last executing test programs: 6.749772167s ago: executing program 3 (id=162): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000380)=[{0x16}]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc", @ANYRES32=r1, @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b1", 0x4, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.78919565s ago: executing program 3 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setfsgid(0xee00) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000047c0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/SourceSink.r0\x00', 0x1ff) 4.902451764s ago: executing program 3 (id=185): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) 4.825766379s ago: executing program 3 (id=186): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.638193224s ago: executing program 3 (id=189): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="3c0100000000"], 0x18) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2d, 'rlimit'}, {0x2d, 'blkio'}]}, 0xf) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2110cc661668000008001b000000000008000400018000"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r3 = fcntl$dupfd(r0, 0x406, r0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4080) ioctl$NILFS_IOCTL_RESIZE(r4, 0x40086e8b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r4) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 3.760849981s ago: executing program 3 (id=222): socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180200000300000000000000000000008500000022000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x1e, 0x0, &(0x7f0000000440)="e0400000000d85ff9782762f88ca0ec8915ef32c4bdaf74d1bae70e0b8e0", 0x0, 0xadca, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 2.716429379s ago: executing program 0 (id=259): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f000000a5"]) 2.709824582s ago: executing program 0 (id=261): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.548315565s ago: executing program 1 (id=265): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x28) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) write(r1, &(0x7f0000000280)='tcp', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='127.0.0.1', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x4c) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') 1.738959998s ago: executing program 0 (id=272): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x980903, 0x2}) 1.738685036s ago: executing program 0 (id=273): syz_open_dev$loop(&(0x7f0000000100), 0xf01e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 1.699846898s ago: executing program 1 (id=274): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000400)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00000000000000000000121f8e5f60c4ebe9754c2f76bff490c4938278ea2f33a7869b3ffa6750ca4ce0cbe9d9a05f5bd00af55e4b7f990fc0579f846329f51cfcff0c8d215135cf156515d90e644b601d079a68f21afb08cb77095c190e8b1280353efd01d1e4b239e14f74c73d71fca1a9ed47b329359d32cc93835fc9eb54704aa12e20c2a510339e775bcbf578b9b5ef2799e330368984e89544f4fad67c1ecaf3d5d45a928fc471b51b07fb9f09de527b9a24847b", 0xd6}], 0x1) 1.646684488s ago: executing program 0 (id=276): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4050) 1.646505514s ago: executing program 0 (id=277): r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x15, &(0x7f00000006c0)=[{0x30, '\x00', @st={0x4, [{0x3, @uvalue=0x7}, {0x2, @svalue=0x10001}, {0x1, @svalue=0x9ab}, {0x2, @uvalue=0xf59}]}, 0xd}]}) 1.646296285s ago: executing program 1 (id=278): syz_ublk_setup_io_uring(0x20, &(0x7f0000000700)={0x0, 0xd58d, 0x80, 0x2, 0x2cc}, &(0x7f0000000000)=0x0, &(0x7f0000000840)=0x0, &(0x7f00000006c0)=0x0) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000980)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x17}) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x9) ioctl$TCSETSF2(r3, 0x402c542d, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000000000000000000000000002000000000000000000004e200004000100000a00608008", @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 1.587320836s ago: executing program 1 (id=280): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x40, 0x3f, 0x30315559, 0x1, [], [0x0, 0xb, 0x4, 0xfffffffc], [0x0, 0x0, 0x10000000]}) 1.540254684s ago: executing program 1 (id=283): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x20, 0xd, 0x10, 0x3eb, 0x2, 0x277, 0x20, 0xfffff913, 0x20, 0xffffffff, &(0x7f0000000280)=[0x10], 0x1, 0x0}) 1.534915266s ago: executing program 1 (id=285): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000280)={0x1a, &(0x7f0000000140)=[{0x2e, '\x00', @data=0xd05, 0xb}]}) 179.859343ms ago: executing program 2 (id=317): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000140)) 134.455065ms ago: executing program 2 (id=318): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x80000) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 132.337502ms ago: executing program 2 (id=319): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8cff7cf908"], 0x20) 59.709016ms ago: executing program 2 (id=320): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x200) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000100)) 59.441675ms ago: executing program 2 (id=321): r0 = openat$rtc(0xffffff9c, &(0x7f0000001ec0), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x7, 0xe, 0xffffffff, 0x15, 0x10000c, 0x10002, 0x5, 0xac}) 0s ago: executing program 2 (id=322): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000180)=[{0x15, '\x00', @data=0x7fff, 0xffffffff}]}) kernel console output (not intermixed with test programs): [ 28.973720][ T42] audit: type=1400 audit(1788522267.499:114): avc: denied { rlimitinh } for pid=5632 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 