last executing test programs: 39.273478067s ago: executing program 2 (id=63): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) 39.216463724s ago: executing program 2 (id=65): sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCDISCONN(r1, 0x7439) 39.216078673s ago: executing program 2 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x1ff) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000140)) open_by_handle_at(r0, &(0x7f0000000380)=@ceph_nfs_fh={0x8, 0x1, {0x6}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0xc2) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nullb/nullb1/memory_backed\x00', 0x20201, 0x107) write(r3, &(0x7f00000001c0)='4', 0x1) 39.135945792s ago: executing program 2 (id=70): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x4}) r0 = io_uring_setup(0x7272, &(0x7f0000000080)={0x0, 0x8270, 0x40, 0x1, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x113e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') r1 = syz_open_dev$video(&(0x7f0000000440), 0xc, 0x28002) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) 39.063135784s ago: executing program 2 (id=72): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000f40)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f0000000e80)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000001040)="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", 0x116}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000000) 38.786317294s ago: executing program 2 (id=79): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)="ad203120302030", 0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000010c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x530, 0x0, 0x0, 0x1b8, 0x348, 0xd0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@remote, 0x1e, 0x40, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, 0x0) 38.706947156s ago: executing program 32 (id=79): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)="ad203120302030", 0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000010c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x530, 0x0, 0x0, 0x1b8, 0x348, 0xd0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@remote, 0x1e, 0x40, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, 0x0) 3.9378976s ago: executing program 1 (id=481): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f0000000580)="f76bad07b1db39a687dd3b0a850366d3e9314558daa64f690d83d3059efe5ab2050e3987ace3fbf50836cf41bbee5c0547e3cc4633", &(0x7f00000005c0)=""/30}, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x14041, 0x2e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x29, 0x0, &(0x7f0000000240)="09490000b242b9a09699e1abb623148bf1e0ba5f3d394072dad2a172f13a9500"/41, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000480)=@urb_type_control={0x2, {0x1, 0x1}, 0x52a9, 0x4, &(0x7f00000000c0)={0x0, 0x14, 0xfffe, 0x0, 0x9}, 0x8, 0xadd, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000400)="8ab8e4c54162b7329697cff3b4b3ac855c02191af151ded20c56e7635c50789b0fa2796054f6472b7601a87255b8f81de1fe3f4d5fba55db9179e83e342d7da30695635de40e1c5028b6363874670fc8449edd497a"}) r2 = signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) sendto$packet(r2, &(0x7f0000000280)="1b1a3c2171add1cb5524d9991745e599a3f82a92fa1a1249fc58966b6f9a7b76f1f1df54f32ffb32b61847bad56556cbd37f6b3f46087cdac7a7b3de04a21170382437e97dda81c11f621c5c602a3be07f8033a657e94f698d709315caebd209f2e2c73e7e578c0cbc36082863936ecb7f11e7a5a0f3f579e18762a9d24edb9ee9d1dc192ffb10d7b4c0554cdac852900f58ad6b8a99f2af9b530095e908570dcf7621c5504c36adfc018eda5bbd3ffc6a82162a", 0xb4, 0x80c0, &(0x7f00000003c0)={0x11, 0xd, 0x0, 0x1, 0x1, 0x6, @link_local}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="0c0000001800000427bd7000fddbdf2480202010569618b55aec2fb7c865372d189981fefc0004009600"/56], 0x28}, 0x1, 0x0, 0x0, 0x4004054}, 0x20004044) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000680)={0x40000000}) 3.724473606s ago: executing program 1 (id=485): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x7, 0xffffffffffffffad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 3.564073568s ago: executing program 1 (id=486): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)=0x0) syz_open_procfs(r0, &(0x7f00000003c0)='attr/fscreate\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)={0x24, 0x66, 0x503, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xd}, @typed={0x4, 0x110, 0x0, 0x0, @binary}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x24008881}, 0x14008010) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000200)) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000002c0)={0x6, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)={r4}) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f0000000100)={0x1c40aa80, 0x0, @ofdm}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r8, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000640)="627819d151910435fe7bee89b3823c64f27528", 0x13}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x10000}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ldst={0x0, 0x3, 0x1, 0x3, 0xb, 0xffffffffffffffff, 0x1}, @ldst={0x3, 0x2, 0x0, 0x8, 0xb, 0x21}, @map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x400}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x15d9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @alu={0x4, 0x0, 0xc, 0x6, 0x5, 0x50}, @generic={0x1, 0x2, 0x6, 0xa, 0xc}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) 3.042366873s ago: executing program 3 (id=494): r0 = syz_open_dev$swradio(&(0x7f0000001d80), 0x0, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001dc0)={0xfffffffe, 0x8, 0x2, {0xb, @win={{0x4, 0x7, 0x3, 0xffff}, 0x3, 0x10001, 0x0, 0xa087, 0x0, 0x7}}, 0xfffffffe}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)=@mmap={0x1000, 0x2, 0x4, 0x0, 0x7, {0x77359400}, {0x3, 0x8, 0xdf, 0x6, 0x8, 0x10, "0bd13939"}, 0x0, 0x1, {}, 0x6}) 2.914068451s ago: executing program 3 (id=498): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000f40)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f0000000140)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a0900a32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c50de9f30c83766e8911ed5b621c7395f1678a3165181261067977d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c42", 0xee}, {&(0x7f0000000e80)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000001040)="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", 0x116}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000000) 2.57454078s ago: executing program 1 (id=502): socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x9, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000183, 0x2, 0x7, 0xf2, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x8000b, 0x7, 0xfffffffffffffff8, 0x9, 0x4], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) connect$rxrpc(r5, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="18bb2ef9ac000000100100000100000002cd000000000000"], 0xfffffffffffffef0}, 0x8080) recvmsg(r5, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r6, &(0x7f0000000080)='4', 0x1) syz_io_uring_setup(0x58c7, &(0x7f0000000540)={0x0, 0x800061ee, 0x8000, 0xffffffff, 0x145}, &(0x7f0000000140), &(0x7f0000000080), &(0x7f00000000c0)) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(r7, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)) 1.921418799s ago: executing program 3 (id=504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000480)=0xffff8001) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(r2, 0x1, 0x0, 0x0) syz_usb_ep_write(r2, 0x85, 0x3f, &(0x7f0000000100)="9001000000000000000000000000000027ba55ce894dc8930000000100"/61) ioctl$sock_SIOCOUTQNSD(r4, 0x4010618a, &(0x7f0000000000)) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000240)={0x1, 0x0, 0x2, 0x2, 0x7, 0xf9d5}) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x274}, 0x1, 0x0, 0x0, 0x4008014}, 0x3af62668fa96767e) r5 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xa7dc, 0x0, 0x40, 0x3aa}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYRES64=r1, @ANYRESDEC=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r7}, 0x20) connect$unix(r6, &(0x7f00000001c0)=@file={0x0, './file1\x00'}, 0x6e) setsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x6}}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) setuid(0xee00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x0, 0x10039c}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) 1.467218133s ago: executing program 0 (id=510): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./dev/mtdblock0\x00', 0x1ad901, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)='\b', 0xffffff54}], 0x1, 0x7000, 0x0, 0x3) (fail_nth: 22) 1.354750685s ago: executing program 0 (id=511): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000140), 0x0, 0xc30) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', '\x00', '\x00', [0x0, 0x3]}) 1.227499804s ago: executing program 1 (id=512): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000f40)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f0000000140)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a0900a32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c50de9f30c83766e8911ed5b621c7395f1678a3165181261067977d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c42", 0xee}, {&(0x7f0000000e80)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000001040)="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", 0x116}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000000) 1.152318151s ago: executing program 0 (id=513): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) setns(0xc9, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0xf010000, 0xd, 0x57, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990a6a, 0x80, '\x00', @value=0x1000}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10f) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) write$tun(r2, &(0x7f0000000300)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x1, '\v'}}, 0x4) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x80, 0x640, 0x1000, 0xa0, 0xaf7c, 0x9, 0x18, 0x0, {0x2, 0x55e}, {0x7, 0x5}, {0x7, 0x80}, {0x9}, 0x0, 0x0, 0x3, 0x2000009, 0x0, 0xfffffffe, 0xffff, 0xffffffff, 0x8, 0x0, 0x4, 0xe, 0x9, 0x0, 0x1, 0x3}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) setns(0xc9, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0xf010000, 0xd, 0x57, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990a6a, 0x80, '\x00', @value=0x1000}}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10f) (async) socket$inet(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) (async) write$tun(r2, &(0x7f0000000300)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x1, '\v'}}, 0x4) (async) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x80, 0x640, 0x1000, 0xa0, 0xaf7c, 0x9, 0x18, 0x0, {0x2, 0x55e}, {0x7, 0x5}, {0x7, 0x80}, {0x9}, 0x0, 0x0, 0x3, 0x2000009, 0x0, 0xfffffffe, 0xffff, 0xffffffff, 0x8, 0x0, 0x4, 0xe, 0x9, 0x0, 0x1, 0x3}) (async) 917.226808ms ago: executing program 0 (id=514): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2041, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$getflags(r1, 0x401) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000980)=0x7e) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x109, 0x60004, 0xff7ffffc, 0xffffffff, 0x1, 0x4, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000500)={{0x80, 0x12}, 'port0\x00', 0x57, 0x40800, 0x9, 0x10, 0x0, 0x800, 0x8, 0x0, 0x3, 0x7f}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000140)={{0x80, 0x2}, 'port0\x00', 0x80, 0x100816, 0x4, 0x9, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) ioctl$TIOCSTI(r2, 0x5412, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) utimensat(r4, 0x0, &(0x7f0000000100)={{0x0, 0x3fffffff}, {0x0, 0x3fffffff}}, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) 832.274504ms ago: executing program 0 (id=515): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) unlink(&(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/f1\x00') (fail_nth: 2) write(r2, &(0x7f0000000380), 0x0) 734.675647ms ago: executing program 0 (id=516): syz_usb_connect(0x3, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r0, 0x4, 0x800) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x800, 0x0, 0x3, 0x3}, 0x20) read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000b00)=[{r3, 0x4009}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000f80)={0x4, 0x0, [{0x4, 0x0, 0x0}, {0x5000, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x102c1000, 0x0, 0x0}]}) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8949, &(0x7f0000000000)={'bond0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r5 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000080)="7bddb9c2e6c493f46f", 0x9}, {&(0x7f0000000140)="4fa89362c4f7374ad0140fe20bb38e56e222e1bf8ad0e297965da9a29be1fac37817b946e10e026eba15cc8328391b325ca7b6b8458d35aa0c3b231f77a7e82a0951060000000000000091ac14033f2e3a9e13bab50ab9f0e67ceaefca665128de572fb5222bfd1b8c56cade1a0074c5b40150f9098cc3ea775d3c28e6e8e7580b6eaecd4b50826251525637271cc36a7e0788c48186f0e0af40", 0x9a}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f00000023c0)="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", 0x1000}, {&(0x7f0000002200)="263115773dfc7fc458aa6537db56258a67976ffee3647aa7d849c7143789dc88401bc724e593329688b803c9acf61ca9128ba2482d625d523c62a72582aa67709fc01cbd5b39fb7c2be2d9e3c0c8751c6daea4d8fa86de2a21823564d49b5d8d2e9e1702acfaabc9248ec4eaeed4a4bc66609386ae93764811dfeefe4bcbf6bc2614e938c9bf38ecd323a8716000f259fef1dfd9a2374ec37f50cd", 0x9b}, {&(0x7f00000022c0)="8bfffda04ef462217a197d4e6979d9c1c42fc607cb30f957ffdacdf7d171f0fdd3cfd52101c9bde2fb37dbf257ebccd83d668ffd59766fd3150248b83b2cd61d78f63bd021402da06279597d691d51f30d40d54493", 0x55}], 0x6}, 0x80) 457.023021ms ago: executing program 4 (id=518): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x10}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYBLOB="195460834abffe799524c9cc1076da67db0581f96e6e913fb778bdbb73bc0800000000000000e3d933f03de46a538b0a18df3b9fb72cde"], 0xdd12}], 0x1, 0x0, 0x0, 0x10008882}, 0x200488c0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x3, 0x5}, 0x4) 456.796789ms ago: executing program 3 (id=519): openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x81, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x7, 0xfffffffeffffffff}) (async) setns(0xc9, 0x0) (async) r2 = socket(0x1f, 0x3, 0x1) openat$mixer(0xffffff9c, &(0x7f0000000040), 0x60a000, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) bind(r2, &(0x7f0000000300)=@hci={0x1f, 0xffff, 0x3}, 0x6) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000000c0)=0x12, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r8, @ANYBLOB="05005b"], 0x24}}, 0x0) (async) sendmmsg(r5, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) (async) setns(0xc9, 0x0) r10 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r10, 0x1, 0x15, &(0x7f0000000700)={0x0, 0x3e8}, 0x10) (async) bind(r10, &(0x7f0000000800)=@generic={0x1f, "0000000000000100"}, 0xa) (async) close_range(r1, 0xffffffffffffffff, 0x0) 394.840823ms ago: executing program 4 (id=520): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff000016000b006e6174"], 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 394.591608ms ago: executing program 4 (id=521): openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000180)) mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f0000000140)={0x70, 0x8, 0x0, {r0}}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 340.921119ms ago: executing program 4 (id=522): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time_for_children\x00') ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x802) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f0000000040)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r4 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) (async) r5 = io_uring_setup(0xffffffff, &(0x7f0000000240)={0x0, 0x202c1d, 0x20, 0x400002, 0x37b, 0x0, r4}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {}, 0x0, 0x40}, 0x1) 273.66858ms ago: executing program 4 (id=523): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0xb00, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffffe, 0x8}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) 219.613682ms ago: executing program 1 (id=524): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000004c0)={0x3, 0x0, [{0x0, 0x62, &(0x7f0000000540)=""/98}, {0xffff1000, 0x4b, &(0x7f0000000400)=""/78}, {0xd000, 0x28, &(0x7f00000005c0)=""/181}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000340)={0x0, 0x4}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0x50a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpeername$tipc(r2, &(0x7f00000001c0)=@id, &(0x7f0000000240)=0xffffffffffffff54) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0x74, 0x0, 0x1, 0x2}}, 0x48) 138.094118ms ago: executing program 4 (id=525): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x800, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=@newqdisc={0xac, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xac}}, 0x50000) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$CDROM_SEND_PACKET(r3, 0x5393, &(0x7f0000000400)={"1a028abb51ca78da5c3e598d", &(0x7f0000000540)="739d60589d9db0eb37b1abb7417b238a4fbae55d6a8d9d6b33cffa4a03e50a8af423b7629582a32a3db2cc15e2f620811771b7aca8a1209fd2d515891dc374671ef2f0d13fd3c876906d8b7b39d4689849d3da457adf3f28cb954381aa16f8b4679bdfc9003683be410dd235a664e50566f3907a060e315a4e3ddb945475d3cde6b151f53dd690b3143af860774935de0a204908495a60951e0c26545815b25f3316aa5422037ad516068820f31f6624d93bd8340cdabaaf4ecbc00c3bbf3608bd5cd5de8e63e77c8dbe78693391ddabb2dd7b6963e8680c3d58155818c6da00"/234, 0xea, 0x1, &(0x7f0000000380)={0x2, 0x1, 0x39, 0x7, 0x0, 0x0, 0x0, "7f37a016", 0x3, "ad938740", 0x2, 0x80, 0x5c, "53baef", "060130eabc2029a3e8405173dae5d3097fbe8696540000003bd4dbf44b0518f8af3b8e7f743414cb6f1c9ef62c95"}, 0x1, 0x1, 0x200131, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000ffff3fbd7000f0dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350c0400000000001c0012800b0001006d616373656300000c00028005000b0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) 137.850759ms ago: executing program 3 (id=526): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) (fail_nth: 22) 0s ago: executing program 3 (id=527): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) preadv2(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f00000000c0)=""/249, 0xf9}, {&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f0000000200)=""/51, 0x33}], 0x4, 0x80000001, 0x9, 0x7) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xaa}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x100000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000540)={0x1, @raw_data="32380edaec6d631a82b1feb5d7e2ddfae139d84c1d3ae920de99b8b36684520bce176b4c9b1124172df8e133206a0c7b56e2a09532e064b423ff3b7d373e5cada084b5d63e4582cb36b3118b61930c2368027937a66e7439a52573b6957ec55e350ceb22fb4433e0b2b9888708f157f03f9069154a9cfdd7ad5ed8ad0390dd410f946547ba0c27a8ff59c454fec15bb41a66f7ecec53d26d0706d37596887a8bdde6c0a39902babe28ec43e3aff25332e20854015bf405fd0662df466a288f2949a87769fa127ba9"}) kernel