last executing test programs: 4.956178818s ago: executing program 2 (id=1187): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000900)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000940)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r0, r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 4.871940654s ago: executing program 2 (id=1189): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="0c005b000600650040000000ed57e9"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)='270', 0x3) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r8) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) 4.690226637s ago: executing program 2 (id=1193): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x3, 0xa, 0x0, 0xffffffff}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x20}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = userfaultfd(0x800) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000654000/0x1000)=nil, 0x1000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) close(r0) 3.70070882s ago: executing program 2 (id=1205): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000007c0), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000840)={0x0, 0x40000, 0x5000000d, 0x244, 0x9, '\x00=\x00'}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) io_setup(0x5, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x4, 0x0, 0x0, r2}]) 3.609757992s ago: executing program 2 (id=1207): syz_usb_connect(0x3, 0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdir(&(0x7f0000000340)='mnt\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x181102, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000480)={0x3, 0x7, 0x1e00, 0xde9a, 0x8, "020000006800006dce8d052b7ff20000f5ff00", 0x6, 0x1ff}) 2.450691297s ago: executing program 2 (id=1224): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0612fa"], 0x9) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x800202) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/85, 0x55}], 0x1, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x4, 0x208002) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xca, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0), 0xffffffffffffffff, 0x2000403, r1}, 0x38) 1.090650883s ago: executing program 1 (id=1244): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001700)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_io_uring_setup(0x111, 0x0, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000000100)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000005c0)=0x6) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) getpid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket(0x15, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000019c0)={0x0, 0x0, 0xfd8b, 0x5}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/mem_sleep', 0x20001, 0x18b) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2802, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f00000002c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x3c}}, 0x0) openat$sndtimer(0xffffff9c, &(0x7f00000000c0), 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, 0x0, 0x40080) 885.697622ms ago: executing program 3 (id=1253): syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xa, @loopback, 0x800002}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)={0x0, 0x2, '\x00', [@ra={0x5, 0x2, 0x8}, @generic={0x7f, 0xa, "91de5c12ebab4032a39e"}]}, 0x18) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 620.390344ms ago: executing program 3 (id=1247): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000340)={0x2, {0x2, 0x9fd, 0x0, 0x101, 0x13f}}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000900)='syzkaller\x00'}, 0x80) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r1, r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000009c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_TXQLEN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) syz_emit_ethernet(0x39, &(0x7f0000000ac0)={@remote, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x3, 0x67, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], "b7b560"}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/1/root/var/run\x00', 0x1ff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@broadcast, @in=@empty}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000700)=0xe4) mount$9p_virtio(&(0x7f0000000500), &(0x7f0000000540)='./proc\x00', &(0x7f0000000580), 0x1a42008, &(0x7f0000000740)={'trans=virtio,', {[{@aname={'aname', 0x3d, 'rpc_pips\x00\x00\x00'}}, {@aname={'aname', 0x3d, ':&[('}}, {@noextend}], [{@uid_eq}, {@uid_lt}, {@dont_measure}, {@fowner_eq}, {@smackfshat={'smackfshat', 0x3d, '/dev/ttyprintk\x00'}}]}}) r6 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs\x00', 0x179) mount(0x0, &(0x7f0000000240)='./pipefs\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(0x0, &(0x7f00000003c0)='./proc/net/rpc/use-gss-proxy\x00', &(0x7f0000000380), 0x800800, &(0x7f00000003c0)=ANY=[]) bind$unix(r6, &(0x7f0000000400)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r6, 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r7, &(0x7f00000004c0)='1', 0x1) 498.053267ms ago: executing program 3 (id=1248): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror', 0x1e) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a00100003801000001") 441.282582ms ago: executing program 0 (id=1249): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x5800, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_DEV_WAIT(r0, 0xc138fd08, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x160, 0x138, 0x0, 0x0, 0x80c00, 0x7e, 0x0, @by_dev={r1}, "b917c1be8f3a946c67637d6a11aad3990792916d2660fa26fbd364abbac6fb367b6d2af55b9a28c0"}) 441.075331ms ago: executing program 3 (id=1250): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendto(r2, &(0x7f00000001c0)="6800000030000505010000000000000000000000540001805000018009000100676174650000000040000280180002000000000000000000000000000000000000000000180008000300640000000c000700e803ffe400000000", 0x5a, 0x20001000, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="78110000", @ANYRES16=r4, @ANYBLOB="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"], 0x1178}, 0x1, 0x0, 0x0, 0x4008000}, 0x4080) 377.380449ms ago: executing program 0 (id=1251): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x25dfdbfe, [@sadb_address={0x5, 0x6, 0xff, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6, @private2, 0x9}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0xd2ef, @private1, 0xa}}]}, 0x70}, 0x1, 0x7}, 0x800) 377.198703ms ago: executing program 3 (id=1252): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) write$binfmt_script(r1, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "698efc4a970c20e519683303c2d20fb06287c5a9590b730a4126567f5c6ee431f97fa12babf477563697702d8961a8a9fd59d87ced46843f70e0401cc350ff0a3df974e5544dffc5d45e19"}, 0x56) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 359.632428ms ago: executing program 1 (id=1254): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/rfcomm0\x00', 0x802, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x5402, 0x0) 310.620793ms ago: executing program 0 (id=1255): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='sys_mnt\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @local}, @ib={0x1b, 0x0, 0x0, {}, 0xfffffffffffffffc, 0x1, 0x2}}}, 0x118) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) mount(0x0, 0x0, 0x0, 0x1800001, 0x0) write(r3, &(0x7f0000000100), 0x0) 310.276091ms ago: executing program 3 (id=1256): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(0x0, 0x101, 0x2f6040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@jmp={0x5, 0x1, 0x7, 0x0, 0x0, 0xfffffffffffffff4, 0x8}]}, &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x29, 0x5, 0x0) msgget$private(0x0, 0x11) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)={0x3a}, 0x8) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) 309.986075ms ago: executing program 0 (id=1257): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="0c005b000600650040000000ed57e9"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)='270', 0x3) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r8) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) 309.859185ms ago: executing program 1 (id=1258): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x404, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) link(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 230.775359ms ago: executing program 1 (id=1259): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror', 0x1e) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a00100003801000001") 230.650833ms ago: executing program 1 (id=1260): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x5800, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_DEV_WAIT(r0, 0xc138fd08, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x160, 0x138, 0x0, 0x0, 0x80c00, 0x7e, 0x0, @by_dev={r1}, "b917c1be8f3a946c67637d6a11aad3990792916d2660fa26fbd364abbac6fb367b6d2af55b9a28c0"}) 109.274484ms ago: executing program 1 (id=1261): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0xa, 0x9, 0x8, 0x2, 0x100}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r1, @ANYBLOB="0000000000000000850000001200000018010000b320642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="9e36d448d788dd965f7a33121800", 0x0, 0xfffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write(r0, &(0x7f0000000700)='1', 0x1) openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000400)=0xc) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000580)=0x5, 0x4) setsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f0000000440)=0x1, 0x4) r7 = syz_open_dev$vbi(&(0x7f0000000640), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0185647, &(0x7f0000000680)={0x0, 0x9, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0xe56a657eb850e849, 0x1, '\x00', @value=0x7fff}}) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f00000004c0)=0x80000000, 0x4) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', 0x1}) write$tun(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) write(r3, &(0x7f0000005b40)='1', 0x1) 108.846723ms ago: executing program 0 (id=1262): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf251200000008000300", @ANYRES32=r1, @ANYBLOB="0a0006000802110000010000050074000100"], 0x38}, 0x1, 0x0, 0x0, 0x48814}, 0x44000) 0s ago: executing program 0 (id=1263): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001700)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_io_uring_setup(0x111, 0x0, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000000100)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000005c0)=0x6) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) getpid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket(0x15, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000019c0)={0x0, 0x0, 0xfd8b, 0x5}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) kernel console output (not intermixed with test programs): ied { open } for pid=6502 comm="syz.1.217" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 63.381661][ T6509] Unknown cursor 12 [ 63.525019][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'. [ 63.531725][ T42] audit: type=1400 audit(1793985469.710:504): avc: denied { write } for pid=6515 comm="syz.0.222" name="sda" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.535444][ T42] audit: type=1400 audit(1793985469.710:505): avc: denied { bind } for pid=6515 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.535477][ T42] audit: type=1400 audit(1793985469.710:506): avc: denied { node_bind } for pid=6515 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 63.783987][ T6529] kAFS: No cell specified [ 63.809042][ T1245] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 63.971515][ T1245] usb 8-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 63.972462][ T1245] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.972498][ T1245] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.991382][ T1245] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 63.991539][ T1245] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 63.991586][ T1245] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 63.996471][ T1245] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 63.996532][ T1245] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 64.013523][ T1245] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 64.018056][ T1245] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 64.018117][ T1245] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 64.031085][ T1245] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 64.562258][ T6538] usb usb1: usbfs: process 6538 (syz.2.231) did not claim interface 0 before use [ 64.652453][ T6559] 8021q: VLANs not supported on sit0 [ 64.878343][ T6562] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 65.099330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 65.119446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 65.191244][ T6586] netlink: 40 bytes leftover after parsing attributes in process `syz.1.245'. [ 65.604579][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. [ 65.604594][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.251'. [ 65.691147][ T6604] netlink: 'syz.0.251': attribute type 4 has an invalid length. [ 65.691344][ T6604] netlink: 152 bytes leftover after parsing attributes in process `syz.0.251'. [ 65.722166][ T6604] .`: renamed from bond0 [ 66.012070][ T6609] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 66.579286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 66.627140][ T1245] usb 8-1: USB disconnect, device number 4 [ 66.632869][ T1245] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 66.651310][ T1245] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 66.651765][ T1245] keyspan 8-1:1.0: device disconnected [ 66.823928][ T6629] 8021q: VLANs not supported on sit0 [ 66.827978][ T6629] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 66.834211][ T6631] device-mapper: multipath round-robin: repeat_count > 1 is deprecated, using 1 instead [ 66.834667][ T6631] device-mapper: table: 248:1: multipath: error getting device (-ENOENT) [ 66.834681][ T6631] device-mapper: ioctl: error adding target to table [ 67.250019][ T6650] nfs4: Unknown parameter './proc/net/rpc/use-gss-proxy' [ 67.407735][ T6668] 8021q: VLANs not supported on sit0 [ 67.412382][ T6668] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 67.723497][ T6700] 8021q: VLANs not supported on sit0 [ 67.748995][ T6700] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 67.784316][ T6700] kvm: pic: level sensitive irq not supported [ 67.785797][ T6700] kvm: pic: non byte read [ 67.895788][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.307'. [ 67.897405][ T6729] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6729 comm=syz.0.306 [ 67.952479][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 67.952496][ T42] audit: type=1400 audit(1793985474.130:540): avc: denied { lock } for pid=6727 comm="syz.0.306" path="socket:[13722]" dev="sockfs" ino=13722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 68.083270][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.311'. [ 68.267822][ T6747] 8021q: VLANs not supported on sit0 [ 68.286197][ T6747] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 68.300143][ T6747] kvm: pic: level sensitive irq not supported [ 68.300490][ T6747] kvm: pic: non byte read [ 68.446718][ T6761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.320'. [ 68.581273][ T42] audit: type=1400 audit(1793985474.760:541): avc: denied { read } for pid=6774 comm="syz.2.328" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.581825][ T42] audit: type=1400 audit(1793985474.760:542): avc: denied { ioctl } for pid=6774 comm="syz.2.328" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x41015500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.711225][ T6781] xt_hashlimit: size too large, truncated to 1048576 [ 68.776007][ T42] audit: type=1400 audit(1793985474.950:543): avc: denied { create } for pid=6780 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.776391][ T42] audit: type=1400 audit(1793985474.950:544): avc: denied { listen } for pid=6780 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.777330][ T42] audit: type=1400 audit(1793985474.950:545): avc: denied { connect } for pid=6780 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.777685][ T42] audit: type=1400 audit(1793985474.950:546): avc: denied { write } for pid=6780 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.777943][ T42] audit: type=1400 audit(1793985474.950:547): avc: denied { accept } for pid=6780 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.820196][ T1365] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 68.969716][ T1365] usb 7-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 68.970711][ T1365] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.970750][ T1365] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.976916][ T1365] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 68.977106][ T1365] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 68.977159][ T1365] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 68.978327][ T1365] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 68.978388][ T1365] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 69.009049][ T1365] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 69.012571][ T1365] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 69.012640][ T1365] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 69.014161][ T1365] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 69.184864][ T34] usb 7-1: USB disconnect, device number 5 [ 69.194223][ T34] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 69.201404][ T34] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 69.201911][ T34] keyspan 7-1:1.0: device disconnected [ 70.685118][ T6812] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 70.692628][ T6812] kvm: pic: level sensitive irq not supported [ 70.693010][ T6812] kvm: pic: non byte read [ 70.865223][ T42] audit: type=1326 audit(1793985477.040:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.1.345" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff299fb19 code=0x7fc00000 [ 70.866196][ T42] audit: type=1326 audit(1793985477.040:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.1.345" exe="/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f4ff299fb19 code=0x7fc00000 [ 70.929285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 70.949446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 71.103157][ T6838] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 71.114719][ T6838] kvm: pic: level sensitive irq not supported [ 71.115283][ T6838] kvm: pic: non byte read [ 71.263820][ T1451] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.263864][ T1451] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.268108][ T6845] device-mapper: ioctl: Invalid ioctl structure: name m, dev f803 [ 71.272073][ T24] cfg80211: failed to load regulatory.db [ 71.370396][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'. [ 71.663612][ T6864] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 71.675989][ T6864] kvm: pic: level sensitive irq not supported [ 71.676881][ T6864] kvm: pic: non byte read [ 71.741861][ T6866] null_blk: disk nullb1 created [ 71.814586][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 71.956840][ T6888] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 71.973219][ T6888] kvm: pic: level sensitive irq not supported [ 71.973782][ T6888] kvm: pic: non byte read [ 72.249038][ T1245] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 72.347695][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'. [ 72.400926][ T1245] usb 8-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 72.402657][ T1245] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 65535, setting to 1024 [ 72.402677][ T1245] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 72.404620][ T1245] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.404634][ T1245] usb 8-1: Product: syz [ 72.404642][ T1245] usb 8-1: Manufacturer: syz [ 72.404649][ T1245] usb 8-1: SerialNumber: syz [ 72.408074][ T6894] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 72.415632][ T1245] usb 8-1: USB2VGA dongle found at address 5 [ 72.417090][ T1245] usb 8-1: Allocated 8 output buffers [ 72.458491][ T6905] tipc: Started in network mode [ 72.458510][ T6905] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 72.459894][ T6905] tipc: Enabled bearer , priority 10 [ 72.621904][ T1245] usb 8-1: Failed to early initialize device [ 72.631653][ T1245] usb 8-1: USB disconnect, device number 5 [ 73.129032][ T1245] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 73.176379][ T42] kauditd_printk_skb: 138 callbacks suppressed [ 73.176392][ T42] audit: type=1400 audit(1793985479.350:688): avc: denied { create } for pid=6929 comm="syz.3.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 73.176946][ T42] audit: type=1400 audit(1793985479.350:689): avc: denied { bind } for pid=6929 comm="syz.3.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 73.177452][ T42] audit: type=1400 audit(1793985479.350:690): avc: denied { listen } for pid=6929 comm="syz.3.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 73.281322][ T1245] usb 6-1: unable to get BOS descriptor or descriptor too short [ 73.281349][ T1245] usb 6-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 73.285212][ T1245] usb 6-1: config 142 has an invalid interface number: 251 but max is 0 [ 73.285228][ T1245] usb 6-1: config 142 descriptor has 1 excess byte, ignoring [ 73.285238][ T1245] usb 6-1: config 142 has no interface number 0 [ 73.285254][ T1245] usb 6-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 73.285268][ T1245] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 73.285280][ T1245] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 73.285291][ T1245] usb 6-1: config 142 interface 251 has no altsetting 0 [ 73.287539][ T1245] usb 6-1: string descriptor 0 read error: -22 [ 73.287612][ T1245] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.290578][ T6925] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 73.290696][ T6925] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 73.291628][ T1245] cypress_m8 6-1:142.251: HID->COM RS232 Adapter converter detected [ 73.293260][ T1245] usb 6-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 73.301324][ T6935] device-mapper: table: 248:4: crypt: Error decoding and setting key (-ENOKEY) [ 73.301339][ T6935] device-mapper: ioctl: error adding target to table [ 73.345766][ T42] audit: type=1400 audit(1793985479.520:691): avc: denied { ioctl } for pid=6934 comm="syz.0.394" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=14035 ioctlcmd=0xc018aa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 73.388050][ T42] audit: type=1400 audit(1793985479.560:692): avc: denied { write } for pid=6947 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.438436][ T42] audit: type=1400 audit(1793985479.610:693): avc: denied { write } for pid=6957 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.460409][ T34] libceph: connect (1)[c::]:6789 error -101 [ 73.460514][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 73.475441][ T34] libceph: connect (1)[c::]:6789 error -101 [ 73.475526][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 73.498540][ T6960] ceph: No mds server is up or the cluster is laggy [ 73.512588][ T42] audit: type=1400 audit(1793985479.690:694): avc: denied { write } for pid=6965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.580430][ T5888] tipc: Node number set to 10922666 [ 73.586710][ T42] audit: type=1400 audit(1793985479.760:695): avc: denied { create } for pid=6980 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 73.595158][ T42] audit: type=1400 audit(1793985479.770:696): avc: denied { getopt } for pid=6980 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 73.600292][ T42] audit: type=1400 audit(1793985479.780:697): avc: denied { write } for pid=6979 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.784315][ T1166] nvmet: connect request for invalid subsystem testsubsys! [ 73.784916][ T6995] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 74.061321][ T6925] cyphidcom ttyUSB0: cypress_serial_control - failed to retrieve serial line settings - -32 [ 74.061341][ T6925] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 74.061558][ C3] usb 6-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 74.332555][ T24] usb 6-1: USB disconnect, device number 3 [ 74.335586][ T24] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 74.335908][ T24] cypress_m8 6-1:142.251: device disconnected [ 74.929282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 75.442978][ T7051] FAULT_INJECTION: forcing a failure. [ 75.442978][ T7051] name failslab, interval 1, probability 0, space 0, times 0 [ 75.442999][ T7051] CPU: 3 UID: 0 PID: 7051 Comm: syz.3.433 Not tainted syzkaller #0 PREEMPT(full) [ 75.443014][ T7051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.443021][ T7051] Call Trace: [ 75.459925][ T7051] [ 75.459932][ T7051] dump_stack_lvl+0x100/0x190 [ 75.460011][ T7051] should_fail_ex.cold+0x5/0xa [ 75.460039][ T7051] should_failslab+0xc2/0x120 [ 75.460064][ T7051] kmem_cache_alloc_noprof+0x92/0x6a0 [ 75.460095][ T7051] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 75.460132][ T7051] ? acpi_ut_create_update_state+0x72/0x130 [ 75.460170][ T7051] acpi_ut_create_update_state+0x72/0x130 [ 75.460188][ T7051] acpi_ut_create_update_state_and_push+0x2f/0x70 [ 75.460203][ T7051] acpi_ut_update_object_reference+0x32f/0x800 [ 75.460224][ T7051] ? __pfx_acpi_ut_update_object_reference+0x10/0x10 [ 75.460247][ T7051] ? __pfx_acpi_ut_trace+0x10/0x10 [ 75.460262][ T7051] ? __pfx_acpi_ut_trace+0x10/0x10 [ 75.460278][ T7051] ? acpi_ut_status_exit+0x111/0x1c0 [ 75.460297][ T7051] acpi_ut_add_reference+0x80/0x170 [ 75.460316][ T7051] acpi_ex_resolve_node_to_value+0x7e1/0x9a0 [ 75.460346][ T7051] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 75.460367][ T7051] ? acpi_ds_create_operand+0x267/0xc20 [ 75.460385][ T7051] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 75.460405][ T7051] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 75.460425][ T7051] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 75.460442][ T7051] ? __asan_memset+0x23/0x50 [ 75.460462][ T7051] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 75.460482][ T7051] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 75.460501][ T7051] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 75.460517][ T7051] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 75.460535][ T7051] ? acpi_ut_trace_ptr+0x111/0x2a0 [ 75.460554][ T7051] acpi_ds_exec_end_op+0xb78/0x1e60 [ 75.460570][ T7051] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 75.460585][ T7051] acpi_ps_parse_loop+0x5e1/0x26e0 [ 75.460605][ T7051] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 75.460619][ T7051] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 75.460637][ T7051] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 75.460654][ T7051] ? acpi_ut_create_thread_state+0x6d/0x170 [ 75.460674][ T7051] acpi_ps_parse_aml+0x81e/0x1120 [ 75.460693][ T7051] acpi_ps_execute_method+0x5c4/0xe90 [ 75.460713][ T7051] acpi_ns_evaluate+0x640/0x1670 [ 75.460735][ T7051] acpi_ut_evaluate_object+0xf7/0x610 [ 75.460756][ T7051] acpi_rs_get_prt_method_data+0xa0/0x150 [ 75.460776][ T7051] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 75.460794][ T7051] ? acpi_ut_status_exit+0x111/0x1c0 [ 75.460812][ T7051] ? acpi_rs_validate_parameters+0x104/0x210 [ 75.460833][ T7051] acpi_get_irq_routing_table+0xb8/0x140 [ 75.460853][ T7051] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 75.460876][ T7051] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 75.460898][ T7051] ? preempt_schedule_thunk+0x16/0x40 [ 75.460917][ T7051] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 75.460941][ T7051] acpi_pci_irq_lookup+0x8e/0x6b0 [ 75.460960][ T7051] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 75.460984][ T7051] acpi_pci_irq_disable+0x1a8/0x360 [ 75.461002][ T7051] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 75.461021][ T7051] pcibios_disable_device+0x89/0xb0 [ 75.461040][ T7051] do_pci_disable_device+0x9f/0x100 [ 75.461069][ T7051] ? __pfx_do_pci_disable_device+0x10/0x10 [ 75.461089][ T7051] ? pci_release_region.part.0+0x15b/0x2e0 [ 75.461105][ T7051] pci_disable_device+0x130/0x270 [ 75.461124][ T7051] virtio_pci_remove+0xcf/0x110 [ 75.461151][ T7051] pci_device_remove+0xb2/0x1d0 [ 75.461166][ T7051] ? __pfx_pci_device_remove+0x10/0x10 [ 75.461184][ T7051] device_remove+0xcb/0x180 [ 75.461204][ T7051] device_release_driver_internal+0x441/0x610 [ 75.461224][ T7051] pci_stop_bus_device+0x120/0x160 [ 75.461246][ T7051] pci_stop_and_remove_bus_device+0x58/0xa0 [ 75.461265][ T7051] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 75.461284][ T7051] remove_store+0x123/0x140 [ 75.461304][ T7051] ? __pfx_remove_store+0x10/0x10 [ 75.461316][ T7051] ? find_held_lock+0x2b/0x80 [ 75.461350][ T7051] ? sysfs_file_kobj+0xe4/0x290 [ 75.461375][ T7051] ? sysfs_file_kobj+0xe4/0x290 [ 75.461392][ T7051] ? __pfx_remove_store+0x10/0x10 [ 75.461403][ T7051] dev_attr_store+0x58/0x80 [ 75.461420][ T7051] ? __pfx_dev_attr_store+0x10/0x10 [ 75.461439][ T7051] sysfs_kf_write+0xf2/0x150 [ 75.461457][ T7051] kernfs_fop_write_iter+0x3e0/0x5f0 [ 75.461472][ T7051] ? __pfx_sysfs_kf_write+0x10/0x10 [ 75.461491][ T7051] vfs_write+0x6af/0x1050 [ 75.461513][ T7051] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 75.461530][ T7051] ? __pfx_vfs_write+0x10/0x10 [ 75.461541][ T7051] ? find_held_lock+0x2b/0x80 [ 75.461566][ T7051] ksys_write+0x12a/0x250 [ 75.461579][ T7051] ? __pfx_ksys_write+0x10/0x10 [ 75.461597][ T7051] do_syscall_64+0x123/0x790 [ 75.461614][ T7051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.461628][ T7051] RIP: 0033:0x7fd1e359fb19 [ 75.461640][ T7051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.461650][ T7051] RSP: 002b:00007fd1e17f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.461662][ T7051] RAX: ffffffffffffffda RBX: 00007fd1e3825fa0 RCX: 00007fd1e359fb19 [ 75.461670][ T7051] RDX: 0000000000000001 RSI: 0000200000000ac0 RDI: 0000000000000008 [ 75.461684][ T7051] RBP: 00007fd1e3637b70 R08: 0000000000000000 R09: 0000000000000000 [ 75.461691][ T7051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.461698][ T7051] R13: 00007fd1e3826038 R14: 00007fd1e3825fa0 R15: 00007ffe20a9a2a8 [ 75.461713][ T7051] [ 75.554830][ T7051] ACPI Error: AE_NO_MEMORY, Could not update object reference count (20260408/utdelete-651) [ 75.578959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 75.949070][ T854] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 75.989321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 75.999339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 76.099726][ T854] usb 7-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 76.100896][ T854] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.100940][ T854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.108679][ T854] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 76.108798][ T854] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 76.108828][ T854] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 76.109473][ T854] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 76.109507][ T854] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 76.112972][ T854] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 76.113709][ T854] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 76.113746][ T854] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 76.116353][ T854] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 76.546095][ T1165] IPVS: starting estimator thread 0... [ 76.639107][ T7083] IPVS: using max 42 ests per chain, 100800 per kthread [ 77.096431][ T7100] FAULT_INJECTION: forcing a failure. [ 77.096431][ T7100] name failslab, interval 1, probability 0, space 0, times 0 [ 77.096452][ T7100] CPU: 2 UID: 0 PID: 7100 Comm: syz.3.454 Not tainted syzkaller #0 PREEMPT(full) [ 77.096466][ T7100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.096473][ T7100] Call Trace: [ 77.096477][ T7100] [ 77.096482][ T7100] dump_stack_lvl+0x100/0x190 [ 77.096505][ T7100] should_fail_ex.cold+0x5/0xa [ 77.096537][ T7100] should_failslab+0xc2/0x120 [ 77.096555][ T7100] kmem_cache_alloc_noprof+0x92/0x6a0 [ 77.096574][ T7100] ? mpol_set_shared_policy+0x466/0x850 [ 77.096592][ T7100] ? mpol_set_shared_policy+0x49b/0x850 [ 77.096612][ T7100] mpol_set_shared_policy+0x49b/0x850 [ 77.096633][ T7100] ? __pfx_shmem_set_policy+0x10/0x10 [ 77.096658][ T7100] mbind_range+0x339/0x550 [ 77.096677][ T7100] do_mbind+0x81a/0x1030 [ 77.096699][ T7100] ? __pfx_do_mbind+0x10/0x10 [ 77.096716][ T7100] ? find_held_lock+0x2b/0x80 [ 77.096732][ T7100] ? ksys_write+0x190/0x250 [ 77.096756][ T7100] ? __pfx_get_nodes+0x10/0x10 [ 77.096774][ T7100] kernel_mbind+0x1b7/0x200 [ 77.096792][ T7100] ? __pfx_kernel_mbind+0x10/0x10 [ 77.096813][ T7100] do_syscall_64+0x123/0x790 [ 77.096830][ T7100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.096843][ T7100] RIP: 0033:0x7fd1e359fb19 [ 77.096854][ T7100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.096865][ T7100] RSP: 002b:00007fd1e17f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 77.096877][ T7100] RAX: ffffffffffffffda RBX: 00007fd1e3825fa0 RCX: 00007fd1e359fb19 [ 77.096885][ T7100] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 77.096892][ T7100] RBP: 00007fd1e3637b70 R08: 0000000000000000 R09: 0000000000000000 [ 77.096898][ T7100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.096905][ T7100] R13: 00007fd1e3826038 R14: 00007fd1e3825fa0 R15: 00007ffe20a9a2a8 [ 77.096921][ T7100] [ 77.106345][ T7100] ubi0: attaching mtd0 [ 77.109902][ T7100] ubi0: scanning is finished [ 77.109913][ T7100] ubi0: empty MTD device detected [ 77.224167][ T7100] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 77.224185][ T7100] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 77.224195][ T7100] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 77.224204][ T7100] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 77.224214][ T7100] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 77.224223][ T7100] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 77.224232][ T7100] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4285067300 [ 77.224243][ T7100] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 77.224857][ T7102] ubi0: background thread "ubi_bgt0d" started, PID 7102 [ 77.346838][ T7106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.456'. [ 77.433606][ T7112] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 77.539342][ T5793] Bluetooth: hci2: unexpected event 0x2f length: 1017 > 255 [ 78.747972][ T5937] usb 7-1: USB disconnect, device number 6 [ 78.757203][ T5937] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 78.766606][ T5937] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 78.767110][ T5937] keyspan 7-1:1.0: device disconnected [ 78.932426][ T7134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.467'. [ 79.084637][ T7144] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 79.140893][ T7156] netlink: 20 bytes leftover after parsing attributes in process `syz.2.477'. [ 79.168758][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 79.168770][ T42] audit: type=1400 audit(1793985485.340:721): avc: denied { create } for pid=7162 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.172945][ T42] audit: type=1400 audit(1793985485.350:722): avc: denied { connect } for pid=7162 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.173897][ T42] audit: type=1400 audit(1793985485.350:723): avc: denied { ioctl } for pid=7162 comm="syz.2.480" path="socket:[16560]" dev="sockfs" ino=16560 ioctlcmd=0x80047437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.212416][ T42] audit: type=1400 audit(1793985485.390:724): avc: denied { write } for pid=7162 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.213435][ T42] audit: type=1400 audit(1793985485.390:725): avc: denied { read } for pid=7162 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.389127][ T5895] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 79.509205][ T7190] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 79.539940][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 79.569113][ T5895] usb 8-1: Using ep0 maxpacket: 8 [ 79.569572][ T5895] usb 8-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 79.570309][ T5895] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 79.570326][ T5895] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 79.570345][ T5895] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 79.570359][ T5895] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.570372][ T5895] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 79.570385][ T5895] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 79.570399][ T5895] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 79.570413][ T5895] usb 8-1: config 168 interface 0 has no altsetting 0 [ 79.571224][ T5895] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 79.571241][ T5895] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 79.571260][ T5895] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 79.571274][ T5895] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.571286][ T5895] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 79.571621][ T5895] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 79.571636][ T5895] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 79.571650][ T5895] usb 8-1: config 168 interface 0 has no altsetting 0 [ 79.572451][ T5895] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 79.572468][ T5895] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 79.572485][ T5895] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 79.572499][ T5895] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.572511][ T5895] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 79.572524][ T5895] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 79.572538][ T5895] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 79.572551][ T5895] usb 8-1: config 168 interface 0 has no altsetting 0 [ 79.574738][ T5895] usb 8-1: string descriptor 0 read error: -22 [ 79.574798][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.583220][ T5895] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 79.669041][ T24] usb 5-1: device descriptor read/64, error -71 [ 79.703518][ T42] audit: type=1400 audit(1793985485.880:726): avc: denied { read } for pid=7195 comm="syz.1.491" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 79.703716][ T42] audit: type=1400 audit(1793985485.880:727): avc: denied { open } for pid=7195 comm="syz.1.491" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 79.704097][ T42] audit: type=1400 audit(1793985485.880:728): avc: denied { ioctl } for pid=7195 comm="syz.1.491" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x40047438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 79.704719][ T42] audit: type=1400 audit(1793985485.880:729): avc: denied { create } for pid=7195 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.791518][ T5895] usb 8-1: USB disconnect, device number 6 [ 79.842908][ T42] audit: type=1400 audit(1793985486.020:730): avc: denied { ioctl } for pid=7197 comm="syz.1.492" path="socket:[16578]" dev="sockfs" ino=16578 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.909082][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 80.049361][ T24] usb 5-1: device descriptor read/64, error -71 [ 80.162474][ T24] usb usb5-port1: attempt power cycle [ 80.499105][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 80.520076][ T24] usb 5-1: device descriptor read/8, error -71 [ 80.614186][ T7220] netlink: 68 bytes leftover after parsing attributes in process `syz.1.500'. [ 80.759000][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 80.779412][ T24] usb 5-1: device descriptor read/8, error -71 [ 80.891276][ T24] usb usb5-port1: unable to enumerate USB device [ 81.059066][ T5895] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 81.210304][ T5895] usb 6-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 81.210342][ T5895] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 81.211293][ T5895] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.211318][ T5895] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.211333][ T5895] usb 6-1: config 0 interface 0 has no altsetting 0 [ 81.212545][ T5895] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.212572][ T5895] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.212586][ T5895] usb 6-1: config 0 interface 0 has no altsetting 0 [ 81.213512][ T5895] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.213541][ T5895] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.213559][ T5895] usb 6-1: config 0 interface 0 has no altsetting 0 [ 81.214657][ T5895] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.214685][ T5895] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.214702][ T5895] usb 6-1: config 0 interface 0 has no altsetting 0 [ 81.215733][ T5895] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.215768][ T5895] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.215790][ T5895] usb 6-1: config 0 interface 0 has no altsetting 0 [ 81.216857][ T5895] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.216892][ T5895] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.216913][ T5895] usb 6-1: config 0 interface 0 has no altsetting 0 [ 81.222285][ T5895] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.222309][ T5895] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.222323][ T5895] usb 6-1: config 0 interface 0 has no altsetting 0 [ 81.239463][ T5895] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.239506][ T5895] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.239528][ T5895] usb 6-1: config 0 interface 0 has no altsetting 0 [ 81.281955][ T5895] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 81.281979][ T5895] usb 6-1: Product: syz [ 81.281991][ T5895] usb 6-1: Manufacturer: syz [ 81.282004][ T5895] usb 6-1: SerialNumber: syz [ 81.284259][ T5895] usb 6-1: config 0 descriptor?? [ 81.297279][ T5895] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 81.369062][ T34] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 81.520889][ T34] usb 7-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 81.521905][ T34] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.521918][ T34] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 81.521936][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.579874][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.511'. [ 81.602775][ T7231] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 81.661242][ T5895] usb 6-1: USB disconnect, device number 4 [ 81.667628][ T5895] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 81.724230][ T7255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.514'. [ 81.788871][ T7257] syzkaller0: entered promiscuous mode [ 81.788893][ T7257] syzkaller0: entered allmulticast mode [ 82.214808][ T7230] Process accounting resumed [ 84.184260][ T1245] usb 7-1: USB disconnect, device number 7 [ 84.314389][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 84.314402][ T42] audit: type=1400 audit(1793985490.490:737): avc: denied { unmount } for pid=5785 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 84.661977][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 84.749076][ T5895] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 84.819746][ T24] usb 7-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 84.819783][ T24] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 84.821158][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.821193][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.821215][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 84.822119][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.822159][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.822181][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 84.823481][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.823502][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.823516][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 84.824764][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.824786][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.824800][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 84.825729][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.825755][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.825769][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 84.826537][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.826569][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.826588][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 84.827725][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.827752][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.827766][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 84.828860][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.828883][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.828974][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 84.838792][ T24] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 84.838808][ T24] usb 7-1: Product: syz [ 84.838816][ T24] usb 7-1: Manufacturer: syz [ 84.838823][ T24] usb 7-1: SerialNumber: syz [ 84.840673][ T24] usb 7-1: config 0 descriptor?? [ 84.846594][ T24] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 84.883830][ T5895] usb 6-1: device descriptor read/64, error -71 [ 85.129039][ T5895] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 85.158203][ T7303] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 85.204063][ T7323] e1000e 0000:00:02.0: resetting [ 85.241568][ T34] usb 7-1: USB disconnect, device number 8 [ 85.243731][ T7323] e1000e 0000:00:02.0: reset done [ 85.247983][ T34] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 85.259389][ T5895] usb 6-1: device descriptor read/64, error -71 [ 85.370501][ T5895] usb usb6-port1: attempt power cycle [ 85.491639][ T7328] netlink: 68 bytes leftover after parsing attributes in process `syz.0.544'. [ 85.492793][ T7328] netlink: 68 bytes leftover after parsing attributes in process `syz.0.544'. [ 85.494936][ T7328] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt [ 85.496120][ T7328] FAULT_INJECTION: forcing a failure. [ 85.496120][ T7328] name failslab, interval 1, probability 0, space 0, times 0 [ 85.496159][ T7328] CPU: 1 UID: 0 PID: 7328 Comm: syz.0.544 Not tainted syzkaller #0 PREEMPT(full) [ 85.496184][ T7328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.496197][ T7328] Call Trace: [ 85.496209][ T7328] [ 85.496217][ T7328] dump_stack_lvl+0x100/0x190 [ 85.496283][ T7328] should_fail_ex.cold+0x5/0xa [ 85.496326][ T7328] should_failslab+0xc2/0x120 [ 85.496364][ T7328] kmem_cache_alloc_noprof+0x92/0x6a0 [ 85.496405][ T7328] ? __lock_acquire+0x5c0/0x1f40 [ 85.496461][ T7328] ? __kernfs_new_node+0xd2/0xa10 [ 85.496498][ T7328] __kernfs_new_node+0xd2/0xa10 [ 85.496521][ T7328] ? lock_acquire+0x1d1/0x380 [ 85.496548][ T7328] ? __pfx___kernfs_new_node+0x10/0x10 [ 85.496571][ T7328] ? lock_acquire+0x1d1/0x380 [ 85.496597][ T7328] ? kernfs_root+0x23/0x2a0 [ 85.496626][ T7328] ? find_held_lock+0x2b/0x80 [ 85.496647][ T7328] ? kernfs_root+0xee/0x2a0 [ 85.496674][ T7328] ? kernfs_root+0xee/0x2a0 [ 85.496710][ T7328] kernfs_create_dir_ns+0xa4/0x2b0 [ 85.496737][ T7328] internal_create_group+0x36f/0xfb0 [ 85.496776][ T7328] ? bus_add_device+0x40f/0x6c0 [ 85.496800][ T7328] ? do_raw_spin_unlock+0x145/0x1e0 [ 85.496820][ T7328] ? __pfx_internal_create_group+0x10/0x10 [ 85.496850][ T7328] ? bus_add_device+0x2e2/0x6c0 [ 85.496871][ T7328] ? __pfx_bus_add_device+0x10/0x10 [ 85.496891][ T7328] ? __pfx_dev_add_physical_location+0x10/0x10 [ 85.496949][ T7328] dpm_sysfs_add+0x80/0x280 [ 85.496978][ T7328] device_add+0x9f4/0x1970 [ 85.497008][ T7328] ? __pfx_device_add+0x10/0x10 [ 85.497032][ T7328] ? __pfx_idr_replace+0x10/0x10 [ 85.497065][ T7328] ? dput.part.0+0x4a/0x240 [ 85.497094][ T7328] ? dput+0x24/0x30 [ 85.497116][ T7328] i2c_register_adapter+0x862/0x13f0 [ 85.497136][ T7328] ? of_alias_get_id+0xb1/0x110 [ 85.497165][ T7328] i801_probe.cold+0x30c/0x8bf [ 85.497198][ T7328] ? __pfx_i801_probe+0x10/0x10 [ 85.497227][ T7328] ? mark_held_locks+0x40/0x70 [ 85.497253][ T7328] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 85.497275][ T7328] ? lockdep_hardirqs_on+0x7d/0x110 [ 85.497298][ T7328] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 85.497320][ T7328] ? __pfx_i801_probe+0x10/0x10 [ 85.497340][ T7328] local_pci_probe+0xdd/0x1b0 [ 85.497378][ T7328] pci_call_probe+0x176/0x800 [ 85.497405][ T7328] ? pci_match_device+0x147/0x7d0 [ 85.497432][ T7328] ? __pfx_pci_call_probe+0x10/0x10 [ 85.497465][ T7328] ? __pfx_pci_match_device+0x10/0x10 [ 85.497490][ T7328] ? pci_find_host_bridge+0x3c/0x80 [ 85.497530][ T7328] pci_device_probe+0x25b/0x400 [ 85.497557][ T7328] ? __pfx_pci_device_probe+0x10/0x10 [ 85.497591][ T7328] ? sysfs_create_link+0x68/0xc0 [ 85.497621][ T7328] ? __pfx_pci_device_probe+0x10/0x10 [ 85.497650][ T7328] really_probe+0x241/0xa60 [ 85.497680][ T7328] __driver_probe_device+0x210/0x460 [ 85.497710][ T7328] device_driver_attach+0xaa/0x230 [ 85.497738][ T7328] bind_store+0xf4/0x190 [ 85.497762][ T7328] ? __pfx_bind_store+0x10/0x10 [ 85.497784][ T7328] drv_attr_store+0x74/0xb0 [ 85.497813][ T7328] ? __pfx_drv_attr_store+0x10/0x10 [ 85.497842][ T7328] sysfs_kf_write+0xf2/0x150 [ 85.497872][ T7328] kernfs_fop_write_iter+0x3e0/0x5f0 [ 85.497893][ T7328] ? __pfx_sysfs_kf_write+0x10/0x10 [ 85.497923][ T7328] vfs_write+0x6af/0x1050 [ 85.497957][ T7328] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 85.497986][ T7328] ? __pfx_vfs_write+0x10/0x10 [ 85.498006][ T7328] ? find_held_lock+0x2b/0x80 [ 85.498045][ T7328] ksys_write+0x12a/0x250 [ 85.498067][ T7328] ? __pfx_ksys_write+0x10/0x10 [ 85.498097][ T7328] do_syscall_64+0x123/0x790 [ 85.498123][ T7328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.498145][ T7328] RIP: 0033:0x7fe23819fb19 [ 85.498165][ T7328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.498184][ T7328] RSP: 002b:00007fe239023028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.498205][ T7328] RAX: ffffffffffffffda RBX: 00007fe238425fa0 RCX: 00007fe23819fb19 [ 85.498218][ T7328] RDX: 000000000000000c RSI: 00002000000005c0 RDI: 0000000000000005 [ 85.498231][ T7328] RBP: 00007fe238237b70 R08: 0000000000000000 R09: 0000000000000000 [ 85.498244][ T7328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.498255][ T7328] R13: 00007fe238426038 R14: 00007fe238425fa0 R15: 00007ffe29fdba58 [ 85.498284][ T7328] [ 85.508452][ T7328] i2c-core: adapter 'SMBus I801 adapter at 0000:00:1f.3': can't register device (-12) [ 85.508828][ T7328] i801_smbus 0000:00:1f.3: probe with driver i801_smbus failed with error -12 [ 85.540267][ T42] audit: type=1326 audit(1793985491.720:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7325 comm="syz.3.536" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e359fb19 code=0x7ffc0000 [ 85.540438][ T42] audit: type=1326 audit(1793985491.720:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7325 comm="syz.3.536" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e359fb19 code=0x7ffc0000 [ 85.542610][ T42] audit: type=1326 audit(1793985491.720:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7325 comm="syz.3.536" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd1e359fb19 code=0x7ffc0000 [ 85.542640][ T42] audit: type=1326 audit(1793985491.720:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7325 comm="syz.3.536" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e359fb19 code=0x7ffc0000 [ 85.542662][ T42] audit: type=1326 audit(1793985491.720:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7325 comm="syz.3.536" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e359fb19 code=0x7ffc0000 [ 85.544039][ T42] audit: type=1326 audit(1793985491.720:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7325 comm="syz.3.536" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd1e359fb19 code=0x7ffc0000 [ 85.544079][ T42] audit: type=1326 audit(1793985491.720:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7325 comm="syz.3.536" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e359fb19 code=0x7ffc0000 [ 85.544146][ T42] audit: type=1326 audit(1793985491.720:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7325 comm="syz.3.536" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e359fb19 code=0x7ffc0000 [ 85.556936][ T42] audit: type=1326 audit(1793985491.730:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7325 comm="syz.3.536" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1e356034e code=0x7ffc0000 [ 85.607778][ T7333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.538'. [ 85.709028][ T5895] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 85.729792][ T5895] usb 6-1: device descriptor read/8, error -71 [ 85.792959][ T7320] Process accounting resumed [ 85.799209][ T5888] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 85.960294][ T5888] usb 8-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 85.966248][ T5888] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.966385][ T5888] usb 8-1: Product: syz [ 85.966398][ T5888] usb 8-1: Manufacturer: syz [ 85.966410][ T5888] usb 8-1: SerialNumber: syz [ 85.980373][ T5895] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 85.994630][ T5888] usb 8-1: USB2VGA dongle found at address 7 [ 85.996568][ T5888] usb 8-1: Allocated 8 output buffers [ 86.000924][ T5895] usb 6-1: device descriptor read/8, error -71 [ 86.110091][ T5895] usb usb6-port1: unable to enumerate USB device [ 86.257594][ T5888] usb 8-1: Failed to early initialize device [ 