28.973738][ T42] audit: type=1400 audit(1788522267.499:115): avc: denied { siginh } for pid=5632 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:4759' (ED25519) to the list of known hosts. [ 30.005898][ T42] audit: type=1400 audit(1788522268.539:116): avc: denied { name_bind } for pid=5639 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 30.040001][ T42] audit: type=1400 audit(1788522268.569:117): avc: denied { execute } for pid=5640 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 30.040351][ T42] audit: type=1400 audit(1788522268.569:118): avc: denied { execute_no_trans } for pid=5640 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 30.268529][ T42] audit: type=1400 audit(1788522268.799:119): avc: denied { write } for pid=5641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.308872][ T42] audit: type=1400 audit(1788522268.839:120): avc: denied { write } for pid=5644 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.351739][ T5640] cgroup: Unknown subsys name 'net' [ 32.496464][ T5640] cgroup: Unknown subsys name 'cpuset' [ 32.500897][ T5640] cgroup: Unknown subsys name 'rlimit' [ 32.725529][ T5706] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.459225][ T5640] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.603897][ T42] kauditd_printk_skb: 39 callbacks suppressed [ 36.603977][ T42] audit: type=1400 audit(1788522275.129:160): avc: denied { execmem } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 36.771447][ T42] audit: type=1400 audit(1788522275.299:161): avc: denied { create } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.771500][ T42] audit: type=1400 audit(1788522275.299:162): avc: denied { create } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.771544][ T42] audit: type=1400 audit(1788522275.299:163): avc: denied { read write } for pid=5725 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.771761][ T42] audit: type=1400 audit(1788522275.299:165): avc: denied { open } for pid=5725 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.779273][ T42] audit: type=1400 audit(1788522275.299:164): avc: denied { read write } for pid=5724 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.786182][ T42] audit: type=1400 audit(1788522275.319:166): avc: denied { ioctl } for pid=5726 comm="syz-executor" path="socket:[5843]" dev="sockfs" ino=5843 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.810921][ T5738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.810927][ T5737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.816182][ T5738] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.817104][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.818099][ T5738] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.818743][ T5738] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.818766][ T5737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.819240][ T5738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.819317][ T5738] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.820021][ T5737] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.820418][ T5738] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.820692][ T5737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.820753][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.821447][ T5737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.821678][ T5737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.823307][ T5739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.824043][ T5737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.824090][ T5737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.825484][ T42] audit: type=1400 audit(1788522275.359:167): avc: denied { read } for pid=5726 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.825511][ T42] audit: type=1400 audit(1788522275.359:168): avc: denied { open } for pid=5726 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.825694][ T5731] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.825922][ T5731] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.826411][ T42] audit: type=1400 audit(1788522275.359:169): avc: denied { mounton } for pid=5726 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.385849][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.385935][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.386040][ T5724] bridge_slave_0: entered allmulticast mode [ 37.386845][ T5724] bridge_slave_0: entered promiscuous mode [ 37.415316][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.415381][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.415587][ T5726] bridge_slave_0: entered allmulticast mode [ 37.416283][ T5726] bridge_slave_0: entered promiscuous mode [ 37.417574][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.417613][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.417670][ T5726] bridge_slave_1: entered allmulticast mode [ 37.418426][ T5726] bridge_slave_1: entered promiscuous mode [ 37.434747][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.438109][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.441076][ T5724] bridge_slave_1: entered allmulticast mode [ 37.444027][ T5724] bridge_slave_1: entered promiscuous mode [ 37.479234][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.503218][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.504937][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.505119][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.505231][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.505310][ T5725] bridge_slave_0: entered allmulticast mode [ 37.505997][ T5725] bridge_slave_0: entered promiscuous mode [ 37.507074][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.507118][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.508007][ T5725] bridge_slave_1: entered allmulticast mode [ 37.508748][ T5725] bridge_slave_1: entered promiscuous mode [ 37.509498][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.509537][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.510048][ T5733] bridge_slave_0: entered allmulticast mode [ 37.510745][ T5733] bridge_slave_0: entered promiscuous mode [ 37.526721][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.545030][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.547992][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.548100][ T5733] bridge_slave_1: entered allmulticast mode [ 37.553145][ T5733] bridge_slave_1: entered promiscuous mode [ 37.565913][ T5726] team0: Port device team_slave_0 added [ 37.569029][ T5726] team0: Port device team_slave_1 added [ 37.587565][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.588560][ T5724] team0: Port device team_slave_0 added [ 37.606704][ T5724] team0: Port device team_slave_1 added [ 37.613099][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.613678][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.613687][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.613699][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.615531][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.616703][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.616712][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.616724][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.630155][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.687958][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.688009][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.688060][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.691775][ T5726] hsr_slave_0: entered promiscuous mode [ 37.692442][ T5726] hsr_slave_1: entered promiscuous mode [ 37.695634][ T5725] team0: Port device team_slave_0 added [ 37.697160][ T5733] team0: Port device team_slave_0 added [ 37.698649][ T5725] team0: Port device team_slave_1 added [ 37.699095][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.699105][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.699119][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.706285][ T5733] team0: Port device team_slave_1 added [ 37.758577][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.758625][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.758660][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.762320][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.762329][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.762341][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.775052][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.775062][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.775075][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.783299][ T5724] hsr_slave_0: entered promiscuous mode [ 37.786508][ T5724] hsr_slave_1: entered promiscuous mode [ 37.786991][ T5724] debugfs: 'hsr0' already exists in 'hsr' [ 37.787055][ T5724] Cannot create hsr debugfs directory [ 37.788067][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.788078][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.788096][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.857866][ T5733] hsr_slave_0: entered promiscuous mode [ 37.858404][ T5733] hsr_slave_1: entered promiscuous mode [ 37.858693][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 37.858705][ T5733] Cannot create hsr debugfs directory [ 37.898694][ T5725] hsr_slave_0: entered promiscuous mode [ 37.899247][ T5725] hsr_slave_1: entered promiscuous mode [ 37.899561][ T5725] debugfs: 'hsr0' already exists in 'hsr' [ 37.899572][ T5725] Cannot create hsr debugfs directory [ 38.034585][ T5726] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.040025][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.040507][ T5726] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.044569][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.048360][ T5726] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.052484][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.066568][ T5726] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.071409][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.126871][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.126969][ T5726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.127336][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.127412][ T5726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.131008][ T5724] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.136001][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.137014][ T5724] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.140670][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.141374][ T5724] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.145346][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.147081][ T5724] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.150144][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.191507][ T5733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.197090][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.200643][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.200748][ T5724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.200859][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.200911][ T5724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.204591][ T5733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.207437][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.207830][ T5733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.209301][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.218452][ T5733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.221687][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.265988][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.268809][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.271706][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.274972][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.305099][ T5725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.310750][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.317973][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.323398][ T5725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.327519][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.328742][ T5725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.331261][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.341253][ T5725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.345707][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.363172][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.376719][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.376815][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.385851][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.394500][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.394564][ T400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.404782][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.415213][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.415289][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.428503][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.428599][ T400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.449002][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.482124][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.489663][ T5724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.494389][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.494465][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.499343][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.509472][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.509584][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.517009][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.525397][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.525481][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.531395][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.531477][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.666522][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.712456][ T5726] veth0_vlan: entered promiscuous mode [ 38.720321][ T5726] veth1_vlan: entered promiscuous mode [ 38.730829][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.744599][ T5726] veth0_macvtap: entered promiscuous mode [ 38.756806][ T5726] veth1_macvtap: entered promiscuous mode [ 38.770345][ T5724] veth0_vlan: entered promiscuous mode [ 38.777251][ T5724] veth1_vlan: entered promiscuous mode [ 38.788280][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.789408][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.791498][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.825041][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.848755][ T5724] veth0_macvtap: entered promiscuous mode [ 38.851948][ T5724] veth1_macvtap: entered promiscuous mode [ 38.862330][ T5733] veth0_vlan: entered promiscuous mode [ 38.882730][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.884683][ T5733] veth1_vlan: entered promiscuous mode [ 38.887044][ T5731] Bluetooth: hci3: command tx timeout [ 38.887049][ T5730] Bluetooth: hci0: command tx timeout [ 38.887336][ T5731] Bluetooth: hci2: command tx timeout [ 38.890992][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.894061][ T5737] Bluetooth: hci1: command tx timeout [ 38.898174][ T400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.898220][ T400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.934393][ T5805] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.937802][ T5805] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.937884][ T400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.937896][ T400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.947588][ T5733] veth0_macvtap: entered promiscuous mode [ 38.949348][ T5725] veth0_vlan: entered promiscuous mode [ 38.950219][ T5733] veth1_macvtap: entered promiscuous mode [ 38.963399][ T5725] veth1_vlan: entered promiscuous mode [ 38.965375][ T5805] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.965402][ T5805] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.965421][ T5805] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.965439][ T5805] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.965457][ T5805] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.967487][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.978189][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.012535][ T5726] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.013928][ T5725] veth0_macvtap: entered promiscuous mode [ 39.016320][ T5725] veth1_macvtap: entered promiscuous mode [ 