x210 [ 274.768476][T13085] do_syscall_64+0x123/0x790 [ 274.768490][T13085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.768503][T13085] RIP: 0033:0x7fde7cb9e159 [ 274.768515][T13085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.768527][T13085] RSP: 002b:00007fde7dafe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.768540][T13085] RAX: ffffffffffffffda RBX: 00007fde7ce25fa0 RCX: 00007fde7cb9e159 [ 274.768548][T13085] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 274.768556][T13085] RBP: 00007fde7cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 274.768564][T13085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.768571][T13085] R13: 00007fde7ce26038 R14: 00007fde7ce25fa0 R15: 00007ffd8c32efd8 [ 274.768588][T13085] [ 274.769069][T13085] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 274.867337][T13088] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 274.887742][ T43] audit: type=1400 audit(1790929247.085:881): avc: denied { write } for pid=13083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.941018][ T43] audit: type=1400 audit(1790929247.135:882): avc: denied { create_files_as } for pid=13092 comm="syz.0.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=kernel_service permissive=1 [ 274.948224][T13096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2676'. [ 274.959613][T13093] netfs: Cache "CacheFiles" added (type cachefiles) [ 274.959634][T13093] CacheFiles: File cache on CacheFiles registered [ 274.961802][T13092] CacheFiles: File cache on CacheFiles unregistering [ 274.961818][T13092] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 275.015519][ T43] audit: type=1400 audit(1790929247.205:883): avc: denied { write } for pid=13097 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.114437][ T43] audit: type=1400 audit(1790929247.315:884): avc: denied { write } for pid=13105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.194818][T13116] binder: 13115:13116 ioctl c0306201 200000000640 returned -22 [ 275.228814][ T43] audit: type=1400 audit(1790929247.435:885): avc: denied { write } for pid=13114 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.243530][ T43] audit: type=1400 audit(1790929247.445:886): avc: denied { mount } for pid=13117 comm="syz.0.2682" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 275.255063][T13118] FAULT_INJECTION: forcing a failure. [ 275.255063][T13118] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 275.255087][T13118] CPU: 0 UID: 0 PID: 13118 Comm: syz.0.2682 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.255104][T13118] Tainted: [L]=SOFTLOCKUP [ 275.255109][T13118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 275.255117][T13118] Call Trace: [ 275.255122][T13118] [ 275.255128][T13118] dump_stack_lvl+0x100/0x190 [ 275.255150][T13118] should_fail_ex.cold+0x5/0xa [ 275.255167][T13118] ? fs_reclaim_acquire+0x70/0x100 [ 275.255186][T13118] should_fail_alloc_page+0xeb/0x140 [ 275.255203][T13118] prepare_alloc_pages+0x1f0/0x5b0 [ 275.255222][T13118] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 275.255236][T13118] ? sbitmap_get+0x1d7/0x360 [ 275.255250][T13118] ? __blk_mq_get_tag+0xb4/0x4f0 [ 275.255267][T13118] ? blk_mq_get_tag+0xa8d/0xdf0 [ 275.255285][T13118] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 275.255300][T13118] ? __pfx_blk_mq_get_tag+0x10/0x10 [ 275.255320][T13118] ? __lock_acquire+0x5c0/0x1f40 [ 275.255358][T13118] ? bio_associate_blkg+0xcf/0x730 [ 275.255375][T13118] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 275.255392][T13118] ? policy_nodemask+0xed/0x4f0 [ 275.255411][T13118] alloc_pages_mpol+0x201/0x550 [ 275.255429][T13118] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 275.255450][T13118] ? __pfx___debug_object_init+0x10/0x10 [ 275.255467][T13118] alloc_pages_noprof+0x1a/0x160 [ 275.255479][T13118] blk_rq_map_kern+0x4d3/0x820 [ 275.255497][T13118] scsi_execute_cmd+0xbb1/0xe70 [ 275.255515][T13118] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 275.255531][T13118] sr_do_ioctl+0x21a/0x840 [ 275.255546][T13118] ? __pfx_sr_do_ioctl+0x10/0x10 [ 275.255560][T13118] ? kasan_save_track+0x14/0x30 [ 275.255576][T13118] ? blk_mq_free_request+0x1df/0x250 [ 275.255588][T13118] ? sr_read_tochdr.isra.0+0xaa/0x280 [ 275.255602][T13118] sr_read_tochdr.isra.0+0x100/0x280 [ 275.255614][T13118] ? __pfx_sr_read_tochdr.isra.0+0x10/0x10 [ 275.255629][T13118] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 275.255644][T13118] sr_audio_ioctl+0x13e/0x2f0 [ 275.255657][T13118] ? __pfx_sr_audio_ioctl+0x10/0x10 [ 275.255670][T13118] ? __pfx_scsi_test_unit_ready+0x10/0x10 [ 275.255687][T13118] cdrom_count_tracks+0x26f/0x840 [ 275.255703][T13118] ? __pfx_cdrom_count_tracks+0x10/0x10 [ 275.255716][T13118] ? __pfx_sr_drive_status+0x10/0x10 [ 275.255727][T13118] ? trace_event_raw_event_scsi_prepare_zone_append+0x3f0/0x480 [ 275.255751][T13118] cdrom_open+0xa8a/0x2760 [ 275.255766][T13118] ? __pfx_cdrom_open+0x10/0x10 [ 275.255780][T13118] ? rcu_is_watching+0x13/0xc0 [ 275.255796][T13118] ? trace_contention_end+0x126/0x160 [ 275.255811][T13118] ? __mutex_lock+0x26c/0x1bd0 [ 275.255826][T13118] ? sr_block_open+0xbc/0x180 [ 275.255841][T13118] ? lock_acquire+0x1d1/0x380 [ 275.255860][T13118] ? __pfx___mutex_lock+0x10/0x10 [ 275.255874][T13118] ? mark_held_locks+0x40/0x70 [ 275.255888][T13118] ? lockdep_hardirqs_on+0x7d/0x110 [ 275.255903][T13118] ? __pfx_disk_check_media_change+0x10/0x10 [ 275.255919][T13118] ? lockdep_hardirqs_on+0x7d/0x110 [ 275.255930][T13118] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 275.255951][T13118] sr_block_open+0xc8/0x180 [ 275.255962][T13118] ? __pfx_sr_block_open+0x10/0x10 [ 275.255974][T13118] blkdev_get_whole+0x99/0x290 [ 275.255987][T13118] bdev_open+0x2c7/0xe40 [ 275.256003][T13118] blkdev_open+0x34e/0x4f0 [ 275.256018][T13118] do_dentry_open+0x6ab/0x14d0 [ 275.256031][T13118] ? __pfx_blkdev_open+0x10/0x10 [ 275.256048][T13118] vfs_open+0x82/0x3f0 [ 275.256066][T13118] path_openat+0x19fa/0x2440 [ 275.256085][T13118] ? __pfx_path_openat+0x10/0x10 [ 275.256104][T13118] do_file_open+0x20e/0x430 [ 275.256120][T13118] ? __pfx_do_file_open+0x10/0x10 [ 275.256145][T13118] ? _raw_spin_unlock+0x28/0x50 [ 275.256162][T13118] ? alloc_fd+0x471/0x7a0 [ 275.256181][T13118] do_sys_openat2+0x10f/0x1e0 [ 275.256198][T13118] ? __pfx_do_sys_openat2+0x10/0x10 [ 275.256220][T13118] __x64_sys_openat+0x12d/0x210 [ 275.256237][T13118] ? __pfx___x64_sys_openat+0x10/0x10 [ 275.256260][T13118] do_syscall_64+0x123/0x790 [ 275.256273][T13118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.256285][T13118] RIP: 0033:0x7f91a859e159 [ 275.256296][T13118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.256307][T13118] RSP: 002b:00007f91a9475028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 275.256319][T13118] RAX: ffffffffffffffda RBX: 00007f91a8825fa0 RCX: 00007f91a859e159 [ 275.256326][T13118] RDX: 0000000000101000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 275.256333][T13118] RBP: 00007f91a863506b R08: 0000000000000000 R09: 0000000000000000 [ 275.256340][T13118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.256353][T13118] R13: 00007f91a8826038 R14: 00007f91a8825fa0 R15: 00007fff9b96d5b8 [ 275.256369][T13118] [ 275.948611][T13131] loop0: detected capacity change from 0 to 4096 [ 276.010173][T13131] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 276.010200][T13131] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 276.010254][T13131] loop0: [ 276.249892][T13138] netlink: 'syz.3.2688': attribute type 1 has an invalid length. [ 276.285055][T13138] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 276.564781][T13147] xt_hashlimit: size too large, truncated to 1048576 [ 276.810490][T13165] FAULT_INJECTION: forcing a failure. [ 276.810490][T13165] name failslab, interval 1, probability 0, space 0, times 0 [ 276.810519][T13165] CPU: 3 UID: 0 PID: 13165 Comm: syz.6.2696 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.810540][T13165] Tainted: [L]=SOFTLOCKUP [ 276.810545][T13165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 276.810553][T13165] Call Trace: [ 276.810559][T13165] [ 276.810565][T13165] dump_stack_lvl+0x100/0x190 [ 