86.267708][ T5888] usb 8-1: USB disconnect, device number 7 [ 87.371425][ T7359] e1000e 0000:00:02.0: resetting [ 87.407107][ T7359] e1000e 0000:00:02.0: reset done [ 87.540492][ T7367] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 87.548402][ T7367] Process accounting resumed [ 87.652475][ T7378] FAULT_INJECTION: forcing a failure. [ 87.652475][ T7378] name failslab, interval 1, probability 0, space 0, times 0 [ 87.652495][ T7378] CPU: 3 UID: 0 PID: 7378 Comm: syz.1.559 Not tainted syzkaller #0 PREEMPT(full) [ 87.652509][ T7378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.652516][ T7378] Call Trace: [ 87.652520][ T7378] [ 87.652525][ T7378] dump_stack_lvl+0x100/0x190 [ 87.652549][ T7378] should_fail_ex.cold+0x5/0xa [ 87.652568][ T7378] should_failslab+0xc2/0x120 [ 87.652583][ T7378] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 87.652605][ T7378] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 87.652628][ T7378] krealloc_node_align_noprof+0x321/0x3e0 [ 87.652649][ T7378] snd_pcm_hw_rule_add+0x3b3/0x510 [ 87.652668][ T7378] ? __pfx_snd_pcm_hw_rule_format+0x10/0x10 [ 87.652687][ T7378] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 87.652708][ T7378] ? mutex_init_lockdep+0xf1/0x120 [ 87.652739][ T7378] ? snd_pcm_attach_substream+0x287/0xd20 [ 87.652760][ T7378] snd_pcm_open_substream+0x54a/0x1850 [ 87.652778][ T7378] ? __kasan_kmalloc+0x50/0xb0 [ 87.652792][ T7378] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 87.652808][ T7378] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 87.652825][ T7378] ? snd_pcm_oss_open+0x5c5/0x1400 [ 87.652841][ T7378] snd_pcm_oss_open+0x715/0x1400 [ 87.652860][ T7378] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 87.652876][ T7378] ? __pfx_default_wake_function+0x10/0x10 [ 87.652896][ T7378] ? __lock_acquire+0x5c0/0x1f40 [ 87.652917][ T7378] ? do_raw_spin_lock+0x128/0x260 [ 87.652929][ T7378] ? soundcore_open+0x231/0x5a0 [ 87.652953][ T7378] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 87.652972][ T7378] soundcore_open+0x2e3/0x5a0 [ 87.653003][ T7378] ? __pfx_soundcore_open+0x10/0x10 [ 87.653032][ T7378] chrdev_open+0x234/0x6a0 [ 87.653049][ T7378] ? __pfx_chrdev_open+0x10/0x10 [ 87.653066][ T7378] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 87.653099][ T7378] do_dentry_open+0x674/0x1470 [ 87.653114][ T7378] ? __pfx_chrdev_open+0x10/0x10 [ 87.653131][ T7378] vfs_open_consume+0xcc/0x460 [ 87.653160][ T7378] path_openat+0x1547/0x23f0 [ 87.653183][ T7378] ? __pfx_path_openat+0x10/0x10 [ 87.653203][ T7378] do_file_open+0x20e/0x430 [ 87.653220][ T7378] ? __pfx_do_file_open+0x10/0x10 [ 87.653245][ T7378] ? _raw_spin_unlock+0x28/0x50 [ 87.653258][ T7378] ? alloc_fd+0x471/0x7a0 [ 87.653278][ T7378] do_sys_openat2+0x163/0x1d0 [ 87.653295][ T7378] ? __pfx_do_sys_openat2+0x10/0x10 [ 87.653312][ T7378] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 87.653331][ T7378] __x64_sys_openat+0x12d/0x210 [ 87.653348][ T7378] ? __pfx___x64_sys_openat+0x10/0x10 [ 87.653372][ T7378] do_syscall_64+0x123/0x790 [ 87.653389][ T7378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.653401][ T7378] RIP: 0033:0x7f4ff299fb19 [ 87.653412][ T7378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.653424][ T7378] RSP: 002b:00007f4ff37a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.653436][ T7378] RAX: ffffffffffffffda RBX: 00007f4ff2c25fa0 RCX: 00007f4ff299fb19 [ 87.653444][ T7378] RDX: 0000000000103881 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 87.653451][ T7378] RBP: 00007f4ff2a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 87.653458][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.653465][ T7378] R13: 00007f4ff2c26038 R14: 00007f4ff2c25fa0 R15: 00007fffe043d048 [ 87.653481][ T7378] [ 87.974044][ T7395] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 87.991710][ T7395] Process accounting resumed [ 88.932863][ T7410] FAULT_INJECTION: forcing a failure. [ 88.932863][ T7410] name failslab, interval 1, probability 0, space 0, times 0 [ 88.932890][ T7410] CPU: 2 UID: 0 PID: 7410 Comm: syz.2.570 Not tainted syzkaller #0 PREEMPT(full) [ 88.932909][ T7410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.932935][ T7410] Call Trace: [ 88.932941][ T7410] [ 88.932948][ T7410] dump_stack_lvl+0x100/0x190 [ 88.932984][ T7410] should_fail_ex.cold+0x5/0xa [ 88.933011][ T7410] should_failslab+0xc2/0x120 [ 88.933034][ T7410] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 88.933067][ T7410] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 88.933100][ T7410] krealloc_node_align_noprof+0x321/0x3e0 [ 88.933131][ T7410] snd_pcm_hw_rule_add+0x3b3/0x510 [ 88.933158][ T7410] ? __pfx_snd_pcm_hw_rule_format+0x10/0x10 [ 88.933181][ T7410] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 88.933212][ T7410] ? mutex_init_lockdep+0xf1/0x120 [ 88.933238][ T7410] ? snd_pcm_attach_substream+0x287/0xd20 [ 88.933267][ T7410] snd_pcm_open_substream+0x54a/0x1850 [ 88.933290][ T7410] ? __kasan_kmalloc+0x50/0xb0 [ 88.933309][ T7410] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 88.933332][ T7410] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 88.933356][ T7410] ? snd_pcm_oss_open+0x5c5/0x1400 [ 88.933381][ T7410] snd_pcm_oss_open+0x715/0x1400 [ 88.933411][ T7410] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 88.933434][ T7410] ? __pfx_default_wake_function+0x10/0x10 [ 88.933462][ T7410] ? __lock_acquire+0x5c0/0x1f40 [ 88.933493][ T7410] ? do_raw_spin_lock+0x128/0x260 [ 88.933512][ T7410] ? soundcore_open+0x231/0x5a0 [ 88.933541][ T7410] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 88.933560][ T7410] soundcore_open+0x2e3/0x5a0 [ 88.933587][ T7410] ? __pfx_soundcore_open+0x10/0x10 [ 88.933613][ T7410] chrdev_open+0x234/0x6a0 [ 88.933636][ T7410] ? __pfx_chrdev_open+0x10/0x10 [ 88.933658][ T7410] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 88.933692][ T7410] do_dentry_open+0x674/0x1470 [ 88.933710][ T7410] ? __pfx_chrdev_open+0x10/0x10 [ 88.933736][ T7410] vfs_open_consume+0xcc/0x460 [ 88.933768][ T7410] path_openat+0x1547/0x23f0 [ 88.933822][ T7410] ? __pfx_path_openat+0x10/0x10 [ 88.933855][ T7410] do_file_open+0x20e/0x430 [ 88.933882][ T7410] ? __pfx_do_file_open+0x10/0x10 [ 88.933927][ T7410] ? _raw_spin_unlock+0x28/0x50 [ 88.933947][ T7410] ? alloc_fd+0x471/0x7a0 [ 88.933981][ T7410] do_sys_openat2+0x163/0x1d0 [ 88.934009][ T7410] ? __pfx_do_sys_openat2+0x10/0x10 [ 88.934037][ T7410] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 88.934070][ T7410] __x64_sys_openat+0x12d/0x210 [ 88.934097][ T7410] ? __pfx___x64_sys_openat+0x10/0x10 [ 88.934135][ T7410] do_syscall_64+0x123/0x790 [ 88.934161][ T7410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.934182][ T7410] RIP: 0033:0x7f996bb9fb19 [ 88.934200][ T7410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.934219][ T7410] RSP: 002b:00007f996ca81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 88.934240][ T7410] RAX: ffffffffffffffda RBX: 00007f996be25fa0 RCX: 00007f996bb9fb19 [ 88.934255][ T7410] RDX: 0000000000103881 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 88.934269][ T7410] RBP: 00007f996bc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 88.934281][ T7410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.934292][ T7410] R13: 00007f996be26038 R14: 00007f996be25fa0 R15: 00007ffc604c3c28 [ 88.934319][ T7410] [ 89.128385][ T7417] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 89.138393][ T7417] kvm: pic: level sensitive irq not supported [ 89.138740][ T7417] kvm: pic: non byte read [ 89.185611][ T7421] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 89.419204][ T42] kauditd_printk_skb: 93 callbacks suppressed [ 89.419223][ T42] audit: type=1326 audit(1793985495.600:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.2.582" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996bb9fb19 code=0x7ffc0000 [ 89.419379][ T42] audit: type=1326 audit(1793985495.600:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.2.582" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996bb9fb19 code=0x7ffc0000 [ 89.419646][ T42] audit: type=1326 audit(1793985495.600:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.2.582" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f996bb9fb19 code=0x7ffc0000 [ 89.419740][ T42] audit: type=1326 audit(1793985495.600:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.2.582" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996bb9fb19 code=0x7ffc0000 [ 89.419848][ T42] audit: type=1326 audit(1793985495.600:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.2.582" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996bb9fb19 code=0x7ffc0000 [ 89.419971][ T42] audit: type=1326 audit(1793985495.600:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.2.582" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f996bb9fb19 code=0x7ffc0000 [ 89.420823][ T42] audit: type=1326 audit(1793985495.600:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.2.582" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996bb9fb19 code=0x7ffc0000 [ 89.421156][ T42] audit: type=1326 audit(1793985495.600:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.2.582" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996bb9fb19 code=0x7ffc0000 [ 89.442534][ T42] audit: type=1326 audit(1793985495.600:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.2.582" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f996bb6034e code=0x7ffc0000 [ 89.442587][ T42] audit: type=1326 audit(1793985495.600:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7434 comm="syz.2.582" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f996bb9f7ab code=0x7ffc0000 [ 89.523988][ T7438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.583'. [ 89.722723][ T7451] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 89.747273][ T7451] kvm: pic: level sensitive irq not supported [ 89.748313][ T7451] kvm: pic: non byte read [ 89.753827][ T5436] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 89.900040][ T5436] usb 7-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 89.908780][ T5436] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.908804][ T5436] usb 7-1: Product: syz [ 89.908817][ T5436] usb 7-1: Manufacturer: syz [ 89.908831][ T5436] usb 7-1: SerialNumber: syz [ 89.945466][ T5436] usb 7-1: USB2VGA dongle found at address 9 [ 89.954984][ T5436] usb 7-1: Allocated 8 output buffers [ 90.012282][ T7469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.593'. [ 90.244383][ T7481] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 90.250750][ T7481] kvm: pic: level sensitive irq not supported [ 90.251383][ T7481] kvm: pic: non byte read [ 90.423878][ T7492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.602'. [ 90.783464][ T7517] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 90.810232][ T7517] kvm: pic: level sensitive irq not supported [ 90.810821][ T7517] kvm: pic: non byte read [ 90.938158][ T7526] netlink: 20 bytes leftover after parsing attributes in process `syz.0.614'. [ 91.612306][ T7557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.624'. [ 91.696129][ T7559] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 91.711941][ T7559] kvm: pic: level sensitive irq not supported [ 91.712490][ T7559] kvm: pic: non byte read [ 92.288627][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'. [ 92.349137][ T5895] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 92.386843][ T5436] usb 7-1: Failed to early initialize device [ 92.390401][ T5436] usb 7-1: USB disconnect, device number 9 [ 92.398231][ T5792] udevd[5792]: setting owner of /dev/bus/usb/007/009 to uid=0, gid=0 failed: No such file or directory [ 92.442773][ T7579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.634'. [ 92.489038][ T5895] usb 6-1: device descriptor read/64, error -71 [ 92.759034][ T5895] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 92.816806][ T7595] netlink: 32 bytes leftover after parsing attributes in process `syz.2.642'. [ 92.889156][ T5895] usb 6-1: device descriptor read/64, error -71 [ 92.999330][ T5895] usb usb6-port1: attempt power cycle [ 93.169170][ T1245] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 93.254880][ T7614] No source specified [ 93.319897][ T1245] usb 5-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 93.332740][ T1245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.332764][ T1245] usb 5-1: Product: syz [ 93.332776][ T1245] usb 5-1: Manufacturer: syz [ 93.332788][ T1245] usb 5-1: SerialNumber: syz [ 93.341621][ T5895] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 93.350713][ T1245] usb 5-1: USB2VGA dongle found at address 8 [ 93.353023][ T1245] usb 5-1: Allocated 8 output buffers [ 93.359699][ T5895] usb 6-1: device descriptor read/8, error -71 [ 93.599118][ T5895] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 93.619818][ T5895] usb 6-1: device descriptor read/8, error -71 [ 93.732427][ T5895] usb usb6-port1: unable to enumerate USB device [ 93.996676][ T7633] No source specified [ 94.139938][ T5793] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 94.139990][ T5793] Bluetooth: hci3: Injecting HCI hardware error event [ 94.141691][ T5787] Bluetooth: hci3: hardware error 0x00 [ 94.367781][ T7653] netlink: 32 bytes leftover after parsing attributes in process `syz.2.664'. [ 94.953253][ T7673] No source specified [ 95.135949][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.675'. [ 95.135973][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.675'. [ 95.606108][ T7709] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 96.063826][ T1245] usb 5-1: Failed to early initialize device [ 96.071732][ T1245] usb 5-1: USB disconnect, device number 8 [ 96.219178][ T5787] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 96.328964][ T1170] IPVS: starting estimator thread 0... [ 96.334668][ T7733] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 96.421837][ T7740] IPVS: using max 42 ests per chain, 100800 per kthread [ 96.724601][ T34] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 97.139747][ T34] usb 6-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=0.40 [ 97.181048][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.181073][ T34] usb 6-1: Product: syz [ 97.181085][ T34] usb 6-1: Manufacturer: syz [ 97.181097][ T34] usb 6-1: SerialNumber: syz [ 97.317685][ T7786] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 97.342886][ T42] kauditd_printk_skb: 174 callbacks suppressed [ 97.342900][ T42] audit: type=1400 audit(1793985503.520:1024): avc: denied { write } for pid=7789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.433884][ T42] audit: type=1400 audit(1793985503.610:1025): avc: denied { write } for pid=7800 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.523706][ T42] audit: type=1400 audit(1793985503.700:1026): avc: denied { write } for pid=7808 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.587079][ T42] audit: type=1400 audit(1793985503.760:1027): avc: denied { write } for pid=7819 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.598145][ T34] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 97.658853][ T42] audit: type=1400 audit(1793985503.830:1028): avc: denied { write } for pid=7824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.702098][ T42] audit: type=1400 audit(1793985503.880:1029): avc: denied { write } for pid=7828 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.459768][ T7844] netlink: 'syz.3.723': attribute type 8 has an invalid length. [ 98.467973][ T7848] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 100.572554][ T5895] usb 6-1: USB disconnect, device number 13 [ 100.589462][ T5895] usblp0: removed [ 100.684814][ T7899] netlink: 'syz.0.739': attribute type 8 has an invalid length. [ 100.819605][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.744'. [ 100.869353][ T1166] IPVS: starting estimator thread 0... [ 100.961176][ T7920] IPVS: using max 41 ests per chain, 98400 per kthread [ 101.399506][ T1245] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 101.679940][ T1245] usb 5-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=0.40 [ 101.690456][ T1245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.690472][ T1245] usb 5-1: Product: syz [ 101.690480][ T1245] usb 5-1: Manufacturer: syz [ 101.690488][ T1245] usb 5-1: SerialNumber: syz [ 101.970253][ T7941] netlink: 'syz.2.756': attribute type 8 has an invalid length. [ 102.100263][ T1245] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 102.693238][ T7993] usb usb1: usbfs: process 7993 (syz.1.772) did not claim interface 0 before use [ 102.837735][ T42] audit: type=1400 audit(1793985509.010:1030): avc: denied { open } for pid=8017 comm="syz.3.782" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 102.840128][ T42] audit: type=1400 audit(1793985509.020:1031): avc: denied { ioctl } for pid=8017 comm="syz.3.782" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 103.881149][ T34] usb 5-1: USB disconnect, device number 9 [ 103.939618][ T34] usblp0: removed [ 103.980404][ T42] audit: type=1326 audit(1793985510.160:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.0.792" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23819fb19 code=0x7ffc0000 [ 103.980523][ T42] audit: type=1326 audit(1793985510.160:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.0.792" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23819fb19 code=0x7ffc0000 [ 104.004964][ T42] audit: type=1326 audit(1793985510.180:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.0.792" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe23819fb19 code=0x7ffc0000 [ 104.004994][ T42] audit: type=1326 audit(1793985510.180:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.0.792" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23819fb19 code=0x7ffc0000 [ 104.005017][ T42] audit: type=1326 audit(1793985510.180:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.0.792" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23819fb19 code=0x7ffc0000 [ 104.005039][ T42] audit: type=1326 audit(1793985510.180:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.0.792" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe23819fb19 code=0x7ffc0000 [ 104.005060][ T42] audit: type=1326 audit(1793985510.180:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.0.792" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23819fb19 code=0x7ffc0000 [ 104.005082][ T42] audit: type=1326 audit(1793985510.180:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8055 comm="syz.0.792" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23819fb19 code=0x7ffc0000 [ 104.347297][ T8075] device-mapper: multipath round-robin: repeat_count > 1 is deprecated, using 1 instead [ 104.347471][ T8075] device-mapper: table: 248:6: multipath: error getting device (-ENOENT) [ 104.347484][ T8075] device-mapper: ioctl: error adding target to table [ 104.380187][ T34] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 104.413101][ T8083] FAULT_INJECTION: forcing a failure. [ 104.413101][ T8083] name failslab, interval 1, probability 0, space 0, times 0 [ 104.413122][ T8083] CPU: 3 UID: 0 PID: 8083 Comm: syz.3.804 Not tainted syzkaller #0 PREEMPT(full) [ 104.413140][ T8083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.413148][ T8083] Call Trace: [ 104.413159][ T8083] [ 104.413165][ T8083] dump_stack_lvl+0x100/0x190 [ 104.413237][ T8083] should_fail_ex.cold+0x5/0xa [ 104.413265][ T8083] should_failslab+0xc2/0x120 [ 104.413289][ T8083] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 104.413321][ T8083] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 104.413349][ T8083] krealloc_node_align_noprof+0x321/0x3e0 [ 104.413372][ T8083] snd_pcm_hw_rule_add+0x3b3/0x510 [ 104.413391][ T8083] ? __pfx_snd_pcm_hw_rule_format+0x10/0x10 [ 104.413407][ T8083] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 104.413428][ T8083] ? mutex_init_lockdep+0xf1/0x120 [ 104.413470][ T8083] ? snd_pcm_attach_substream+0x287/0xd20 [ 104.413490][ T8083] snd_pcm_open_substream+0x54a/0x1850 [ 104.413508][ T8083] ? __kasan_kmalloc+0x50/0xb0 [ 104.413521][ T8083] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 104.413537][ T8083] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 104.413555][ T8083] ? snd_pcm_oss_open+0x5c5/0x1400 [ 104.413571][ T8083] snd_pcm_oss_open+0x715/0x1400 [ 104.413591][ T8083] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 104.413606][ T8083] ? __pfx_default_wake_function+0x10/0x10 [ 104.413625][ T8083] ? __lock_acquire+0x5c0/0x1f40 [ 104.413654][ T8083] ? do_raw_spin_lock+0x128/0x260 [ 104.413666][ T8083] ? soundcore_open+0x231/0x5a0 [ 104.413691][ T8083] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 104.413705][ T8083] soundcore_open+0x2e3/0x5a0 [ 104.413724][ T8083] ? __pfx_soundcore_open+0x10/0x10 [ 104.413744][ T8083] chrdev_open+0x234/0x6a0 [ 104.413769][ T8083] ? __pfx_chrdev_open+0x10/0x10 [ 104.413785][ T8083] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 104.413816][ T8083] do_dentry_open+0x674/0x1470 [ 104.413829][ T8083] ? __pfx_chrdev_open+0x10/0x10 [ 104.413846][ T8083] vfs_open_consume+0xcc/0x460 [ 104.413865][ T8083] path_openat+0x1547/0x23f0 [ 104.413892][ T8083] ? __pfx_path_openat+0x10/0x10 [ 104.413911][ T8083] do_file_open+0x20e/0x430 [ 104.413927][ T8083] ? __pfx_do_file_open+0x10/0x10 [ 104.413953][ T8083] ? _raw_spin_unlock+0x28/0x50 [ 104.413968][ T8083] ? alloc_fd+0x471/0x7a0 [ 104.413989][ T8083] do_sys_openat2+0x163/0x1d0 [ 104.414006][ T8083] ? __pfx_do_sys_openat2+0x10/0x10 [ 104.414024][ T8083] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.414044][ T8083] __x64_sys_openat+0x12d/0x210 [ 104.414062][ T8083] ? __pfx___x64_sys_openat+0x10/0x10 [ 104.414086][ T8083] do_syscall_64+0x123/0x790 [ 104.414103][ T8083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.414116][ T8083] RIP: 0033:0x7fd1e359fb19 [ 104.414126][ T8083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.414138][ T8083] RSP: 002b:00007fd1e17d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 104.414150][ T8083] RAX: ffffffffffffffda RBX: 00007fd1e3826090 RCX: 00007fd1e359fb19 [ 104.414158][ T8083] RDX: 0000000000103881 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 104.414165][ T8083] RBP: 00007fd1e3637b70 R08: 0000000000000000 R09: 0000000000000000 [ 104.414172][ T8083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.414179][ T8083] R13: 00007fd1e3826128 R14: 00007fd1e3826090 R15: 00007ffe20a9a2a8 [ 104.414194][ T8083] [ 104.540949][ T34] usb 5-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 104.548239][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.548255][ T34] usb 5-1: Product: syz [ 104.548263][ T34] usb 5-1: Manufacturer: syz [ 104.548271][ T34] usb 5-1: SerialNumber: syz [ 104.560264][ T34] usb 5-1: USB2VGA dongle found at address 10 [ 104.562013][ T34] usb 5-1: Allocated 8 output buffers [ 104.684003][ T8096] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 104.798495][ T8100] nfs4: Unknown parameter './proc/net/rpc/use-gss-proxy' [ 107.269857][ T34] usb 5-1: Failed to early initialize device [ 107.750123][ T34] usb 5-1: USB disconnect, device number 10 [ 108.266489][ T8212] nfs4: Unknown parameter './proc/net/rpc/use-gss-proxy' [ 108.532258][ T8238] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 108.537483][ T8238] rtrs_client L2106: : Failed to resolve address, err: -ENODEV [ 108.537539][ T8238] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 108.680483][ T8242] nfs4: Unknown parameter './proc/net/rpc/use-gss-proxy' [ 108.709019][ T1245] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 108.862405][ T1245] usb 8-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 108.863371][ T1245] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.863390][ T1245] usb 8-1: config 0 has no interfaces? [ 108.863412][ T1245] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.867262][ T1245] usb 8-1: config 0 descriptor?? [ 109.072186][ T5888] usb 8-1: USB disconnect, device number 8 [ 110.119034][ T5888] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 110.280078][ T5888] usb 7-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 110.283139][ T5888] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.283230][ T5888] usb 7-1: config 0 has no interfaces? [ 110.283340][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.308964][ T5888] usb 7-1: config 0 descriptor?? [ 110.517341][ T29] usb 7-1: USB disconnect, device number 10 [ 110.601678][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'. [ 110.680575][ T8312] 9pnet_virtio: no channels available for device syz [ 110.877291][ T8328] FAULT_INJECTION: forcing a failure. [ 110.877291][ T8328] name failslab, interval 1, probability 0, space 0, times 0 [ 110.877312][ T8328] CPU: 1 UID: 0 PID: 8328 Comm: syz.1.890 Not tainted syzkaller #0 PREEMPT(full) [ 110.877327][ T8328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.877337][ T8328] Call Trace: [ 110.877341][ T8328] [ 110.877346][ T8328] dump_stack_lvl+0x100/0x190 [ 110.877378][ T8328] should_fail_ex.cold+0x5/0xa [ 110.877398][ T8328] should_failslab+0xc2/0x120 [ 110.877414][ T8328] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 110.877435][ T8328] ? krealloc_node_align_noprof+0x27e/0x3e0 [ 110.877454][ T8328] ? rcu_is_watching+0x13/0xc0 [ 110.877470][ T8328] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 110.877492][ T8328] krealloc_node_align_noprof+0x1f9/0x3e0 [ 110.877524][ T8328] snd_pcm_hw_rule_add+0x3b3/0x510 [ 110.877545][ T8328] ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10 [ 110.877569][ T8328] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 110.877588][ T8328] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 110.877609][ T8328] ? mutex_init_lockdep+0xf1/0x120 [ 110.877629][ T8328] ? snd_pcm_attach_substream+0x287/0xd20 [ 110.877649][ T8328] snd_pcm_open_substream+0x942/0x1850 [ 110.877666][ T8328] ? __kasan_kmalloc+0x50/0xb0 [ 110.877679][ T8328] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 110.877693][ T8328] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 110.877710][ T8328] ? snd_pcm_oss_open+0x5c5/0x1400 [ 110.877726][ T8328] snd_pcm_oss_open+0x715/0x1400 [ 110.877744][ T8328] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 110.877780][ T8328] ? __pfx_default_wake_function+0x10/0x10 [ 110.877802][ T8328] ? __lock_acquire+0x5c0/0x1f40 [ 110.877824][ T8328] ? do_raw_spin_lock+0x128/0x260 [ 110.877837][ T8328] ? soundcore_open+0x231/0x5a0 [ 110.877858][ T8328] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 110.877873][ T8328] soundcore_open+0x2e3/0x5a0 [ 110.877893][ T8328] ? __pfx_soundcore_open+0x10/0x10 [ 110.877913][ T8328] chrdev_open+0x234/0x6a0 [ 110.877930][ T8328] ? __pfx_chrdev_open+0x10/0x10 [ 110.877945][ T8328] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 110.877968][ T8328] do_dentry_open+0x674/0x1470 [ 110.877981][ T8328] ? __pfx_chrdev_open+0x10/0x10 [ 110.877999][ T8328] vfs_open_consume+0xcc/0x460 [ 110.878018][ T8328] path_openat+0x1547/0x23f0 [ 110.878036][ T8328] ? __pfx_path_openat+0x10/0x10 [ 110.878055][ T8328] do_file_open+0x20e/0x430 [ 110.878072][ T8328] ? __pfx_do_file_open+0x10/0x10 [ 110.878097][ T8328] ? _raw_spin_unlock+0x28/0x50 [ 110.878110][ T8328] ? alloc_fd+0x471/0x7a0 [ 110.878130][ T8328] do_sys_openat2+0x163/0x1d0 [ 110.878147][ T8328] ? __pfx_do_sys_openat2+0x10/0x10 [ 110.878163][ T8328] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 110.878183][ T8328] __x64_sys_openat+0x12d/0x210 [ 110.878202][ T8328] ? __pfx___x64_sys_openat+0x10/0x10 [ 110.878226][ T8328] do_syscall_64+0x123/0x790 [ 110.878243][ T8328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.878256][ T8328] RIP: 0033:0x7f4ff299fb19 [ 110.878266][ T8328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.878278][ T8328] RSP: 002b:00007f4ff37a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.878291][ T8328] RAX: ffffffffffffffda RBX: 00007f4ff2c25fa0 RCX: 00007f4ff299fb19 [ 110.878299][ T8328] RDX: 0000000000103881 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 110.878307][ T8328] RBP: 00007f4ff2a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 110.878314][ T8328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.878321][ T8328] R13: 00007f4ff2c26038 R14: 00007f4ff2c25fa0 R15: 00007fffe043d048 [ 110.878336][ T8328] [ 111.076415][ T8342] 9pnet_virtio: no channels available for device syz [ 111.128360][ T8350] FAULT_INJECTION: forcing a failure. [ 111.128360][ T8350] name failslab, interval 1, probability 0, space 0, times 0 [ 111.128419][ T8350] CPU: 2 UID: 0 PID: 8350 Comm: syz.2.899 Not tainted syzkaller #0 PREEMPT(full) [ 111.128433][ T8350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.128441][ T8350] Call Trace: [ 111.128445][ T8350] [ 111.128450][ T8350] dump_stack_lvl+0x100/0x190 [ 111.128476][ T8350] should_fail_ex.cold+0x5/0xa [ 111.128495][ T8350] should_failslab+0xc2/0x120 [ 111.128511][ T8350] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 111.128539][ T8350] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 111.128578][ T8350] krealloc_node_align_noprof+0x321/0x3e0 [ 111.128600][ T8350] snd_pcm_hw_rule_add+0x3b3/0x510 [ 111.128621][ T8350] ? __pfx_snd_pcm_hw_rule_format+0x10/0x10 [ 111.128637][ T8350] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 111.128660][ T8350] ? mutex_init_lockdep+0xf1/0x120 [ 111.128680][ T8350] ? snd_pcm_attach_substream+0x287/0xd20 [ 111.128700][ T8350] snd_pcm_open_substream+0x54a/0x1850 [ 111.128717][ T8350] ? __kasan_kmalloc+0x50/0xb0 [ 111.128729][ T8350] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 111.128744][ T8350] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 111.128761][ T8350] ? snd_pcm_oss_open+0x5c5/0x1400 [ 111.128776][ T8350] snd_pcm_oss_open+0x715/0x1400 [ 111.128795][ T8350] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 111.128811][ T8350] ? __pfx_default_wake_function+0x10/0x10 [ 111.128830][ T8350] ? __lock_acquire+0x5c0/0x1f40 [ 111.128851][ T8350] ? do_raw_spin_lock+0x128/0x260 [ 111.128863][ T8350] ? soundcore_open+0x231/0x5a0 [ 111.128882][ T8350] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 111.128910][ T8350] soundcore_open+0x2e3/0x5a0 [ 111.128930][ T8350] ? __pfx_soundcore_open+0x10/0x10 [ 111.128948][ T8350] chrdev_open+0x234/0x6a0 [ 111.128963][ T8350] ? __pfx_chrdev_open+0x10/0x10 [ 111.128980][ T8350] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 111.129004][ T8350] do_dentry_open+0x674/0x1470 [ 111.129018][ T8350] ? __pfx_chrdev_open+0x10/0x10 [ 111.129036][ T8350] vfs_open_consume+0xcc/0x460 [ 111.129055][ T8350] path_openat+0x1547/0x23f0 [ 111.129074][ T8350] ? __pfx_path_openat+0x10/0x10 [ 111.129093][ T8350] do_file_open+0x20e/0x430 [ 111.129110][ T8350] ? __pfx_do_file_open+0x10/0x10 [ 111.129149][ T8350] ? _raw_spin_unlock+0x28/0x50 [ 111.129161][ T8350] ? alloc_fd+0x471/0x7a0 [ 111.129181][ T8350] do_sys_openat2+0x163/0x1d0 [ 111.129199][ T8350] ? __pfx_do_sys_openat2+0x10/0x10 [ 111.129218][ T8350] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 111.129237][ T8350] __x64_sys_openat+0x12d/0x210 [ 111.129256][ T8350] ? __pfx___x64_sys_openat+0x10/0x10 [ 111.129279][ T8350] do_syscall_64+0x123/0x790 [ 111.129295][ T8350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.129308][ T8350] RIP: 0033:0x7f996bb9fb19 [ 111.129318][ T8350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.129330][ T8350] RSP: 002b:00007f996ca81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 111.129342][ T8350] RAX: ffffffffffffffda RBX: 00007f996be25fa0 RCX: 00007f996bb9fb19 [ 111.129350][ T8350] RDX: 0000000000103881 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 111.129357][ T8350] RBP: 00007f996bc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 111.129364][ T8350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.129371][ T8350] R13: 00007f996be26038 R14: 00007f996be25fa0 R15: 00007ffc604c3c28 [ 111.129387][ T8350] [ 111.207431][ T8358] netlink: 'syz.2.901': attribute type 8 has an invalid length. [ 111.579545][ T854] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 111.749721][ T854] usb 8-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 111.750594][ T854] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.750609][ T854] usb 8-1: config 0 has no interfaces? [ 111.750623][ T854] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.751840][ T854] usb 8-1: config 0 descriptor?? [ 111.956491][ T854] usb 8-1: USB disconnect, device number 9 [ 112.902944][ T8404] nfs4: Unknown parameter './proc/net/rpc/use-gss-proxy' [ 112.926485][ T8406] netlink: 'syz.2.917': attribute type 8 has an invalid length. [ 112.976211][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.918'. [ 113.026764][ T8410] device-mapper: table: 248:9: crypt: Error decoding and setting key (-ENOKEY) [ 113.026781][ T8410] device-mapper: ioctl: error adding target to table [ 116.066210][ T8436] ======================================================= [ 116.066210][ T8436] WARNING: The mand mount option has been deprecated and [ 116.066210][ T8436] and is ignored by this kernel. Remove the mand [ 116.066210][ T8436] option from the mount to silence this warning. [ 116.066210][ T8436] ======================================================= [ 116.067010][ T42] kauditd_printk_skb: 78 callbacks suppressed [ 116.067022][ T42] audit: type=1400 audit(1793985522.240:1118): avc: denied { remount } for pid=8434 comm="syz.2.929" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 116.067110][ T8436] tmpfs: Too small a size for current use [ 116.214837][ T8437] nfs4: Unknown parameter './proc/net/rpc/use-gss-proxy' [ 116.360913][ T42] audit: type=1400 audit(1793985522.540:1119): avc: denied { listen } for pid=8448 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.365222][ T42] audit: type=1400 audit(1793985522.540:1120): avc: denied { accept } for pid=8448 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.414264][ T42] audit: type=1400 audit(1793985522.590:1121): avc: denied { unmount } for pid=5785 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 116.433781][ T42] audit: type=1400 audit(1793985522.610:1122): avc: denied { setopt } for pid=8448 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.436662][ T42] audit: type=1400 audit(1793985522.610:1123): avc: denied { connect } for pid=8448 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.659025][ T10] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 116.809586][ T10] usb 8-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=0.40 [ 116.812436][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.812450][ T10] usb 8-1: Product: syz [ 116.812457][ T10] usb 8-1: Manufacturer: syz [ 116.812465][ T10] usb 8-1: SerialNumber: syz [ 117.151917][ T8478] device-mapper: table: 248:11: crypt: Error decoding and setting key (-ENOKEY) [ 117.151940][ T8478] device-mapper: ioctl: error adding target to table [ 117.230158][ T10] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 117.459036][ T5888] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 117.609808][ T5888] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 117.610572][ T5888] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.610586][ T5888] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 117.610603][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.752725][ T8534] device-mapper: multipath round-robin: repeat_count > 1 is deprecated, using 1 instead [ 117.752870][ T8534] device-mapper: table: 248:12: multipath: not enough priority group arguments (-EINVAL) [ 117.752882][ T8534] device-mapper: ioctl: error adding target to table [ 117.815925][ T1245] usb 6-1: USB disconnect, device number 14 [ 118.879887][ T42] audit: type=1400 audit(1793985525.060:1124): avc: denied { mounton } for pid=8593 comm="syz.0.968" path="/189/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 119.045864][ T5787] Bluetooth: hci0: unexpected event 0x2f length: 1017 > 255 [ 119.425464][ T5895] usb 8-1: USB disconnect, device number 10 [ 119.429800][ T5895] usblp0: removed [ 119.779298][ T1245] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 119.929667][ T1245] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 119.930534][ T1245] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.930548][ T1245] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 119.930566][ T1245] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.140904][ T5895] usb 6-1: USB disconnect, device number 15 [ 120.317981][ T8641] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 120.731583][ T8656] nfs4: Unknown parameter './proc/net/rpc/use-gss-proxy' [ 121.008745][ T8663] FAULT_INJECTION: forcing a failure. [ 121.008745][ T8663] name failslab, interval 1, probability 0, space 0, times 0 [ 121.008767][ T8663] CPU: 1 UID: 0 PID: 8663 Comm: syz.1.989 Not tainted syzkaller #0 PREEMPT(full) [ 121.008800][ T8663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.008807][ T8663] Call Trace: [ 121.008812][ T8663] [ 121.008817][ T8663] dump_stack_lvl+0x100/0x190 [ 121.008841][ T8663] should_fail_ex.cold+0x5/0xa [ 121.008860][ T8663] should_failslab+0xc2/0x120 [ 121.008875][ T8663] __kmalloc_flags_noprof+0x122/0x8e0 [ 121.008892][ T8663] ? find_held_lock+0x2b/0x80 [ 121.008905][ T8663] ? __pcs_replace_empty_main+0x132/0x650 [ 121.008921][ T8663] ? __pcs_replace_empty_main+0x3fa/0x650 [ 121.008940][ T8663] __pcs_replace_empty_main+0x3fa/0x650 [ 121.008959][ T8663] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 121.008977][ T8663] ? mpol_set_shared_policy+0x466/0x850 [ 121.008995][ T8663] ? mpol_set_shared_policy+0x477/0x850 [ 121.009015][ T8663] mpol_set_shared_policy+0x477/0x850 [ 121.009035][ T8663] ? __pfx_shmem_set_policy+0x10/0x10 [ 121.009063][ T8663] mbind_range+0x339/0x550 [ 121.009083][ T8663] do_mbind+0x81a/0x1030 [ 121.009108][ T8663] ? __pfx_do_mbind+0x10/0x10 [ 121.009138][ T8663] ? find_held_lock+0x2b/0x80 [ 121.009160][ T8663] ? ksys_write+0x190/0x250 [ 121.009192][ T8663] ? __pfx_get_nodes+0x10/0x10 [ 121.009219][ T8663] kernel_mbind+0x1b7/0x200 [ 121.009248][ T8663] ? __pfx_kernel_mbind+0x10/0x10 [ 121.009283][ T8663] do_syscall_64+0x123/0x790 [ 121.009305][ T8663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.009318][ T8663] RIP: 0033:0x7f4ff299fb19 [ 121.009329][ T8663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.009343][ T8663] RSP: 002b:00007f4ff37a9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 121.009356][ T8663] RAX: ffffffffffffffda RBX: 00007f4ff2c25fa0 RCX: 00007f4ff299fb19 [ 121.009364][ T8663] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 121.009372][ T8663] RBP: 00007f4ff2a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 121.009380][ T8663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.009399][ T8663] R13: 00007f4ff2c26038 R14: 00007f4ff2c25fa0 R15: 00007fffe043d048 [ 121.009417][ T8663] [ 121.015814][ T8663] ubi: mtd0 is already attached to ubi0 [ 121.402941][ T42] audit: type=1400 audit(1793985527.580:1125): avc: denied { ioctl } for pid=8702 comm="syz.2.1000" path="/dev/uinput" dev="devtmpfs" ino=941 ioctlcmd=0x405c5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 121.408818][ T8707] input: syz0 as /devices/virtual/input/input5 [ 121.439089][ T29] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 121.600632][ T29] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 121.601890][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.601911][ T29] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 121.601941][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.812455][ T5888] usb 6-1: USB disconnect, device number 16 [ 122.463893][ T8727] nfs4: Unknown parameter './proc/net/rpc/use-gss-proxy' [ 123.222310][ T8764] nfs4: Unknown parameter './proc/net/rpc/use-gss-proxy' [ 123.273143][ T42] audit: type=1400 audit(1793985529.450:1126): avc: denied { create } for pid=8768 comm="syz.1.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.275460][ T42] audit: type=1400 audit(1793985529.450:1127): avc: denied { setopt } for pid=8768 comm="syz.1.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.275914][ T42] audit: type=1400 audit(1793985529.450:1128): avc: denied { bind } for pid=8768 comm="syz.1.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.276425][ T42] audit: type=1400 audit(1793985529.450:1129): avc: denied { write } for pid=8768 comm="syz.1.1019" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.276730][ T42] audit: type=1400 audit(1793985529.450:1130): avc: denied { connect } for pid=8768 comm="syz.1.1019" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.341994][ T42] audit: type=1400 audit(1793985529.520:1131): avc: denied { create } for pid=8768 comm="syz.1.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.343125][ T42] audit: type=1400 audit(1793985529.520:1132): avc: denied { connect } for pid=8768 comm="syz.1.1019" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.343736][ T42] audit: type=1400 audit(1793985529.520:1133): avc: denied { setopt } for pid=8768 comm="syz.1.1019" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.344209][ T42] audit: type=1400 audit(1793985529.520:1134): avc: denied { write } for pid=8768 comm="syz.1.1019" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.069045][ T854] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 126.101794][ T8917] e1000e 0000:00:02.0: resetting [ 126.169819][ T8917] e1000e 0000:00:02.0: reset done [ 126.221808][ T854] usb 7-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=0.40 [ 126.224791][ T854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.224814][ T854] usb 7-1: Product: syz [ 126.224829][ T854] usb 7-1: Manufacturer: syz [ 126.224841][ T854] usb 7-1: SerialNumber: syz [ 126.452952][ T42] audit: type=1326 audit(1793985532.630:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8930 comm="syz.1.1061" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff299fb19 code=0x7ffc0000 [ 126.453289][ T42] audit: type=1326 audit(1793985532.630:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8930 comm="syz.1.1061" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff299fb19 code=0x7ffc0000 [ 126.453507][ T42] audit: type=1326 audit(1793985532.630:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8930 comm="syz.1.1061" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4ff299fb19 code=0x7ffc0000 [ 126.453684][ T42] audit: type=1326 audit(1793985532.630:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8930 comm="syz.1.1061" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff299fb19 code=0x7ffc0000 [ 126.453941][ T42] audit: type=1326 audit(1793985532.630:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8930 comm="syz.1.1061" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff299fb19 code=0x7ffc0000 [ 126.454159][ T42] audit: type=1326 audit(1793985532.630:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8930 comm="syz.1.1061" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ff299fb19 code=0x7ffc0000 [ 126.455786][ T42] audit: type=1326 audit(1793985532.630:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8930 comm="syz.1.1061" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff299fb19 code=0x7ffc0000 [ 126.455832][ T42] audit: type=1326 audit(1793985532.630:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8930 comm="syz.1.1061" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff299fb19 code=0x7ffc0000 [ 126.457172][ T42] audit: type=1326 audit(1793985532.630:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8930 comm="syz.1.1061" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ff296034e code=0x7ffc0000 [ 126.457789][ T42] audit: type=1326 audit(1793985532.630:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8930 comm="syz.1.1061" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ff299f7ab code=0x7ffc0000 [ 126.678034][ T854] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 126.779892][ T5888] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 126.789017][ T34] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 126.932381][ T5888] usb 8-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 126.938036][ T5888] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.938081][ T5888] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.946027][ T5888] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 126.946228][ T5888] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 126.946283][ T5888] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 126.955119][ T5888] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 126.955193][ T5888] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 126.960278][ T5888] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 126.962151][ T5888] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 126.962210][ T5888] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 126.967690][ T5888] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 126.977355][ T34] usb 6-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 126.986263][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.986286][ T34] usb 6-1: Product: syz [ 126.986300][ T34] usb 6-1: Manufacturer: syz [ 126.986311][ T34] usb 6-1: SerialNumber: syz [ 127.005610][ T34] usb 6-1: USB2VGA dongle found at address 17 [ 127.007377][ T34] usb 6-1: Allocated 8 output buffers [ 127.148245][ T1245] usb 8-1: USB disconnect, device number 11 [ 127.151435][ T1245] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 127.155193][ T1245] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 127.155675][ T1245] keyspan 8-1:1.0: device disconnected [ 128.602810][ T8965] lo: entered allmulticast mode [ 128.607894][ T8964] lo: left allmulticast mode [ 128.843688][ T5436] usb 7-1: USB disconnect, device number 11 [ 128.847713][ T5436] usblp0: removed [ 128.870390][ T8978] device-mapper: ioctl: Invalid ioctl structure: name t, dev f80d [ 129.422920][ T34] usb 6-1: Failed to early initialize device [ 129.426456][ T34] usb 6-1: USB disconnect, device number 17 [ 129.894323][ T9016] nfs4: Unknown parameter './proc/net/rpc/use-gss-proxy' [ 129.929500][ T34] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 130.089981][ T34] usb 8-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=0.40 [ 130.093220][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.093245][ T34] usb 8-1: Product: syz [ 130.093256][ T34] usb 8-1: Manufacturer: syz [ 130.093267][ T34] usb 8-1: SerialNumber: syz [ 130.503987][ T34] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 131.859108][ T1365] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 132.010818][ T1365] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 132.011604][ T1365] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.011628][ T1365] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.014690][ T1365] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 132.014782][ T1365] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 132.014810][ T1365] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 132.017852][ T1365] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 132.017887][ T1365] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 132.019071][ T1365] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 132.020491][ T1365] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 132.020525][ T1365] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 132.023283][ T1365] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 132.216658][ T34] usb 6-1: USB disconnect, device number 18 [ 132.218591][ T34] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 132.221046][ T34] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 132.221481][ T34] keyspan 6-1:1.0: device disconnected [ 132.694469][ T34] usb 8-1: USB disconnect, device number 12 [ 132.695955][ T34] usblp0: removed [ 132.700768][ T1451] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.700795][ T1451] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.736259][ T9072] device-mapper: table: 248:13: mirror: Insufficient mirror log arguments (-EINVAL) [ 132.736275][ T9072] device-mapper: ioctl: error adding target to table [ 132.785041][ T9078] nfs4: Unknown parameter './proc/net/rpc/use-gss-proxy' [ 132.996649][ T9100] lo: entered allmulticast mode [ 133.000865][ T9099] lo: left allmulticast mode [ 133.730741][ T9114] nfs4: Unknown parameter './proc/net/rpc/use-gss-proxy' [ 134.213627][ T42] kauditd_printk_skb: 60 callbacks suppressed [ 134.213641][ T42] audit: type=1400 audit(1793985540.390:1205): avc: denied { listen } for pid=9131 comm="syz.0.1126" lport=58668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.215560][ T42] audit: type=1400 audit(1793985540.390:1206): avc: denied { accept } for pid=9131 comm="syz.0.1126" lport=58668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.781302][ T1245] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 134.886552][ T9170] lo: entered allmulticast mode [ 134.887547][ T9169] lo: left allmulticast mode [ 134.930457][ T1245] usb 8-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 134.931333][ T1245] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.931359][ T1245] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.934175][ T1245] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 134.934281][ T1245] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 134.934310][ T1245] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 134.935497][ T1245] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 134.935531][ T1245] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 134.936428][ T1245] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 134.937435][ T1245] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 134.937499][ T1245] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 134.941909][ T1245] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 135.153624][ T9188] nfs4: Unknown parameter './proc/net/rpc/use-gss-proxy' [ 135.159536][ T1245] usb 8-1: USB disconnect, device number 13 [ 135.161108][ T1245] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 135.165375][ T1245] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 135.168174][ T1245] keyspan 8-1:1.0: device disconnected [ 135.624045][ T9211] lo: entered allmulticast mode [ 135.628193][ T9210] lo: left allmulticast mode [ 136.289385][ T9243] lo: entered allmulticast mode [ 136.293904][ T9242] lo: left allmulticast mode [ 136.613482][ T9263] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1164'. [ 136.621310][ T42] audit: type=1400 audit(1793985542.800:1207): avc: denied { name_bind } for pid=9262 comm="syz.3.1164" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 136.621859][ T9263] syzkaller1: entered promiscuous mode [ 136.621871][ T9263] syzkaller1: entered allmulticast mode [ 136.623667][ T42] audit: type=1400 audit(1793985542.800:1208): avc: denied { ioctl } for pid=9262 comm="syz.3.1164" path="socket:[24942]" dev="sockfs" ino=24942 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 136.629684][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 136.781653][ T10] usb 7-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 136.782427][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.782451][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.792064][ T10] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 136.792160][ T10] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 136.792188][ T10] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 136.793050][ T10] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 136.793083][ T10] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 136.813493][ T10] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 136.814834][ T10] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 136.814869][ T10] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 136.819562][ T10] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 136.932731][ T9265] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 137.011162][ T34] usb 7-1: USB disconnect, device number 12 [ 137.017892][ T34] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 137.029840][ T34] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 137.030383][ T34] keyspan 7-1:1.0: device disconnected [ 137.139569][ T9290] FAULT_INJECTION: forcing a failure. [ 137.139569][ T9290] name failslab, interval 1, probability 0, space 0, times 0 [ 137.139591][ T9290] CPU: 3 UID: 0 PID: 9290 Comm: syz.1.1170 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.139608][ T9290] Tainted: [L]=SOFTLOCKUP [ 137.139612][ T9290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.139619][ T9290] Call Trace: [ 137.139623][ T9290] [ 137.139628][ T9290] dump_stack_lvl+0x100/0x190 [ 137.139663][ T9290] should_fail_ex.cold+0x5/0xa [ 137.139695][ T9290] should_failslab+0xc2/0x120 [ 137.139719][ T9290] __kmalloc_noprof+0xfc/0x840 [ 137.139751][ T9290] ? __alloc_workqueue+0x8a/0x1900 [ 137.139796][ T9290] __alloc_workqueue+0x8a/0x1900 [ 137.139816][ T9290] ? rcu_is_watching+0x13/0xc0 [ 137.139832][ T9290] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 137.139846][ T9290] ? lockdep_hardirqs_on+0x7d/0x110 [ 137.139881][ T9290] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 137.139896][ T9290] ? __debug_object_init+0x2de/0x3d0 [ 137.139928][ T9290] alloc_workqueue_noprof+0xc7/0x130 [ 137.139955][ T9290] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 137.139990][ T9290] ? lockdep_init_map_type+0x5c/0x250 [ 137.140028][ T9290] ? lockdep_init_map_type+0x5c/0x250 [ 137.140059][ T9290] __rds_conn_create+0x1290/0x2650 [ 137.140102][ T9290] ? __pfx___rds_conn_create+0x10/0x10 [ 137.140130][ T9290] ? trace_kmalloc+0xeb/0x110 [ 137.140148][ T9290] ? __kasan_kmalloc+0xaa/0xb0 [ 137.140165][ T9290] ? lockdep_init_map_type+0x5c/0x250 [ 137.140185][ T9290] rds_conn_create_outgoing+0x44/0x60 [ 137.140206][ T9290] rds_sendmsg+0x1140/0x3590 [ 137.140227][ T9290] ? __pfx_rds_sendmsg+0x10/0x10 [ 137.140247][ T9290] ? selinux_socket_sendmsg+0x198/0x2f0 [ 137.140278][ T9290] ? ____sys_sendmsg+0xa99/0xc30 [ 137.140297][ T9290] ____sys_sendmsg+0xa99/0xc30 [ 137.140316][ T9290] ? __pfx_rds_sendmsg+0x10/0x10 [ 137.140332][ T9290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.140359][ T9290] ___sys_sendmsg+0x190/0x1e0 [ 137.140387][ T9290] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.140417][ T9290] ? futex_wait+0x11e/0x370 [ 137.140468][ T9290] ? find_held_lock+0x2b/0x80 [ 137.140497][ T9290] __sys_sendmsg+0x160/0x210 [ 137.140515][ T9290] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.140538][ T9290] do_syscall_64+0x123/0x790 [ 137.140553][ T9290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.140567][ T9290] RIP: 0033:0x7f4ff299fb19 [ 137.140577][ T9290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.140589][ T9290] RSP: 002b:00007f4ff37a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.140601][ T9290] RAX: ffffffffffffffda RBX: 00007f4ff2c25fa0 RCX: 00007f4ff299fb19 [ 137.140609][ T9290] RDX: 0000000004000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 137.140617][ T9290] RBP: 00007f4ff2a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 137.140626][ T9290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.140633][ T9290] R13: 00007f4ff2c26038 R14: 00007f4ff2c25fa0 R15: 00007fffe043d048 [ 137.140648][ T9290] [ 137.141727][ T9290] lo: entered allmulticast mode [ 137.142574][ T9289] lo: left allmulticast mode [ 137.196020][ T42] audit: type=1400 audit(1793985543.370:1209): avc: denied { getopt } for pid=9277 comm="syz.3.1168" lport=49523 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 137.596944][ T42] audit: type=1400 audit(1793985543.770:1210): avc: denied { ioctl } for pid=9304 comm="syz.1.1176" path="socket:[24957]" dev="sockfs" ino=24957 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.607525][ T42] audit: type=1400 audit(1793985543.780:1211): avc: denied { ioctl } for pid=9304 comm="syz.1.1176" path="socket:[23414]" dev="sockfs" ino=23414 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 137.619787][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'. [ 138.334907][ T9338] fuse: fd is not a fuse device [ 138.444498][ T9345] nfs4: Unknown parameter './proc/net/rpc/use-gss-proxy' [ 138.903580][ T9383] FAULT_INJECTION: forcing a failure. [ 138.903580][ T9383] name failslab, interval 1, probability 0, space 0, times 0 [ 138.903603][ T9383] CPU: 3 UID: 0 PID: 9383 Comm: syz.1.1196 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.903620][ T9383] Tainted: [L]=SOFTLOCKUP [ 138.903624][ T9383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.903631][ T9383] Call Trace: [ 138.903636][ T9383] [ 138.903640][ T9383] dump_stack_lvl+0x100/0x190 [ 138.903665][ T9383] should_fail_ex.cold+0x5/0xa [ 138.903684][ T9383] should_failslab+0xc2/0x120 [ 138.903698][ T9383] __kmalloc_noprof+0xfc/0x840 [ 138.903718][ T9383] ? __alloc_workqueue+0x8a/0x1900 [ 138.903740][ T9383] __alloc_workqueue+0x8a/0x1900 [ 138.903758][ T9383] ? rcu_is_watching+0x13/0xc0 [ 138.903772][ T9383] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 138.903785][ T9383] ? lockdep_hardirqs_on+0x7d/0x110 [ 138.903800][ T9383] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 138.903813][ T9383] ? __debug_object_init+0x2de/0x3d0 [ 138.903833][ T9383] alloc_workqueue_noprof+0xc7/0x130 [ 138.903875][ T9383] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 138.903900][ T9383] ? lockdep_init_map_type+0x5c/0x250 [ 138.903933][ T9383] ? lockdep_init_map_type+0x5c/0x250 [ 138.903953][ T9383] __rds_conn_create+0x1290/0x2650 [ 138.903979][ T9383] ? __pfx___rds_conn_create+0x10/0x10 [ 138.903998][ T9383] ? trace_kmalloc+0xeb/0x110 [ 138.904011][ T9383] ? __kasan_kmalloc+0xaa/0xb0 [ 138.904025][ T9383] ? lockdep_init_map_type+0x5c/0x250 [ 138.904045][ T9383] rds_conn_create_outgoing+0x44/0x60 [ 138.904066][ T9383] rds_sendmsg+0x1140/0x3590 [ 138.904086][ T9383] ? __pfx_rds_sendmsg+0x10/0x10 [ 138.904107][ T9383] ? selinux_socket_sendmsg+0x198/0x2f0 [ 138.904126][ T9383] ? ____sys_sendmsg+0xa99/0xc30 [ 138.904145][ T9383] ____sys_sendmsg+0xa99/0xc30 [ 138.904162][ T9383] ? __pfx_rds_sendmsg+0x10/0x10 [ 138.904177][ T9383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.904201][ T9383] ___sys_sendmsg+0x190/0x1e0 [ 138.904221][ T9383] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.904240][ T9383] ? futex_wait+0x11e/0x370 [ 138.904263][ T9383] ? find_held_lock+0x2b/0x80 [ 138.904286][ T9383] __sys_sendmsg+0x160/0x210 [ 138.904301][ T9383] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.904323][ T9383] do_syscall_64+0x123/0x790 [ 138.904339][ T9383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.904352][ T9383] RIP: 0033:0x7f4ff299fb19 [ 138.904362][ T9383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.904374][ T9383] RSP: 002b:00007f4ff37a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.904387][ T9383] RAX: ffffffffffffffda RBX: 00007f4ff2c25fa0 RCX: 00007f4ff299fb19 [ 138.904394][ T9383] RDX: 0000000004000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 138.904402][ T9383] RBP: 00007f4ff2a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 138.904409][ T9383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.904416][ T9383] R13: 00007f4ff2c26038 R14: 00007f4ff2c25fa0 R15: 00007fffe043d048 [ 138.904430][ T9383] [ 138.905432][ T9383] lo: entered allmulticast mode [ 138.906261][ T9382] lo: left allmulticast mode [ 139.257523][ T42] audit: type=1326 audit(1793985545.430:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9389 comm="syz.1.1199" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ff299fb19 code=0x0 [ 139.742994][ T9435] FAULT_INJECTION: forcing a failure. [ 139.742994][ T9435] name failslab, interval 1, probability 0, space 0, times 0 [ 139.743017][ T9435] CPU: 3 UID: 0 PID: 9435 Comm: syz.3.1208 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.743035][ T9435] Tainted: [L]=SOFTLOCKUP [ 139.743039][ T9435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.743046][ T9435] Call Trace: [ 139.743051][ T9435] [ 139.743056][ T9435] dump_stack_lvl+0x100/0x190 [ 139.743080][ T9435] should_fail_ex.cold+0x5/0xa [ 139.743100][ T9435] should_failslab+0xc2/0x120 [ 139.743115][ T9435] __kmalloc_noprof+0xfc/0x840 [ 139.743134][ T9435] ? __alloc_workqueue+0x8a/0x1900 [ 139.743157][ T9435] __alloc_workqueue+0x8a/0x1900 [ 139.743177][ T9435] ? rcu_is_watching+0x13/0xc0 [ 139.743191][ T9435] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 139.743205][ T9435] ? lockdep_hardirqs_on+0x7d/0x110 [ 139.743219][ T9435] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 139.743232][ T9435] ? __debug_object_init+0x2de/0x3d0 [ 139.743251][ T9435] alloc_workqueue_noprof+0xc7/0x130 [ 139.743270][ T9435] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 139.743292][ T9435] ? lockdep_init_map_type+0x5c/0x250 [ 139.743311][ T9435] ? lockdep_init_map_type+0x5c/0x250 [ 139.743332][ T9435] __rds_conn_create+0x1290/0x2650 [ 139.743380][ T9435] ? __pfx___rds_conn_create+0x10/0x10 [ 139.743400][ T9435] ? trace_kmalloc+0xeb/0x110 [ 139.743413][ T9435] ? __kasan_kmalloc+0xaa/0xb0 [ 139.743427][ T9435] ? lockdep_init_map_type+0x5c/0x250 [ 139.743449][ T9435] rds_conn_create_outgoing+0x44/0x60 [ 139.743473][ T9435] rds_sendmsg+0x1140/0x3590 [ 139.743496][ T9435] ? __pfx_rds_sendmsg+0x10/0x10 [ 139.743518][ T9435] ? selinux_socket_sendmsg+0x198/0x2f0 [ 139.743539][ T9435] ? ____sys_sendmsg+0xa99/0xc30 [ 139.743557][ T9435] ____sys_sendmsg+0xa99/0xc30 [ 139.743573][ T9435] ? __pfx_rds_sendmsg+0x10/0x10 [ 139.743589][ T9435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.743615][ T9435] ___sys_sendmsg+0x190/0x1e0 [ 139.743634][ T9435] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.743653][ T9435] ? futex_wait+0x11e/0x370 [ 139.743677][ T9435] ? find_held_lock+0x2b/0x80 [ 139.743700][ T9435] __sys_sendmsg+0x160/0x210 [ 139.743716][ T9435] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.743740][ T9435] do_syscall_64+0x123/0x790 [ 139.743756][ T9435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.743769][ T9435] RIP: 0033:0x7fd1e359fb19 [ 139.743779][ T9435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.743791][ T9435] RSP: 002b:00007fd1e17f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.743803][ T9435] RAX: ffffffffffffffda RBX: 00007fd1e3825fa0 RCX: 00007fd1e359fb19 [ 139.743811][ T9435] RDX: 0000000004000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 139.743818][ T9435] RBP: 00007fd1e3637b70 R08: 0000000000000000 R09: 0000000000000000 [ 139.743825][ T9435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.743832][ T9435] R13: 00007fd1e3826038 R14: 00007fd1e3825fa0 R15: 00007ffe20a9a2a8 [ 139.743870][ T9435] [ 139.744839][ T9435] lo: entered allmulticast mode [ 139.745665][ T9434] lo: left allmulticast mode [ 139.949052][ T5436] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 140.120083][ T5436] usb 7-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 140.120860][ T5436] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.120883][ T5436] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.126539][ T5436] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 140.126636][ T5436] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 140.126664][ T5436] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 140.127204][ T5436] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 140.127238][ T5436] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 140.128295][ T5436] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 140.133424][ T5436] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 140.133464][ T5436] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 140.134896][ T5436] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 140.331544][ T5436] usb 7-1: USB disconnect, device number 13 [ 140.338752][ T5436] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 140.341325][ T5436] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 140.341745][ T5436] keyspan 7-1:1.0: device disconnected [ 140.481091][ T9474] lo: entered allmulticast mode [ 140.482476][ T9473] lo: left allmulticast mode [ 140.941933][ T42] audit: type=1326 audit(1793985547.120:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9491 comm="syz.2.1224" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996bb9fb19 code=0x7ffc0000 [ 140.942049][ T42] audit: type=1326 audit(1793985547.120:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9491 comm="syz.2.1224" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996bb9fb19 code=0x7ffc0000 [ 140.942453][ T42] audit: type=1326 audit(1793985547.120:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9491 comm="syz.2.1224" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f996bb9fb19 code=0x7ffc0000 [ 140.942767][ T42] audit: type=1326 audit(1793985547.120:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9491 comm="syz.2.1224" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996bb9fb19 code=0x7ffc0000 [ 140.942987][ T42] audit: type=1326 audit(1793985547.120:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9491 comm="syz.2.1224" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996bb9fb19 code=0x7ffc0000 [ 140.948004][ T42] audit: type=1326 audit(1793985547.120:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9491 comm="syz.2.1224" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f996bb9fb19 code=0x7ffc0000 [ 140.948032][ T42] audit: type=1326 audit(1793985547.120:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9491 comm="syz.2.1224" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996bb9fb19 code=0x7ffc0000 [ 140.948054][ T42] audit: type=1326 audit(1793985547.120:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9491 comm="syz.2.1224" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996bb9fb19 code=0x7ffc0000 [ 140.951814][ T42] audit: type=1326 audit(1793985547.130:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9491 comm="syz.2.1224" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f996bb6034e code=0x7ffc0000 [ 141.189081][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 141.264389][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1230'. [ 141.340255][ T10] usb 7-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 141.346136][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.346152][ T10] usb 7-1: Product: syz [ 141.346160][ T10] usb 7-1: Manufacturer: syz [ 141.346167][ T10] usb 7-1: SerialNumber: syz [ 141.361998][ T10] usb 7-1: USB2VGA dongle found at address 14 [ 141.363220][ T10] usb 7-1: Allocated 8 output buffers [ 142.712686][ T9558] nfs4: Unknown parameter './proc/net/rpc/use-gss-proxy' [ 142.804059][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1246'. [ 142.930796][ T9568] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1250'. [ 142.930813][ T9568] tipc: Started in network mode [ 142.930820][ T9568] tipc: Node identity 4246, cluster identity 4711 [ 142.930826][ T9568] tipc: Node number set to 16966 [ 143.287056][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'. [ 143.495238][ T9604] ================================================================== [ 143.495249][ T9604] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x148/0x1b0 [ 143.495296][ T9604] Read of size 1 at addr ffff888024087758 by task syz.1.1261/9604 [ 143.495306][ T9604] [ 143.495316][ T9604] CPU: 3 UID: 0 PID: 9604 Comm: syz.1.1261 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.495333][ T9604] Tainted: [L]=SOFTLOCKUP [ 143.495337][ T9604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.495345][ T9604] Call Trace: [ 143.495349][ T9604] [ 143.495377][ T9604] dump_stack_lvl+0x100/0x190 [ 143.495400][ T9604] print_report+0x13d/0x4b0 [ 143.495420][ T9604] ? __virt_addr_valid+0x239/0x430 [ 143.495438][ T9604] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 143.495458][ T9604] kasan_report+0xdf/0x1c0 [ 143.495472][ T9604] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 143.495493][ T9604] acpi_ns_get_attached_object+0x148/0x1b0 [ 143.495517][ T9604] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 143.495537][ T9604] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 143.495555][ T9604] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 143.495576][ T9604] ? acpi_ds_create_operand+0x267/0xc20 [ 143.495593][ T9604] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 143.495613][ T9604] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 143.495632][ T9604] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 143.495648][ T9604] ? __asan_memset+0x23/0x50 [ 143.495665][ T9604] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 143.495682][ T9604] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 143.495697][ T9604] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 143.495712][ T9604] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 143.495727][ T9604] ? acpi_ut_trace_ptr+0x111/0x2a0 [ 143.495743][ T9604] acpi_ds_exec_end_op+0xb78/0x1e60 [ 143.495758][ T9604] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 143.495772][ T9604] acpi_ps_parse_loop+0x5e1/0x26e0 [ 143.495788][ T9604] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 143.495802][ T9604] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 143.495821][ T9604] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 143.495858][ T9604] ? acpi_ut_create_thread_state+0x6d/0x170 [ 143.495877][ T9604] acpi_ps_parse_aml+0x81e/0x1120 [ 143.495895][ T9604] acpi_ps_execute_method+0x5c4/0xe90 [ 143.495914][ T9604] acpi_ns_evaluate+0x640/0x1670 [ 143.495935][ T9604] acpi_ut_evaluate_object+0xf7/0x610 [ 143.495965][ T9604] acpi_rs_get_prt_method_data+0xa0/0x150 [ 143.495986][ T9604] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 143.496004][ T9604] ? acpi_ut_status_exit+0x111/0x1c0 [ 143.496020][ T9604] ? acpi_rs_validate_parameters+0x104/0x210 [ 143.496039][ T9604] acpi_get_irq_routing_table+0xb8/0x140 [ 143.496058][ T9604] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 143.496079][ T9604] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 143.496099][ T9604] ? preempt_schedule_thunk+0x16/0x40 [ 143.496116][ T9604] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 143.496138][ T9604] acpi_pci_irq_lookup+0x8e/0x6b0 [ 143.496157][ T9604] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 143.496177][ T9604] acpi_pci_irq_disable+0x1a8/0x360 [ 143.496195][ T9604] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 143.496213][ T9604] pcibios_disable_device+0x89/0xb0 [ 143.496226][ T9604] do_pci_disable_device+0x9f/0x100 [ 143.496256][ T9604] ? __pfx_do_pci_disable_device+0x10/0x10 [ 143.496274][ T9604] ? pci_release_region.part.0+0x15b/0x2e0 [ 143.496289][ T9604] pci_disable_device+0x130/0x270 [ 143.496307][ T9604] virtio_pci_remove+0xcf/0x110 [ 143.496334][ T9604] pci_device_remove+0xb2/0x1d0 [ 143.496348][ T9604] ? __pfx_pci_device_remove+0x10/0x10 [ 143.496364][ T9604] device_remove+0xcb/0x180 [ 143.496380][ T9604] device_release_driver_internal+0x441/0x610 [ 143.496398][ T9604] pci_stop_bus_device+0x120/0x160 [ 143.496415][ T9604] pci_stop_and_remove_bus_device+0x58/0xa0 [ 143.496432][ T9604] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 143.496450][ T9604] remove_store+0x123/0x140 [ 143.496469][ T9604] ? __pfx_remove_store+0x10/0x10 [ 143.496480][ T9604] ? find_held_lock+0x2b/0x80 [ 143.496494][ T9604] ? sysfs_file_kobj+0xe4/0x290 [ 143.496525][ T9604] ? sysfs_file_kobj+0xe4/0x290 [ 143.496541][ T9604] ? __pfx_remove_store+0x10/0x10 [ 143.496552][ T9604] dev_attr_store+0x58/0x80 [ 143.496570][ T9604] ? __pfx_dev_attr_store+0x10/0x10 [ 143.496587][ T9604] sysfs_kf_write+0xf2/0x150 [ 143.496603][ T9604] kernfs_fop_write_iter+0x3e0/0x5f0 [ 143.496618][ T9604] ? __pfx_sysfs_kf_write+0x10/0x10 [ 143.496635][ T9604] vfs_write+0x6af/0x1050 [ 143.496648][ T9604] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 143.496663][ T9604] ? __pfx_vfs_write+0x10/0x10 [ 143.496674][ T9604] ? find_held_lock+0x2b/0x80 [ 143.496691][ T9604] ksys_write+0x12a/0x250 [ 143.496702][ T9604] ? __pfx_ksys_write+0x10/0x10 [ 143.496713][ T9604] ? kcov_ioctl+0x17a/0x750 [ 143.496736][ T9604] do_syscall_64+0x123/0x790 [ 143.496752][ T9604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.496765][ T9604] RIP: 0033:0x7f4ff299fb19 [ 143.496776][ T9604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.496789][ T9604] RSP: 002b:00007f4ff3788028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.496802][ T9604] RAX: ffffffffffffffda RBX: 00007f4ff2c26090 RCX: 00007f4ff299fb19 [ 143.496810][ T9604] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 143.496817][ T9604] RBP: 00007f4ff2a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 143.496824][ T9604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.496831][ T9604] R13: 00007f4ff2c26128 R14: 00007f4ff2c26090 R15: 00007fffe043d048 [ 143.496842][ T9604] [ 143.496846][ T9604] [ 143.496849][ T9604] Allocated by task 1: [ 143.496855][ T9604] kasan_save_stack+0x30/0x50 [ 143.496866][ T9604] kasan_save_track+0x14/0x30 [ 143.496877][ T9604] __kasan_slab_alloc+0x89/0x90 [ 143.496888][ T9604] kmem_cache_alloc_noprof+0x269/0x6a0 [ 143.496905][ T9604] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 143.496918][ T9604] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 143.496931][ T9604] acpi_ds_build_internal_object+0x173/0x790 [ 143.496943][ T9604] acpi_ds_create_node+0xe3/0x280 [ 143.496954][ T9604] acpi_ds_exec_end_op+0x10cf/0x1e60 [ 143.496967][ T9604] acpi_ps_parse_loop+0x5e1/0x26e0 [ 143.496981][ T9604] acpi_ps_parse_aml+0x81e/0x1120 [ 143.496996][ T9604] acpi_ps_execute_table+0x393/0x500 [ 143.497012][ T9604] acpi_ns_execute_table+0x596/0x970 [ 143.497029][ T9604] acpi_ns_parse_table+0xcb/0x160 [ 143.497038][ T9604] acpi_ns_load_table+0xc9/0x490 [ 143.497054][ T9604] acpi_tb_load_namespace+0x2b0/0x8f0 [ 143.497067][ T9604] acpi_load_tables+0x89/0x160 [ 143.497091][ T9604] acpi_init+0x146/0x840 [ 143.497102][ T9604] do_one_initcall+0x11c/0x6f0 [ 143.497115][ T9604] kernel_init_freeable+0x6ea/0x7b0 [ 143.497138][ T9604] kernel_init+0x21/0x1e0 [ 143.497153][ T9604] ret_from_fork+0x730/0xd60 [ 143.497168][ T9604] ret_from_fork_asm+0x1a/0x30 [ 143.497183][ T9604] [ 143.497185][ T9604] Freed by task 7051: [ 143.497191][ T9604] kasan_save_stack+0x30/0x50 [ 143.497202][ T9604] kasan_save_track+0x14/0x30 [ 143.497212][ T9604] kasan_save_free_info+0x3b/0x70 [ 143.497228][ T9604] __kasan_slab_free+0x5f/0x80 [ 143.497239][ T9604] kmem_cache_free+0x127/0x6c0 [ 143.497253][ T9604] acpi_os_release_object+0x1c/0x30 [ 143.497268][ T9604] acpi_ut_delete_object_desc+0xea/0x130 [ 143.497280][ T9604] acpi_ut_update_ref_count.part.0+0x510/0x2250 [ 143.497297][ T9604] acpi_ut_update_object_reference+0x5f9/0x800 [ 143.497314][ T9604] acpi_ut_remove_reference+0x192/0x1d0 [ 143.497330][ T9604] acpi_rs_get_prt_method_data+0xcd/0x150 [ 143.497347][ T9604] acpi_get_irq_routing_table+0xb8/0x140 [ 143.497364][ T9604] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 143.497381][ T9604] acpi_pci_irq_lookup+0x8e/0x6b0 [ 143.497398][ T9604] acpi_pci_irq_disable+0x1a8/0x360 [ 143.497415][ T9604] pcibios_disable_device+0x89/0xb0 [ 143.497425][ T9604] do_pci_disable_device+0x9f/0x100 [ 143.497441][ T9604] pci_disable_device+0x130/0x270 [ 143.497455][ T9604] virtio_pci_remove+0xcf/0x110 [ 143.497471][ T9604] pci_device_remove+0xb2/0x1d0 [ 143.497483][ T9604] device_remove+0xcb/0x180 [ 143.497495][ T9604] device_release_driver_internal+0x441/0x610 [ 143.497517][ T9604] pci_stop_bus_device+0x120/0x160 [ 143.497533][ T9604] pci_stop_and_remove_bus_device+0x58/0xa0 [ 143.497549][ T9604] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 143.497566][ T9604] remove_store+0x123/0x140 [ 143.497577][ T9604] dev_attr_store+0x58/0x80 [ 143.497591][ T9604] sysfs_kf_write+0xf2/0x150 [ 143.497606][ T9604] kernfs_fop_write_iter+0x3e0/0x5f0 [ 143.497618][ T9604] vfs_write+0x6af/0x1050 [ 143.497628][ T9604] ksys_write+0x12a/0x250 [ 143.497639][ T9604] do_syscall_64+0x123/0x790 [ 143.497651][ T9604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.497661][ T9604] [ 143.497664][ T9604] The buggy address belongs to the object at ffff888024087750 [ 143.497664][ T9604] which belongs to the cache Acpi-Operand of size 72 [ 143.497673][ T9604] The buggy address is located 8 bytes inside of [ 143.497673][ T9604] freed 72-byte region [ffff888024087750, ffff888024087798) [ 143.497684][ T9604] [ 143.497686][ T9604] The buggy address belongs to the physical page: [ 143.497692][ T9604] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024087820 pfn:0x24087 [ 143.497703][ T9604] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 143.497714][ T9604] page_type: f5(slab) [ 143.497723][ T9604] raw: 00fff00000000200 ffff88801d44da40 ffffea0000902150 ffffea0000902b90 [ 143.497734][ T9604] raw: ffff888024087820 0000000200270012 00000000f5000000 0000000000000000 [ 143.497740][ T9604] page dumped because: kasan: bad access detected [ 143.497746][ T9604] page_owner tracks the page as allocated [ 143.497750][ T9604] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2885012764 [ 143.497768][ T9604] post_alloc_hook+0xfd/0x120 [ 143.497784][ T9604] get_page_from_freelist+0x112f/0x3640 [ 143.497799][ T9604] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 143.497817][ T9604] new_slab+0xb1/0x6d0 [ 143.497830][ T9604] refill_objects+0xe3/0x410 [ 143.497845][ T9604] __pcs_replace_empty_main+0x35e/0x650 [ 143.497860][ T9604] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 143.497876][ T9604] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 143.497889][ T9604] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 143.497902][ T9604] acpi_ds_build_internal_package_obj+0xa8c/0xe60 [ 143.497915][ T9604] acpi_ds_eval_data_object_operands+0x2fd/0x640 [ 143.497928][ T9604] acpi_ds_exec_end_op+0xe41/0x1e60 [ 143.497941][ T9604] acpi_ps_parse_loop+0x5e1/0x26e0 [ 143.497953][ T9604] acpi_ps_parse_aml+0x81e/0x1120 [ 143.497967][ T9604] acpi_ps_execute_table+0x393/0x500 [ 143.497982][ T9604] acpi_ns_execute_table+0x596/0x970 [ 143.497999][ T9604] page_owner free stack trace missing [ 143.498002][ T9604] [ 143.498005][ T9604] Memory state around the buggy address: [ 143.498010][ T9604] ffff888024087600: fc fc fc 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 143.498018][ T9604] ffff888024087680: fa fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb [ 143.498026][ T9604] >ffff888024087700: fb fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb [ 143.498032][ T9604] ^ [ 143.498038][ T9604] ffff888024087780: fb fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb [ 143.498045][ T9604] ffff888024087800: fc fc fc fc fa fb fb fb fb fb fb fb fb fc fc fc [ 143.498051][ T9604] ================================================================== [ 143.498138][ T9604] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 143.843228][ T9604] CPU: 3 UID: 0 PID: 9604 Comm: syz.1.1261 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.846546][ T9604] Tainted: [L]=SOFTLOCKUP [ 143.847906][ T9604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.851030][ T9604] Call Trace: [ 143.852108][ T9604] [ 143.853052][ T9604] dump_stack_lvl+0x100/0x190 [ 143.854551][ T9604] vpanic+0x2dc/0x6f8 [ 143.855824][ T9604] panic+0xd1/0xe0 [ 143.857029][ T9604] ? __pfx_panic+0x10/0x10 [ 143.858437][ T9604] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 143.860369][ T9604] ? preempt_schedule+0x57/0xd0 [ 143.861905][ T9604] check_panic_on_warn.cold+0x19/0x34 [ 143.863587][ T9604] end_report.part.0+0x3a/0x90 [ 143.865110][ T9604] kasan_report.cold+0xe/0x18 [ 143.866601][ T9604] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 143.868493][ T9604] acpi_ns_get_attached_object+0x148/0x1b0 [ 143.870324][ T9604] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 143.872191][ T9604] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 143.873806][ T9604] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 143.875853][ T9604] ? acpi_ds_create_operand+0x267/0xc20 [ 143.877584][ T9604] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 143.879343][ T9604] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 143.881238][ T9604] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 143.882810][ T9604] ? __asan_memset+0x23/0x50 [ 143.884221][ T9604] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 143.886026][ T9604] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 143.887706][ T9604] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 143.889582][ T9604] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 143.891338][ T9604] ? acpi_ut_trace_ptr+0x111/0x2a0 [ 143.892933][ T9604] acpi_ds_exec_end_op+0xb78/0x1e60 [ 143.894484][ T9604] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 143.896184][ T9604] acpi_ps_parse_loop+0x5e1/0x26e0 [ 143.897738][ T9604] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 143.899437][ T9604] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 143.901141][ T9604] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 143.902953][ T9604] ? acpi_ut_create_thread_state+0x6d/0x170 [ 143.904694][ T9604] acpi_ps_parse_aml+0x81e/0x1120 [ 143.906184][ T9604] acpi_ps_execute_method+0x5c4/0xe90 [ 143.907813][ T9604] acpi_ns_evaluate+0x640/0x1670 [ 143.909369][ T9604] acpi_ut_evaluate_object+0xf7/0x610 [ 143.911032][ T9604] acpi_rs_get_prt_method_data+0xa0/0x150 [ 143.912798][ T9604] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 143.914752][ T9604] ? acpi_ut_status_exit+0x111/0x1c0 [ 143.916375][ T9604] ? acpi_rs_validate_parameters+0x104/0x210 [ 143.918208][ T9604] acpi_get_irq_routing_table+0xb8/0x140 [ 143.919933][ T9604] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 143.921911][ T9604] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 143.923747][ T9604] ? preempt_schedule_thunk+0x16/0x40 [ 143.925443][ T9604] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 143.927433][ T9604] acpi_pci_irq_lookup+0x8e/0x6b0 [ 143.929059][ T9604] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 143.930822][ T9604] acpi_pci_irq_disable+0x1a8/0x360 [ 143.932471][ T9604] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 143.934261][ T9604] pcibios_disable_device+0x89/0xb0 [ 143.935915][ T9604] do_pci_disable_device+0x9f/0x100 [ 143.937557][ T9604] ? __pfx_do_pci_disable_device+0x10/0x10 [ 143.939402][ T9604] ? pci_release_region.part.0+0x15b/0x2e0 [ 143.941239][ T9604] pci_disable_device+0x130/0x270 [ 143.942829][ T9604] virtio_pci_remove+0xcf/0x110 [ 143.944382][ T9604] pci_device_remove+0xb2/0x1d0 [ 143.945925][ T9604] ? __pfx_pci_device_remove+0x10/0x10 [ 143.947637][ T9604] device_remove+0xcb/0x180 [ 143.949089][ T9604] device_release_driver_internal+0x441/0x610 [ 143.950993][ T9604] pci_stop_bus_device+0x120/0x160 [ 143.952613][ T9604] pci_stop_and_remove_bus_device+0x58/0xa0 [ 143.954472][ T9604] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 143.956524][ T9604] remove_store+0x123/0x140 [ 143.957953][ T9604] ? __pfx_remove_store+0x10/0x10 [ 143.959550][ T9604] ? find_held_lock+0x2b/0x80 [ 143.961041][ T9604] ? sysfs_file_kobj+0xe4/0x290 [ 143.962583][ T9604] ? sysfs_file_kobj+0xe4/0x290 [ 143.964126][ T9604] ? __pfx_remove_store+0x10/0x10 [ 143.965708][ T9604] dev_attr_store+0x58/0x80 [ 143.967147][ T9604] ? __pfx_dev_attr_store+0x10/0x10 [ 143.968799][ T9604] sysfs_kf_write+0xf2/0x150 [ 143.970274][ T9604] kernfs_fop_write_iter+0x3e0/0x5f0 [ 143.971954][ T9604] ? __pfx_sysfs_kf_write+0x10/0x10 [ 143.973603][ T9604] vfs_write+0x6af/0x1050 [ 143.974971][ T9604] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 143.976814][ T9604] ? __pfx_vfs_write+0x10/0x10 [ 143.978326][ T9604] ? find_held_lock+0x2b/0x80 [ 143.979842][ T9604] ksys_write+0x12a/0x250 [ 143.981214][ T9604] ? __pfx_ksys_write+0x10/0x10 [ 143.982747][ T9604] ? kcov_ioctl+0x17a/0x750 [ 143.984194][ T9604] do_syscall_64+0x123/0x790 [ 143.985662][ T9604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.987519][ T9604] RIP: 0033:0x7f4ff299fb19 [ 143.988935][ T9604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.994918][ T9604] RSP: 002b:00007f4ff3788028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.997529][ T9604] RAX: ffffffffffffffda RBX: 00007f4ff2c26090 RCX: 00007f4ff299fb19 [ 144.000025][ T9604] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 144.002483][ T9604] RBP: 00007f4ff2a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 144.004949][ T9604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.007395][ T9604] R13: 00007f4ff2c26128 R14: 00007f4ff2c26090 R15: 00007fffe043d048 [ 144.009871][ T9604] [ 144.011501][ T9604] Kernel Offset: disabled [ 144.012871][ T9604] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:19:09 Registers: info registers vcpu 0 CPU#0 RAX=0000005820a81bbe RBX=ffff88806a024040 RCX=00000000000006e0 RDX=0000000000000058 RSI=ffffffff81fdedb5 RDI=0000000000000001 RBP=0000002163186586 RSP=ffffc90000007db0 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=1ffff92000000fc0 R13=0000000000000001 R14=0000000000000001 R15=ffff88806a024080 RIP=ffffffff81fdedc8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd1e17d56c0 ffffffff 00c00000 GS =0000 ffff8880d4475000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000003038 CR3=0000000027baf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe20a9a796 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe20a9a796 00007ffe20a9a79c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1e36381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1e36381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1e363834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1e36381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1e37fa5f8 00007fd1e37fa5c8 00007fd1e37fa600 00007fd1e37fa5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000058 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81e9baf8 RDX=0000000000000000 RSI=0000000000000008 RDI=ffff888037ff0000 RBP=0000000000000003 RSP=ffffc900006a0d18 R8 =0000000000000001 R9 =fffff520000d4195 R10=0000000000000003 R11=0000000000000000 R12=0000000000000000 R13=ffff888037ff0018 R14=ffff888037ff0a80 R15=ffff888037ff0000 RIP=ffffffff81d89d82 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4575000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd1e35ed200 CR3=0000000027baf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1e435d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe20a9a796 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe20a9a796 00007ffe20a9a79c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1e36381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1e36381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1e363834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1e36381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1e37fa600 00007fd1e37fa5e0 00007fd1e37fa5e8 00007fd1e37fa618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1e37fa5f8 00007fd1e37fa5c8 00007fd1e37fa600 00007fd1e37fa5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000058 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff926aa960 RBX=0000000000000002 RCX=ffffffff8291d224 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff926aa958 RBP=ffff888059687768 RSP=ffffc9002fbf7280 R8 =0000000000000000 R9 =ffffed100b2d0eed R10=ffff88805968776f R11=0000000000000001 R12=ffffe8fefc27bb50 R13=ffff888059687000 R14=0000607e27c06b40 R15=ffffe8fefc27bb40 RIP=ffffffff8288dba1 RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe2390236c0 ffffffff 00c00000 GS =0000 ffff8880d4675000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000005b40 CR3=000000002d83c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557781f1e4 000055557781f1e0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2189fae80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa2189fae80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555778272f8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 84001cf6030210b0 8084001cf6030a01 e0808084001cf403 0c04001cf00302b8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030c02001d88030e 04001d84030a0400 1d800302c1c80484 001cf8030010b880 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1da8030404001da4 031204001da0030c 02001d9803020400 1d94030a04001d90 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1ac0030210001ab0 0301b810001b9003 00317a797301ffff fffffffffffff508 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0104808280801000 1a80040100000008 06060160b220a008 001ae0030010001a ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0030010001ac003 0210001ab00301b8 10001b900300317a 797301ffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffff5081da803 0404001da4031204 001da0030c02001d 98030204001d9403 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a04001d90030c02 001d88030e04001d 84030a04001d8003 02c1c80484001cf8 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c32695 RDI=ffffffff9cf53000 RBP=ffffffff9cf52fc0 RSP=ffffc9002fc66a48 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=2e7a7973203a5043 R12=0000000000000000 R13=0000000000000036 R14=000000000000000c R15=ffffc9002fc66d60 RIP=ffffffff85c326bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4ff37886c0 ffffffff 00c00000 GS =0000 ffff8880d4775000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fea79cb5e9c CR3=000000002f4bf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0023646e65746e6f 72662f2372657470 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc604c4116 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc604c4116 00007ffc604c411c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f996bc381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f996bc381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f996bc3834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f996bc381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002000203050700 0200020105070002 00020e0507000200 028e0507000000ff ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0507000200028e05 07000000ff060000 0409328000010100 3c02090103020100 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000149 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000