console output (not intermixed with test programs): +0x179/0x310 [ 66.094203][ T6639] __handle_mm_fault+0x150b/0x2f60 [ 66.094222][ T6639] ? __pfx___handle_mm_fault+0x10/0x10 [ 66.094237][ T6639] ? __pfx_mt_find+0x10/0x10 [ 66.094262][ T6639] ? find_vma+0xbf/0x140 [ 66.094273][ T6639] ? __pfx_find_vma+0x10/0x10 [ 66.094290][ T6639] handle_mm_fault+0x363/0xa20 [ 66.094309][ T6639] do_user_addr_fault+0x745/0x12f0 [ 66.094327][ T6639] exc_page_fault+0x6f/0xd0 [ 66.094341][ T6639] asm_exc_page_fault+0x26/0x30 [ 66.094352][ T6639] RIP: 0010:fault_in_readable+0xde/0x190 [ 66.094364][ T6639] Code: 78 51 ac ff 4c 89 f0 48 85 c0 0f 85 bf 00 00 00 e8 87 57 ac ff 0f 01 cb 0f ae e8 4c 89 fb 4d 85 ff 75 31 eb 48 e8 72 57 ac ff <44> 8a 33 e8 6a 57 ac ff 48 81 c3 00 10 00 00 31 ff 48 81 e3 00 f0 [ 66.094374][ T6639] RSP: 0018:ffffc90003127790 EFLAGS: 00050293 [ 66.094384][ T6639] RAX: 0000000000000000 RBX: 000020000000d000 RCX: 0000000000000000 [ 66.094390][ T6639] RDX: ffff888036502580 RSI: ffffffff825fc5de RDI: ffff888036502580 [ 66.094397][ T6639] RBP: 0000200000019000 R08: 0000000000000006 R09: 0000200000019000 [ 66.094404][ T6639] R10: 000020000000d000 R11: 0000000000000000 R12: 0000000000018000 [ 66.094410][ T6639] R13: 1ffff92000624ef3 R14: 0000000000000000 R15: 0000200000001000 [ 66.094421][ T6639] ? fault_in_readable+0xde/0x190 [ 66.094434][ T6639] ? __pfx_fault_in_readable+0x10/0x10 [ 66.094446][ T6639] ? I_BDEV+0xd/0x20 [ 66.094460][ T6639] ? inode_to_bdi+0x9e/0x160 [ 66.094473][ T6639] fault_in_iov_iter_readable+0x101/0x2c0 [ 66.094485][ T6639] iomap_file_buffered_write+0x433/0xab0 [ 66.094508][ T6639] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 66.094538][ T6639] ? filemap_check_errors+0xa9/0x150 [ 66.094556][ T6639] ? iov_iter_revert+0x252/0x5b0 [ 66.094569][ T6639] blkdev_write_iter+0x534/0xd30 [ 66.094584][ T6639] do_iter_readv_writev+0x6f7/0x930 [ 66.094603][ T6639] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 66.094619][ T6639] ? avc_policy_seqno+0x9/0x20 [ 66.094634][ T6639] ? selinux_file_permission+0x8f/0x6d0 [ 66.094648][ T6639] ? bpf_lsm_file_permission+0x9/0x10 [ 66.094662][ T6639] ? security_file_permission+0x76/0x210 [ 66.094676][ T6639] ? rw_verify_area+0xce/0x6d0 [ 66.094693][ T6639] vfs_writev+0x360/0xdd0 [ 66.094704][ T6639] ? __lock_acquire+0x5c0/0x1f40 [ 66.094717][ T6639] ? __pfx_vfs_writev+0x10/0x10 [ 66.094726][ T6639] ? find_held_lock+0x2b/0x80 [ 66.094744][ T6639] ? lock_acquire+0x1d1/0x380 [ 66.094755][ T6639] ? __fget_files+0x34/0x3d0 [ 66.094773][ T6639] ? __fget_files+0x21f/0x3d0 [ 66.094790][ T6639] ? do_pwritev+0x1ac/0x270 [ 66.094799][ T6639] do_pwritev+0x1ac/0x270 [ 66.094809][ T6639] ? __pfx_do_pwritev+0x10/0x10 [ 66.094820][ T6639] ? ksys_write+0x1ac/0x250 [ 66.094831][ T6639] ? __pfx_ksys_write+0x10/0x10 [ 66.094844][ T6639] __x64_sys_pwritev2+0xef/0x160 [ 66.094858][ T6639] do_syscall_64+0x123/0x790 [ 66.094874][ T6639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.094885][ T6639] RIP: 0033:0x7fbc8a79e159 [ 66.094894][ T6639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.094904][ T6639] RSP: 002b:00007fbc8b5bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 66.094914][ T6639] RAX: ffffffffffffffda RBX: 00007fbc8aa25fa0 RCX: 00007fbc8a79e159 [ 66.094920][ T6639] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 66.094927][ T6639] RBP: 00007fbc8b5bf090 R08: 0000000000000000 R09: 0000000000000003 [ 66.094933][ T6639] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000002 [ 66.094940][ T6639] R13: 00007fbc8aa26038 R14: 00007fbc8aa25fa0 R15: 00007fff751e2ae8 [ 66.094953][ T6639] [ 66.468618][ T6652] netlink: 23 bytes leftover after parsing attributes in process `syz.3.183'. [ 66.478152][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 66.479625][ T6652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36284 sclass=netlink_route_socket pid=6652 comm=syz.3.183 [ 66.542241][ T6655] netlink: 'syz.3.184': attribute type 1 has an invalid length. [ 66.581490][ T6655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.596106][ T6655] gretap1: entered promiscuous mode [ 66.599980][ T6655] bond1: (slave gretap1): making interface the new active one [ 66.601733][ T6655] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 67.077034][ T6682] FAULT_INJECTION: forcing a failure. [ 67.077034][ T6682] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 67.077069][ T6682] CPU: 2 UID: 0 PID: 6682 Comm: syz.4.189 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.077095][ T6682] Tainted: [L]=SOFTLOCKUP [ 67.077101][ T6682] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.077113][ T6682] Call Trace: [ 67.077120][ T6682] [ 67.077127][ T6682] dump_stack_lvl+0x100/0x190 [ 67.077160][ T6682] should_fail_ex.cold+0x5/0xa [ 67.077184][ T6682] ? prepare_alloc_pages+0x16d/0x5b0 [ 67.077212][ T6682] should_fail_alloc_page+0xeb/0x140 [ 67.077237][ T6682] prepare_alloc_pages+0x1f0/0x5b0 [ 67.077265][ T6682] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 67.077288][ T6682] ? prepare_alloc_pages+0x111/0x5b0 [ 67.077334][ T6682] ? rcu_is_watching+0x13/0xc0 [ 67.077362][ T6682] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 67.077385][ T6682] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 67.077407][ T6682] ? find_held_lock+0x2b/0x80 [ 67.077433][ T6682] ? is_bpf_text_address+0x8a/0x1a0 [ 67.077458][ T6682] ? is_bpf_text_address+0x8a/0x1a0 [ 67.077483][ T6682] ? bpf_ksym_find+0x128/0x1c0 [ 67.077512][ T6682] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 67.077543][ T6682] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 67.077561][ T6682] ? is_bpf_text_address+0x94/0x1a0 [ 67.077588][ T6682] ? __kernel_text_address+0xd/0x30 [ 67.077634][ T6682] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 67.077653][ T6682] ? find_held_lock+0x2b/0x80 [ 67.077682][ T6682] ? policy_nodemask+0xed/0x4f0 [ 67.077708][ T6682] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 67.077742][ T6682] __kasan_populate_vmalloc+0xf0/0x210 [ 67.077768][ T6682] alloc_vmap_area+0x95d/0x2bb0 [ 67.077798][ T6682] ? kasan_save_track+0x14/0x30 [ 67.077826][ T6682] ? __kasan_kmalloc+0xaa/0xb0 [ 67.077848][ T6682] ? __pfx_alloc_vmap_area+0x10/0x10 [ 67.077874][ T6682] ? __get_vm_area_node+0x124/0x350 [ 67.077901][ T6682] __get_vm_area_node+0x1ed/0x350 [ 67.077931][ T6682] __vmalloc_node_range_noprof+0x268/0x1420 [ 67.077960][ T6682] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 67.077989][ T6682] ? do_raw_spin_lock+0x128/0x260 [ 67.078015][ T6682] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 67.078039][ T6682] ? lock_acquire+0x1d1/0x380 [ 67.078057][ T6682] ? find_held_lock+0x2b/0x80 [ 67.078083][ T6682] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 67.078107][ T6682] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 67.078137][ T6682] ? avc_has_perm_noaudit+0x145/0x3b0 [ 67.078164][ T6682] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 67.078187][ T6682] __vmalloc_node_noprof+0xad/0xf0 [ 67.078216][ T6682] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 67.078240][ T6682] __vmalloc_noprof+0xa3/0x120 [ 67.078261][ T6682] ? __pfx___vmalloc_noprof+0x10/0x10 [ 67.078284][ T6682] ? rcu_is_watching+0x13/0xc0 [ 67.078307][ T6682] ? cap_capable+0x107/0x430 [ 67.078333][ T6682] bpf_prog_alloc_no_stats+0x59/0x690 [ 67.078355][ T6682] ? security_capable+0x80/0x260 [ 67.078382][ T6682] bpf_prog_alloc+0x3b/0x200 [ 67.078402][ T6682] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.078424][ T6682] bpf_prog_load+0x49e/0x2a80 [ 67.078453][ T6682] ? __pfx_bpf_prog_load+0x10/0x10 [ 67.078497][ T6682] __sys_bpf+0x1f46/0x4a30 [ 67.078522][ T6682] ? __pfx___sys_bpf+0x10/0x10 [ 67.078539][ T6682] ? find_held_lock+0x2b/0x80 [ 67.078565][ T6682] ? futex_wake+0x4ea/0x5e0 [ 67.078610][ T6682] ? rcu_read_lock_any_held+0x6a/0x90 [ 67.078637][ T6682] ? find_held_lock+0x2b/0x80 [ 67.078661][ T6682] ? ksys_write+0x190/0x250 [ 67.078679][ T6682] ? ksys_write+0x190/0x250 [ 67.078708][ T6682] ? __x64_sys_futex+0x34f/0x4d0 [ 67.078729][ T6682] ? __x64_sys_futex+0x358/0x4d0 [ 67.078752][ T6682] ? xfd_validate_state+0x129/0x190 [ 67.078774][ T6682] ? __x64_sys_bpf+0xce/0x140 [ 67.078793][ T6682] __x64_sys_bpf+0xce/0x140 [ 67.078813][ T6682] ? do_syscall_64+0xae/0x790 [ 67.078849][ T6682] do_syscall_64+0x123/0x790 [ 67.078878][ T6682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.078897][ T6682] RIP: 0033:0x7f733a79e159 [ 67.078913][ T6682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.078929][ T6682] RSP: 002b:00007f733b62c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.078947][ T6682] RAX: ffffffffffffffda RBX: 00007f733aa25fa0 RCX: 00007f733a79e159 [ 67.078959][ T6682] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 67.078970][ T6682] RBP: 00007f733a83506b R08: 0000000000000000 R09: 0000000000000000 [ 67.078981][ T6682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.078991][ T6682] R13: 00007f733aa26038 R14: 00007f733aa25fa0 R15: 00007ffca5734a98 [ 67.079015][ T6682] [ 67.079234][ T6682] warn_alloc: 1 callbacks suppressed [ 67.079247][ T6682] syz.4.189: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 67.079311][ T6682] CPU: 2 UID: 0 PID: 6682 Comm: syz.4.189 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.079338][ T6682] Tainted: [L]=SOFTLOCKUP [ 67.079346][ T6682] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.079356][ T6682] Call Trace: [ 67.079362][ T6682] [ 67.079370][ T6682] dump_stack_lvl+0x100/0x190 [ 67.079399][ T6682] warn_alloc.cold+0x9e/0xb2 [ 67.079420][ T6682] ? __pfx_warn_alloc+0x10/0x10 [ 67.079449][ T6682] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.079478][ T6682] ? __get_vm_area_node+0x2f0/0x350 [ 67.079507][ T6682] ? __get_vm_area_node+0x22b/0x350 [ 67.079535][ T6682] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 67.079564][ T6682] ? do_raw_spin_lock+0x128/0x260 [ 67.079591][ T6682] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 67.079615][ T6682] ? lock_acquire+0x1d1/0x380 [ 67.079664][ T6682] ? find_held_lock+0x2b/0x80 [ 67.079693][ T6682] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 67.079720][ T6682] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 67.079753][ T6682] ? avc_has_perm_noaudit+0x145/0x3b0 [ 67.079783][ T6682] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 67.079804][ T6682] __vmalloc_node_noprof+0xad/0xf0 [ 67.079837][ T6682] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 67.079865][ T6682] __vmalloc_noprof+0xa3/0x120 [ 67.079891][ T6682] ? __pfx___vmalloc_noprof+0x10/0x10 [ 67.079921][ T6682] ? rcu_is_watching+0x13/0xc0 [ 67.079945][ T6682] ? cap_capable+0x107/0x430 [ 67.079975][ T6682] bpf_prog_alloc_no_stats+0x59/0x690 [ 67.079997][ T6682] ? security_capable+0x80/0x260 [ 67.080027][ T6682] bpf_prog_alloc+0x3b/0x200 [ 67.080049][ T6682] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.080070][ T6682] bpf_prog_load+0x49e/0x2a80 [ 67.080101][ T6682] ? __pfx_bpf_prog_load+0x10/0x10 [ 67.080145][ T6682] __sys_bpf+0x1f46/0x4a30 [ 67.080171][ T6682] ? __pfx___sys_bpf+0x10/0x10 [ 67.080188][ T6682] ? find_held_lock+0x2b/0x80 [ 67.080231][ T6682] ? futex_wake+0x4ea/0x5e0 [ 67.080277][ T6682] ? rcu_read_lock_any_held+0x6a/0x90 [ 67.080305][ T6682] ? find_held_lock+0x2b/0x80 [ 67.080333][ T6682] ? ksys_write+0x190/0x250 [ 67.080350][ T6682] ? ksys_write+0x190/0x250 [ 67.080382][ T6682] ? __x64_sys_futex+0x34f/0x4d0 [ 67.080406][ T6682] ? __x64_sys_futex+0x358/0x4d0 [ 67.080434][ T6682] ? xfd_validate_state+0x129/0x190 [ 67.080458][ T6682] ? __x64_sys_bpf+0xce/0x140 [ 67.080474][ T6682] __x64_sys_bpf+0xce/0x140 [ 67.080494][ T6682] ? do_syscall_64+0xae/0x790 [ 67.080521][ T6682] do_syscall_64+0x123/0x790 [ 67.080548][ T6682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.080567][ T6682] RIP: 0033:0x7f733a79e159 [ 67.080584][ T6682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.080602][ T6682] RSP: 002b:00007f733b62c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.080620][ T6682] RAX: ffffffffffffffda RBX: 00007f733aa25fa0 RCX: 00007f733a79e159 [ 67.080632][ T6682] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 67.080646][ T6682] RBP: 00007f733a83506b R08: 0000000000000000 R09: 0000000000000000 [ 67.080658][ T6682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.080669][ T6682] R13: 00007f733aa26038 R14: 00007f733aa25fa0 R15: 00007ffca5734a98 [ 67.080694][ T6682] [ 67.080824][ T6682] Mem-Info: [ 67.080835][ T6682] active_anon:9564 inactive_anon:0 isolated_anon:0 [ 67.080835][ T6682] active_file:0 inactive_file:57118 isolated_file:0 [ 67.080835][ T6682] unevictable:1000 dirty:1882 writeback:0 [ 67.080835][ T6682] slab_reclaimable:12049 slab_unreclaimable:69088 [ 67.080835][ T6682] mapped:24865 shmem:1584 pagetables:1307 [ 67.080835][ T6682] sec_pagetables:297 bounce:0 [ 67.080835][ T6682] kernel_misc_reclaimable:0 [ 67.080835][ T6682] free:458269 free_pcp:7999 free_cma:0 [ 67.080883][ T6682] Node 0 active_anon:38256kB inactive_anon:0kB active_file:0kB inactive_file:228280kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:99460kB dirty:7516kB writeback:0kB shmem:4336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13552kB pagetables:5020kB sec_pagetables:1188kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 67.080930][ T6682] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 67.080976][ T6682] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 67.081027][ T6682] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 67.081059][ T6682] Node 0 DMA32 free:179120kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:38256kB inactive_anon:0kB active_file:0kB inactive_file:228280kB unevictable:2000kB writepending:7516kB zspages:32kB present:2080628kB managed:1253284kB mlocked:0kB bounce:0kB free_pcp:24712kB local_pcp:8316kB free_cma:0kB [ 67.081112][ T6682] lowmem_reserve[]: 0 0 0 0 0 [ 67.081143][ T6682] Node 1 Normal free:1638596kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:2000kB writepending:12kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:7272kB local_pcp:2916kB free_cma:0kB [ 67.081194][ T6682] lowmem_reserve[]: 0 0 0 0 0 [ 67.081223][ T6682] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 67.081324][ T6682] Node 0 DMA32: 319*4kB (UME) 17*8kB (UM) 444*16kB (UME) 256*32kB (UM) 108*64kB (UME) 57*128kB (UME) 17*256kB (UME) 3*512kB (UM) 11*1024kB (UM) 2*2048kB (U) 31*4096kB (UM) = 179140kB [ 67.081468][ T6682] Node 1 Normal: 3*4kB (UM) 1*8kB (U) 3*16kB (UM) 0*32kB 0*64kB 1*128kB (M) 0*256kB 0*512kB 0*1024kB 4*2048kB (UM) 398*4096kB (M) = 1638596kB [ 67.081587][ T6682] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 67.081600][ T6682] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 67.081613][ T6682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 67.081627][ T6682] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 67.081640][ T6682] 58711 total pagecache pages [ 67.081646][ T6682] 13 pages in swap cache [ 67.081652][ T6682] Free swap = 124996kB [ 67.081657][ T6682] Total swap = 124996kB [ 67.081663][ T6682] 1048443 pages RAM [ 67.081669][ T6682] 0 pages HighMem/MovableOnly [ 67.081674][ T6682] 285812 pages reserved [ 67.081680][ T6682] 0 pages cma reserved [ 67.601815][ T6698] FAULT_INJECTION: forcing a failure. [ 67.601815][ T6698] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 67.601847][ T6698] CPU: 2 UID: 0 PID: 6698 Comm: syz.4.193 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.601872][ T6698] Tainted: [L]=SOFTLOCKUP [ 67.601879][ T6698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.601889][ T6698] Call Trace: [ 67.601896][ T6698] [ 67.601903][ T6698] dump_stack_lvl+0x100/0x190 [ 67.601935][ T6698] should_fail_ex.cold+0x5/0xa [ 67.601957][ T6698] ? prepare_alloc_pages+0x16d/0x5b0 [ 67.601982][ T6698] should_fail_alloc_page+0xeb/0x140 [ 67.602006][ T6698] prepare_alloc_pages+0x1f0/0x5b0 [ 67.602034][ T6698] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 67.602054][ T6698] ? __pfx_get_page_from_freelist+0x10/0x10 [ 67.602083][ T6698] ? prepare_alloc_pages+0x1f0/0x5b0 [ 67.602108][ T6698] ? rcu_is_watching+0x13/0xc0 [ 67.602133][ T6698] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 67.602154][ T6698] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 67.602174][ T6698] ? find_held_lock+0x2b/0x80 [ 67.602198][ T6698] ? is_bpf_text_address+0x8a/0x1a0 [ 67.602223][ T6698] ? is_bpf_text_address+0x8a/0x1a0 [ 67.602246][ T6698] ? bpf_ksym_find+0x128/0x1c0 [ 67.602272][ T6698] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 67.602301][ T6698] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 67.602324][ T6698] ? is_bpf_text_address+0x94/0x1a0 [ 67.602349][ T6698] ? __kernel_text_address+0xd/0x30 [ 67.602392][ T6698] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 67.602415][ T6698] ? policy_nodemask+0xed/0x4f0 [ 67.602441][ T6698] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 67.602472][ T6698] __kasan_populate_vmalloc+0xf0/0x210 [ 67.602497][ T6698] alloc_vmap_area+0x95d/0x2bb0 [ 67.602525][ T6698] ? kasan_save_track+0x14/0x30 [ 67.602544][ T6698] ? __kasan_kmalloc+0xaa/0xb0 [ 67.602563][ T6698] ? __pfx_alloc_vmap_area+0x10/0x10 [ 67.602599][ T6698] ? __pfx_stack_trace_save+0x10/0x10 [ 67.602617][ T6698] ? __get_vm_area_node+0x124/0x350 [ 67.602642][ T6698] __get_vm_area_node+0x1ed/0x350 [ 67.602669][ T6698] __vmalloc_node_range_noprof+0x268/0x1420 [ 67.602695][ T6698] ? bpf_check+0x17fb/0xa980 [ 67.602727][ T6698] ? bpf_check+0x17fb/0xa980 [ 67.602754][ T6698] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 67.602783][ T6698] ? avc_has_perm_noaudit+0x145/0x3b0 [ 67.602810][ T6698] ? bpf_check+0x17fb/0xa980 [ 67.602831][ T6698] __vmalloc_node_noprof+0xad/0xf0 [ 67.602855][ T6698] ? bpf_check+0x17fb/0xa980 [ 67.602879][ T6698] __vmalloc_noprof+0xa3/0x120 [ 67.602902][ T6698] ? __pfx___vmalloc_noprof+0x10/0x10 [ 67.602928][ T6698] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 67.602952][ T6698] ? security_bpf_prog_load+0x10f/0x2f0 [ 67.602974][ T6698] bpf_check+0x17fb/0xa980 [ 67.602998][ T6698] ? __css_rstat_updated+0x1ce/0x590 [ 67.603019][ T6698] ? __lock_acquire+0x5c0/0x1f40 [ 67.603039][ T6698] ? __pfx___css_rstat_updated+0x10/0x10 [ 67.603066][ T6698] ? __lock_acquire+0x5c0/0x1f40 [ 67.603092][ T6698] ? __pfx_bpf_check+0x10/0x10 [ 67.603118][ T6698] ? lock_acquire+0x1d1/0x380 [ 67.603137][ T6698] ? bpf_prog_load+0x1a09/0x2a80 [ 67.603178][ T6698] ? find_held_lock+0x2b/0x80 [ 67.603201][ T6698] ? bpf_prog_load+0x1a09/0x2a80 [ 67.603228][ T6698] ? __asan_memset+0x23/0x50 [ 67.603249][ T6698] ? bpf_prog_load+0x1ac3/0x2a80 [ 67.603271][ T6698] bpf_prog_load+0x1ac3/0x2a80 [ 67.603298][ T6698] ? __pfx_bpf_prog_load+0x10/0x10 [ 67.603343][ T6698] __sys_bpf+0x1f46/0x4a30 [ 67.603367][ T6698] ? __pfx___sys_bpf+0x10/0x10 [ 67.603385][ T6698] ? find_held_lock+0x2b/0x80 [ 67.603409][ T6698] ? get_pid_task+0xfc/0x250 [ 67.603430][ T6698] ? get_pid_task+0xfc/0x250 [ 67.603461][ T6698] ? find_held_lock+0x2b/0x80 [ 67.603491][ T6698] ? rcu_read_lock_any_held+0x6a/0x90 [ 67.603516][ T6698] ? find_held_lock+0x2b/0x80 [ 67.603538][ T6698] ? ksys_write+0x190/0x250 [ 67.603556][ T6698] ? ksys_write+0x190/0x250 [ 67.603573][ T6698] ? lock_acquire+0x1d1/0x380 [ 67.603604][ T6698] ? fput+0x7c/0x100 [ 67.603649][ T6698] ? ksys_write+0x1ac/0x250 [ 67.603671][ T6698] ? __x64_sys_bpf+0xce/0x140 [ 67.603688][ T6698] __x64_sys_bpf+0xce/0x140 [ 67.603706][ T6698] ? do_syscall_64+0xae/0x790 [ 67.603730][ T6698] do_syscall_64+0x123/0x790 [ 67.603756][ T6698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.603775][ T6698] RIP: 0033:0x7f733a79e159 [ 67.603790][ T6698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.603806][ T6698] RSP: 002b:00007f733b62c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.603824][ T6698] RAX: ffffffffffffffda RBX: 00007f733aa25fa0 RCX: 00007f733a79e159 [ 67.603835][ T6698] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 67.603846][ T6698] RBP: 00007f733b62c090 R08: 0000000000000000 R09: 0000000000000000 [ 67.603857][ T6698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.603867][ T6698] R13: 00007f733aa26038 R14: 00007f733aa25fa0 R15: 00007ffca5734a98 [ 67.603889][ T6698] [ 67.630468][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 67.630503][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.277674][ T6710] uprobe: syz.4.196:6710 failed to unregister, leaking uprobe [ 69.480523][ T43] kauditd_printk_skb: 31 callbacks suppressed [ 69.480541][ T43] audit: type=1400 audit(1789539705.297:495): avc: denied { write } for pid=6731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.570211][ T43] audit: type=1400 audit(1789539705.387:496): avc: denied { name_connect } for pid=6734 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 69.592971][ T43] audit: type=1400 audit(1789539705.407:497): avc: denied { mounton } for pid=6734 comm="syz.3.197" path="/36/dev/mtdblock0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.607574][ T43] audit: type=1400 audit(1789539705.427:498): avc: denied { write } for pid=6736 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.638398][ T6740] netlink: 'syz.4.200': attribute type 1 has an invalid length. [ 69.692454][ T6740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.703400][ T43] audit: type=1400 audit(1789539705.517:499): avc: denied { mounton } for pid=6747 comm="syz.3.202" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 69.704632][ T43] audit: type=1400 audit(1789539705.517:500): avc: denied { watch } for pid=6747 comm="syz.3.202" path="/38/bus" dev="tmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.704816][ T43] audit: type=1400 audit(1789539705.517:501): avc: denied { watch_sb watch_reads } for pid=6747 comm="syz.3.202" path="/38/bus" dev="tmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.744092][ T6740] gretap1: entered promiscuous mode [ 69.748723][ T6740] bond1: (slave gretap1): making interface the new active one [ 69.749288][ T6740] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 69.752368][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.200'. [ 69.752380][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.200'. [ 69.784072][ T1166] IPVS: starting estimator thread 0... [ 69.851763][ T43] audit: type=1400 audit(1789539705.667:502): avc: denied { lock } for pid=6753 comm="syz.4.204" path="socket:[15116]" dev="sockfs" ino=15116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.865102][ T6752] IPVS: using max 43 ests per chain, 103200 per kthread [ 69.876947][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 69.947497][ T6760] futex_wake_op: syz.3.206 tries to shift op by -1; fix this program [ 69.987600][ T6765] scsi_strcpy_devinfo: vendor string 'ÆMýŸê‡‹8KH,Pò}ƒ/(a»¯&¿WCa—8(½§ÉAu˜ÒÁÀâÈéÃ6cƒ1íÙƒXûº´Úáãä†3UPº×ÇK¼±î5Ôô°•óR ªX7R.ø]O\¯¬kþekˆÝÙÓ©o‚pêëÒ‘ 0ð[ž{„¾q6•?U³q9Ömߣ¼7`…`ŸI3²¾ÅµÊ' is too long [ 69.991069][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 70.026361][ T9] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 70.027219][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.027243][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 70.027298][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 70.027311][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 70.027322][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 70.027334][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 70.027345][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 70.027356][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 70.027368][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 70.027379][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 70.027391][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 70.027402][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 70.027461][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.027473][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.027484][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 70.031133][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.031147][ T9] usb 6-1: Product: syz [ 70.031154][ T9] usb 6-1: Manufacturer: syz [ 70.031161][ T9] usb 6-1: SerialNumber: syz [ 70.037154][ T6738] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.037285][ T6738] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.037412][ T6738] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.037459][ T6738] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.037588][ T6738] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.037712][ T6738] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.037760][ T6738] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.037886][ T6738] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.037931][ T6738] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.038056][ T6738] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.038192][ T6738] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.039665][ T9] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 70.043956][ T9] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 70.049317][ T9] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 70.050798][ T9] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 70.051854][ T9] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 70.086887][ T6767] FAULT_INJECTION: forcing a failure. [ 70.086887][ T6767] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 70.086909][ T6767] CPU: 0 UID: 0 PID: 6767 Comm: syz.4.207 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.086924][ T6767] Tainted: [L]=SOFTLOCKUP [ 70.086928][ T6767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.086935][ T6767] Call Trace: [ 70.086939][ T6767] [ 70.086944][ T6767] dump_stack_lvl+0x100/0x190 [ 70.086985][ T6767] should_fail_ex.cold+0x5/0xa [ 70.087001][ T6767] ? prepare_alloc_pages+0x16d/0x5b0 [ 70.087021][ T6767] should_fail_alloc_page+0xeb/0x140 [ 70.087036][ T6767] prepare_alloc_pages+0x1f0/0x5b0 [ 70.087052][ T6767] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 70.087065][ T6767] ? prepare_alloc_pages+0x111/0x5b0 [ 70.087081][ T6767] ? rcu_is_watching+0x13/0xc0 [ 70.087096][ T6767] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 70.087109][ T6767] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 70.087121][ T6767] ? find_held_lock+0x2b/0x80 [ 70.087137][ T6767] ? is_bpf_text_address+0x8a/0x1a0 [ 70.087151][ T6767] ? is_bpf_text_address+0x8a/0x1a0 [ 70.087166][ T6767] ? bpf_ksym_find+0x128/0x1c0 [ 70.087182][ T6767] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 70.087200][ T6767] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 70.087210][ T6767] ? is_bpf_text_address+0x94/0x1a0 [ 70.087225][ T6767] ? __kernel_text_address+0xd/0x30 [ 70.087252][ T6767] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 70.087263][ T6767] ? lock_acquire+0x1d1/0x380 [ 70.087276][ T6767] ? policy_nodemask+0xed/0x4f0 [ 70.087292][ T6767] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 70.087311][ T6767] __kasan_populate_vmalloc+0xf0/0x210 [ 70.087326][ T6767] alloc_vmap_area+0x95d/0x2bb0 [ 70.087344][ T6767] ? kasan_save_track+0x14/0x30 [ 70.087356][ T6767] ? __kasan_kmalloc+0xaa/0xb0 [ 70.087368][ T6767] ? __pfx_alloc_vmap_area+0x10/0x10 [ 70.087381][ T6767] ? __get_vm_area_node+0x124/0x350 [ 70.087396][ T6767] __get_vm_area_node+0x1ed/0x350 [ 70.087413][ T6767] __vmalloc_node_range_noprof+0x268/0x1420 [ 70.087428][ T6767] ? vhost_task_create+0x1db/0x370 [ 70.087444][ T6767] ? lock_acquire+0x1d1/0x380 [ 70.087455][ T6767] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 70.087469][ T6767] ? irqentry_exit+0x24d/0xa10 [ 70.087488][ T6767] ? vhost_task_create+0x1db/0x370 [ 70.087507][ T6767] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 70.087527][ T6767] ? vhost_task_create+0x1db/0x370 [ 70.087543][ T6767] __vmalloc_node_noprof+0xad/0xf0 [ 70.087558][ T6767] ? vhost_task_create+0x1db/0x370 [ 70.087576][ T6767] copy_process+0x803/0x8370 [ 70.087596][ T6767] ? __pfx_copy_process+0x10/0x10 [ 70.087608][ T6767] ? kasan_save_track+0x14/0x30 [ 70.087641][ T6767] ? __kasan_kmalloc+0xaa/0xb0 [ 70.087658][ T6767] ? lockdep_init_map_type+0x5c/0x250 [ 70.087671][ T6767] ? lockdep_init_map_type+0x5c/0x250 [ 70.087685][ T6767] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 70.087703][ T6767] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 70.087719][ T6767] vhost_task_create+0x1db/0x370 [ 70.087737][ T6767] ? __pfx_vhost_task_create+0x10/0x10 [ 70.087758][ T6767] ? __pfx_vhost_task_fn+0x10/0x10 [ 70.087776][ T6767] ? register_lock_class+0x3f/0x7b0 [ 70.087788][ T6767] ? rcu_is_watching+0x13/0xc0 [ 70.087802][ T6767] ? trace_contention_end+0x126/0x160 [ 70.087818][ T6767] kvm_mmu_post_init_vm+0x1b3/0x360 [ 70.087832][ T6767] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 70.087847][ T6767] ? __pfx___mutex_lock+0x10/0x10 [ 70.087862][ T6767] ? kasan_quarantine_put+0x104/0x240 [ 70.087876][ T6767] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 70.087889][ T6767] ? lock_acquire+0x1d1/0x380 [ 70.087901][ T6767] ? do_raw_write_lock+0x11e/0x260 [ 70.087915][ T6767] ? find_held_lock+0x2b/0x80 [ 70.087930][ T6767] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 70.087944][ T6767] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 70.087962][ T6767] kvm_vcpu_ioctl+0x730/0x1700 [ 70.087979][ T6767] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 70.087994][ T6767] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.088008][ T6767] ? do_vfs_ioctl+0x226/0x13e0 [ 70.088020][ T6767] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 70.088029][ T6767] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 70.088045][ T6767] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 70.088060][ T6767] ? __fget_files+0x34/0x3d0 [ 70.088080][ T6767] ? selinux_file_ioctl+0x13b/0x290 [ 70.088091][ T6767] ? selinux_file_ioctl+0xb6/0x290 [ 70.088104][ T6767] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 70.088120][ T6767] __x64_sys_ioctl+0x18e/0x210 [ 70.088132][ T6767] do_syscall_64+0x123/0x790 [ 70.088158][ T6767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.088176][ T6767] RIP: 0033:0x7f733a79e159 [ 70.088190][ T6767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.088204][ T6767] RSP: 002b:00007f733b60b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.088219][ T6767] RAX: ffffffffffffffda RBX: 00007f733aa26090 RCX: 00007f733a79e159 [ 70.088229][ T6767] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 70.088238][ T6767] RBP: 00007f733b60b090 R08: 0000000000000000 R09: 0000000000000000 [ 70.088247][ T6767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.088257][ T6767] R13: 00007f733aa26128 R14: 00007f733aa26090 R15: 00007ffca5734a98 [ 70.088276][ T6767] [ 70.314447][ T6738] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 70.314617][ T6738] Cannot find add_set index 0 as target [ 70.410436][ T6773] netlink: 'syz.4.210': attribute type 1 has an invalid length. [ 70.464141][ T6773] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.531854][ T5851] usb 6-1: USB disconnect, device number 3 [ 70.570578][ T5851] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 70.582261][ T5851] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 70.596514][ T5851] keyspan 6-1:1.0: device disconnected [ 70.682482][ T6789] fuse: root generation should be zero [ 70.698951][ T6792] netlink: 40 bytes leftover after parsing attributes in process `syz.3.215'. [ 70.721359][ T43] audit: type=1400 audit(1789539706.537:503): avc: denied { unmount } for pid=6165 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 70.761275][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 70.811276][ T6796] openvswitch: netlink: IP tunnel dst address not specified [ 70.840570][ T970] usb 5-1: USB disconnect, device number 6 [ 71.117240][ T6813] netlink: 'syz.0.223': attribute type 1 has an invalid length. [ 71.181933][ T6813] 8021q: adding VLAN 0 to HW filter on device bond4 [ 71.186438][ T6819] loop0: detected capacity change from 0 to 4096 [ 71.224682][ T6813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.223'. [ 71.233934][ T6819] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 71.233958][ T6819] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 71.233969][ T6819] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 71.234015][ T6819] loop0: [ 71.245464][ T6824] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 71.371908][ T43] audit: type=1400 audit(1789539707.187:504): avc: denied { write } for pid=6826 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.594190][ T6844] binder: 6843:6844 ioctl c0306201 2000000000c0 returned -22 [ 72.030324][ T6864] mmap: syz.4.238 (6864) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.155855][ T30] cfg80211: failed to load regulatory.db [ 72.552196][ T6900] loop5: detected capacity change from 0 to 2640 [ 72.552945][ T6900] Buffer I/O error on dev loop5, logical block 0, async page read [ 72.552983][ T6900] Buffer I/O error on dev loop5, logical block 0, async page read [ 72.553008][ T6900] Buffer I/O error on dev loop5, logical block 0, async page read [ 72.553032][ T6900] Buffer I/O error on dev loop5, logical block 0, async page read [ 72.553056][ T6900] Buffer I/O error on dev loop5, logical block 0, async page read [ 72.553096][ T6900] Buffer I/O error on dev loop5, logical block 0, async page read [ 72.553131][ T6900] Buffer I/O error on dev loop5, logical block 0, async page read [ 72.553156][ T6900] Buffer I/O error on dev loop5, logical block 0, async page read [ 72.553170][ T6900] ldm_validate_partition_table(): Disk read failed. [ 72.553193][ T6900] Buffer I/O error on dev loop5, logical block 0, async page read [ 72.553215][ T6900] Buffer I/O error on dev loop5, logical block 0, async page read [ 72.553261][ T6900] Dev loop5: unable to read RDB block 0 [ 72.553386][ T6900] loop5: unable to read partition table [ 72.553521][ T6900] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 72.904880][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 72.930439][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 73.016872][ T6920] netlink: 40 bytes leftover after parsing attributes in process `syz.4.251'. [ 73.475428][ T6946] netlink: 'syz.4.259': attribute type 1 has an invalid length. [ 73.509317][ T6946] 8021q: adding VLAN 0 to HW filter on device bond3 [ 73.550898][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 73.550913][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'. [ 73.707408][ T2404] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 73.875870][ T2404] usb 6-1: Using ep0 maxpacket: 8 [ 73.876413][ T2404] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.877342][ T2404] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 73.877358][ T2404] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 73.877370][ T2404] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.877381][ T2404] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.877400][ T2404] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.072968][ T6969] loop9: detected capacity change from 0 to 524287998 [ 74.088861][ T2404] usb 6-1: GET_CAPABILITIES returned 0 [ 74.088885][ T2404] usbtmc 6-1:16.0: can't read capabilities [ 74.123036][ T6969] netlink: 36 bytes leftover after parsing attributes in process `syz.3.265'. [ 74.303311][ C2] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 74.332472][ T6979] netlink: 'syz.3.267': attribute type 142 has an invalid length. [ 74.488592][ T43] kauditd_printk_skb: 150 callbacks suppressed [ 74.488609][ T43] audit: type=1400 audit(1789539710.307:653): avc: denied { search } for pid=6981 comm="syz.3.268" name="/" dev="configfs" ino=3139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.488642][ T43] audit: type=1400 audit(1789539710.307:654): avc: denied { search } for pid=6981 comm="syz.3.268" name="usb_gadget" dev="configfs" ino=5736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.488825][ T43] audit: type=1400 audit(1789539710.307:655): avc: denied { search } for pid=6981 comm="syz.3.268" name="g1" dev="configfs" ino=16643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.490063][ T43] audit: type=1400 audit(1789539710.307:656): avc: denied { search } for pid=6981 comm="syz.3.268" name="functions" dev="configfs" ino=16644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.493342][ T43] audit: type=1400 audit(1789539710.307:657): avc: denied { write search } for pid=6981 comm="syz.3.268" name="c.1" dev="configfs" ino=16654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.504618][ T43] audit: type=1400 audit(1789539710.317:658): avc: denied { search } for pid=6981 comm="syz.3.268" name="/" dev="configfs" ino=3139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.504651][ T43] audit: type=1400 audit(1789539710.317:659): avc: denied { search } for pid=6981 comm="syz.3.268" name="usb_gadget" dev="configfs" ino=5736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.504671][ T43] audit: type=1400 audit(1789539710.317:660): avc: denied { search } for pid=6981 comm="syz.3.268" name="g1" dev="configfs" ino=16643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.671632][ T43] audit: type=1400 audit(1789539710.487:661): avc: denied { mount } for pid=6984 comm="syz.4.269" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.701056][ T43] audit: type=1400 audit(1789539710.517:662): avc: denied { unmount } for pid=6165 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.857068][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 74.985221][ T5851] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 75.110876][ T6998] Config c/1 of g1 needs at least one function. [ 75.111060][ T6998] udc dummy_udc.0: failed to start g1: -22 [ 75.111078][ T6998] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 75.111458][ T6998] UDC core: g1: couldn't find an available UDC or it's busy [ 75.379843][ T7015] FAULT_INJECTION: forcing a failure. [ 75.379843][ T7015] name failslab, interval 1, probability 