276.810591][T13165] should_fail_ex.cold+0x5/0xa [ 276.810611][T13165] should_failslab+0xc2/0x120 [ 276.810631][T13165] __kmalloc_cache_noprof+0x91/0x6d0 [ 276.810646][T13165] ? xprt_alloc+0x590/0x9d0 [ 276.810670][T13165] xprt_alloc+0x590/0x9d0 [ 276.810690][T13165] xs_setup_xprt+0xaf/0x3c0 [ 276.810711][T13165] xs_setup_tcp+0x95/0xad0 [ 276.810726][T13165] xprt_create_transport+0x16c/0x740 [ 276.810753][T13165] rpc_create+0x390/0x7f0 [ 276.810773][T13165] ? lock_acquire+0x1d1/0x380 [ 276.810790][T13165] ? __pfx_rpc_create+0x10/0x10 [ 276.810828][T13165] ? net_generic+0xea/0x2a0 [ 276.810870][T13165] ? net_generic+0xea/0x2a0 [ 276.810894][T13165] nfs_create_rpc_client+0x6a1/0x8f0 [ 276.810916][T13165] ? __pfx_nfs_create_rpc_client+0x10/0x10 [ 276.810946][T13165] ? lockdep_init_map_type+0x5c/0x250 [ 276.810963][T13165] ? lockdep_init_map_type+0x5c/0x250 [ 276.810984][T13165] nfs4_alloc_client+0x8f0/0xd70 [ 276.811008][T13165] ? __pfx_nfs4_alloc_client+0x10/0x10 [ 276.811029][T13165] ? __lock_acquire+0x5c0/0x1f40 [ 276.811044][T13165] ? stack_trace_save+0x8e/0xc0 [ 276.811061][T13165] ? __pfx_stack_trace_save+0x10/0x10 [ 276.811077][T13165] ? lock_acquire+0x1d1/0x380 [ 276.811092][T13165] ? net_generic+0x25/0x2a0 [ 276.811111][T13165] ? nfs_get_client+0x849/0x1230 [ 276.811128][T13165] ? nfs_get_client+0x849/0x1230 [ 276.811150][T13165] nfs_get_client+0x87b/0x1230 [ 276.811169][T13165] ? do_raw_spin_lock+0x128/0x260 [ 276.811192][T13165] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 276.811211][T13165] nfs4_set_client+0x3f6/0x640 [ 276.811231][T13165] nfs4_init_server.isra.0+0x5ad/0xf60 [ 276.811251][T13165] ? __pfx___debug_object_init+0x10/0x10 [ 276.811270][T13165] ? __pfx_nfs4_init_server.isra.0+0x10/0x10 [ 276.811300][T13165] ? __rpc_init_priority_wait_queue+0x38a/0x500 [ 276.811321][T13165] nfs4_create_server+0x185/0x2b0 [ 276.811344][T13165] nfs4_try_get_tree+0x93/0x140 [ 276.811364][T13165] nfs_get_tree+0xa61/0x1450 [ 276.811380][T13165] vfs_get_tree+0x92/0x320 [ 276.811394][T13165] path_mount+0x7d0/0x24c0 [ 276.811410][T13165] ? __pfx_path_mount+0x10/0x10 [ 276.811422][T13165] ? lockdep_hardirqs_on+0x7d/0x110 [ 276.811438][T13165] ? putname+0xb1/0x110 [ 276.811455][T13165] ? kmem_cache_free+0x127/0x6c0 [ 276.811474][T13165] ? __x64_sys_mount+0x293/0x310 [ 276.811492][T13165] __x64_sys_mount+0x293/0x310 [ 276.811505][T13165] ? __pfx___x64_sys_mount+0x10/0x10 [ 276.811523][T13165] do_syscall_64+0x123/0x790 [ 276.811539][T13165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.811555][T13165] RIP: 0033:0x7f871ad9e159 [ 276.811568][T13165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.811581][T13165] RSP: 002b:00007f871bc49028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 276.811596][T13165] RAX: ffffffffffffffda RBX: 00007f871b025fa0 RCX: 00007f871ad9e159 [ 276.811606][T13165] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 276.811614][T13165] RBP: 00007f871ae3506b R08: 0000200000000140 R09: 0000000000000000 [ 276.811624][T13165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.811633][T13165] R13: 00007f871b026038 R14: 00007f871b025fa0 R15: 00007ffd59911bd8 [ 276.811652][T13165] [ 277.009099][T13174] vcan0: entered allmulticast mode [ 277.213274][T13192] FAULT_INJECTION: forcing a failure. [ 277.213274][T13192] name failslab, interval 1, probability 0, space 0, times 0 [ 277.213309][T13192] CPU: 0 UID: 0 PID: 13192 Comm: syz.6.2707 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.213336][T13192] Tainted: [L]=SOFTLOCKUP [ 277.213344][T13192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 277.213355][T13192] Call Trace: [ 277.213362][T13192] [ 277.213370][T13192] dump_stack_lvl+0x100/0x190 [ 277.213402][T13192] should_fail_ex.cold+0x5/0xa [ 277.213430][T13192] should_failslab+0xc2/0x120 [ 277.213459][T13192] __kvmalloc_node_noprof+0x113/0x9b0 [ 277.213486][T13192] ? do_replace_table+0x1c5/0x760 [ 277.213511][T13192] do_replace_table+0x1c5/0x760 [ 277.213536][T13192] xt_register_table+0x384/0x9a0 [ 277.213561][T13192] ? __pfx_xt_register_table+0x10/0x10 [ 277.213579][T13192] ? xt_alloc_table_info+0x44/0xa0 [ 277.213609][T13192] ? __asan_memset+0x23/0x50 [ 277.213631][T13192] ip6t_register_table+0x137/0x2c0 [ 277.213660][T13192] ? __pfx_ip6t_register_table+0x10/0x10 [ 277.213684][T13192] ? __kmalloc_noprof+0x350/0x840 [ 277.213714][T13192] ? ip6t_alloc_initial_table+0x5ed/0x730 [ 277.213741][T13192] ip6table_mangle_table_init+0x40/0x60 [ 277.213769][T13192] xt_find_table_lock+0x2db/0x520 [ 277.213803][T13192] do_ip6t_get_ctl+0x586/0xc30 [ 277.213830][T13192] ? __mutex_unlock_slowpath+0x35d/0x930 [ 277.213853][T13192] ? __pfx_do_ip6t_get_ctl+0x10/0x10 [ 277.213878][T13192] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 277.213910][T13192] ? nf_sockopt_find.isra.0+0x222/0x290 [ 277.213943][T13192] nf_getsockopt+0x7c/0xe0 [ 277.213971][T13192] ipv6_getsockopt+0x207/0x2a0 [ 277.214000][T13192] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 277.214026][T13192] ? _copy_from_user+0x59/0xd0 [ 277.214052][T13192] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 277.214077][T13192] tcp_getsockopt+0xa1/0x110 [ 277.214101][T13192] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 277.214134][T13192] do_sock_getsockopt+0x50a/0x6e0 [ 277.214157][T13192] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 277.214180][T13192] ? __fget_files+0x34/0x3d0 [ 277.214209][T13192] ? find_held_lock+0x2b/0x80 [ 277.214253][T13192] ? __fget_files+0x21f/0x3d0 [ 277.214287][T13192] __sys_getsockopt+0x148/0x260 [ 277.214325][T13192] ? __x64_sys_getsockopt+0xbd/0x160 [ 277.214356][T13192] __x64_sys_getsockopt+0xbd/0x160 [ 277.214385][T13192] ? do_syscall_64+0xae/0x790 [ 277.214407][T13192] ? lockdep_hardirqs_on+0x7d/0x110 [ 277.214430][T13192] do_syscall_64+0x123/0x790 [ 277.214454][T13192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.214476][T13192] RIP: 0033:0x7f871ad9e159 [ 277.214494][T13192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.214515][T13192] RSP: 002b:00007f871bc49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 277.214535][T13192] RAX: ffffffffffffffda RBX: 00007f871b025fa0 RCX: 00007f871ad9e159 [ 277.214549][T13192] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000004 [ 277.214563][T13192] RBP: 00007f871ae3506b R08: 0000200000000180 R09: 0000000000000000 [ 277.214576][T13192] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 277.214589][T13192] R13: 00007f871b026038 R14: 00007f871b025fa0 R15: 00007ffd59911bd8 [ 277.214618][T13192] [ 277.271115][T13195] batman_adv: batadv0: Adding interface: dummy0 [ 277.271135][T13195] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.271166][T13195] batman_adv: batadv0: Interface activated: dummy0 [ 277.290682][T13195] batadv0: mtu less than device minimum [ 277.292501][T13195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 277.293492][T13195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 277.294456][T13195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 277.295445][T13195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 277.297634][T13195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 277.298896][T13195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 277.300075][T13195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 277.301227][T13195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 277.302324][T13195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 277.583288][T13212] loop4: detected capacity change from 0 to 7 [ 277.593595][T13212] Dev loop4: unable to read RDB block 7 [ 277.593619][T13212] loop4: unable to read partition table [ 277.593709][T13212] loop4: partition table beyond EOD, truncated [ 277.593718][T13212] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 278.272563][ T6860] IPVS: starting estimator thread 0... [ 278.380192][T13235] IPVS: using max 28 ests per chain, 67200 per kthread [ 278.395121][T13244] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2731'. [ 278.396811][T13244] FAULT_INJECTION: forcing a failure. [ 278.396811][T13244] name failslab, interval 1, probability 0, space 0, times 0 [ 278.396841][T13244] CPU: 0 UID: 0 PID: 13244 Comm: syz.0.2731 