0, space 0, times 0 [ 75.379866][ T7015] CPU: 2 UID: 0 PID: 7015 Comm: syz.3.279 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.379881][ T7015] Tainted: [L]=SOFTLOCKUP [ 75.379885][ T7015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.379891][ T7015] Call Trace: [ 75.379895][ T7015] [ 75.379900][ T7015] dump_stack_lvl+0x100/0x190 [ 75.379929][ T7015] should_fail_ex.cold+0x5/0xa [ 75.379945][ T7015] should_failslab+0xc2/0x120 [ 75.379963][ T7015] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 75.379977][ T7015] ? afs_proc_sysname_write+0x33f/0x7e0 [ 75.379997][ T7015] kmemdup_noprof+0x29/0x60 [ 75.380015][ T7015] afs_proc_sysname_write+0x33f/0x7e0 [ 75.380033][ T7015] ? __pfx_afs_proc_sysname_write+0x10/0x10 [ 75.380052][ T7015] ? _copy_from_user+0x59/0xd0 [ 75.380065][ T7015] proc_simple_write+0x10e/0x1a0 [ 75.380078][ T7015] ? __pfx_proc_simple_write+0x10/0x10 [ 75.380090][ T7015] proc_reg_write+0x240/0x330 [ 75.380107][ T7015] vfs_write+0x2aa/0x1050 [ 75.380119][ T7015] ? __pfx_proc_reg_write+0x10/0x10 [ 75.380135][ T7015] ? lock_acquire+0x1d1/0x380 [ 75.380147][ T7015] ? __fget_files+0x34/0x3d0 [ 75.380160][ T7015] ? __pfx_vfs_write+0x10/0x10 [ 75.380171][ T7015] ? find_held_lock+0x2b/0x80 [ 75.380186][ T7015] ? __fget_files+0x215/0x3d0 [ 75.380202][ T7015] ? __fget_files+0x21f/0x3d0 [ 75.380218][ T7015] ksys_write+0x12a/0x250 [ 75.380234][ T7015] ? __pfx_ksys_write+0x10/0x10 [ 75.380249][ T7015] do_syscall_64+0x123/0x790 [ 75.380269][ T7015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.380281][ T7015] RIP: 0033:0x7ff030f9e159 [ 75.380290][ T7015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.380301][ T7015] RSP: 002b:00007ff031ee4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.380312][ T7015] RAX: ffffffffffffffda RBX: 00007ff031225fa0 RCX: 00007ff030f9e159 [ 75.380319][ T7015] RDX: 0000000000000020 RSI: 0000200000000500 RDI: 0000000000000003 [ 75.380326][ T7015] RBP: 00007ff031ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 75.380332][ T7015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.380338][ T7015] R13: 00007ff031226038 R14: 00007ff031225fa0 R15: 00007ffed91d1ac8 [ 75.380352][ T7015] [ 75.619962][ T7029] loop0: detected capacity change from 0 to 4096 [ 75.625093][ T5851] usb 5-1: device descriptor read/64, error -71 [ 75.672750][ T7029] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 75.672767][ T7029] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 75.672774][ T7029] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 75.672799][ T7029] loop0: [ 75.885665][ T5851] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 75.934761][ T7041] x_tables: duplicate underflow at hook 3 [ 76.035273][ T5851] usb 5-1: Using ep0 maxpacket: 32 [ 76.037570][ T5851] usb 5-1: unable to get BOS descriptor or descriptor too short [ 76.037615][ T5851] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 76.042052][ T5851] usb 5-1: string descriptor 0 read error: -22 [ 76.042148][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.092990][ T5851] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 76.093012][ T5851] dw2102: su3000_power_ctrl: 1, initialized 0 [ 76.093221][ T5851] dvb-usb: bulk message failed: -22 (2/0) [ 76.126707][ T5851] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 76.128711][ T5851] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 76.128737][ T5851] usb 5-1: media controller created [ 76.128982][ T5851] dvb-usb: bulk message failed: -22 (6/0) [ 76.128993][ T5851] dw2102: i2c transfer failed. [ 76.129009][ T5851] dvb-usb: bulk message failed: -22 (6/0) [ 76.129016][ T5851] dw2102: i2c transfer failed. [ 76.129023][ T5851] dvb-usb: bulk message failed: -22 (6/0) [ 76.129030][ T5851] dw2102: i2c transfer failed. [ 76.129036][ T5851] dvb-usb: bulk message failed: -22 (6/0) [ 76.129043][ T5851] dw2102: i2c transfer failed. [ 76.129050][ T5851] dvb-usb: bulk message failed: -22 (6/0) [ 76.129056][ T5851] dw2102: i2c transfer failed. [ 76.129062][ T5851] dvb-usb: bulk message failed: -22 (6/0) [ 76.129069][ T5851] dw2102: i2c transfer failed. [ 76.129074][ T5851] dvb-usb: MAC address: 02:02:02:02:02:02 [ 76.170546][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 76.190902][ T5851] dvb-usb: bulk message failed: -22 (3/0) [ 76.190915][ T5851] dw2102: command 0x0e transfer failed. [ 76.190920][ T5851] dvb-usb: bulk message failed: -22 (3/0) [ 76.190928][ T5851] dw2102: command 0x0e transfer failed. [ 76.315370][ T5813] usb 6-1: USB disconnect, device number 4 [ 76.360094][ T7053] netlink: 144 bytes leftover after parsing attributes in process `syz.4.290'. [ 76.464112][ T7055] afs: Unknown parameter '0xffffffffffffffff' [ 76.497185][ T5851] dvb-usb: bulk message failed: -22 (3/0) [ 76.497202][ T5851] dw2102: command 0x0e transfer failed. [ 76.497207][ T5851] dvb-usb: bulk message failed: -22 (3/0) [ 76.497214][ T5851] dw2102: command 0x0e transfer failed. [ 76.497218][ T5851] dvb-usb: bulk message failed: -22 (1/0) [ 76.497225][ T5851] dw2102: command 0x51 transfer failed. [ 76.542237][ T5851] DVB: Unable to find symbol ds3000_attach() [ 76.542247][ T5851] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 76.586188][ T5851] rc_core: IR keymap rc-su3000 not found [ 76.586199][ T5851] Registered IR keymap rc-empty [ 76.586935][ T5851] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 76.593992][ T5851] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input5 [ 76.627506][ T5851] dvb-usb: schedule remote query interval to 150 msecs. [ 76.627522][ T5851] dw2102: su3000_power_ctrl: 0, initialized 1 [ 76.627530][ T5851] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 76.642329][ T5851] usb 5-1: USB disconnect, device number 8 [ 76.795871][ T5851] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 76.887563][ T7078] netlink: 40 bytes leftover after parsing attributes in process `syz.0.298'. [ 76.931264][ T7082] netlink: 'syz.1.301': attribute type 1 has an invalid length. [ 76.954651][ T7082] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.955172][ T25] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 77.004701][ T7089] loop1: detected capacity change from 0 to 2640 [ 77.006011][ T7089] ldm_validate_partition_table(): Disk read failed. [ 77.006050][ T7089] Dev loop1: unable to read RDB block 0 [ 77.006120][ T7089] loop1: unable to read partition table [ 77.007824][ T7089] loop_reread_partitions: partition scan of loop1 (3„ ¾‚³˜) failed (rc=-5) [ 77.105780][ T5851] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 77.135646][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 77.136417][ T25] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 77.138344][ T25] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.138362][ T25] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 77.138395][ T25] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.138425][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.181687][ T25] hub 9-1:1.0: bad descriptor, ignoring hub [ 77.181715][ T25] hub 9-1:1.0: probe with driver hub failed with error -5 [ 77.182149][ T25] cdc_wdm 9-1:1.0: skipping garbage [ 77.182163][ T25] cdc_wdm 9-1:1.0: skipping garbage [ 77.182240][ T25] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 77.269585][ T5851] usb 5-1: New USB device found, idVendor=1234, idProduct=0000, bcdDevice= 7.03 [ 77.272361][ T5851] usb 5-1: Dual-Role OTG device on HNP port [ 77.272646][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.507447][ T25] usb 9-1: USB disconnect, device number 2 [ 78.200954][ T7099] netlink: 52 bytes leftover after parsing attributes in process `syz.1.304'. [ 78.472696][ T7118] netlink: 'syz.3.310': attribute type 1 has an invalid length. [ 78.518509][ T7119] netlink: 40 bytes leftover after parsing attributes in process `syz.4.309'. [ 78.535552][ T7118] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.702581][ T7132] openvswitch: netlink: Missing key (keys=80040, expected=10000000) [ 78.732614][ T7135] Cannot find add_set index 0 as target [ 78.840793][ T7142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7142 comm=syz.3.315 [ 78.865152][ T7138] ipvlan2: entered allmulticast mode [ 78.865167][ T7138] batadv0: entered allmulticast mode [ 78.870289][ T7138] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 79.114239][ T7147] overlayfs: invalid origin (0000) [ 79.366881][ T7161] netlink: 'syz.0.319': attribute type 1 has an invalid length. [ 79.567369][ T7174] netlink: 40 bytes leftover after parsing attributes in process `syz.1.321'. [ 79.613157][ T43] kauditd_printk_skb: 87 callbacks suppressed [ 79.613170][ T43] audit: type=1400 audit(1789539715.427:750): avc: denied { read } for pid=7175 comm="syz.1.323" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 79.613354][ T43] audit: type=1400 audit(1789539715.427:751): avc: denied { open } for pid=7175 comm="syz.1.323" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 79.751469][ T7182] FAULT_INJECTION: forcing a failure. [ 79.751469][ T7182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.751491][ T7182] CPU: 0 UID: 0 PID: 7182 Comm: syz.4.325 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.751506][ T7182] Tainted: [L]=SOFTLOCKUP [ 79.751511][ T7182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.751518][ T7182] Call Trace: [ 79.751523][ T7182] [ 79.751528][ T7182] dump_stack_lvl+0x100/0x190 [ 79.751549][ T7182] should_fail_ex.cold+0x5/0xa [ 79.751593][ T7182] _copy_to_user+0x32/0xd0 [ 79.751611][ T7182] simple_read_from_buffer+0xcb/0x170 [ 79.751628][ T7182] proc_fail_nth_read+0x1af/0x230 [ 79.751644][ T7182] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.751660][ T7182] ? rw_verify_area+0xce/0x6d0 [ 79.751678][ T7182] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.751692][ T7182] vfs_read+0x1e4/0xb40 [ 79.751705][ T7182] ? lock_acquire+0x1d1/0x380 [ 79.751717][ T7182] ? __fget_files+0x34/0x3d0 [ 79.751732][ T7182] ? __pfx_vfs_read+0x10/0x10 [ 79.751743][ T7182] ? find_held_lock+0x2b/0x80 [ 79.751773][ T7182] ? __fget_files+0x215/0x3d0 [ 79.751792][ T7182] ? __fget_files+0x21f/0x3d0 [ 79.751810][ T7182] ksys_read+0x12a/0x250 [ 79.751822][ T7182] ? __pfx_ksys_read+0x10/0x10 [ 79.751839][ T7182] do_syscall_64+0x123/0x790 [ 79.751857][ T7182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.751870][ T7182] RIP: 0033:0x7f733a75e98e [ 79.751880][ T7182] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 79.751891][ T7182] RSP: 002b:00007f733b62bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.751904][ T7182] RAX: ffffffffffffffda RBX: 00007f733b62c6c0 RCX: 00007f733a75e98e [ 79.751911][ T7182] RDX: 000000000000000f RSI: 00007f733b62c0a0 RDI: 0000000000000004 [ 79.751918][ T7182] RBP: 00007f733b62c090 R08: 0000000000000000 R09: 0000000000000000 [ 79.751925][ T7182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.751932][ T7182] R13: 00007f733aa26038 R14: 00007f733aa25fa0 R15: 00007ffca5734a98 [ 79.751948][ T7182] [ 79.993666][ T43] audit: type=1400 audit(1789539715.807:752): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.028382][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 80.224788][ T7193] netlink: 40 bytes leftover after parsing attributes in process `syz.0.328'. [ 80.239778][ T7193] netlink: 40 bytes leftover after parsing attributes in process `syz.0.328'. [ 80.267317][ T7203] xt_hashlimit: size too large, truncated to 1048576 [ 80.282593][ T43] audit: type=1400 audit(1789539716.097:753): avc: denied { getattr } for pid=7194 comm="syz.4.329" path="socket:[17260]" dev="sockfs" ino=17260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.389568][ T43] audit: type=1400 audit(1789539716.207:754): avc: denied { setopt } for pid=7207 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.429251][ T5734] Bluetooth: hci0: command tx timeout [ 80.511733][ T7213] netlink: 40 bytes leftover after parsing attributes in process `syz.3.332'. [ 80.541917][ T7208] loop0: detected capacity change from 0 to 4096 [ 80.548425][ T43] audit: type=1400 audit(1789539716.367:755): avc: denied { write } for pid=7214 comm="syz.3.333" name="c.1" dev="configfs" ino=16654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.548937][ T5813] usb 5-1: USB disconnect, device number 9 [ 80.577372][ T7208] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 80.577389][ T7208] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 80.577397][ T7208] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 80.577424][ T7208] loop0: [ 80.640365][ T7218] netlink: 'syz.1.334': attribute type 1 has an invalid length. [ 80.706176][ T7218] 8021q: adding VLAN 0 to HW filter on device bond4 [ 80.856533][ T7231] netlink: 'syz.1.336': attribute type 2 has an invalid length. [ 80.856546][ T7231] netlink: 132 bytes leftover after parsing attributes in process `syz.1.336'. [ 81.083477][ T43] audit: type=1400 audit(1789539716.897:756): avc: denied { map } for pid=7234 comm="syz.3.337" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 81.233857][ T7251] FAULT_INJECTION: forcing a failure. [ 81.233857][ T7251] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 81.233881][ T7251] CPU: 2 UID: 0 PID: 7251 Comm: syz.3.340 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.233896][ T7251] Tainted: [L]=SOFTLOCKUP [ 81.233900][ T7251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.233906][ T7251] Call Trace: [ 81.233911][ T7251] [ 81.233915][ T7251] dump_stack_lvl+0x100/0x190 [ 81.233947][ T7251] should_fail_ex.cold+0x5/0xa [ 81.233961][ T7251] ? prepare_alloc_pages+0x16d/0x5b0 [ 81.233980][ T7251] should_fail_alloc_page+0xeb/0x140 [ 81.233996][ T7251] prepare_alloc_pages+0x1f0/0x5b0 [ 81.234012][ T7251] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 81.234030][ T7251] ? __lock_acquire+0x5c0/0x1f40 [ 81.234043][ T7251] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 81.234056][ T7251] ? __lock_acquire+0x5c0/0x1f40 [ 81.234069][ T7251] ? lock_acquire+0x1d1/0x380 [ 81.234081][ T7251] ? do_raw_spin_lock+0x128/0x260 [ 81.234095][ T7251] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 81.234109][ T7251] ? find_held_lock+0x2b/0x80 [ 81.234129][ T7251] ? __lock_acquire+0x5c0/0x1f40 [ 81.234141][ T7251] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.234155][ T7251] ? policy_nodemask+0xed/0x4f0 [ 81.234172][ T7251] alloc_pages_mpol+0x201/0x550 [ 81.234187][ T7251] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 81.234205][ T7251] folio_alloc_mpol_noprof+0x36/0x260 [ 81.234223][ T7251] shmem_alloc_folio+0x135/0x160 [ 81.234239][ T7251] shmem_alloc_and_add_folio+0x371/0xd40 [ 81.234259][ T7251] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 81.234277][ T7251] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 81.234296][ T7251] shmem_get_folio_gfp+0x75b/0x1980 [ 81.234316][ T7251] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 81.234335][ T7251] ? filemap_map_pages+0x1155/0x2060 [ 81.234349][ T7251] ? set_pte_range+0x489/0xa20 [ 81.234365][ T7251] shmem_fault+0x1fb/0xa30 [ 81.234382][ T7251] ? __pfx_shmem_fault+0x10/0x10 [ 81.234418][ T7251] ? __pfx_filemap_map_pages+0x10/0x10 [ 81.234436][ T7251] ? find_held_lock+0x2b/0x80 [ 81.234452][ T7251] ? __pfx_filemap_map_pages+0x10/0x10 [ 81.234466][ T7251] __do_fault+0x10b/0x440 [ 81.234478][ T7251] do_fault+0xb3f/0x1830 [ 81.234493][ T7251] ? __pfx_do_fault+0x10/0x10 [ 81.234505][ T7251] ? rcu_read_unlock+0x2d/0xb0 [ 81.234521][ T7251] ? rcu_read_unlock+0x2d/0xb0 [ 81.234537][ T7251] ? __pte_offset_map+0x179/0x310 [ 81.234551][ T7251] __handle_mm_fault+0x150b/0x2f60 [ 81.234570][ T7251] ? __pfx___handle_mm_fault+0x10/0x10 [ 81.234585][ T7251] ? __pfx_mt_find+0x10/0x10 [ 81.234614][ T7251] ? find_vma+0xbf/0x140 [ 81.234626][ T7251] ? __pfx_find_vma+0x10/0x10 [ 81.234639][ T7251] handle_mm_fault+0x363/0xa20 [ 81.234657][ T7251] do_user_addr_fault+0x745/0x12f0 [ 81.234677][ T7251] exc_page_fault+0x6f/0xd0 [ 81.234692][ T7251] asm_exc_page_fault+0x26/0x30 [ 81.234702][ T7251] RIP: 0010:fault_in_readable+0xde/0x190 [ 81.234714][ T7251] Code: 78 51 ac ff 4c 89 f0 48 85 c0 0f 85 bf 00 00 00 e8 87 57 ac ff 0f 01 cb 0f ae e8 4c 89 fb 4d 85 ff 75 31 eb 48 e8 72 57 ac ff <44> 8a 33 e8 6a 57 ac ff 48 81 c3 00 10 00 00 31 ff 48 81 e3 00 f0 [ 81.234725][ T7251] RSP: 0018:ffffc900073af790 EFLAGS: 00050293 [ 81.234735][ T7251] RAX: 0000000000000000 RBX: 0000200000010000 RCX: 0000000000000000 [ 81.234742][ T7251] RDX: ffff888034532580 RSI: ffffffff825fc5de RDI: ffff888034532580 [ 81.234749][ T7251] RBP: 0000200000019000 R08: 0000000000000006 R09: 0000200000019000 [ 81.234755][ T7251] R10: 0000200000010000 R11: 0000000000000000 R12: 0000000000018000 [ 81.234762][ T7251] R13: 1ffff92000e75ef3 R14: 0000000000000000 R15: 0000200000001000 [ 81.234773][ T7251] ? fault_in_readable+0xde/0x190 [ 81.234786][ T7251] ? __pfx_fault_in_readable+0x10/0x10 [ 81.234798][ T7251] ? I_BDEV+0xd/0x20 [ 81.234813][ T7251] ? inode_to_bdi+0x9e/0x160 [ 81.234829][ T7251] fault_in_iov_iter_readable+0x101/0x2c0 [ 81.234843][ T7251] iomap_file_buffered_write+0x433/0xab0 [ 81.234867][ T7251] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 81.234899][ T7251] ? filemap_check_errors+0xa9/0x150 [ 81.234918][ T7251] ? iov_iter_revert+0x252/0x5b0 [ 81.234931][ T7251] blkdev_write_iter+0x534/0xd30 [ 81.234947][ T7251] do_iter_readv_writev+0x6f7/0x930 [ 81.234966][ T7251] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 81.234983][ T7251] ? avc_policy_seqno+0x9/0x20 [ 81.234998][ T7251] ? selinux_file_permission+0x8f/0x6d0 [ 81.235013][ T7251] ? bpf_lsm_file_permission+0x9/0x10 [ 81.235027][ T7251] ? security_file_permission+0x76/0x210 [ 81.235041][ T7251] ? rw_verify_area+0xce/0x6d0 [ 81.235060][ T7251] vfs_writev+0x360/0xdd0 [ 81.235071][ T7251] ? __lock_acquire+0x5c0/0x1f40 [ 81.235085][ T7251] ? __pfx_vfs_writev+0x10/0x10 [ 81.235095][ T7251] ? find_held_lock+0x2b/0x80 [ 81.235113][ T7251] ? lock_acquire+0x1d1/0x380 [ 81.235125][ T7251] ? __fget_files+0x34/0x3d0 [ 81.235144][ T7251] ? __fget_files+0x21f/0x3d0 [ 81.235162][ T7251] ? do_pwritev+0x1ac/0x270 [ 81.235171][ T7251] do_pwritev+0x1ac/0x270 [ 81.235182][ T7251] ? __pfx_do_pwritev+0x10/0x10 [ 81.235193][ T7251] ? ksys_write+0x1ac/0x250 [ 81.235205][ T7251] ? __pfx_ksys_write+0x10/0x10 [ 81.235218][ T7251] __x64_sys_pwritev2+0xef/0x160 [ 81.235232][ T7251] do_syscall_64+0x123/0x790 [ 81.235249][ T7251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.235261][ T7251] RIP: 0033:0x7ff030f9e159 [ 81.235270][ T7251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.235281][ T7251] RSP: 002b:00007ff031ee4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 81.235292][ T7251] RAX: ffffffffffffffda RBX: 00007ff031225fa0 RCX: 00007ff030f9e159 [ 81.235299][ T7251] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 81.235305][ T7251] RBP: 00007ff031ee4090 R08: 0000000000000000 R09: 0000000000000003 [ 81.235312][ T7251] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000002 [ 81.235318][ T7251] R13: 00007ff031226038 R14: 00007ff031225fa0 R15: 00007ffed91d1ac8 [ 81.235333][ T7251] [ 81.344506][ T7256] ip6t_hbh: unknown flags 83 [ 81.355859][ T43] audit: type=1400 audit(1789539717.167:757): avc: denied { connect } for pid=7252 comm="syz.0.