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.396865][T13244] Tainted: [L]=SOFTLOCKUP [ 278.396872][T13244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 278.396882][T13244] Call Trace: [ 278.396888][T13244] [ 278.396899][T13244] dump_stack_lvl+0x100/0x190 [ 278.396931][T13244] should_fail_ex.cold+0x5/0xa [ 278.396982][T13244] should_failslab+0xc2/0x120 [ 278.397009][T13244] kmem_cache_alloc_noprof+0x92/0x6a0 [ 278.397033][T13244] ? prepare_creds+0x2c/0x950 [ 278.397057][T13244] prepare_creds+0x2c/0x950 [ 278.397077][T13244] __sys_setresuid+0x458/0x1280 [ 278.397101][T13244] do_syscall_64+0x123/0x790 [ 278.397125][T13244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.397170][T13244] RIP: 0033:0x7f91a859e159 [ 278.397187][T13244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.397206][T13244] RSP: 002b:00007f91a9475028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 278.397227][T13244] RAX: ffffffffffffffda RBX: 00007f91a8825fa0 RCX: 00007f91a859e159 [ 278.397240][T13244] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 278.397252][T13244] RBP: 00007f91a863506b R08: 0000000000000000 R09: 0000000000000000 [ 278.397264][T13244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.397274][T13244] R13: 00007f91a8826038 R14: 00007f91a8825fa0 R15: 00007fff9b96d5b8 [ 278.397298][T13244] [ 278.790767][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 278.790790][ T43] audit: type=1400 audit(1790929250.995:893): avc: denied { write } for pid=13246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.864791][ T43] audit: type=1400 audit(1790929251.065:894): avc: denied { write } for pid=13249 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.116941][ T43] audit: type=1400 audit(1790929251.325:895): avc: denied { write } for pid=13251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.193360][ T43] audit: type=1400 audit(1790929251.395:896): avc: denied { write } for pid=13254 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.848251][ T43] audit: type=1400 audit(1790929252.055:897): avc: denied { write } for pid=13257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.909610][ T43] audit: type=1400 audit(1790929252.115:898): avc: denied { write } for pid=13260 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.721711][T13274] caller generic_access_phys+0x130/0x4d0 mapping multiple BARs [ 280.805358][ T43] audit: type=1400 audit(1790929253.005:899): avc: denied { write } for pid=13276 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.854423][T13266] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 280.854449][T13266] device-mapper: ioctl: error adding target to table [ 280.892917][ T43] audit: type=1400 audit(1790929253.095:900): avc: denied { write } for pid=13283 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.313199][T13285] kvm_intel: kvm [13284]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x4925 [ 281.327328][T13293] bond0: option prio: mode dependency failed, not supported in mode balance-rr(0) [ 281.327528][T13285] kvm [13284]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x7b20 [ 281.375873][T13239] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.553407][T13305] xt_hashlimit: size too large, truncated to 1048576 [ 281.565825][T13303] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 281.793800][T13318] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2744'. [ 282.286076][ T1039] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 282.441452][ T1039] usb 7-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 282.450529][ T1039] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 282.450564][ T1039] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 282.499596][ T1039] usb 7-1: string descriptor 0 read error: -22 [ 282.499700][ T1039] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.514331][ T1039] etas_es58x 7-1:1.0: Starting (null) (null) (Serial Number (null)) [ 282.514549][ T1039] etas_es58x 7-1:1.0: could not retrieve the product info string [ 282.732791][T13341] etas_es58x 7-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 282.733594][ C3] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 282.733898][ C3] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 282.734159][ C3] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 282.734406][ C3] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 282.734649][ C3] etas_es58x 7-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 282.734739][T13341] etas_es58x 7-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 282.741335][ T35] usb 7-1: USB disconnect, device number 27 [ 282.743248][ T35] etas_es58x 7-1:1.0: Disconnecting (null) (null) [ 283.331153][ T5822] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 283.476055][ T5822] usb 11-1: Using ep0 maxpacket: 16 [ 283.476966][ T5822] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 283.478254][ T5822] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 283.478283][ T5822] usb 11-1: config 0 interface 0 has no altsetting 0 [ 283.480122][ T5822] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.480142][ T5822] usb 11-1: Product: syz [ 283.480155][ T5822] usb 11-1: Manufacturer: syz [ 283.480168][ T5822] usb 11-1: SerialNumber: syz [ 283.485466][ T5822] usb 11-1: config 0 descriptor?? [ 283.634254][ T43] audit: type=1400 audit(1790929255.835:901): avc: denied { mounton } for pid=13360 comm="syz.3.2757" path="/bus" dev="ramfs" ino=60137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 283.634407][T13361] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 283.680410][T13363] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 283.709599][ C3] imon 11-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 283.715791][ T5822] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input35 [ 283.723119][ T5822] imon:send_packet: packet tx failed (-71) [ 283.737034][ T5822] imon 11-1:0.0: panel buttons/knobs setup failed [ 283.769921][ T43] audit: type=1326 audit(1790929255.975:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13362 comm="syz.3.2758" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde7cb9e159 code=0x0 [ 283.797881][ T5822] rc_core: IR keymap rc-imon-pad not found [ 283.797900][ T5822] Registered IR keymap rc-empty [ 283.798064][ T5822] imon 11-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 283.798082][ T5822] imon 11-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 283.798437][ T5822] imon:send_packet: packet tx failed (-71) [ 283.816372][ T5822] imon 11-1:0.0: remote input dev register failed [ 283.816498][ T5822] imon 11-1:0.0: imon_init_intf0: rc device setup failed [ 283.838795][ T5822] imon 11-1:0.0: unable to initialize intf0, err 0 [ 283.839168][ T5822] imon:imon_probe: failed to initialize context! [ 283.839180][ T5822] imon 11-1:0.0: unable to register, err -19 [ 283.844120][ T5822] usb 11-1: USB disconnect, device number 5 [ 284.216166][ T5822] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 284.366082][ T5822] usb 11-1: Using ep0 maxpacket: 16 [ 284.366860][ T5822] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 284.367796][ T5822] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.367823][ T5822] usb 11-1: config 0 interface 0 has no altsetting 0 [ 284.369611][ T5822] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.369625][ T5822] usb 11-1: Product: syz [ 284.369634][ T5822] usb 11-1: Manufacturer: syz [ 284.369643][ T5822] usb 11-1: SerialNumber: syz [ 284.371592][ T5822] usb 11-1: config 0 descriptor?? [ 284.582936][ T5822] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input37 [ 284.846154][ T5822] rc_core: IR keymap rc-imon-pad not found [ 284.846171][ T5822] Registered IR keymap rc-empty [ 284.846230][ T5822] imon 11-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 284.846246][ T5822] imon 11-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 284.989350][T13334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.997616][ T5822] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 285.028478][ T5822] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input38 [ 285.035877][ T5822] imon 11-1:0.0: iMON device (15c2:0045, intf0) on usb<11:6> initialized [ 285.059851][T13372] tipc: Started in network mode [ 285.059871][T13372] tipc: Node identity 4, cluster identity 4711 [ 285.059882][T13372] tipc: Node number set to 4 [ 285.061734][T13372] tipc: Enabled bearer , priority 0 [ 285.095180][T13372] tipc: Disabling bearer [ 285.177228][ T43] audit: type=1400 audit(1790929257.375:903): avc: denied { write } for pid=13373 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.197562][T13351] imon:lcd_write: invalid payload size: 2 (expected 8) [ 285.198316][ C3] imon 11-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 285.202424][ T3267] usb 11-1: USB disconnect, device number 6 [ 285.280174][ T43] audit: type=1400 audit(1790929257.485:904): avc: denied { write } for pid=13382 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.400437][ T43] audit: type=1400 audit(1790929257.605:905): avc: denied { write } for pid=13386 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.470943][ T43] audit: type=1400 audit(1790929257.675:906): avc: denied { write } for pid=13389 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.613194][ T43] audit: type=1400 audit(1790929257.815:907): avc: denied { write } for pid=13394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.669614][T13398] tipc: Enabled bearer , priority 10 [ 285.673241][T13397] tipc: Resetting bearer [ 285.691154][T13397] tipc: Disabling bearer [ 285.704634][ T43] audit: type=1400 audit(1790929257.905:908): avc: denied { write } for pid=13399 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.831166][ T43] audit: type=1400 audit(1790929258.035:909): avc: denied { write } for pid=13405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.893177][ T43] audit: type=1400 audit(1790929258.095:910): avc: denied { write } for pid=13412 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.023345][ T43] audit: type=1400 audit(1790929258.225:911): avc: denied { write } for pid=13417 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.063823][T13424] FAULT_FLAG_ALLOW_RETRY missing 801 [ 286.063850][T13424] CPU: 1 UID: 0 PID: 13424 Comm: syz.0.2769 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.063879][T13424] Tainted: [L]=SOFTLOCKUP [ 286.063887][T13424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 286.063897][T13424] Call Trace: [ 286.063904][T13424] [ 286.063913][T13424] dump_stack_lvl+0x100/0x190 [ 286.063963][T13424] handle_userfault.cold+0x38/0x65 [ 286.063991][T13424] ? do_raw_spin_unlock+0x145/0x1e0 [ 286.064018][T13424] ? _raw_spin_unlock+0x28/0x50 [ 286.064052][T13424] ? __free_frozen_pages+0x751/0x10f0 [ 286.064089][T13424] ? __pfx_handle_userfault+0x10/0x10 [ 286.064124][T13424] ? rcu_read_unlock+0x2d/0xb0 [ 286.064143][T13424] ? rcu_read_unlock+0x2d/0xb0 [ 286.064168][T13424] do_anonymous_page+0x186d/0x2050 [ 286.064204][T13424] ? __pfx_do_anonymous_page+0x10/0x10 [ 286.064230][T13424] ? rcu_read_unlock+0x2d/0xb0 [ 286.064246][T13424] ? rcu_read_unlock+0x2d/0xb0 [ 286.064263][T13424] ? __pte_offset_map+0x179/0x310 [ 286.064287][T13424] __handle_mm_fault+0x1ff3/0x2f60 [ 286.064320][T13424] ? __pfx___handle_mm_fault+0x10/0x10 [ 286.064347][T13424] ? pte_offset_map_lock+0x174/0x320 [ 286.064370][T13424] ? find_held_lock+0x2b/0x80 [ 286.064396][T13424] ? find_held_lock+0x2b/0x80 [ 286.064420][T13424] ? follow_page_pte+0x536/0x1050 [ 286.064458][T13424] handle_mm_fault+0x363/0xa20 [ 286.064490][T13424] __get_user_pages+0x8ae/0x2c30 [ 286.064522][T13424] ? __pfx___get_user_pages+0x10/0x10 [ 286.064555][T13424] populate_vma_page_range+0x267/0x3f0 [ 286.064581][T13424] ? __pfx_populate_vma_page_range+0x10/0x10 [ 286.064603][T13424] ? __pfx___vma_start_write+0x10/0x10 [ 286.064636][T13424] mprotect_fixup+0x925/0xe00 [ 286.064659][T13424] ? __pfx_mprotect_fixup+0x10/0x10 [ 286.064710][T13424] do_mprotect_pkey+0xa51/0xdd0 [ 286.064734][T13424] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 286.064790][T13424] __x64_sys_mprotect+0x78/0xc0 [ 286.064810][T13424] ? lockdep_hardirqs_on+0x7d/0x110 [ 286.064830][T13424] do_syscall_64+0x123/0x790 [ 286.064854][T13424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.064876][T13424] RIP: 0033:0x7f91a859e159 [ 286.064892][T13424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.064910][T13424] RSP: 002b:00007f91a9454028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 286.064928][T13424] RAX: ffffffffffffffda RBX: 00007f91a8826090 RCX: 00007f91a859e159 [ 286.064941][T13424] RDX: 000000000000000a RSI: 0000000000c00000 RDI: 0000200000400000 [ 286.064953][T13424] RBP: 00007f91a863506b R08: 0000000000000000 R09: 0000000000000000 [ 286.064963][T13424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.064976][T13424] R13: 00007f91a8826128 R14: 00007f91a8826090 R15: 00007fff9b96d5b8 [ 286.065001][T13424] [ 286.726724][T13448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2779'. [ 286.837225][T13455] FAULT_INJECTION: forcing a failure. [ 286.837225][T13455] name failslab, interval 1, probability 0, space 0, times 0 [ 286.837262][T13455] CPU: 1 UID: 0 PID: 13455 Comm: syz.2.2782 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.837292][T13455] Tainted: [L]=SOFTLOCKUP [ 286.837301][T13455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 286.837315][T13455] Call Trace: [ 286.837323][T13455] [ 286.837333][T13455] dump_stack_lvl+0x100/0x190 [ 286.837370][T13455] should_fail_ex.cold+0x5/0xa [ 286.837399][T13455] should_failslab+0xc2/0x120 [ 286.837432][T13455] __kmalloc_cache_noprof+0x91/0x6d0 [ 286.837456][T13455] ? rfkill_fop_open+0x1cc/0x480 [ 286.837493][T13455] rfkill_fop_open+0x1cc/0x480 [ 286.837525][T13455] ? __pfx_rfkill_fop_open+0x10/0x10 [ 286.837558][T13455] misc_open+0x26d/0x450 [ 286.837582][T13455] ? __pfx_misc_open+0x10/0x10 [ 286.837605][T13455] chrdev_open+0x234/0x6a0 [ 286.837634][T13455] ? __pfx_chrdev_open+0x10/0x10 [ 286.837664][T13455] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 286.837691][T13455] do_dentry_open+0x6ab/0x14d0 [ 286.837715][T13455] ? __pfx_chrdev_open+0x10/0x10 [ 286.837749][T13455] vfs_open+0x82/0x3f0 [ 286.837781][T13455] path_openat+0x19fa/0x2440 [ 286.837816][T13455] ? __pfx_path_openat+0x10/0x10 [ 286.837853][T13455] do_file_open+0x20e/0x430 [ 286.837884][T13455] ? __pfx_do_file_open+0x10/0x10 [ 286.837932][T13455] ? _raw_spin_unlock+0x28/0x50 [ 286.837962][T13455] ? alloc_fd+0x471/0x7a0 [ 286.837999][T13455] do_sys_openat2+0x10f/0x1e0 [ 286.838031][T13455] ? __pfx_do_sys_openat2+0x10/0x10 [ 286.838064][T13455] ? putname+0xb1/0x110 [ 286.838091][T13455] ? kmem_cache_free+0x127/0x6c0 [ 286.838119][T13455] __x64_sys_openat+0x12d/0x210 [ 286.838150][T13455] ? __pfx___x64_sys_openat+0x10/0x10 [ 286.838220][T13455] do_syscall_64+0x123/0x790 [ 286.838246][T13455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.838269][T13455] RIP: 0033:0x7f19a859e159 [ 286.838287][T13455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.838308][T13455] RSP: 002b:00007f19a94fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 286.838328][T13455] RAX: ffffffffffffffda RBX: 00007f19a8825fa0 RCX: 00007f19a859e159 [ 286.838342][T13455] RDX: 0000000000020800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 286.838355][T13455] RBP: 00007f19a863506b R08: 0000000000000000 R09: 0000000000000000 [ 286.838368][T13455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.838380][T13455] R13: 00007f19a8826038 R14: 00007f19a8825fa0 R15: 00007ffe97cf7be8 [ 286.838409][T13455] [ 286.952481][T13462] FAULT_INJECTION: forcing a failure. [ 286.952481][T13462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.952503][T13462] CPU: 3 UID: 0 PID: 13462 Comm: syz.2.2784 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.952520][T13462] Tainted: [L]=SOFTLOCKUP [ 286.952524][T13462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 286.952531][T13462] Call Trace: [ 286.952536][T13462] [ 286.952541][T13462] dump_stack_lvl+0x100/0x190 [ 286.952562][T13462] should_fail_ex.cold+0x5/0xa [ 286.952579][T13462] _copy_to_user+0x32/0xd0 [ 286.952617][T13462] tomoyo_flush+0x161/0x520 [ 286.952637][T13462] tomoyo_set_group+0x181/0x3d0 [ 286.952656][T13462] tomoyo_print_entry+0x27b9/0x4880 [ 286.952680][T13462] ? lock_acquire+0x1d1/0x380 [ 