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.366132][ T43] audit: type=1400 audit(1789539717.177:758): avc: denied { write } for pid=7252 comm="syz.0.341" path="socket:[17330]" dev="sockfs" ino=17330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.368814][ T43] audit: type=1400 audit(1789539717.177:759): avc: denied { read } for pid=7252 comm="syz.0.341" path="socket:[17330]" dev="sockfs" ino=17330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.542933][ T7264] netlink: 44 bytes leftover after parsing attributes in process `syz.3.345'. [ 81.543625][ T7264] netlink: 44 bytes leftover after parsing attributes in process `syz.3.345'. [ 81.558917][ T7264] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 81.576605][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 82.145072][ T7281] PKCS7: Unsupported SignerInfo version [ 82.154343][ T7281] Invalid argument reading file caps for ./file0 [ 82.209047][ T7284] program syz.4.352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.371992][ T7294] netlink: 'syz.4.355': attribute type 1 has an invalid length. [ 82.433925][ T7294] 8021q: adding VLAN 0 to HW filter on device bond5 [ 82.470129][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'. [ 83.539737][ T7320] netlink: 'syz.4.363': attribute type 1 has an invalid length. [ 83.539759][ T7320] netlink: 'syz.4.363': attribute type 2 has an invalid length. [ 83.574707][ T7317] FAULT_INJECTION: forcing a failure. [ 83.574707][ T7317] name failslab, interval 1, probability 0, space 0, times 0 [ 83.574742][ T7317] CPU: 0 UID: 0 PID: 7317 Comm: syz.0.362 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.574766][ T7317] Tainted: [L]=SOFTLOCKUP [ 83.574773][ T7317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.574783][ T7317] Call Trace: [ 83.574789][ T7317] [ 83.574795][ T7317] dump_stack_lvl+0x100/0x190 [ 83.574826][ T7317] should_fail_ex.cold+0x5/0xa [ 83.574852][ T7317] should_failslab+0xc2/0x120 [ 83.574876][ T7317] kmem_cache_alloc_noprof+0x92/0x6a0 [ 83.574895][ T7317] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 83.574939][ T7317] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 83.574974][ T7317] mmu_topup_memory_caches+0x25/0x170 [ 83.574997][ T7317] kvm_mmu_load+0xe8/0x2580 [ 83.575017][ T7317] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 83.575043][ T7317] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 83.575072][ T7317] ? __pfx_kvm_mmu_load+0x10/0x10 [ 83.575093][ T7317] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 83.575112][ T7317] ? kvm_check_and_inject_events+0x896/0x1050 [ 83.575135][ T7317] vcpu_run+0x395d/0x5e80 [ 83.575153][ T7317] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 83.575174][ T7317] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 83.575209][ T7317] ? __pfx_vcpu_run+0x10/0x10 [ 83.575234][ T7317] ? lock_acquire+0x1d1/0x380 [ 83.575252][ T7317] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 83.575274][ T7317] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 83.575299][ T7317] ? __local_bh_enable_ip+0xa5/0x120 [ 83.575324][ T7317] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 83.575345][ T7317] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 83.575372][ T7317] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 83.575392][ T7317] ? lock_acquire+0x1d1/0x380 [ 83.575411][ T7317] ? do_raw_write_lock+0x11e/0x260 [ 83.575434][ T7317] ? find_held_lock+0x2b/0x80 [ 83.575457][ T7317] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 83.575480][ T7317] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 83.575507][ T7317] kvm_vcpu_ioctl+0x730/0x1700 [ 83.575534][ T7317] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 83.575580][ T7317] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.575604][ T7317] ? do_vfs_ioctl+0x226/0x13e0 [ 83.575621][ T7317] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 83.575635][ T7317] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 83.575666][ T7317] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 83.575690][ T7317] ? __fget_files+0x34/0x3d0 [ 83.575724][ T7317] ? selinux_file_ioctl+0x13b/0x290 [ 83.575741][ T7317] ? selinux_file_ioctl+0xb6/0x290 [ 83.575760][ T7317] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 83.575785][ T7317] __x64_sys_ioctl+0x18e/0x210 [ 83.575806][ T7317] do_syscall_64+0x123/0x790 [ 83.575833][ T7317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.575852][ T7317] RIP: 0033:0x7f606039e159 [ 83.575865][ T7317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.575881][ T7317] RSP: 002b:00007f60611af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.575900][ T7317] RAX: ffffffffffffffda RBX: 00007f6060625fa0 RCX: 00007f606039e159 [ 83.575912][ T7317] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 83.575923][ T7317] RBP: 00007f60611af090 R08: 0000000000000000 R09: 0000000000000000 [ 83.575934][ T7317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.575944][ T7317] R13: 00007f6060626038 R14: 00007f6060625fa0 R15: 00007ffdcb66caf8 [ 83.575969][ T7317] [ 84.122270][ T7241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 84.281608][ T7336] ±ÿª¨úrBº“€: renamed from lo (while UP) [ 84.431251][ T7345] netlink: 'syz.4.372': attribute type 13 has an invalid length. [ 84.431276][ T7345] netlink: 44 bytes leftover after parsing attributes in process `syz.4.372'. [ 84.647510][ T7360] FAULT_INJECTION: forcing a failure. [ 84.647510][ T7360] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 84.647532][ T7360] CPU: 0 UID: 0 PID: 7360 Comm: syz.0.377 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.647573][ T7360] Tainted: [L]=SOFTLOCKUP [ 84.647577][ T7360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.647584][ T7360] Call Trace: [ 84.647589][ T7360] [ 84.647595][ T7360] dump_stack_lvl+0x100/0x190 [ 84.647617][ T7360] should_fail_ex.cold+0x5/0xa [ 84.647631][ T7360] ? prepare_alloc_pages+0x16d/0x5b0 [ 84.647647][ T7360] should_fail_alloc_page+0xeb/0x140 [ 84.647662][ T7360] prepare_alloc_pages+0x1f0/0x5b0 [ 84.647679][ T7360] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 84.647697][ T7360] ? __lock_acquire+0x5c0/0x1f40 [ 84.647711][ T7360] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 84.647731][ T7360] ? __lock_acquire+0x5c0/0x1f40 [ 84.647744][ T7360] ? lock_acquire+0x1d1/0x380 [ 84.647755][ T7360] ? do_raw_spin_lock+0x128/0x260 [ 84.647770][ T7360] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 84.647797][ T7360] ? find_held_lock+0x2b/0x80 [ 84.647817][ T7360] ? __lock_acquire+0x5c0/0x1f40 [ 84.647829][ T7360] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.647843][ T7360] ? policy_nodemask+0xed/0x4f0 [ 84.647859][ T7360] alloc_pages_mpol+0x201/0x550 [ 84.647875][ T7360] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 84.647893][ T7360] folio_alloc_mpol_noprof+0x36/0x260 [ 84.647911][ T7360] shmem_alloc_folio+0x135/0x160 [ 84.647927][ T7360] shmem_alloc_and_add_folio+0x371/0xd40 [ 84.647946][ T7360] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 84.647964][ T7360] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 84.647984][ T7360] shmem_get_folio_gfp+0x75b/0x1980 [ 84.648003][ T7360] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 84.648022][ T7360] ? filemap_map_pages+0x1155/0x2060 [ 84.648039][ T7360] shmem_fault+0x1fb/0xa30 [ 84.648057][ T7360] ? __pfx_shmem_fault+0x10/0x10 [ 84.648075][ T7360] ? __pfx_filemap_map_pages+0x10/0x10 [ 84.648092][ T7360] ? find_held_lock+0x2b/0x80 [ 84.648109][ T7360] ? __pfx_filemap_map_pages+0x10/0x10 [ 84.648122][ T7360] __do_fault+0x10b/0x440 [ 84.648135][ T7360] do_fault+0xb3f/0x1830 [ 84.648150][ T7360] ? __pfx_do_fault+0x10/0x10 [ 84.648162][ T7360] ? rcu_read_unlock+0x2d/0xb0 [ 84.648178][ T7360] ? rcu_read_unlock+0x2d/0xb0 [ 84.648195][ T7360] ? __pte_offset_map+0x179/0x310 [ 84.648209][ T7360] __handle_mm_fault+0x150b/0x2f60 [ 84.648228][ T7360] ? __pfx___handle_mm_fault+0x10/0x10 [ 84.648243][ T7360] ? __pfx_mt_find+0x10/0x10 [ 84.648268][ T7360] ? find_vma+0xbf/0x140 [ 84.648280][ T7360] ? __pfx_find_vma+0x10/0x10 [ 84.648293][ T7360] handle_mm_fault+0x363/0xa20 [ 84.648312][ T7360] do_user_addr_fault+0x745/0x12f0 [ 84.648333][ T7360] exc_page_fault+0x6f/0xd0 [ 84.648348][ T7360] asm_exc_page_fault+0x26/0x30 [ 84.648359][ T7360] RIP: 0010:fault_in_readable+0xde/0x190 [ 84.648371][ T7360] Code: 78 51 ac ff 4c 89 f0 48 85 c0 0f 85 bf 00 00 00 e8 87 57 ac ff 0f 01 cb 0f ae e8 4c 89 fb 4d 85 ff 75 31 eb 48 e8 72 57 ac ff <44> 8a 33 e8 6a 57 ac ff 48 81 c3 00 10 00 00 31 ff 48 81 e3 00 f0 [ 84.648382][ T7360] RSP: 0018:ffffc90007a6f790 EFLAGS: 00050293 [ 84.648391][ T7360] RAX: 0000000000000000 RBX: 0000200000012000 RCX: 0000000000000000 [ 84.648398][ T7360] RDX: ffff88803f56cb00 RSI: ffffffff825fc5de RDI: ffff88803f56cb00 [ 84.648405][ T7360] RBP: 0000200000019000 R08: 0000000000000006 R09: 0000200000019000 [ 84.648411][ T7360] R10: 0000200000012000 R11: 0000000000000000 R12: 0000000000018000 [ 84.648418][ T7360] R13: 1ffff92000f4def3 R14: 0000000000000000 R15: 0000200000001000 [ 84.648429][ T7360] ? fault_in_readable+0xde/0x190 [ 84.648443][ T7360] ? __pfx_fault_in_readable+0x10/0x10 [ 84.648455][ T7360] ? I_BDEV+0xd/0x20 [ 84.648469][ T7360] ? inode_to_bdi+0x9e/0x160 [ 84.648481][ T7360] fault_in_iov_iter_readable+0x101/0x2c0 [ 84.648494][ T7360] iomap_file_buffered_write+0x433/0xab0 [ 84.648517][ T7360] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 84.648549][ T7360] ? filemap_check_errors+0xa9/0x150 [ 84.648567][ T7360] ? iov_iter_revert+0x252/0x5b0 [ 84.648581][ T7360] blkdev_write_iter+0x534/0xd30 [ 84.648596][ T7360] do_iter_readv_writev+0x6f7/0x930 [ 84.648614][ T7360] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 84.648631][ T7360] ? avc_policy_seqno+0x9/0x20 [ 84.648646][ T7360] ? selinux_file_permission+0x8f/0x6d0 [ 84.648660][ T7360] ? bpf_lsm_file_permission+0x9/0x10 [ 84.648674][ T7360] ? security_file_permission+0x76/0x210 [ 84.648688][ T7360] ? rw_verify_area+0xce/0x6d0 [ 84.648706][ T7360] vfs_writev+0x360/0xdd0 [ 84.648717][ T7360] ? __lock_acquire+0x5c0/0x1f40 [ 84.648741][ T7360] ? __pfx_vfs_writev+0x10/0x10 [ 84.648750][ T7360] ? find_held_lock+0x2b/0x80 [ 84.648768][ T7360] ? lock_acquire+0x1d1/0x380 [ 84.648780][ T7360] ? __fget_files+0x34/0x3d0 [ 84.648798][ T7360] ? __fget_files+0x21f/0x3d0 [ 84.648816][ T7360] ? do_pwritev+0x1ac/0x270 [ 84.648825][ T7360] do_pwritev+0x1ac/0x270 [ 84.648836][ T7360] ? __pfx_do_pwritev+0x10/0x10 [ 84.648847][ T7360] ? ksys_write+0x1ac/0x250 [ 84.648858][ T7360] ? __pfx_ksys_write+0x10/0x10 [ 84.648871][ T7360] __x64_sys_pwritev2+0xef/0x160 [ 84.648886][ T7360] do_syscall_64+0x123/0x790 [ 84.648902][ T7360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.648914][ T7360] RIP: 0033:0x7f606039e159 [ 84.648923][ T7360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.648933][ T7360] RSP: 002b:00007f60611af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 84.648943][ T7360] RAX: ffffffffffffffda RBX: 00007f6060625fa0 RCX: 00007f606039e159 [ 84.648951][ T7360] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 84.648958][ T7360] RBP: 00007f60611af090 R08: 0000000000000000 R09: 0000000000000003 [ 84.648965][ T7360] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000002 [ 84.648972][ T7360] R13: 00007f6060626038 R14: 00007f6060625fa0 R15: 00007ffdcb66caf8 [ 84.648987][ T7360] [ 84.720375][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 84.720392][ T43] audit: type=1400 audit(1789539720.537:781): avc: denied { read } for pid=7362 comm="syz.4.378" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 84.720693][ T43] audit: type=1400 audit(1789539720.537:782): avc: denied { open } for pid=7362 comm="syz.4.378" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 84.722135][ T43] audit: type=1400 audit(1789539720.537:783): avc: denied { bind } for pid=7362 comm="syz.4.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.908992][ T7366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.380'. [ 84.930782][ T43] audit: type=1400 audit(1789539720.737:784): avc: denied { ioctl } for pid=7365 comm="syz.3.380" path="socket:[18620]" dev="sockfs" ino=18620 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.944855][ T43] audit: type=1400 audit(1789539720.767:785): avc: denied { create } for pid=7367 comm="syz.0.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 84.956662][ T43] audit: type=1400 audit(1789539720.767:786): avc: denied { connect } for pid=7367 comm="syz.0.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 84.999215][ T43] audit: type=1400 audit(1789539720.817:787): avc: denied { ioctl } for pid=7362 comm="syz.4.378" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 85.098558][ T43] audit: type=1400 audit(1789539720.917:788): avc: denied { mount } for pid=7374 comm="syz.3.382" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 85.174281][ T7375] xt_bpf: check failed: parse error [ 85.176299][ T43] audit: type=1400 audit(1789539720.987:789): avc: denied { read } for pid=7379 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.248415][ T7386] netlink: 'syz.3.385': attribute type 1 has an invalid length. [ 85.260370][ T7386] 8021q: adding VLAN 0 to HW filter on device bond4 [ 85.324146][ T7389] FAULT_INJECTION: forcing a failure. [ 85.324146][ T7389] name failslab, interval 1, probability 0, space 0, times 0 [ 85.324177][ T7389] CPU: 0 UID: 0 PID: 7389 Comm: syz.3.386 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.324194][ T7389] Tainted: [L]=SOFTLOCKUP [ 85.324198][ T7389] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.324205][ T7389] Call Trace: [ 85.324210][ T7389] [ 85.324215][ T7389] dump_stack_lvl+0x100/0x190 [ 85.324237][ T7389] should_fail_ex.cold+0x5/0xa [ 85.324255][ T7389] should_failslab+0xc2/0x120 [ 85.324271][ T7389] __kmalloc_noprof+0xfc/0x840 [ 85.324283][ T7389] ? __lock_acquire+0x5c0/0x1f40 [ 85.324297][ T7389] ? ovl_cache_entry_new+0x64/0x9d0 [ 85.324320][ T7389] ovl_cache_entry_new+0x64/0x9d0 [ 85.324341][ T7389] ovl_fill_merge+0x7dd/0x1000 [ 85.324361][ T7389] ? __pfx_ovl_fill_merge+0x10/0x10 [ 85.324378][ T7389] ? _raw_spin_unlock+0x28/0x50 [ 85.324392][ T7389] ? fast_dput+0x168/0x6f0 [ 85.324405][ T7389] ? __pfx_ovl_fill_merge+0x10/0x10 [ 85.324422][ T7389] offset_readdir+0x2c3/0x780 [ 85.324437][ T7389] ? avc_has_perm+0x1b7/0x1e0 [ 85.324458][ T7389] iterate_dir+0x296/0xae0 [ 85.324474][ T7389] ovl_dir_read_merged+0x37e/0x790 [ 85.324493][ T7389] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 85.324514][ T7389] ? __pfx_ovl_fill_merge+0x10/0x10 [ 85.324534][ T7389] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 85.324553][ T7389] ? ovl_iterate+0xa74/0x10d0 [ 85.324572][ T7389] ovl_iterate+0xb2a/0x10d0 [ 85.324610][ T7389] ? __pfx_down_read_killable+0x10/0x10 [ 85.324631][ T7389] ? __pfx_ovl_iterate+0x10/0x10 [ 85.324648][ T7389] wrap_directory_iterator+0xa2/0xe0 [ 85.324662][ T7389] iterate_dir+0x296/0xae0 [ 85.324677][ T7389] ovl_dir_read_merged+0x37e/0x790 [ 85.324697][ T7389] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 85.324717][ T7389] ? __pfx_ovl_fill_merge+0x10/0x10 [ 85.324738][ T7389] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 85.324756][ T7389] ? ovl_iterate+0xa74/0x10d0 [ 85.324776][ T7389] ovl_iterate+0xb2a/0x10d0 [ 85.324794][ T7389] ? __pfx_down_read_killable+0x10/0x10 [ 85.324814][ T7389] ? __pfx_ovl_iterate+0x10/0x10 [ 85.324831][ T7389] wrap_directory_iterator+0xa2/0xe0 [ 85.324845][ T7389] iterate_dir+0x296/0xae0 [ 85.324860][ T7389] __x64_sys_getdents64+0x13b/0x2c0 [ 85.324874][ T7389] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 85.324887][ T7389] ? fput+0x7c/0x100 [ 85.324902][ T7389] ? __pfx_filldir64+0x10/0x10 [ 85.324920][ T7389] do_syscall_64+0x123/0x790 [ 85.324938][ T7389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.324951][ T7389] RIP: 0033:0x7ff030f9e159 [ 85.324961][ T7389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.324973][ T7389] RSP: 002b:00007ff031ee4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 85.324985][ T7389] RAX: ffffffffffffffda RBX: 00007ff031225fa0 RCX: 00007ff030f9e159 [ 85.324992][ T7389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 85.324999][ T7389] RBP: 00007ff031ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 85.325006][ T7389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.325013][ T7389] R13: 00007ff031226038 R14: 00007ff031225fa0 R15: 00007ffed91d1ac8 [ 85.325029][ T7389] [ 85.492819][ T7393] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 85.498835][ T5813] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 85.645213][ T5813] usb 5-1: Using ep0 maxpacket: 32 [ 85.646897][ T5813] usb 5-1: unable to get BOS descriptor or descriptor too short [ 85.646924][ T5813] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 85.649848][ T5813] usb 5-1: string descriptor 0 read error: -22 [ 85.649911][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.672500][ T5813] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 85.672523][ T5813] dw2102: su3000_power_ctrl: 1, initialized 0 [ 85.672533][ T5813] dvb-usb: bulk message failed: -22 (2/0) [ 85.684543][ T5813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 85.688324][ T5813] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 85.688355][ T5813] usb 5-1: media controller created [ 85.688370][ T5813] dvb-usb: bulk message failed: -22 (6/0) [ 85.688377][ T5813] dw2102: i2c transfer failed. [ 85.688384][ T5813] dvb-usb: bulk message failed: -22 (6/0) [ 85.688392][ T5813] dw2102: i2c transfer failed. [ 85.688397][ T5813] dvb-usb: bulk message failed: -22 (6/0) [ 85.688404][ T5813] dw2102: i2c transfer failed. [ 85.688410][ T5813] dvb-usb: bulk message failed: -22 (6/0) [ 85.688417][ T5813] dw2102: i2c transfer failed. [ 85.688424][ T5813] dvb-usb: bulk message failed: -22 (6/0) [ 85.688430][ T5813] dw2102: i2c transfer failed. [ 85.688437][ T5813] dvb-usb: bulk message failed: -22 (6/0) [ 85.688443][ T5813] dw2102: i2c transfer failed. [ 85.688447][ T5813] dvb-usb: MAC address: 02:02:02:02:02:02 [ 85.694601][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.737376][ T5813] dvb-usb: bulk message failed: -22 (3/0) [ 85.737409][ T5813] dw2102: command 0x0e transfer failed. [ 85.737415][ T5813] dvb-usb: bulk message failed: -22 (3/0) [ 85.737424][ T5813] dw2102: command 0x0e transfer failed. [ 85.941861][ T7406] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7406 comm=syz.4.393 [ 85.951089][ T7406] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7406 comm=syz.4.393 [ 86.045026][ T5813] dvb-usb: bulk message failed: -22 (3/0) [ 86.045041][ T5813] dw2102: command 0x0e transfer failed. [ 86.045046][ T5813] dvb-usb: bulk message failed: -22 (3/0) [ 86.045052][ T5813] dw2102: command 0x0e transfer failed. [ 86.045056][ T5813] dvb-usb: bulk message failed: -22 (1/0) [ 86.045063][ T5813] dw2102: command 0x51 transfer failed. [ 86.053375][ T7384] dw2102: i2c rd: len=132 is too big! [ 86.053375][ T7384] [ 86.078255][ T43] audit: type=1400 audit(1789539721.897:790): avc: denied { read write } for pid=7414 comm="syz.4.395" name="rtc0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 86.095712][ T7415] x_tables: duplicate underflow at hook 1 [ 86.100220][ T5813] DVB: Unable to find symbol ds3000_attach() [ 86.100231][ T5813] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 86.205018][ T5813] rc_core: IR keymap rc-su3000 not found [ 86.205031][ T5813] Registered IR keymap rc-empty [ 86.206421][ T5813] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 86.208397][ T5813] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input6 [ 86.210654][ T5813] dvb-usb: schedule remote query interval to 150 msecs. [ 86.210671][ T5813] dw2102: su3000_power_ctrl: 0, initialized 1 [ 86.210682][ T5813] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 86.233462][ T5813] usb 5-1: USB disconnect, device number 10 [ 86.300906][ T5813] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 86.503405][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'. [ 86.920148][ T7444] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.405'. [ 86.920164][ T7444] veth0_to_bond: default FDB implementation only supports local addresses [ 87.629875][ T7478] loop0: detected capacity change from 0 to 4096 [ 87.833485][ T7492] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 87.864676][ T7492] 8021q: adding VLAN 0 to HW filter on device bond6 [ 87.937138][ T7497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.422'. [ 87.937169][ T7497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.422'. [ 87.937183][ T7497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.422'. [ 88.109296][ T7504] usb usb5: usbfs: process 7504 (syz.3.425) did not claim interface 0 before use [ 88.335850][ T7511] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.408856][ T7521] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 88.559880][ T7527] FAULT_INJECTION: forcing a failure. [ 88.559880][ T7527] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 88.559913][ T7527] CPU: 0 UID: 0 PID: 7527 Comm: syz.0.434 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.559939][ T7527] Tainted: [L]=SOFTLOCKUP [ 88.559946][ T7527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.559957][ T7527] Call Trace: [ 88.559963][ T7527] [ 88.559985][ T7527] dump_stack_lvl+0x100/0x190 [ 88.560030][ T7527] should_fail_ex.cold+0x5/0xa [ 88.560051][ T7527] ? prepare_alloc_pages+0x16d/0x5b0 [ 88.560082][ T7527] should_fail_alloc_page+0xeb/0x140 [ 88.560109][ T7527] prepare_alloc_pages+0x1f0/0x5b0 [ 88.560137][ T7527] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 88.560175][ T7527] ? __lock_acquire+0x5c0/0x1f40 [ 88.560196][ T7527] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 88.560218][ T7527] ? __lock_acquire+0x5c0/0x1f40 [ 88.560240][ T7527] ? lock_acquire+0x1d1/0x380 [ 88.560259][ T7527] ? do_raw_spin_lock+0x128/0x260 [ 88.560282][ T7527] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 88.560305][ T7527] ? find_held_lock+0x2b/0x80 [ 88.560338][ T7527] ? __lock_acquire+0x5c0/0x1f40 [ 88.560359][ T7527] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.560382][ T7527] ? policy_nodemask+0xed/0x4f0 [ 88.560408][ T7527] alloc_pages_mpol+0x201/0x550 [ 88.560433][ T7527] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 88.560464][ T7527] folio_alloc_mpol_noprof+0x36/0x260 [ 88.560492][ T7527] shmem_alloc_folio+0x135/0x160 [ 88.560517][ T7527] shmem_alloc_and_add_folio+0x371/0xd40 [ 88.560550][ T7527] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 88.560578][ T7527] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 88.560611][ T7527] shmem_get_folio_gfp+0x75b/0x1980 [ 88.560644][ T7527] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 88.560672][ T7527] ? filemap_map_pages+0x1155/0x2060 [ 88.560701][ T7527] shmem_fault+0x1fb/0xa30 [ 88.560729][ T7527] ? __pfx_shmem_fault+0x10/0x10 [ 88.560759][ T7527] ? __pfx_filemap_map_pages+0x10/0x10 [ 88.560786][ T7527] ? find_held_lock+0x2b/0x80 [ 88.560813][ T7527] ? __pfx_filemap_map_pages+0x10/0x10 [ 88.560835][ T7527] __do_fault+0x10b/0x440 [ 88.560857][ T7527] do_fault+0xb3f/0x1830 [ 88.560881][ T7527] ? __pfx_do_fault+0x10/0x10 [ 88.560901][ T7527] ? rcu_read_unlock+0x2d/0xb0 [ 88.560927][ T7527] ? rcu_read_unlock+0x2d/0xb0 [ 88.560952][ T7527] ? __pte_offset_map+0x179/0x310 [ 88.560976][ T7527] __handle_mm_fault+0x150b/0x2f60 [ 88.561008][ T7527] ? __pfx___handle_mm_fault+0x10/0x10 [ 88.561032][ T7527] ? __pfx_mt_find+0x10/0x10 [ 88.561079][ T7527] ? find_vma+0xbf/0x140 [ 88.561098][ T7527] ? __pfx_find_vma+0x10/0x10 [ 88.561121][ T7527] handle_mm_fault+0x363/0xa20 [ 88.561157][ T7527] do_user_addr_fault+0x745/0x12f0 [ 88.561190][ T7527] exc_page_fault+0x6f/0xd0 [ 88.561214][ T7527] asm_exc_page_fault+0x26/0x30 [ 88.561232][ T7527] RIP: 0010:fault_in_readable+0xde/0x190 [ 88.561251][ T7527] Code: 78 51 ac ff 4c 89 f0 48 85 c0 0f 85 bf 00 00 00 e8 87 57 ac ff 0f 01 cb 0f ae e8 4c 89 fb 4d 85 ff 75 31 eb 48 e8 72 57 ac ff <44> 8a 33 e8 6a 57 ac ff 48 81 c3 00 10 00 00 31 ff 48 81 e3 00 f0 [ 88.561267][ T7527] RSP: 0018:ffffc900073bf790 EFLAGS: 00050293 [ 88.561283][ T7527] RAX: 0000000000000000 RBX: 0000200000012000 RCX: 0000000000000000 [ 88.561295][ T7527] RDX: ffff88802a49a580 RSI: ffffffff825fc5de RDI: ffff88802a49a580 [ 88.561307][ T7527] RBP: 0000200000019000 R08: 0000000000000006 R09: 0000200000019000 [ 88.561318][ T7527] R10: 0000200000012000 R11: 0000000000000000 R12: 0000000000018000 [ 88.561328][ T7527] R13: 1ffff92000e77ef3 R14: 0000000000000000 R15: 0000200000001000 [ 88.561348][ T7527] ? fault_in_readable+0xde/0x190 [ 88.561372][ T7527] ? __pfx_fault_in_readable+0x10/0x10 [ 88.561390][ T7527] ? I_BDEV+0xd/0x20 [ 88.561414][ T7527] ? inode_to_bdi+0x9e/0x160 [ 88.561434][ T7527] fault_in_iov_iter_readable+0x101/0x2c0 [ 88.561456][ T7527] iomap_file_buffered_write+0x433/0xab0 [ 88.561496][ T7527] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 88.561550][ T7527] ? filemap_check_errors+0xa9/0x150 [ 88.561580][ T7527] ? iov_iter_revert+0x252/0x5b0 [ 88.561602][ T7527] blkdev_write_iter+0x534/0xd30 [ 88.561629][ T7527] do_iter_readv_writev+0x6f7/0x930 [ 88.561659][ T7527] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 88.561684][ T7527] ? avc_policy_seqno+0x9/0x20 [ 88.561707][ T7527] ? selinux_file_permission+0x8f/0x6d0 [ 88.561731][ T7527] ? bpf_lsm_file_permission+0x9/0x10 [ 88.561754][ T7527] ? security_file_permission+0x76/0x210 [ 88.561776][ T7527] ? rw_verify_area+0xce/0x6d0 [ 88.561805][ T7527] vfs_writev+0x360/0xdd0 [ 88.561825][ T7527] ? __lock_acquire+0x5c0/0x1f40 [ 88.561847][ T7527] ? __pfx_vfs_writev+0x10/0x10 [ 88.561862][ T7527] ? find_held_lock+0x2b/0x80 [ 88.561893][ T7527] ? lock_acquire+0x1d1/0x380 [ 88.561911][ T7527] ? __fget_files+0x34/0x3d0 [ 88.561943][ T7527] ? __fget_files+0x21f/0x3d0 [ 88.561972][ T7527] ? do_pwritev+0x1ac/0x270 [ 88.561988][ T7527] do_pwritev+0x1ac/0x270 [ 88.562007][ T7527] ? __pfx_do_pwritev+0x10/0x10 [ 88.562024][ T7527] ? ksys_write+0x1ac/0x250 [ 88.562042][ T7527] ? __pfx_ksys_write+0x10/0x10 [ 88.562064][ T7527] __x64_sys_pwritev2+0xef/0x160 [ 88.562087][ T7527] do_syscall_64+0x123/0x790 [ 88.562115][ T7527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.562133][ T7527] RIP: 0033:0x7f606039e159 [ 88.562153][ T7527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.562169][ T7527] RSP: 002b:00007f60611af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 88.562186][ T7527] RAX: ffffffffffffffda RBX: 00007f6060625fa0 RCX: 00007f606039e159 [ 88.562197][ T7527] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 88.562207][ T7527] RBP: 00007f60611af090 R08: 0000000000000000 R09: 0000000000000003 [ 88.562218][ T7527] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000002 [ 88.562229][ T7527] R13: 00007f6060626038 R14: 00007f6060625fa0 R15: 00007ffdcb66caf8 [ 88.562255][ T7527] [ 88.836659][ T7534] FAULT_INJECTION: forcing a failure. [ 88.836659][ T7534] name failslab, interval 1, probability 0, space 0, times 0 [ 88.836681][ T7534] CPU: 2 UID: 0 PID: 7534 Comm: syz.1.437 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.836696][ T7534] Tainted: [L]=SOFTLOCKUP [ 88.836718][ T7534] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.836725][ T7534] Call Trace: [ 88.836729][ T7534] [ 88.836734][ T7534] dump_stack_lvl+0x100/0x190 [ 88.836754][ T7534] should_fail_ex.cold+0x5/0xa [ 88.836784][ T7534] should_failslab+0xc2/0x120 [ 88.836801][ T7534] kmem_cache_alloc_noprof+0x92/0x6a0 [ 88.836814][ T7534] ? do_getname+0x35/0x390 [ 88.836833][ T7534] do_getname+0x35/0x390 [ 88.836850][ T7534] __x64_sys_unlink+0x36/0x70 [ 88.836866][ T7534] do_syscall_64+0x123/0x790 [ 88.836883][ T7534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.836894][ T7534] RIP: 0033:0x7fbc8a79e159 [ 88.836904][ T7534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.836915][ T7534] RSP: 002b:00007fbc8b5bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 88.836926][ T7534] RAX: ffffffffffffffda RBX: 00007fbc8aa25fa0 RCX: 00007fbc8a79e159 [ 88.836933][ T7534] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 88.836940][ T7534] RBP: 00007fbc8b5bf090 R08: 0000000000000000 R09: 0000000000000000 [ 88.836946][ T7534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.836953][ T7534] R13: 00007fbc8aa26038 R14: 00007fbc8aa25fa0 R15: 00007fff751e2ae8 [ 88.836967][ T7534] [ 88.869944][ T7532] syzkaller0: entered promiscuous mode [ 88.869958][ T7532] syzkaller0: entered allmulticast mode [ 89.192830][ T7552] binder: 7550:7552 ioctl c0306201 200000000080 returned -14 [ 89.200944][ T7552] binder: 7550:7552 ioctl c0306201 2000000003c0 returned -14 [ 89.213506][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'. [ 89.213522][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'. [ 89.400240][ T7561] Bluetooth: MGMT ver 1.23 [ 89.499978][ T7564] FAULT_INJECTION: forcing a failure. [ 89.499978][ T7564] name failslab, interval 1, probability 0, space 0, times 0 [ 89.500006][ T7564] CPU: 0 UID: 0 PID: 7564 Comm: syz.4.447 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.500022][ T7564] Tainted: [L]=SOFTLOCKUP [ 89.500026][ T7564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.500032][ T7564] Call Trace: [ 89.500039][ T7564] [ 89.500044][ T7564] dump_stack_lvl+0x100/0x190 [ 89.500072][ T7564] should_fail_ex.cold+0x5/0xa [ 89.500095][ T7564] should_failslab+0xc2/0x120 [ 89.500122][ T7564] __kmalloc_noprof+0xfc/0x840 [ 89.500147][ T7564] ? __lock_acquire+0x5c0/0x1f40 [ 89.500185][ T7564] ? ovl_cache_entry_new+0x64/0x9d0 [ 89.500214][ T7564] ovl_cache_entry_new+0x64/0x9d0 [ 89.500233][ T7564] ovl_fill_merge+0x7dd/0x1000 [ 89.500252][ T7564] ? __pfx_ovl_fill_merge+0x10/0x10 [ 89.500267][ T7564] ? _raw_spin_unlock+0x28/0x50 [ 89.500285][ T7564] ? fast_dput+0x168/0x6f0 [ 89.500298][ T7564] ? __pfx_ovl_fill_merge+0x10/0x10 [ 89.500313][ T7564] offset_readdir+0x2c3/0x780 [ 89.500327][ T7564] ? avc_has_perm+0x1b7/0x1e0 [ 89.500347][ T7564] iterate_dir+0x296/0xae0 [ 89.500361][ T7564] ovl_dir_read_merged+0x37e/0x790 [ 89.500379][ T7564] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 89.500398][ T7564] ? __pfx_ovl_fill_merge+0x10/0x10 [ 89.500416][ T7564] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 89.500433][ T7564] ? ovl_iterate+0xa74/0x10d0 [ 89.500451][ T7564] ovl_iterate+0xb2a/0x10d0 [ 89.500468][ T7564] ? __pfx_down_read_killable+0x10/0x10 [ 89.500487][ T7564] ? __pfx_ovl_iterate+0x10/0x10 [ 89.500503][ T7564] wrap_directory_iterator+0xa2/0xe0 [ 89.500516][ T7564] iterate_dir+0x296/0xae0 [ 89.500530][ T7564] ovl_dir_read_merged+0x37e/0x790 [ 89.500547][ T7564] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 89.500566][ T7564] ? __pfx_ovl_fill_merge+0x10/0x10 [ 89.500585][ T7564] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 89.500602][ T7564] ? ovl_iterate+0xa74/0x10d0 [ 89.500620][ T7564] ovl_iterate+0xb2a/0x10d0 [ 89.500637][ T7564] ? __pfx_down_read_killable+0x10/0x10 [ 89.500657][ T7564] ? __pfx_ovl_iterate+0x10/0x10 [ 89.500672][ T7564] wrap_directory_iterator+0xa2/0xe0 [ 89.500685][ T7564] iterate_dir+0x296/0xae0 [ 89.500699][ T7564] __x64_sys_getdents64+0x13b/0x2c0 [ 89.500712][ T7564] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 89.500724][ T7564] ? fput+0x7c/0x100 [ 89.500738][ T7564] ? __pfx_filldir64+0x10/0x10 [ 89.500755][ T7564] do_syscall_64+0x123/0x790 [ 89.500772][ T7564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.500783][ T7564] RIP: 0033:0x7f733a79e159 [ 89.500793][ T7564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.500804][ T7564] RSP: 002b:00007f733b62c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 89.500818][ T7564] RAX: ffffffffffffffda RBX: 00007f733aa25fa0 RCX: 00007f733a79e159 [ 89.500825][ T7564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 89.500832][ T7564] RBP: 00007f733b62c090 R08: 0000000000000000 R09: 0000000000000000 [ 89.500838][ T7564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.500845][ T7564] R13: 00007f733aa26038 R14: 00007f733aa25fa0 R15: 00007ffca5734a98 [ 89.500860][ T7564] [ 89.704743][ T7569] tmpfs: Bad value for 'mpol' [ 89.837105][ T7574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7574 comm=syz.1.450 [ 90.067454][ T43] kauditd_printk_skb: 40 callbacks suppressed [ 90.067466][ T43] audit: type=1400 audit(1789539725.773:831): avc: denied { read } for pid=7591 comm="syz.4.457" name="event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 90.067489][ T43] audit: type=1400 audit(1789539725.773:832): avc: denied { open } for pid=7591 comm="syz.4.457" path="/dev/input/event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 90.193515][ T970] libceph: connect (2)127.0.0.1:6789 error -101 [ 90.193834][ T970] libceph: ceph_tcp_connect failed: -101 [ 90.193849][ T970] libceph: mon0 (2)127.0.0.1:6789 connect error [ 90.211975][ T970] libceph: connect (2)127.0.0.1:6789 error -101 [ 90.212131][ T970] libceph: ceph_tcp_connect failed: -101 [ 90.212145][ T970] libceph: mon0 (2)127.0.0.1:6789 connect error [ 90.259153][ T7606] overlayfs: overlapping lowerdir path [ 90.491511][ T970] libceph: connect (2)127.0.0.1:6789 error -101 [ 90.491696][ T970] libceph: ceph_tcp_connect failed: -101 [ 90.491710][ T970] libceph: mon0 (2)127.0.0.1:6789 connect error [ 90.550698][ T71] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 90.722448][ T71] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 90.724246][ T71] usb 9-1: config index 0 descriptor too short (expected 64906, got 45) [ 90.726682][ T71] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.726703][ T71] usb 9-1: Product: syz [ 90.726715][ T71] usb 9-1: Manufacturer: syz [ 90.726726][ T71] usb 9-1: SerialNumber: syz [ 90.948231][ T71] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 90.948260][ T71] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 90.948270][ T71] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 90.960894][ T71] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 90.964101][ T71] usb 9-1: USB disconnect, device number 3 [ 91.030952][ T7598] ceph: No mds server is up or the cluster is laggy [ 91.034858][ T970] libceph: connect (2)127.0.0.1:6789 error -101 [ 91.035023][ T970] libceph: ceph_tcp_connect failed: -101 [ 91.035037][ T970] libceph: mon0 (2)127.0.0.1:6789 connect error [ 91.172782][ T7617] netlink: 144 bytes leftover after parsing attributes in process `syz.1.464'. [ 91.187807][ T43] audit: type=1400 audit(1789539726.821:833): avc: denied { getopt } for pid=7615 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.301007][ T43] audit: type=1400 audit(1789539726.934:834): avc: denied { write } for pid=7618 comm="syz.3.466" path="socket:[19333]" dev="sockfs" ino=19333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.470334][ T43] audit: type=1400 audit(1789539727.093:835): avc: denied { read } for pid=7624 comm="syz.0.467" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.475332][ T43] audit: type=1400 audit(1789539727.093:836): avc: denied { ioctl } for pid=7624 comm="syz.0.467" path="socket:[20161]" dev="sockfs" ino=20161 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.613371][ T43] audit: type=1400 audit(1789539727.224:837): avc: denied { write } for pid=7628 comm="syz.4.468" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 91.613552][ T43] audit: type=1400 audit(1789539727.224:838): avc: denied { open } for pid=7628 comm="syz.4.468" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 91.613927][ T43] audit: type=1400 audit(1789539727.224:839): avc: denied { ioctl } for pid=7628 comm="syz.4.468" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x128a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 91.678754][ T7631] binder: 7629:7631 ioctl 40046205 0 returned -22 [ 91.766998][ T7640] loop5: detected capacity change from 0 to 2640 [ 91.768364][ T7640] buffer_io_error: 33 callbacks suppressed [ 91.768380][ T7640] Buffer I/O error on dev loop5, logical block 0, async page read [ 91.768410][ T7640] Buffer I/O error on dev loop5, logical block 0, async page read [ 91.768434][ T7640] Buffer I/O error on dev loop5, logical block 0, async page read [ 91.768458][ T7640] Buffer I/O error on dev loop5, logical block 0, async page read [ 91.768482][ T7640] Buffer I/O error on dev loop5, logical block 0, async page read [ 91.768518][ T7640] Buffer I/O error on dev loop5, logical block 0, async page read [ 91.768552][ T7640] Buffer I/O error on dev loop5, logical block 0, async page read [ 91.768575][ T7640] Buffer I/O error on dev loop5, logical block 0, async page read [ 91.768589][ T7640] ldm_validate_partition_table(): Disk read failed. [ 91.768617][ T7640] Buffer I/O error on dev loop5, logical block 0, async page read [ 91.768642][ T7640] Buffer I/O error on dev loop5, logical block 0, async page read [ 91.768680][ T7640] Dev loop5: unable to read RDB block 0 [ 91.772496][ T7640] loop5: unable to read partition table [ 91.772661][ T7640] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 91.837581][ T43] audit: type=1400 audit(1789539727.430:840): avc: denied { write } for pid=7641 comm="syz.0.475" name="c.1" dev="configfs" ino=16654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.934997][ T7646] FAULT_INJECTION: forcing a failure. [ 91.934997][ T7646] name failslab, interval 1, probability 0, space 0, times 0 [ 91.935021][ T7646] CPU: 2 UID: 0 PID: 7646 Comm: syz.0.477 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.935044][ T7646] Tainted: [L]=SOFTLOCKUP [ 91.935050][ T7646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.935059][ T7646] Call Trace: [ 91.935064][ T7646] [ 91.935070][ T7646] dump_stack_lvl+0x100/0x190 [ 91.935106][ T7646] should_fail_ex.cold+0x5/0xa [ 91.935127][ T7646] should_failslab+0xc2/0x120 [ 91.935144][ T7646] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 91.935159][ T7646] ? sidtab_sid2str_get+0x84/0x670 [ 91.935174][ T7646] ? sidtab_sid2str_get+0x17a/0x670 [ 91.935192][ T7646] kmemdup_noprof+0x29/0x60 [ 