286.952696][T13462] ? __pfx_tomoyo_print_entry+0x10/0x10 [ 286.952715][T13462] ? find_held_lock+0x2b/0x80 [ 286.952734][T13462] ? __might_fault+0xc5/0x140 [ 286.952745][T13462] ? __might_fault+0xc5/0x140 [ 286.952765][T13462] tomoyo_read_domain2+0xa3/0x380 [ 286.952797][T13462] tomoyo_read_domain+0x30e/0xe10 [ 286.952832][T13462] tomoyo_read_control+0x29c/0x540 [ 286.952858][T13462] ? __pfx_tomoyo_read+0x10/0x10 [ 286.952884][T13462] vfs_read+0x1e4/0xb40 [ 286.952903][T13462] ? lock_acquire+0x1d1/0x380 [ 286.952917][T13462] ? __fget_files+0x34/0x3d0 [ 286.952934][T13462] ? __pfx_vfs_read+0x10/0x10 [ 286.952947][T13462] ? find_held_lock+0x2b/0x80 [ 286.952965][T13462] ? __fget_files+0x215/0x3d0 [ 286.952985][T13462] ? __fget_files+0x21f/0x3d0 [ 286.953006][T13462] ksys_read+0x12a/0x250 [ 286.953020][T13462] ? __pfx_ksys_read+0x10/0x10 [ 286.953039][T13462] do_syscall_64+0x123/0x790 [ 286.953054][T13462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.953067][T13462] RIP: 0033:0x7f19a859e159 [ 286.953079][T13462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.953090][T13462] RSP: 002b:00007f19a94fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 286.953127][T13462] RAX: ffffffffffffffda RBX: 00007f19a8825fa0 RCX: 00007f19a859e159 [ 286.953137][T13462] RDX: 0000000000002020 RSI: 0000200000000340 RDI: 0000000000000003 [ 286.953146][T13462] RBP: 00007f19a863506b R08: 0000000000000000 R09: 0000000000000000 [ 286.953157][T13462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.953165][T13462] R13: 00007f19a8826038 R14: 00007f19a8825fa0 R15: 00007ffe97cf7be8 [ 286.953183][T13462] [ 286.996584][T12904] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 287.156736][T12904] usb 11-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 287.157679][T12904] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.157727][T12904] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 287.157747][T12904] usb 11-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.159100][T12904] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 287.159120][T12904] usb 11-1: Product: syz [ 287.159132][T12904] usb 11-1: Manufacturer: syz [ 287.165538][T13452] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 287.168633][T12904] garmin_gps 11-1:1.0: Garmin GPS usb/tty converter detected [ 287.175002][T12904] usb 11-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 287.403662][ T3267] usb 11-1: USB disconnect, device number 7 [ 287.415414][ T3267] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 287.419715][ T3267] garmin_gps 11-1:1.0: device disconnected [ 287.962660][T13481] net_ratelimit: 12 callbacks suppressed [ 287.962681][T13481] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 287.970028][T13481] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 287.999242][T13483] FAULT_INJECTION: forcing a failure. [ 287.999242][T13483] name fail_futex, interval 1, probability 0, space 0, times 0 [ 287.999288][T13483] CPU: 3 UID: 0 PID: 13483 Comm: syz.6.2789 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.999318][T13483] Tainted: [L]=SOFTLOCKUP [ 287.999327][T13483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 287.999341][T13483] Call Trace: [ 287.999350][T13483] [ 287.999360][T13483] dump_stack_lvl+0x100/0x190 [ 287.999397][T13483] should_fail_ex.cold+0x5/0xa [ 287.999427][T13483] get_futex_key+0x1d0/0x14f0 [ 287.999459][T13483] ? __pfx_get_futex_key+0x10/0x10 [ 287.999492][T13483] ? rcu_is_watching+0x13/0xc0 [ 287.999524][T13483] ? trace_kmem_cache_alloc+0xdd/0x100 [ 287.999559][T13483] futex_wake+0xf4/0x5e0 [ 287.999585][T13483] ? __pfx_futex_wake+0x10/0x10 [ 287.999607][T13483] ? errseq_sample+0x51/0x70 [ 287.999643][T13483] do_futex+0x2b2/0x440 [ 287.999676][T13483] ? __pfx_do_futex+0x10/0x10 [ 287.999710][T13483] ? fd_install+0x252/0x580 [ 287.999742][T13483] __x64_sys_futex+0x34f/0x4d0 [ 287.999775][T13483] ? __pfx___x64_sys_futex+0x10/0x10 [ 287.999818][T13483] do_syscall_64+0x123/0x790 [ 287.999844][T13483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.999867][T13483] RIP: 0033:0x7f871ad9e159 [ 287.999884][T13483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.999905][T13483] RSP: 002b:00007f871bc490e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 287.999926][T13483] RAX: ffffffffffffffda RBX: 00007f871b025fa8 RCX: 00007f871ad9e159 [ 287.999940][T13483] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f871b025fac [ 287.999953][T13483] RBP: 00007f871b025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 287.999968][T13483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.999981][T13483] R13: 00007f871b026038 R14: 00007ffd59911af0 R15: 00007ffd59911bd8 [ 288.000012][T13483] [ 288.541000][T13505] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=13505 comm=syz.6.2798 [ 289.181211][T13518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2804'. [ 289.973908][T13545] syzkaller1: entered promiscuous mode [ 289.973931][T13545] syzkaller1: entered allmulticast mode [ 290.135551][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2812'. [ 290.163251][T13557] FAULT_INJECTION: forcing a failure. [ 290.163251][T13557] name failslab, interval 1, probability 0, space 0, times 0 [ 290.163277][T13557] CPU: 3 UID: 0 PID: 13557 Comm: syz.6.2813 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.163296][T13557] Tainted: [L]=SOFTLOCKUP [ 290.163301][T13557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 290.163309][T13557] Call Trace: [ 290.163315][T13557] [ 290.163321][T13557] dump_stack_lvl+0x100/0x190 [ 290.163373][T13557] should_fail_ex.cold+0x5/0xa [ 290.163397][T13557] should_failslab+0xc2/0x120 [ 290.163417][T13557] kmem_cache_alloc_noprof+0x92/0x6a0 [ 290.163435][T13557] ? __kernfs_new_node+0xd2/0xa10 [ 290.163451][T13557] __kernfs_new_node+0xd2/0xa10 [ 290.163465][T13557] ? __pfx___kernfs_new_node+0x10/0x10 [ 290.163479][T13557] ? lock_acquire+0x1d1/0x380 [ 290.163493][T13557] ? kernfs_root+0x23/0x2a0 [ 290.163512][T13557] ? find_held_lock+0x2b/0x80 [ 290.163530][T13557] ? kernfs_root+0xee/0x2a0 [ 290.163548][T13557] ? kernfs_root+0xee/0x2a0 [ 290.163570][T13557] kernfs_new_node+0x117/0x150 [ 290.163587][T13557] kernfs_create_link+0xcc/0x240 [ 290.163604][T13557] sysfs_do_create_link_sd+0x90/0x140 [ 290.163624][T13557] sysfs_create_link+0x61/0xc0 [ 290.163644][T13557] software_node_notify+0x182/0x270 [ 290.163662][T13557] device_add+0x2bc/0x1970 [ 290.163682][T13557] ? __pfx_device_add+0x10/0x10 [ 290.163701][T13557] ? kobject_get+0xbb/0x150 [ 290.163717][T13557] ? __pfx_software_node_get+0x10/0x10 [ 290.163730][T13557] ? software_node_get+0x68/0x90 [ 290.163744][T13557] ? fwnode_handle_get+0x97/0xd0 [ 290.163763][T13557] iommu_mock_device_add+0x7c/0xb0 [ 290.163785][T13557] iommufd_test+0x3038/0x6600 [ 290.163802][T13557] ? __lock_acquire+0x5c0/0x1f40 [ 290.163825][T13557] ? __lock_acquire+0x5c0/0x1f40 [ 290.163840][T13557] ? __pfx_iommufd_test+0x10/0x10 [ 290.163855][T13557] ? tomoyo_path_number_perm+0x188/0x580 [ 290.163873][T13557] ? lock_acquire+0x1d1/0x380 [ 290.163887][T13557] ? __might_fault+0xc5/0x140 [ 290.163900][T13557] ? find_held_lock+0x2b/0x80 [ 290.163918][T13557] ? __might_fault+0xc5/0x140 [ 290.163936][T13557] iommufd_fops_ioctl+0x358/0x520 [ 290.163955][T13557] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 290.163971][T13557] ? __fget_files+0x34/0x3d0 [ 290.163992][T13557] ? selinux_file_ioctl+0x13b/0x290 [ 290.164006][T13557] ? selinux_file_ioctl+0xb6/0x290 [ 290.164021][T13557] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 290.164038][T13557] __x64_sys_ioctl+0x18e/0x210 [ 290.164052][T13557] do_syscall_64+0x123/0x790 [ 290.164066][T13557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.164078][T13557] RIP: 0033:0x7f871ad9e159 [ 290.164089][T13557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.164100][T13557] RSP: 002b:00007f871bc49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.164112][T13557] RAX: ffffffffffffffda RBX: 00007f871b025fa0 RCX: 00007f871ad9e159 [ 290.164120][T13557] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 290.164127][T13557] RBP: 00007f871ae3506b R08: 0000000000000000 R09: 0000000000000000 [ 