91.935209][ T7646] sidtab_sid2str_get+0x17a/0x670 [ 91.935224][ T7646] security_sid_to_context_core+0x373/0x700 [ 91.935239][ T7646] avc_audit_post_callback+0x109/0x910 [ 91.935255][ T7646] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 91.935271][ T7646] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 91.935285][ T7646] ? skb_put+0x138/0x180 [ 91.935312][ T7646] ? audit_log_n_string+0x2a3/0x5a0 [ 91.935328][ T7646] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 91.935343][ T7646] common_lsm_audit+0x23f/0x2b0 [ 91.935358][ T7646] ? __pfx_common_lsm_audit+0x10/0x10 [ 91.935373][ T7646] ? lockdep_hardirqs_on+0x7d/0x110 [ 91.935389][ T7646] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 91.935405][ T7646] slow_avc_audit+0x186/0x210 [ 91.935420][ T7646] ? __pfx_slow_avc_audit+0x10/0x10 [ 91.935438][ T7646] ? avc_denied+0x14a/0x190 [ 91.935454][ T7646] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 91.935471][ T7646] avc_has_perm+0x1a6/0x1e0 [ 91.935487][ T7646] ? __pfx_avc_has_perm+0x10/0x10 [ 91.935502][ T7646] ? hook_file_open+0x248/0x8e0 [ 91.935548][ T7646] inode_has_perm+0x166/0x1d0 [ 91.935569][ T7646] selinux_file_open+0x39d/0x510 [ 91.935583][ T7646] ? __pfx_selinux_file_open+0x10/0x10 [ 91.935598][ T7646] ? path_get+0x61/0x80 [ 91.935618][ T7646] security_file_open+0xd7/0x1e0 [ 91.935633][ T7646] do_dentry_open+0x588/0x14d0 [ 91.935650][ T7646] vfs_open+0x82/0x3f0 [ 91.935666][ T7646] path_openat+0x19fa/0x2440 [ 91.935681][ T7646] ? __pfx_path_openat+0x10/0x10 [ 91.935699][ T7646] do_file_open+0x20e/0x430 [ 91.935714][ T7646] ? __pfx_do_file_open+0x10/0x10 [ 91.935738][ T7646] ? _raw_spin_unlock+0x28/0x50 [ 91.935750][ T7646] ? alloc_fd+0x471/0x7a0 [ 91.935767][ T7646] do_sys_openat2+0x10f/0x1e0 [ 91.935782][ T7646] ? __pfx_do_sys_openat2+0x10/0x10 [ 91.935802][ T7646] __x64_sys_openat+0x12d/0x210 [ 91.935817][ T7646] ? __pfx___x64_sys_openat+0x10/0x10 [ 91.935841][ T7646] do_syscall_64+0x123/0x790 [ 91.935857][ T7646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.935868][ T7646] RIP: 0033:0x7f606039e159 [ 91.935879][ T7646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.935889][ T7646] RSP: 002b:00007f60611af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 91.935901][ T7646] RAX: ffffffffffffffda RBX: 00007f6060625fa0 RCX: 00007f606039e159 [ 91.935908][ T7646] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 91.935915][ T7646] RBP: 00007f606043506b R08: 0000000000000000 R09: 0000000000000000 [ 91.935921][ T7646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.935927][ T7646] R13: 00007f6060626038 R14: 00007f6060625fa0 R15: 00007ffdcb66caf8 [ 91.935942][ T7646] [ 92.110048][ T7655] netlink: 16 bytes leftover after parsing attributes in process `syz.1.479'. [ 92.110073][ T7655] netlink: 148 bytes leftover after parsing attributes in process `syz.1.479'. [ 92.127202][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.478'. [ 92.198779][ T2404] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 92.361588][ T2404] usb 5-1: New USB device found, idVendor=1234, idProduct=0000, bcdDevice= 7.03 [ 92.362121][ T2404] usb 5-1: Dual-Role OTG device on HNP port [ 92.362344][ T2404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.679389][ T7683] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 92.687686][ T7666] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 92.738770][ T7684] sctp: [Deprecated]: syz.1.486 (pid 7684) Use of int in max_burst socket option deprecated. [ 92.738770][ T7684] Use struct sctp_assoc_value instead [ 92.953374][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 92.953389][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.489'. [ 93.009044][ T7695] teql0: left allmulticast mode [ 93.060253][ T7698] overlay: Unknown parameter '/' [ 93.545086][ T7728] netlink: 'syz.0.501': attribute type 30 has an invalid length. [ 93.598327][ T7728] netlink: 'syz.0.501': attribute type 30 has an invalid length. [ 94.132223][ T7736] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 94.367809][ T7747] program syz.4.505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.547600][ T970] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 94.583641][ T5813] usb 5-1: USB disconnect, device number 11 [ 94.729936][ T970] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 94.731480][ T970] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.731541][ T970] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 94.731565][ T970] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 94.731597][ T970] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.777794][ T7774] FAULT_INJECTION: forcing a failure. [ 94.777794][ T7774] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 94.777817][ T7774] CPU: 2 UID: 0 PID: 7774 Comm: syz.0.510 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.777832][ T7774] Tainted: [L]=SOFTLOCKUP [ 94.777836][ T7774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.777842][ T7774] Call Trace: [ 94.777846][ T7774] [ 94.777851][ T7774] dump_stack_lvl+0x100/0x190 [ 94.777896][ T7774] should_fail_ex.cold+0x5/0xa [ 94.777909][ T7774] ? prepare_alloc_pages+0x16d/0x5b0 [ 94.777928][ T7774] should_fail_alloc_page+0xeb/0x140 [ 94.777944][ T7774] prepare_alloc_pages+0x1f0/0x5b0 [ 94.777960][ T7774] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 94.777978][ T7774] ? __lock_acquire+0x5c0/0x1f40 [ 94.777991][ T7774] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 94.778004][ T7774] ? __lock_acquire+0x5c0/0x1f40 [ 94.778017][ T7774] ? lock_acquire+0x1d1/0x380 [ 94.778029][ T7774] ? do_raw_spin_lock+0x128/0x260 [ 94.778043][ T7774] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 94.778057][ T7774] ? find_held_lock+0x2b/0x80 [ 94.778076][ T7774] ? __lock_acquire+0x5c0/0x1f40 [ 94.778088][ T7774] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.778102][ T7774] ? policy_nodemask+0xed/0x4f0 [ 94.778118][ T7774] alloc_pages_mpol+0x201/0x550 [ 94.778133][ T7774] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 94.778151][ T7774] folio_alloc_mpol_noprof+0x36/0x260 [ 94.778169][ T7774] shmem_alloc_folio+0x135/0x160 [ 94.778184][ T7774] shmem_alloc_and_add_folio+0x371/0xd40 [ 94.778208][ T7774] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 94.778226][ T7774] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 94.778245][ T7774] shmem_get_folio_gfp+0x75b/0x1980 [ 94.778265][ T7774] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 94.778283][ T7774] ? filemap_map_pages+0x1155/0x2060 [ 94.778300][ T7774] shmem_fault+0x1fb/0xa30 [ 94.778317][ T7774] ? __pfx_shmem_fault+0x10/0x10 [ 94.778335][ T7774] ? __pfx_filemap_map_pages+0x10/0x10 [ 94.778351][ T7774] ? find_held_lock+0x2b/0x80 [ 94.778368][ T7774] ? __pfx_filemap_map_pages+0x10/0x10 [ 94.778382][ T7774] __do_fault+0x10b/0x440 [ 94.778394][ T7774] do_fault+0xb3f/0x1830 [ 94.778410][ T7774] ? __pfx_do_fault+0x10/0x10 [ 94.778423][ T7774] ? rcu_read_unlock+0x2d/0xb0 [ 94.778438][ T7774] ? rcu_read_unlock+0x2d/0xb0 [ 94.778454][ T7774] ? __pte_offset_map+0x179/0x310 [ 94.778468][ T7774] __handle_mm_fault+0x150b/0x2f60 [ 94.778487][ T7774] ? __pfx___handle_mm_fault+0x10/0x10 [ 94.778502][ T7774] ? __pfx_mt_find+0x10/0x10 [ 94.778530][ T7774] ? find_vma+0xbf/0x140 [ 94.778542][ T7774] ? __pfx_find_vma+0x10/0x10 [ 94.778555][ T7774] handle_mm_fault+0x363/0xa20 [ 94.778574][ T7774] do_user_addr_fault+0x745/0x12f0 [ 94.778592][ T7774] exc_page_fault+0x6f/0xd0 [ 94.778607][ T7774] asm_exc_page_fault+0x26/0x30 [ 94.778618][ T7774] RIP: 0010:fault_in_readable+0xde/0x190 [ 94.778630][ T7774] Code: 78 51 ac ff 4c 89 f0 48 85 c0 0f 85 bf 00 00 00 e8 87 57 ac ff 0f 01 cb 0f ae e8 4c 89 fb 4d 85 ff 75 31 eb 48 e8 72 57 ac ff <44> 8a 33 e8 6a 57 ac ff 48 81 c3 00 10 00 00 31 ff 48 81 e3 00 f0 [ 94.778641][ T7774] RSP: 0018:ffffc900039c7790 EFLAGS: 00050293 [ 94.778651][ T7774] RAX: 0000000000000000 RBX: 0000200000014000 RCX: 0000000000000000 [ 94.778658][ T7774] RDX: ffff88804772cb00 RSI: ffffffff825fc5de RDI: ffff88804772cb00 [ 94.778665][ T7774] RBP: 0000200000019000 R08: 0000000000000006 R09: 0000200000019000 [ 94.778671][ T7774] R10: 0000200000014000 R11: 0000000000000000 R12: 0000000000018000 [ 94.778678][ T7774] R13: 1ffff92000738ef3 R14: 0000000000000000 R15: 0000200000001000 [ 94.778692][ T7774] ? fault_in_readable+0xde/0x190 [ 94.778706][ T7774] ? __pfx_fault_in_readable+0x10/0x10 [ 94.778717][ T7774] ? I_BDEV+0xd/0x20 [ 94.778732][ T7774] ? inode_to_bdi+0x9e/0x160 [ 94.778744][ T7774] fault_in_iov_iter_readable+0x101/0x2c0 [ 94.778757][ T7774] iomap_file_buffered_write+0x433/0xab0 [ 94.778780][ T7774] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 94.778811][ T7774] ? filemap_check_errors+0xa9/0x150 [ 94.778829][ T7774] ? iov_iter_revert+0x252/0x5b0 [ 94.778842][ T7774] blkdev_write_iter+0x534/0xd30 [ 94.778857][ T7774] do_iter_readv_writev+0x6f7/0x930 [ 94.778875][ T7774] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 94.778892][ T7774] ? avc_policy_seqno+0x9/0x20 [ 94.778906][ T7774] ? selinux_file_permission+0x8f/0x6d0 [ 94.778921][ T7774] ? bpf_lsm_file_permission+0x9/0x10 [ 94.778936][ T7774] ? security_file_permission+0x76/0x210 [ 94.778950][ T7774] ? rw_verify_area+0xce/0x6d0 [ 94.778968][ T7774] vfs_writev+0x360/0xdd0 [ 94.778979][ T7774] ? __lock_acquire+0x5c0/0x1f40 [ 94.778992][ T7774] ? __pfx_vfs_writev+0x10/0x10 [ 94.779001][ T7774] ? find_held_lock+0x2b/0x80 [ 94.779019][ T7774] ? lock_acquire+0x1d1/0x380 [ 94.779030][ T7774] ? __fget_files+0x34/0x3d0 [ 94.779049][ T7774] ? __fget_files+0x21f/0x3d0 [ 94.779066][ T7774] ? do_pwritev+0x1ac/0x270 [ 94.779075][ T7774] do_pwritev+0x1ac/0x270 [ 94.779086][ T7774] ? __pfx_do_pwritev+0x10/0x10 [ 94.779096][ T7774] ? ksys_write+0x1ac/0x250 [ 94.779107][ T7774] ? __pfx_ksys_write+0x10/0x10 [ 94.779120][ T7774] __x64_sys_pwritev2+0xef/0x160 [ 94.779134][ T7774] do_syscall_64+0x123/0x790 [ 94.779150][ T7774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.779162][ T7774] RIP: 0033:0x7f606039e159 [ 94.779170][ T7774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.779181][ T7774] RSP: 002b:00007f60611af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 94.779195][ T7774] RAX: ffffffffffffffda RBX: 00007f6060625fa0 RCX: 00007f606039e159 [ 94.779201][ T7774] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 94.779207][ T7774] RBP: 00007f60611af090 R08: 0000000000000000 R09: 0000000000000003 [ 94.779214][ T7774] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000002 [ 94.779220][ T7774] R13: 00007f6060626038 R14: 00007f6060625fa0 R15: 00007ffdcb66caf8 [ 94.779234][ T7774] [ 94.903788][ T7776] loop0: detected capacity change from 0 to 4096 [ 94.943287][ T7776] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 94.943303][ T7776] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 94.943310][ T7776] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 94.943335][ T7776] loop0: [ 95.163454][ T7791] cxacru 8-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 95.163602][ T7791] cxacru 8-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 95.178203][ T970] usb 8-1: USB disconnect, device number 10 [ 95.354514][ T7801] FAULT_INJECTION: forcing a failure. [ 95.354514][ T7801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.354535][ T7801] CPU: 0 UID: 0 PID: 7801 Comm: syz.0.515 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.354551][ T7801] Tainted: [L]=SOFTLOCKUP [ 95.354555][ T7801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.354561][ T7801] Call Trace: [ 95.354565][ T7801] [ 95.354569][ T7801] dump_stack_lvl+0x100/0x190 [ 95.354589][ T7801] should_fail_ex.cold+0x5/0xa [ 95.354604][ T7801] strncpy_from_user+0x3b/0x2d0 [ 95.354620][ T7801] do_getname+0x78/0x390 [ 95.354637][ T7801] __x64_sys_unlink+0x36/0x70 [ 95.354653][ T7801] do_syscall_64+0x123/0x790 [ 95.354670][ T7801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.354681][ T7801] RIP: 0033:0x7f606039e159 [ 95.354690][ T7801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.354701][ T7801] RSP: 002b:00007f60611af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 95.354712][ T7801] RAX: ffffffffffffffda RBX: 00007f6060625fa0 RCX: 00007f606039e159 [ 95.354719][ T7801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 95.354726][ T7801] RBP: 00007f60611af090 R08: 0000000000000000 R09: 0000000000000000 [ 95.354732][ T7801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.354738][ T7801] R13: 00007f6060626038 R14: 00007f6060625fa0 R15: 00007ffdcb66caf8 [ 95.354752][ T7801] [ 95.447861][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 95.447880][ T43] audit: type=1400 audit(1789539730.808:860): avc: denied { write } for pid=7803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.497019][ T43] audit: type=1400 audit(1789539730.845:861): avc: denied { write } for pid=7806 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.570354][ T43] audit: type=1400 audit(1789539730.920:862): avc: denied { write } for pid=7810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.620545][ T43] audit: type=1400 audit(1789539730.967:863): avc: denied { write } for pid=7813 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.665507][ T43] audit: type=1400 audit(1789539731.014:864): avc: denied { mount } for pid=7815 comm="syz.4.517" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 95.695286][ T43] audit: type=1400 audit(1789539731.042:865): avc: denied { write } for pid=7817 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.696295][ T43] audit: type=1400 audit(1789539731.042:866): avc: denied { unmount } for pid=6165 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 95.776103][ T5813] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 95.789714][ T5734] Bluetooth: hci1: command 0x0406 tx timeout [ 95.814446][ T43] audit: type=1400 audit(1789539731.145:867): avc: denied { write } for pid=7827 comm="syz.3.519" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 95.814455][ T7828] random: crng reseeded on system resumption [ 95.814476][ T43] audit: type=1400 audit(1789539731.145:868): avc: denied { open } for pid=7827 comm="syz.3.519" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 95.820277][ T43] audit: type=1400 audit(1789539731.163:869): avc: denied { write } for pid=7822 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.857762][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.519'. [ 95.936611][ T5813] usb 5-1: Using ep0 maxpacket: 8 [ 95.937169][ T5813] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 95.941800][ T5813] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 95.941825][ T5813] usb 5-1: config 0 has no interface number 0 [ 95.941854][ T5813] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 95.941872][ T5813] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 95.941893][ T5813] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 95.941913][ T5813] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 95.941944][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.985676][ T5813] usb 5-1: config 0 descriptor?? [ 95.996617][ T5813] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 96.070203][ T7849] FAULT_INJECTION: forcing a failure. [ 96.070203][ T7849] name failslab, interval 1, probability 0, space 0, times 0 [ 96.070229][ T7849] CPU: 0 UID: 0 PID: 7849 Comm: syz.3.526 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.070244][ T7849] Tainted: [L]=SOFTLOCKUP [ 96.070248][ T7849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.070255][ T7849] Call Trace: [ 96.070259][ T7849] [ 96.070263][ T7849] dump_stack_lvl+0x100/0x190 [ 96.070283][ T7849] should_fail_ex.cold+0x5/0xa [ 96.070299][ T7849] should_failslab+0xc2/0x120 [ 96.070314][ T7849] __kmalloc_noprof+0xfc/0x840 [ 96.070325][ T7849] ? __lock_acquire+0x5c0/0x1f40 [ 96.070336][ T7849] ? ovl_cache_entry_new+0x64/0x9d0 [ 96.070355][ T7849] ovl_cache_entry_new+0x64/0x9d0 [ 96.070374][ T7849] ovl_fill_merge+0x7dd/0x1000 [ 96.070392][ T7849] ? __pfx_ovl_fill_merge+0x10/0x10 [ 96.070407][ T7849] ? _raw_spin_unlock+0x28/0x50 [ 96.070421][ T7849] ? fast_dput+0x168/0x6f0 [ 96.070433][ T7849] ? __pfx_ovl_fill_merge+0x10/0x10 [ 96.070448][ T7849] offset_readdir+0x2c3/0x780 [ 96.070462][ T7849] ? avc_has_perm+0x1b7/0x1e0 [ 96.070481][ T7849] iterate_dir+0x296/0xae0 [ 96.070495][ T7849] ovl_dir_read_merged+0x37e/0x790 [ 96.070513][ T7849] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 96.070531][ T7849] ? __pfx_ovl_fill_merge+0x10/0x10 [ 96.070550][ T7849] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 96.070567][ T7849] ? ovl_iterate+0xa74/0x10d0 [ 96.070585][ T7849] ovl_iterate+0xb2a/0x10d0 [ 96.070601][ T7849] ? __pfx_down_read_killable+0x10/0x10 [ 96.070620][ T7849] ? __pfx_ovl_iterate+0x10/0x10 [ 96.070635][ T7849] wrap_directory_iterator+0xa2/0xe0 [ 96.070648][ T7849] iterate_dir+0x296/0xae0 [ 96.070663][ T7849] ovl_dir_read_merged+0x37e/0x790 [ 96.070680][ T7849] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 96.070699][ T7849] ? __pfx_ovl_fill_merge+0x10/0x10 [ 96.070717][ T7849] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 96.070735][ T7849] ? ovl_iterate+0xa74/0x10d0 [ 96.070752][ T7849] ovl_iterate+0xb2a/0x10d0 [ 96.070769][ T7849] ? __pfx_down_read_killable+0x10/0x10 [ 96.070788][ T7849] ? __pfx_ovl_iterate+0x10/0x10 [ 96.070803][ T7849] wrap_directory_iterator+0xa2/0xe0 [ 96.070816][ T7849] iterate_dir+0x296/0xae0 [ 96.070829][ T7849] __x64_sys_getdents64+0x13b/0x2c0 [ 96.070842][ T7849] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 96.070854][ T7849] ? fput+0x7c/0x100 [ 96.070868][ T7849] ? __pfx_filldir64+0x10/0x10 [ 96.070884][ T7849] do_syscall_64+0x123/0x790 [ 96.070901][ T7849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.070913][ T7849] RIP: 0033:0x7ff030f9e159 [ 96.070922][ T7849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.070933][ T7849] RSP: 002b:00007ff031ee4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 96.070944][ T7849] RAX: ffffffffffffffda RBX: 00007ff031225fa0 RCX: 00007ff030f9e159 [ 96.070951][ T7849] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 96.070957][ T7849] RBP: 00007ff031ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 96.070963][ T7849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.070970][ T7849] R13: 00007ff031226038 R14: 00007ff031225fa0 R15: 00007ffed91d1ac8 [ 96.070984][ T7849] [ 96.222302][ C2] ================================================================== [ 96.222318][ C2] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 96.222362][ C2] Read of size 1 at addr ffff888035f300e8 by task syz.0.516/7809 [ 96.222378][ C2] [ 96.222390][ C2] CPU: 2 UID: 0 PID: 7809 Comm: syz.0.516 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.222416][ C2] Tainted: [L]=SOFTLOCKUP [ 96.222424][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.222435][ C2] Call Trace: [ 96.222443][ C2] [ 96.222451][ C2] dump_stack_lvl+0x100/0x190 [ 96.222480][ C2] print_report+0x13d/0x4b0 [ 96.222508][ C2] ? __virt_addr_valid+0x239/0x430 [ 96.222536][ C2] ? find_endpoint+0x2a3/0x2c0 [ 96.222561][ C2] kasan_report+0xdf/0x1c0 [ 96.222587][ C2] ? find_endpoint+0x2a3/0x2c0 [ 96.222616][ C2] find_endpoint+0x2a3/0x2c0 [ 96.222643][ C2] dummy_timer+0x500/0x3700 [ 96.222670][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 96.222694][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 96.222722][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 96.222741][ C2] ? mark_held_locks+0x40/0x70 [ 96.222761][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 96.222784][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 96.222801][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 96.222830][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 96.222858][ C2] handle_softirqs+0x1e6/0x9d0 [ 96.222881][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 96.222901][ C2] ? _raw_spin_unlock+0x28/0x50 [ 96.222921][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 96.222951][ C2] __irq_exit_rcu+0x16a/0x210 [ 96.222971][ C2] irq_exit_rcu+0x9/0x30 [ 96.222990][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 96.223036][ C2] [ 96.223042][ C2] [ 96.223050][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.223071][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 96.223096][ C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 79 13 f6 48 89 df e8 3e d0 13 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 95 c6 02 f6 65 48 83 3d 74 94 b8 08 00 74 16 5b [ 96.223115][ C2] RSP: 0018:ffffc900062a7750 EFLAGS: 00000246 [ 96.223132][ C2] RAX: 0000000000000006 RBX: ffff88802a788000 RCX: 0000000000000040 [ 96.223144][ C2] RDX: 0000000000000001 RSI: ffffffff8e38baa7 RDI: ffffffff8c622e80 [ 96.223157][ C2] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 96.223169][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000040000000 [ 96.223181][ C2] R13: ffff88802b281478 R14: 0000000000000000 R15: ffff88802b281400 [ 96.223201][ C2] dummy_urb_enqueue+0x56c/0x880 [ 96.223223][ C2] usb_hcd_submit_urb+0x268/0x2150 [ 96.223246][ C2] usb_submit_urb+0x827/0x19b0 [ 96.223271][ C2] ld_usb_open+0x5c3/0x930 [ 96.223290][ C2] ? chrdev_open+0x589/0x6a0 [ 96.223312][ C2] ? __pfx_ld_usb_open+0x10/0x10 [ 96.223332][ C2] usb_open+0x189/0x220 [ 96.223350][ C2] ? __pfx_usb_open+0x10/0x10 [ 96.223368][ C2] chrdev_open+0x234/0x6a0 [ 96.223391][ C2] ? __pfx_chrdev_open+0x10/0x10 [ 96.223414][ C2] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 96.223446][ C2] do_dentry_open+0x6ab/0x14d0 [ 96.223467][ C2] ? __pfx_chrdev_open+0x10/0x10 [ 96.223518][ C2] vfs_open+0x82/0x3f0 [ 96.223546][ C2] path_openat+0x19fa/0x2440 [ 96.223571][ C2] ? __pfx_path_openat+0x10/0x10 [ 96.223598][ C2] do_file_open+0x20e/0x430 [ 96.223622][ C2] ? __pfx_do_file_open+0x10/0x10 [ 96.223653][ C2] ? _raw_spin_unlock+0x28/0x50 [ 96.223673][ C2] ? alloc_fd+0x471/0x7a0 [ 96.223699][ C2] do_sys_openat2+0x10f/0x1e0 [ 96.223724][ C2] ? __pfx_do_sys_openat2+0x10/0x10 [ 96.223750][ C2] ? __pfx_get_timespec64+0x10/0x10 [ 96.223774][ C2] __x64_sys_openat+0x12d/0x210 [ 96.223799][ C2] ? __pfx___x64_sys_openat+0x10/0x10 [ 96.223830][ C2] do_syscall_64+0x123/0x790 [ 96.223856][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.223875][ C2] RIP: 0033:0x7f606035e98e [ 96.223890][ C2] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.223907][ C2] RSP: 002b:00007f60611aeb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 96.223926][ C2] RAX: ffffffffffffffda RBX: 00007f60611af6c0 RCX: 00007f606035e98e [ 96.223938][ C2] RDX: 0000000000000002 RSI: 00007f60611aec00 RDI: ffffffffffffff9c [ 96.223951][ C2] RBP: 00007f606043506b R08: 0000000000000000 R09: 0000000000000000 [ 96.223963][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.223975][ C2] R13: 00007f6060626038 R14: 00007f6060625fa0 R15: 00007ffdcb66caf8 [ 96.223994][ C2] [ 96.224001][ C2] [ 96.224005][ C2] Allocated by task 7642: [ 96.224014][ C2] kasan_save_stack+0x30/0x50 [ 96.224034][ C2] kasan_save_track+0x14/0x30 [ 96.224053][ C2] __kasan_kmalloc+0xaa/0xb0 [ 96.224071][ C2] __kmalloc_noprof+0x32f/0x840 [ 96.224089][ C2] usb_copy_descriptors+0xcd/0x320 [ 96.224113][ C2] f_midi2_bind+0x1dad/0x2770 [ 96.224134][ C2] usb_add_function+0x219/0x890 [ 96.224158][ C2] configfs_composite_bind+0xd83/0x1960 [ 96.224182][ C2] gadget_bind_driver+0x28c/0xbf0 [ 96.224200][ C2] really_probe+0x241/0xa60 [ 96.224220][ C2] __driver_probe_device+0x210/0x460 [ 96.224239][ C2] driver_probe_device+0x4a/0x140 [ 96.224259][ C2] __driver_attach+0x21f/0x5b0 [ 96.224278][ C2] bus_for_each_dev+0x13e/0x1d0 [ 96.224303][ C2] bus_add_driver+0x305/0x5b0 [ 96.224320][ C2] driver_register+0x1e2/0x360 [ 96.224340][ C2] usb_gadget_register_driver_owner+0x132/0x210 [ 96.224359][ C2] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 96.224382][ C2] configfs_write_iter+0x302/0x4e0 [ 96.224408][ C2] vfs_write+0x6af/0x1050 [ 96.224424][ C2] ksys_write+0x12a/0x250 [ 96.224441][ C2] do_syscall_64+0x123/0x790 [ 96.224463][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.224480][ C2] [ 96.224484][ C2] Freed by task 7761: [ 96.224492][ C2] kasan_save_stack+0x30/0x50 [ 96.224516][ C2] kasan_save_track+0x14/0x30 [ 96.224535][ C2] kasan_save_free_info+0x3b/0x70 [ 96.224560][ C2] __kasan_slab_free+0x5f/0x80 [ 96.224580][ C2] kfree+0x22b/0x6d0 [ 96.224603][ C2] usb_free_all_descriptors+0x81/0x1a0 [ 96.224627][ C2] purge_configs_funcs+0x285/0x510 [ 96.224649][ C2] configfs_composite_unbind+0xae/0x210 [ 96.224671][ C2] gadget_unbind_driver+0x20c/0x4f0 [ 96.224690][ C2] device_remove+0xcb/0x180 [ 96.224708][ C2] device_release_driver_internal+0x44e/0x620 [ 96.224731][ C2] driver_detach+0xd8/0x1b0 [ 96.224751][ C2] bus_remove_driver+0x13b/0x2e0 [ 96.224767][ C2] driver_unregister+0x76/0xb0 [ 96.224788][ C2] usb_gadget_unregister_driver+0x49/0x70 [ 96.224806][ C2] config_usb_cfg_unlink+0x8e/0x3e0 [ 96.224844][ C2] configfs_unlink+0x3cc/0x800 [ 96.224864][ C2] vfs_unlink+0x2f0/0xbd0 [ 96.224879][ C2] filename_unlinkat+0x408/0x730 [ 96.224902][ C2] __x64_sys_unlink+0x46/0x70 [ 96.224924][ C2] do_syscall_64+0x123/0x790 [ 96.224946][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.224963][ C2] [ 96.224968][ C2] The buggy address belongs to the object at ffff888035f30000 [ 96.224968][ C2] which belongs to the cache kmalloc-512 of size 512 [ 96.224983][ C2] The buggy address is located 232 bytes inside of [ 96.224983][ C2] freed 512-byte region [ffff888035f30000, ffff888035f30200) [ 96.225002][ C2] [ 96.225006][ C2] The buggy address belongs to the physical page: [ 96.225014][ C2] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888035f32400 pfn:0x35f30 [ 96.225032][ C2] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 96.225047][ C2] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 96.225065][ C2] page_type: f5(slab) [ 96.225081][ C2] raw: 00fff00000000240 ffff88801c042c80 ffffea000096d210 ffffea0000d91610 [ 96.225103][ C2] raw: ffff888035f32400 000000000010000c 00000000f5000000 0000000000000000 [ 96.225121][ C2] head: 00fff00000000240 ffff88801c042c80 ffffea000096d210 ffffea0000d91610 [ 96.225138][ C2] head: ffff888035f32400 000000000010000c 00000000f5000000 0000000000000000 [ 96.225155][ C2] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 96.225172][ C2] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 96.225182][ C2] page dumped because: kasan: bad access detected [ 96.225191][ C2] page_owner tracks the page as allocated [ 96.225198][ C2] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5736, tgid 5736 (syz-executor), ts 52137031567 [ 96.225228][ C2] post_alloc_hook+0xfd/0x120 [ 96.225254][ C2] get_page_from_freelist+0x110d/0x35d0 [ 96.225280][ C2] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 96.225297][ C2] new_slab+0xa9/0x6e0 [ 96.225321][ C2] refill_objects+0xe3/0x410 [ 96.225337][ C2] __pcs_replace_empty_main+0x35e/0x650 [ 96.225362][ C2] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 96.225388][ C2] device_add+0xd3f/0x1970 [ 96.225410][ C2] rfkill_register+0x1ad/0xb30 [ 96.225430][ C2] wiphy_register+0x2857/0x3110 [ 96.225449][ C2] ieee80211_register_hw+0x3053/0x4580 [ 96.225474][ C2] mac80211_hwsim_new_radio+0x2b08/0x6510 [ 96.225497][ C2] hwsim_new_radio_nl+0xc6b/0x13f0 [ 96.225527][ C2] genl_family_rcv_msg_doit+0x214/0x300 [ 96.225549][ C2] genl_rcv_msg+0x560/0x800 [ 96.225569][ C2] netlink_rcv_skb+0x159/0x420 [ 96.225587][ C2] page last free pid 5130 tgid 5130 ts 52050499804 stack trace: [ 96.225600][ C2] __free_frozen_pages+0x79f/0x10f0 [ 96.225623][ C2] qlist_free_all+0x47/0xf0 [ 96.225639][ C2] kasan_quarantine_reduce+0x1a0/0x1f0 [ 96.225658][ C2] __kasan_slab_alloc+0x69/0x90 [ 96.225677][ C2] __kmalloc_cache_noprof+0x278/0x6d0 [ 96.225702][ C2] syslog_print+0xf8/0x620 [ 96.225719][ C2] do_syslog+0x5bd/0x6d0 [ 96.225738][ C2] __x64_sys_syslog+0x74/0xb0 [ 96.225758][ C2] do_syscall_64+0x123/0x790 [ 96.225780][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.225797][ C2] [ 96.225801][ C2] Memory state around the buggy address: [ 96.225810][ C2] ffff888035f2ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 96.225823][ C2] ffff888035f30000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.225836][ C2] >ffff888035f30080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.225846][ C2] ^ [ 96.225857][ C2] ffff888035f30100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.225869][ C2] ffff888035f30180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.225879][ C2] ================================================================== [ 96.225890][ C2] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 96.591113][ C2] CPU: 2 UID: 0 PID: 7809 Comm: syz.0.516 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.594393][ C2] Tainted: [L]=SOFTLOCKUP [ 96.595752][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.598873][ C2] Call Trace: [ 96.600382][ C2] [ 96.601316][ C2] dump_stack_lvl+0x100/0x190 [ 96.602814][ C2] vpanic+0x553/0x970 [ 96.604092][ C2] ? __pfx_vpanic+0x10/0x10 [ 96.605468][ C2] ? __pfx_vprintk_emit+0x10/0x10 [ 96.607092][ C2] ? find_endpoint+0x2a3/0x2c0 [ 96.608538][ C2] panic+0xd1/0xe0 [ 96.609653][ C2] ? __pfx_panic+0x10/0x10 [ 96.611023][ C2] ? end_report.part.0+0x23/0x90 [ 96.612536][ C2] ? rcu_is_watching+0x13/0xc0 [ 96.613989][ C2] ? end_report.part.0+0x23/0x90 [ 96.615529][ C2] check_panic_on_warn.cold+0x19/0x34 [ 96.617203][ C2] end_report.part.0+0x3a/0x90 [ 96.618720][ C2] kasan_report.cold+0xe/0x18 [ 96.620390][ C2] ? find_endpoint+0x2a3/0x2c0 [ 96.622012][ C2] find_endpoint+0x2a3/0x2c0 [ 96.623561][ C2] dummy_timer+0x500/0x3700 [ 96.624957][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 96.626776][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 96.628448][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 96.629947][ C2] ? mark_held_locks+0x40/0x70 [ 96.631377][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 96.633122][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 96.634622][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 96.636195][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 96.637695][ C2] handle_softirqs+0x1e6/0x9d0 [ 96.639143][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 96.640705][ C2] ? _raw_spin_unlock+0x28/0x50 [ 96.642182][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 96.643881][ C2] __irq_exit_rcu+0x16a/0x210 [ 96.645354][ C2] irq_exit_rcu+0x9/0x30 [ 96.646773][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 96.648563][ C2] [ 96.649533][ C2] [ 96.650496][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.652429][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 96.654350][ C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 79 13 f6 48 89 df e8 3e d0 13 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 95 c6 02 f6 65 48 83 3d 74 94 b8 08 00 74 16 5b [ 96.660017][ C2] RSP: 0018:ffffc900062a7750 EFLAGS: 00000246 [ 96.661813][ C2] RAX: 0000000000000006 RBX: ffff88802a788000 RCX: 0000000000000040 [ 96.664154][ C2] RDX: 0000000000000001 RSI: ffffffff8e38baa7 RDI: ffffffff8c622e80 [ 96.666496][ C2] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 96.668964][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000040000000 [ 96.671483][ C2] R13: ffff88802b281478 R14: 0000000000000000 R15: ffff88802b281400 [ 96.674096][ C2] dummy_urb_enqueue+0x56c/0x880 [ 96.675926][ C2] usb_hcd_submit_urb+0x268/0x2150 [ 96.677749][ C2] usb_submit_urb+0x827/0x19b0 [ 96.679294][ C2] ld_usb_open+0x5c3/0x930 [ 96.680713][ C2] ? chrdev_open+0x589/0x6a0 [ 96.682187][ C2] ? __pfx_ld_usb_open+0x10/0x10 [ 96.684042][ C2] usb_open+0x189/0x220 [ 96.685406][ C2] ? __pfx_usb_open+0x10/0x10 [ 96.686985][ C2] chrdev_open+0x234/0x6a0 [ 96.688508][ C2] ? __pfx_chrdev_open+0x10/0x10 [ 96.690228][ C2] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 96.692523][ C2] do_dentry_open+0x6ab/0x14d0 [ 96.694136][ C2] ? __pfx_chrdev_open+0x10/0x10 [ 96.695640][ C2] vfs_open+0x82/0x3f0 [ 96.696915][ C2] path_openat+0x19fa/0x2440 [ 96.698332][ C2] ? __pfx_path_openat+0x10/0x10 [ 96.700099][ C2] do_file_open+0x20e/0x430 [ 96.701663][ C2] ? __pfx_do_file_open+0x10/0x10 [ 96.703528][ C2] ? _raw_spin_unlock+0x28/0x50 [ 96.705091][ C2] ? alloc_fd+0x471/0x7a0 [ 96.706498][ C2] do_sys_openat2+0x10f/0x1e0 [ 96.708022][ C2] ? __pfx_do_sys_openat2+0x10/0x10 [ 96.709736][ C2] ? __pfx_get_timespec64+0x10/0x10 [ 96.711627][ C2] __x64_sys_openat+0x12d/0x210 [ 96.713376][ C2] ? __pfx___x64_sys_openat+0x10/0x10 [ 96.715244][ C2] do_syscall_64+0x123/0x790 [ 96.716884][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.719034][ C2] RIP: 0033:0x7f606035e98e [ 96.720484][ C2] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.726770][ C2] RSP: 002b:00007f60611aeb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 96.729383][ C2] RAX: ffffffffffffffda RBX: 00007f60611af6c0 RCX: 00007f606035e98e [ 96.731860][ C2] RDX: 0000000000000002 RSI: 00007f60611aec00 RDI: ffffffffffffff9c [ 96.734335][ C2] RBP: 00007f606043506b R08: 0000000000000000 R09: 0000000000000000 [ 96.736928][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.739673][ C2] R13: 00007f6060626038 R14: 00007f6060625fa0 R15: 00007ffdcb66caf8 [ 96.742547][ C2] [ 96.744239][ C2] Kernel Offset: disabled [ 96.745611][ C2] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:22:11 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000002 RCX=0000000000000000 RDX=ffff88802c974b00 RSI=ffffffff81ff5dae RDI=ffff88802c974b00 RBP=ffff88806a641900 RSP=ffffc90003967938 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100592ec13 R13=0000000000000003 R14=ffffed100d4c8321 R15=0000000000000001 RIP=ffffffff81ff5db0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556dc1c500 ffffffff 00c00000 GS =0000 ffff8880d5b59000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000fe9008 CR3=000000002731d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7372656c6c6f7274 6e6f632e70756f72 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed91d1fb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed91d1fb6 00007ffed91d1fbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff03103564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff03103568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0310357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff031035680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801f2ecb00 RSI=ffffffff81b6be9e RDI=ffff88801f2ecb00 RBP=0000000000000001 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=0000000000000000 RIP=ffffffff81b6be9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c59000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbc8b59ed58 CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000b00 000007f8ffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcb66cfe6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcb66cfe6 00007ffdcb66cfec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f606043564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f606043568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60604357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6060435680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60605f2600 00007f60605f25e0 00007f60605f25e8 00007f60605f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60605f25f8 00007f60605f25c8 00007f60605f2600 00007f60605f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000080000000000 003ac4a0a2f1494a 9c9ea3c9d3cae95d 6c7c80edbc94f6a8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 81580c9f7d248bd9 0c6d2108892e00a5 1aef03970ec78232 704fe8ebb8b41d6d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 502b3a45e53fd542 2c6e1484ee24971b 36e6ec584ede8309 e945d7e7ee9efec6 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 78561462efc4e8b8 d42a132e5e6ed9a6 cdf728ec86aac25d b6df6d2ffed4d014 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b0d415 RDI=ffffffff9bc6bca0 RBP=ffffffff9bc6bc60 RSP=ffffc900006583c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000037 R14=0000000000000001 R15=ffffc900006586e0 RIP=ffffffff85b0d43f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f60611af6c0 ffffffff 00c00000 GS =0000 ffff8880d5d59000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b32f23ffc CR3=000000003cc4e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020100001 Opmask01=00000000ffffffff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60611aebe0 0000003000000010 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcb66cfe6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcb66cfe6 00007ffdcb66cfec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f606043564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f606043568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60604357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6060435680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a732520656c6261 7462650064656c69 61662029736e7465 6e28736e74657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f56000540494744 514740004140494c 4443050c564b5140 4b0d564b51405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60605f25f8 00007f60605f25c8 00007f60605f2600 00007f60605f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801f2e8000 RSI=ffffffff81b6be9e RDI=ffff88801f2e8000 RBP=0000000000000003 RSP=ffffc900001a7df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000034fc4 R15=0000000000000000 RIP=ffffffff81b6be9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e59000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2db24008 CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656772656d5f6f 692e7166622e6f69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed91d1fb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed91d1fb6 00007ffed91d1fbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff03103564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff03103568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0310357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff031035680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000240 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 0000000000000240 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000