290.164134][T13557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.164141][T13557] R13: 00007f871b026038 R14: 00007f871b025fa0 R15: 00007ffd59911bd8 [ 290.164155][T13557] [ 290.164796][T13557] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 290.251501][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 290.251522][ T43] audit: type=1400 audit(1790929262.455:934): avc: denied { ioctl } for pid=13560 comm="syz.3.2815" path="socket:[61676]" dev="sockfs" ino=61676 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 290.262865][T13561] FAULT_INJECTION: forcing a failure. [ 290.262865][T13561] name failslab, interval 1, probability 0, space 0, times 0 [ 290.262899][T13561] CPU: 3 UID: 0 PID: 13561 Comm: syz.2.2816 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.262926][T13561] Tainted: [L]=SOFTLOCKUP [ 290.262934][T13561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 290.262945][T13561] Call Trace: [ 290.262953][T13561] [ 290.262962][T13561] dump_stack_lvl+0x100/0x190 [ 290.262992][T13561] should_fail_ex.cold+0x5/0xa [ 290.263019][T13561] should_failslab+0xc2/0x120 [ 290.263046][T13561] kmem_cache_alloc_noprof+0x92/0x6a0 [ 290.263069][T13561] ? __anon_vma_prepare+0x35a/0x690 [ 290.263101][T13561] __anon_vma_prepare+0x35a/0x690 [ 290.263127][T13561] ? __pfx___pte_alloc+0x10/0x10 [ 290.263152][T13561] __vmf_anon_prepare+0x11f/0x250 [ 290.263177][T13561] do_anonymous_page+0x47d/0x2050 [ 290.263241][T13561] ? __pfx_do_anonymous_page+0x10/0x10 [ 290.263271][T13561] ? pgd_none+0x9f/0xe0 [ 290.263298][T13561] ? __pfx_pgd_none+0x10/0x10 [ 290.263327][T13561] ? lock_acquire+0x1d1/0x380 [ 290.263352][T13561] __handle_mm_fault+0x1ff3/0x2f60 [ 290.263382][T13561] ? lock_vma_under_rcu+0x11d/0x590 [ 290.263407][T13561] ? __pfx___handle_mm_fault+0x10/0x10 [ 290.263439][T13561] ? lock_vma_under_rcu+0x17c/0x590 [ 290.263479][T13561] handle_mm_fault+0x363/0xa20 [ 290.263510][T13561] do_user_addr_fault+0x59c/0x12f0 [ 290.263541][T13561] exc_page_fault+0x6f/0xd0 [ 290.263560][T13561] asm_exc_page_fault+0x26/0x30 [ 290.263578][T13561] RIP: 0033:0x7f19a8560082 [ 290.263594][T13561] Code: 8d 15 13 1a 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 2d 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 290.263612][T13561] RSP: 002b:00007f19a94f8d20 EFLAGS: 00010286 [ 290.263629][T13561] RAX: ffffffffffffffff RBX: 00007f19a0000000 RCX: 00007f19a859df57 [ 290.263643][T13561] RDX: 00007f19a8651a71 RSI: 0000000000021000 RDI: 00007f19a0000000 [ 290.263656][T13561] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 290.263667][T13561] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 290.263679][T13561] R13: 0000000000001000 R14: 00007f19a4000000 R15: 0000000001a00000 [ 290.263705][T13561] [ 290.266395][T13561] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 290.268368][ T43] audit: type=1400 audit(1790929262.465:935): avc: denied { write } for pid=13558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.393051][ T43] audit: type=1400 audit(1790929262.595:936): avc: denied { write } for pid=13572 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.806172][ T3267] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 290.897189][T13593] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.2827'. [ 290.897212][T13593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2827'. [ 290.965985][ T3267] usb 11-1: Using ep0 maxpacket: 8 [ 290.966624][ T3267] usb 11-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 290.967461][ T3267] usb 11-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 290.967478][ T3267] usb 11-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.967492][ T3267] usb 11-1: config 0 interface 0 has no altsetting 0 [ 290.967507][ T3267] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.968869][ T3267] usb 11-1: config 0 descriptor?? [ 291.066062][ T50] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 291.236795][ T50] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 291.237750][ T50] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 291.237777][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 291.237801][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 291.237822][ T50] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 291.237856][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.240507][ T50] usb 7-1: config 0 descriptor?? [ 291.385014][ T3267] usbhid 11-1:0.0: can't add hid device: -71 [ 291.385124][ T3267] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 291.387169][ T3267] usb 11-1: USB disconnect, device number 8 [ 291.665049][ T50] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 292.238699][T13616] netlink: 'syz.6.2836': attribute type 1 has an invalid length. [ 292.256508][T13616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.328794][T13616] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 292.396101][ T3267] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 292.468858][ T7544] usb 7-1: USB disconnect, device number 28 [ 292.547552][ T3267] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 292.548556][ T3267] usb 5-1: config index 0 descriptor too short (expected 55488, got 36) [ 292.548576][ T3267] usb 5-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 292.548593][ T3267] usb 5-1: config 0 has no interfaces? [ 292.548615][ T3267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.551990][ T3267] usb 5-1: config 0 descriptor?? [ 292.754581][ T7544] usb 5-1: USB disconnect, device number 30 [ 292.846028][ T6879] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 292.996056][ T6879] usb 11-1: Using ep0 maxpacket: 8 [ 292.997098][ T6879] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 292.999015][ T6879] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 292.999037][ T6879] usb 11-1: config 0 has no interface number 0 [ 292.999067][ T6879] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 292.999085][ T6879] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 292.999102][ T6879] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 292.999123][ T6879] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 292.999156][ T6879] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.003774][ T6879] usb 11-1: config 0 descriptor?? [ 293.024287][ T6879] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 293.304518][T12904] usb 11-1: USB disconnect, device number 9 [ 293.304646][ C1] ldusb 11-1:0.55: usb_submit_urb failed (-19) [ 293.315152][T12904] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 293.315182][T13624] ldusb: No device or device unplugged -19 [ 293.756046][ T43] audit: type=1400 audit(1790929265.955:937): avc: denied { mounton } for pid=13646 comm="syz.3.2848" path="/bus" dev="hugetlbfs" ino=64589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 293.782199][T13647] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 293.782224][T13647] overlayfs: failed to set xattr on upper [ 293.782233][T13647] overlayfs: ...falling back to redirect_dir=nofollow. [ 293.782242][T13647] overlayfs: ...falling back to index=off. [ 293.782250][T13647] overlayfs: ...falling back to uuid=null. [ 293.782257][T13647] overlayfs: ...falling back to xino=off. [ 293.782274][T13647] overlayfs: maximum fs stacking depth exceeded [ 294.182912][T13673] xt_hashlimit: size too large, truncated to 1048576 [ 294.239771][T13677] all: renamed from bridge_slave_0 [ 294.394887][T13686] FAULT_INJECTION: forcing a failure. [ 294.394887][T13686] name failslab, interval 1, probability 0, space 0, times 0 [ 294.394911][T13686] CPU: 0 UID: 0 PID: 13686 Comm: syz.0.2862 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.394927][T13686] Tainted: [L]=SOFTLOCKUP [ 294.394931][T13686] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 294.394938][T13686] Call Trace: [ 294.394942][T13686] [ 294.394948][T13686] dump_stack_lvl+0x100/0x190 [ 294.394970][T13686] should_fail_ex.cold+0x5/0xa [ 294.394987][T13686] should_failslab+0xc2/0x120 [ 294.395004][T13686] __kmalloc_cache_noprof+0x91/0x6d0 [ 294.395017][T13686] ? create_filter_start.constprop.0+0x1c4/0x310 [ 294.395035][T13686] create_filter_start.constprop.0+0x1c4/0x310 [ 294.395052][T13686] apply_subsystem_event_filter+0x188/0x17a0 [ 294.395066][T13686] ? __might_fault+0xc5/0x140 [ 294.395079][T13686] ? __might_fault+0xc5/0x140 [ 294.395090][T13686] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 294.395108][T13686] ? _copy_from_user+0x59/0xd0 [ 294.395124][T13686] subsystem_filter_write+0x95/0x120 [ 294.395139][T13686] vfs_write+0x2aa/0x1050 [ 294.395153][T13686] ? __pfx_subsystem_filter_write+0x10/0x10 [ 294.395167][T13686] ? lock_acquire+0x1d1/0x380 [ 294.395179][T13686] ? __fget_files+0x34/0x3d0 [ 294.395195][T13686] ? __pfx_vfs_write+0x10/0x10 [ 294.395206][T13686] ? find_held_lock+0x2b/0x80 [ 294.395223][T13686] ? __fget_files+0x215/0x3d0 [ 294.395242][T13686] ? __fget_files+0x21f/0x3d0 [ 294.395262][T13686] ksys_write+0x12a/0x250 [ 294.395275][T13686] ? __pfx_ksys_write+0x10/0x10 [ 294.395292][T13686] do_syscall_64+0x123/0x790 [ 294.395307][T13686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.395322][T13686] RIP: 0033:0x7f91a859e159 [ 294.395332][T13686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.395343][T13686] RSP: 002b:00007f91a9475028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 294.395354][T13686] RAX: ffffffffffffffda RBX: 00007f91a8825fa0 RCX: 00007f91a859e159 [ 294.395362][T13686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 294.395368][T13686] RBP: 00007f91a863506b R08: 0000000000000000 R09: 0000000000000000 [ 294.395375][T13686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.395382][T13686] R13: 00007f91a8826038 R14: 00007f91a8825fa0 R15: 00007fff9b96d5b8 [ 294.395396][T13686] [ 294.508072][ T12] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 294.538039][T13687] ================================================================== [ 294.538055][T13687] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x4f3/0x5d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 294.538100][T13687] Read of size 4 at addr ffff88802d74d83c by task syz.0.2863/13687 [ 294.538115][T13687] [ 294.538126][T13687] CPU: 3 UID: 0 PID: 13687 Comm: syz.0.2863 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.538152][T13687] Tainted: [L]=SOFTLOCKUP [ 294.538159][T13687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 294.538171][T13687] Call Trace: [ 294.538177][T13687] [ 294.538185][T13687] dump_stack_lvl+0x100/0x190 [ 294.538213][T13687] print_report+0x13d/0x4b0 [ 294.538239][T13687] ? __virt_addr_valid+0x239/0x430 [ 294.538264][T13687] ? dvb_frontend_release+0x4f3/0x5d0 [ 294.538291][T13687] kasan_report+0xdf/0x1c0 [ 294.538317][T13687] ? dvb_frontend_release+0x4f3/0x5d0 [ 294.538348][T13687] dvb_frontend_release+0x4f3/0x5d0 [ 294.538375][T13687] ? __pfx_dvb_frontend_release+0x10/0x10 [ 294.538404][T13687] __fput+0x3ff/0xb50 [ 294.538431][T13687] task_work_run+0x150/0x240 [ 294.538459][T13687] ? __pfx_task_work_run+0x10/0x10 [ 294.538485][T13687] ? __pfx_task_work_add+0x10/0x10 [ 294.538515][T13687] get_signal+0x1bd/0x21e0 [ 294.538535][T13687] ? __pfx___fput_deferred+0x10/0x10 [ 294.538563][T13687] ? __pfx_get_signal+0x10/0x10 [ 294.538583][T13687] ? do_raw_spin_lock+0x128/0x260 [ 294.538607][T13687] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 294.538633][T13687] arch_do_signal_or_restart+0x91/0x7e0 [ 294.538659][T13687] ? find_held_lock+0x2b/0x80 [ 294.538686][T13687] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 294.538712][T13687] ? __x64_sys_close_range+0x3ce/0x5d0 [ 294.538741][T13687] ? __x64_sys_close_range+0x30f/0x5d0 [ 294.538769][T13687] exit_to_user_mode_loop+0x139/0x700 [ 294.538792][T13687] ? rcu_is_watching+0x13/0xc0 [ 294.538818][T13687] do_syscall_64+0x661/0x790 [ 294.538839][T13687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.538857][T13687] RIP: 0033:0x7f91a859e159 [ 294.538871][T13687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.538888][T13687] RSP: 002b:00007fff9b96d718 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 294.538908][T13687] RAX: 0000000000000000 RBX: 00007fff9b96d800 RCX: 00007f91a859e159 [ 294.538920][T13687] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 294.538931][T13687] RBP: 0000000000047d9b R08: 0000000000000001 R09: 0000000000000000 [ 294.538943][T13687] R10: 0000001b31e20000 R11: 0000000000000246 R12: 00007fff9b96d840 [ 294.538955][T13687] R13: 00007f91a8825fac R14: 0000000000047df7 R15: 00007f91a8825fa0 [ 294.538973][T13687] [ 294.538980][T13687] [ 294.538984][T13687] Allocated by task 1: [ 294.538992][T13687] kasan_save_stack+0x30/0x50 [ 294.539013][T13687] kasan_save_track+0x14/0x30 [ 294.539033][T13687] __kasan_kmalloc+0xaa/0xb0 [ 294.539052][T13687] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 294.539068][T13687] dvb_register_device+0x1d6/0x1e20 [ 294.539084][T13687] dvb_register_frontend+0x552/0x820 [ 294.539110][T13687] vidtv_bridge_probe+0x44b/0xa30 [ 294.539130][T13687] platform_probe+0x106/0x1d0 [ 294.539147][T13687] really_probe+0x241/0xa60 [ 294.539168][T13687] __driver_probe_device+0x210/0x460 [ 294.539189][T13687] driver_probe_device+0x4a/0x140 [ 294.539209][T13687] __driver_attach+0x21f/0x5b0 [ 294.539229][T13687] bus_for_each_dev+0x13e/0x1d0 [ 294.539249][T13687] bus_add_driver+0x305/0x5b0 [ 294.539267][T13687] driver_register+0x1e2/0x360 [ 294.539289][T13687] vidtv_bridge_init+0x52/0x80 [ 294.539314][T13687] do_one_initcall+0x11c/0x6f0 [ 294.539347][T13687] kernel_init_freeable+0x6ea/0x7b0 [ 294.539367][T13687] kernel_init+0x21/0x1e0 [ 294.539387][T13687] ret_from_fork+0x730/0xd60 [ 294.539405][T13687] ret_from_fork_asm+0x1a/0x30 [ 294.539423][T13687] [ 294.539427][T13687] Freed by task 13687: [ 294.539435][T13687] kasan_save_stack+0x30/0x50 [ 294.539455][T13687] kasan_save_track+0x14/0x30 [ 294.539474][T13687] kasan_save_free_info+0x3b/0x70 [ 294.539490][T13687] __kasan_slab_free+0x5f/0x80 [ 294.539511][T13687] kfree+0x22b/0x6d0 [ 294.539524][T13687] dvb_device_put.part.0+0x57/0x90 [ 294.539540][T13687] dvb_generic_release+0xe2/0x160 [ 294.539555][T13687] dvb_frontend_release+0x13d/0x5d0 [ 294.539580][T13687] __fput+0x3ff/0xb50 [ 294.539602][T13687] task_work_run+0x150/0x240 [ 294.539627][T13687] get_signal+0x1bd/0x21e0 [ 294.539644][T13687] arch_do_signal_or_restart+0x91/0x7e0 [ 294.539668][T13687] exit_to_user_mode_loop+0x139/0x700 [ 294.539689][T13687] do_syscall_64+0x661/0x790 [ 294.539705][T13687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.539722][T13687] [ 294.539726][T13687] The buggy address belongs to the object at ffff88802d74d800 [ 294.539726][T13687] which belongs to the cache kmalloc-256 of size 256 [ 294.539740][T13687] The buggy address is located 60 bytes inside of [ 294.539740][T13687] freed 256-byte region [ffff88802d74d800, ffff88802d74d900) [ 294.539756][T13687] [ 294.539761][T13687] The buggy address belongs to the physical page: [ 294.539769][T13687] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d74c [ 294.539785][T13687] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 294.539799][T13687] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 294.539814][T13687] page_type: f5(slab) [ 294.539830][T13687] raw: 00fff00000000040 ffff88801c042b40 dead000000000122 0000000000000000 [ 294.539846][T13687] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 294.539862][T13687] head: 00fff00000000040 ffff88801c042b40 dead000000000122 0000000000000000 [ 294.539878][T13687] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 294.539894][T13687] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 294.539910][T13687] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 294.539920][T13687] page dumped because: kasan: bad access detected [ 294.539928][T13687] page_owner tracks the page as allocated [ 294.539935][T13687] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 11167125641 [ 294.539961][T13687] post_alloc_hook+0xfd/0x120 [ 294.539977][T13687] get_page_from_freelist+0x110d/0x35d0 [ 294.539994][T13687] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 294.540012][T13687] new_slab+0xa9/0x6e0 [ 294.540026][T13687] refill_objects+0xe3/0x410 [ 294.540042][T13687] __pcs_replace_empty_main+0x35e/0x650 [ 294.540058][T13687] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 294.540074][T13687] bus_add_driver+0x92/0x5b0 [ 294.540092][T13687] driver_register+0x1e2/0x360 [ 294.540114][T13687] usb_register_driver+0x21c/0x3e0 [ 294.540141][T13687] do_one_initcall+0x11c/0x6f0 [ 294.540158][T13687] kernel_init_freeable+0x6ea/0x7b0 [ 294.540176][T13687] kernel_init+0x21/0x1e0 [ 294.540196][T13687] ret_from_fork+0x730/0xd60 [ 294.540214][T13687] ret_from_fork_asm+0x1a/0x30 [ 294.540231][T13687] page_owner free stack trace missing [ 294.540237][T13687] [ 294.540242][T13687] Memory state around the buggy address: [ 294.540255][T13687] ffff88802d74d700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 294.540267][T13687] ffff88802d74d780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 294.540279][T13687] >ffff88802d74d800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.540289][T13687] ^ [ 294.540298][T13687] ffff88802d74d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.540310][T13687] ffff88802d74d900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 294.540319][T13687] ================================================================== [ 294.540364][T13687] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 294.863681][T13687] CPU: 3 UID: 0 PID: 13687 Comm: syz.0.2863 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.869747][T13687] Tainted: [L]=SOFTLOCKUP [ 294.871645][T13687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 294.875833][T13687] Call Trace: [ 294.877269][T13687] [ 294.878527][T13687] dump_stack_lvl+0x100/0x190 [ 294.880526][T13687] vpanic+0x553/0x970 [ 294.882251][T13687] ? __pfx_vpanic+0x10/0x10 [ 294.884163][T13687] ? rcu_is_watching+0x13/0xc0 [ 294.886188][T13687] ? irqentry_exit+0x24d/0xa10 [ 294.888277][T13687] ? dvb_frontend_release+0x4f3/0x5d0 [ 294.890628][T13687] panic+0xd1/0xe0 [ 294.892242][T13687] ? __pfx_panic+0x10/0x10 [ 294.894197][T13687] ? dvb_frontend_release+0x4f3/0x5d0 [ 294.896757][T13687] ? preempt_schedule_common+0x3c/0xb0 [ 294.899430][T13687] check_panic_on_warn.cold+0x19/0x34 [ 294.901989][T13687] end_report.part.0+0x3a/0x90 [ 294.903983][T13687] kasan_report.cold+0xe/0x18 [ 294.905967][T13687] ? dvb_frontend_release+0x4f3/0x5d0 [ 294.908203][T13687] dvb_frontend_release+0x4f3/0x5d0 [ 294.910402][T13687] ? __pfx_dvb_frontend_release+0x10/0x10 [ 294.912754][T13687] __fput+0x3ff/0xb50 [ 294.914599][T13687] task_work_run+0x150/0x240 [ 294.916642][T13687] ? __pfx_task_work_run+0x10/0x10 [ 294.919164][T13687] ? __pfx_task_work_add+0x10/0x10 [ 294.921732][T13687] get_signal+0x1bd/0x21e0 [ 294.923782][T13687] ? __pfx___fput_deferred+0x10/0x10 [ 294.926243][T13687] ? __pfx_get_signal+0x10/0x10 [ 294.928389][T13687] ? do_raw_spin_lock+0x128/0x260 [ 294.930688][T13687] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 294.932969][T13687] arch_do_signal_or_restart+0x91/0x7e0 [ 294.935525][T13687] ? find_held_lock+0x2b/0x80 [ 294.937742][T13687] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 294.940574][T13687] ? __x64_sys_close_range+0x3ce/0x5d0 [ 294.942984][T13687] ? __x64_sys_close_range+0x30f/0x5d0 [ 294.945304][T13687] exit_to_user_mode_loop+0x139/0x700 [ 294.947525][T13687] ? rcu_is_watching+0x13/0xc0 [ 294.949556][T13687] do_syscall_64+0x661/0x790 [ 294.951615][T13687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.954275][T13687] RIP: 0033:0x7f91a859e159 [ 294.956272][T13687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.964115][T13687] RSP: 002b:00007fff9b96d718 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 294.968118][T13687] RAX: 0000000000000000 RBX: 00007fff9b96d800 RCX: 00007f91a859e159 [ 294.972117][T13687] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 294.975637][T13687] RBP: 0000000000047d9b R08: 0000000000000001 R09: 0000000000000000 [ 294.978943][T13687] R10: 0000001b31e20000 R11: 0000000000000246 R12: 00007fff9b96d840 [ 294.982257][T13687] R13: 00007f91a8825fac R14: 0000000000047df7 R15: 00007f91a8825fa0 [ 294.985542][T13687] [ 294.987608][T13687] Kernel Offset: disabled [ 294.990021][T13687] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:21:06 Registers: info registers vcpu 0 CPU#0 RAX=000000000027ebc7 RBX=ffffffff8ea91580 RCX=ffffffff8bd28215 RDX=0000000000000001 RSI=ffffffff8e38e858 RDI=ffffffff8c623980 RBP=fffffbfff1d522b0 RSP=ffffffff8ea07cf0 R8 =0000000000000001 R9 =ffffed100d4867bd R10=ffff88806a433deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bd2674f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b4f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2fe0fff8 CR3=00000000460b1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000008a90 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f736e6f69746365 6e6e6f632f657375 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9b96daa6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff9b96daa6 00007fff9b96daac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91a863564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91a863568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91a86357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91a8635680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffffff9bb97158 RCX=ffffffff81e7d123 RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff9bb97158 RBP=ffffffff9bb97160 RSP=ffffc900039b7148 R8 =0000000000000000 R9 =fffffbfff3772e2b R10=ffffffff9bb9715b R11=0000000000000000 R12=ffffffff9bb97168 R13=0000000000000002 R14=0000000000000002 R15=ffff888061a32000 RIP=ffffffff8bd57550 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c4f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6adff57e20 CR3=000000000eb96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe12f59df0 00007ffe12f59df0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6adf3f2823 00007f6adf3f2823 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6adf3f2e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6adf3f2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557b3f8d68 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c4da80100001b003 00100001a0030010 0001900300100001 800302100007c080 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000040c0144de0f ffffffffffff0401 8004021000000000 00080608017abc09 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010c808080040100 00020806040177fa 0380040008000402 79be00332f646601 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff f508038003001000 0010000b80040601 78f20023646e6574 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6f72662f237265 74706164612f6276 642f7665642f01ff ffffffffffffffc7 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080b80031dc7bb80 8010000108000282 80e2100030808096 1000028080800800 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000025db3d RBX=ffff88801f69a580 RCX=ffffffff8bd28215 RDX=0000000000000001 RSI=ffffffff8e38e858 RDI=ffffffff8c623980 RBP=ffffed1003ed34b0 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4c67bd R10=ffff88806a633deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bd2674f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d4f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b33009ff8 CR3=000000001322e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000f802fefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 736d656d5f657669 7463656666652e74 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd599120c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd599120c6 00007ffd599120cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f871ae3564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f871ae3568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f871ae357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f871ae35680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85b18170 RDI=ffffffff9bc75f60 RBP=ffffffff9bc75f20 RSP=ffffc90006fe7278 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff378ec41 R15=dffffc0000000000 RIP=ffffffff85b18197 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055557b6ad500 ffffffff 00c00000 GS =0000 ffff8880d5e4f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b33007ff8 CR3=00000000135e3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81769cc3 ffffffff81769cc3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0023646e65746e6f ffffffff81769cc3 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000