39.040654][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.042165][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.042181][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.061793][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.100348][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.100416][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.126434][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.126514][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.126558][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.126591][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.126610][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.126629][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.126648][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.139364][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.139381][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.171612][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.172130][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.185583][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.185640][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.194104][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.194156][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.222623][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.222691][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.338788][ T5889] TC_ACT_REPEAT abuse ? [ 39.342490][ T5888] o2cb: Local heartbeat has not been started. [ 39.342537][ T5888] o2cb: Cluster check failed. Fix errors before retrying. [ 39.342884][ T5888] (syz.3.4,5888,0):user_dlm_register:674 ERROR: status = -22 [ 39.342900][ T5888] (syz.3.4,5888,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1" [ 39.586722][ T5900] dlm: no local IP address has been set [ 39.586757][ T5900] dlm: cannot start dlm midcomms -107 [ 39.988287][ T5910] EXT4-fs warning (device sda1): verify_group_input:161: Bad blocks count 0 [ 40.111180][ T5915] Bluetooth: MGMT ver 1.23 [ 40.328617][ T400] nvmet: connect request for invalid subsystem testnqn! [ 40.331644][ T5922] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 40.368318][ T5917] kvm_intel: kvm [5916]: vcpu5, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x212082 [ 40.524952][ T5938] FAULT_INJECTION: forcing a failure. [ 40.524952][ T5938] name failslab, interval 1, probability 0, space 0, times 1 [ 40.524998][ T5938] CPU: 0 UID: 0 PID: 5938 Comm: syz.3.21 Not tainted syzkaller #0 PREEMPT(full) [ 40.525023][ T5938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.525031][ T5938] Call Trace: [ 40.525035][ T5938] [ 40.525040][ T5938] dump_stack_lvl+0x100/0x190 [ 40.525060][ T5938] should_fail_ex.cold+0x5/0xa [ 40.525075][ T5938] should_failslab+0xc2/0x120 [ 40.525095][ T5938] __kmalloc_noprof+0xfc/0x840 [ 40.525106][ T5938] ? __pfx_audit_log_vformat+0x10/0x10 [ 40.525123][ T5938] ? context_struct_to_string+0x4ac/0x8f0 [ 40.525145][ T5938] context_struct_to_string+0x4ac/0x8f0 [ 40.525164][ T5938] ? __pfx_context_struct_to_string+0x10/0x10 [ 40.525182][ T5938] ? sidtab_sid2str_get+0x23b/0x670 [ 40.525195][ T5938] security_sid_to_context_core+0x5b1/0x700 [ 40.525208][ T5938] avc_audit_post_callback+0x1aa/0x910 [ 40.525222][ T5938] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 40.525233][ T5938] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 40.525245][ T5938] ? skb_put+0x138/0x180 [ 40.525258][ T5938] ? audit_log_n_string+0x2a3/0x5a0 [ 40.525279][ T5938] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 40.525291][ T5938] common_lsm_audit+0x23f/0x2b0 [ 40.525302][ T5938] ? __pfx_common_lsm_audit+0x10/0x10 [ 40.525313][ T5938] ? avc_update_node.isra.0+0x578/0xb90 [ 40.525325][ T5938] ? trace_contention_end+0xfb/0x160 [ 40.525339][ T5938] slow_avc_audit+0x186/0x210 [ 40.525352][ T5938] ? __pfx_slow_avc_audit+0x10/0x10 [ 40.525368][ T5938] ? avc_perm_nonode+0x164/0x180 [ 40.525381][ T5938] ? avc_perm_nonode+0xf8/0x180 [ 40.525396][ T5938] audit_inode_permission+0x1ea/0x2a0 [ 40.525410][ T5938] ? __pfx_audit_inode_permission+0x10/0x10 [ 40.525426][ T5938] ? avc_has_perm_noaudit+0x145/0x3b0 [ 40.525441][ T5938] selinux_inode_permission+0x7ed/0x1130 [ 40.525457][ T5938] ? devcgroup_check_permission+0x39/0x440 [ 40.525467][ T5938] ? __pfx_selinux_inode_permission+0x10/0x10 [ 40.525480][ T5938] ? find_held_lock+0x2b/0x80 [ 40.525494][ T5938] ? devcgroup_check_permission+0x174/0x440 [ 40.525505][ T5938] ? match_exception_partial+0x239/0x2d0 [ 40.525524][ T5938] security_inode_permission+0xda/0x250 [ 40.525543][ T5938] inode_permission+0x36c/0x620 [ 40.525562][ T5938] may_open+0x2b8/0x480 [ 40.525578][ T5938] path_openat+0x51f/0x2440 [ 40.525593][ T5938] ? __pfx_path_openat+0x10/0x10 [ 40.525609][ T5938] do_file_open+0x20e/0x430 [ 40.525622][ T5938] ? __pfx_do_file_open+0x10/0x10 [ 40.525645][ T5938] ? _raw_spin_unlock+0x28/0x50 [ 40.525657][ T5938] ? alloc_fd+0x471/0x7a0 [ 40.525675][ T5938] do_sys_openat2+0x10f/0x1e0 [ 40.525689][ T5938] ? __pfx_do_sys_openat2+0x10/0x10 [ 40.525704][ T5938] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 40.525722][ T5938] __x64_sys_openat+0x12d/0x210 [ 40.525737][ T5938] ? __pfx___x64_sys_openat+0x10/0x10 [ 40.525756][ T5938] do_syscall_64+0x123/0x790 [ 40.525786][ T5938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.525800][ T5938] RIP: 0033:0x7fb2ad19e159 [ 40.525810][ T5938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.525820][ T5938] RSP: 002b:00007fb2ae0ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 40.525832][ T5938] RAX: ffffffffffffffda RBX: 00007fb2ad425fa0 RCX: 00007fb2ad19e159 [ 40.525840][ T5938] RDX: 0000000000000002 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 40.525846][ T5938] RBP: 00007fb2ad235024 R08: 0000000000000000 R09: 0000000000000000 [ 40.525853][ T5938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.525859][ T5938] R13: 00007fb2ad426038 R14: 00007fb2ad425fa0 R15: 00007ffeaf3aa168 [ 40.525873][ T5938] [ 40.531638][ T5938] capability: warning: `syz.3.21' uses deprecated v2 capabilities in a way that may be insecure [ 40.582861][ T5943] syzkaller0: entered promiscuous mode [ 40.582880][ T5943] syzkaller0: entered allmulticast mode [ 40.954218][ T5704] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 40.974431][ T5731] Bluetooth: hci1: command tx timeout [ 40.974460][ T5730] Bluetooth: hci0: command tx timeout [ 40.974475][ T5731] Bluetooth: hci3: command tx timeout [ 40.974570][ T5737] Bluetooth: hci2: command tx timeout [ 41.115642][ T5704] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 41.117693][ T5704] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.117712][ T5704] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 41.117744][ T5704] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 41.117773][ T5704] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.123118][ T5950] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 41.130242][ T5704] hub 8-1:1.0: bad descriptor, ignoring hub [ 41.130260][ T5704] hub 8-1:1.0: probe with driver hub failed with error -5 [ 41.130603][ T5704] cdc_wdm 8-1:1.0: skipping garbage [ 41.130613][ T5704] cdc_wdm 8-1:1.0: skipping garbage [ 41.138586][ T5704] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 41.138603][ T5704] cdc_wdm 8-1:1.0: Unknown control protocol [ 41.149054][ T5814] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 41.294474][ T5814] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 41.300377][ T5814] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 41.304216][ T5814] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 41.310268][ T5814] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 41.312921][ T5814] usb 5-1: Product: syz [ 41.314599][ T5814] usb 5-1: Manufacturer: syz [ 41.316656][ T5931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 41.322732][ T5814] hub 5-1:4.0: bad descriptor, ignoring hub [ 41.324970][ T5814] hub 5-1:4.0: probe with driver hub failed with error -5 [ 41.326179][ T5814] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 41.473275][ T5968] binder_alloc: 5967: pid 5967 spamming oneway? 1 buffers allocated for a total size of 4096 [ 41.474303][ T5968] binder_alloc: 5967: pid 5967 spamming oneway? 2 buffers allocated for a total size of 5120 [ 41.544944][ T5876] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 41.654732][ T5774] usb 5-1: USB disconnect, device number 2 [ 41.694580][ T5876] usb 7-1: Using ep0 maxpacket: 32 [ 41.697503][ T5876] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 41.701390][ T5876] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 41.716270][ T5876] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 41.716288][ T5876] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 41.716302][ T5876] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 41.728063][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.728079][ T5876] usb 7-1: Product: syz [ 41.728086][ T5876] usb 7-1: Manufacturer: syz [ 41.728094][ T5876] usb 7-1: SerialNumber: syz [ 41.736414][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 41.739084][ T5876] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input5 [ 41.755746][ T42] kauditd_printk_skb: 123 callbacks suppressed [ 41.756020][ T42] audit: type=1400 audit(1788522280.289:293): avc: denied { bpf } for pid=5976 comm="syz.1.36" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.867644][ T5827] usb 8-1: USB disconnect, device number 2 [ 41.868510][ T5950] cdc_wdm 8-1:1.0: Error autopm - -16 [ 41.953939][ T5876] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 41.953975][ T5876] (id 0x00) [ 41.994472][ T5876] rc_core: IR keymap rc-imon-pad not found [ 41.994526][ T5876] Registered IR keymap rc-empty [ 41.994584][ T5876] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 41.994594][ T5876] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 42.005366][ T5827] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 42.154003][ T5827] usb 8-1: Using ep0 maxpacket: 8 [ 42.155265][ T5876] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 42.156137][ T5876] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input6 [ 42.158998][ T5827] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 42.159756][ T5876] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:2> initialized [ 42.170595][ T5827] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.170632][ T5827] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 42.170689][ T5827] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 42.170716][ T5827] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 42.170750][ T5827] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.225317][ T5827] hub 8-1:1.0: bad descriptor, ignoring hub [ 42.228095][ T5827] hub 8-1:1.0: probe with driver hub failed with error -5 [ 42.237375][ T5827] cdc_wdm 8-1:1.0: skipping garbage [ 42.239176][ T5827] cdc_wdm 8-1:1.0: skipping garbage [ 42.243018][ T5827] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 42.245850][ T5827] cdc_wdm 8-1:1.0: Unknown control protocol [ 42.337106][ T42] audit: type=1400 audit(1788522280.869:294): avc: denied { transfer } for pid=5988 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 42.384718][ T42] audit: type=1400 audit(1788522280.919:295): avc: denied { prog_load } for pid=5990 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 42.426516][ T5950] imon:display_open: display port is already open [ 42.548777][ T57] usb 8-1: USB disconnect, device number 3 [ 42.671031][ T5998] ======================================================= [ 42.671031][ T5998] WARNING: The mand mount option has been deprecated and [ 42.671031][ T5998] and is ignored by this kernel. Remove the mand [ 42.671031][ T5998] option from the mount to silence this warning. [ 42.671031][ T5998] ======================================================= [ 42.676853][ T42] audit: type=1400 audit(1788522281.209:296): avc: denied { unlink } for pid=5997 comm="syz.1.42" name="#1" dev="tmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 42.727777][ T42] audit: type=1400 audit(1788522281.259:297): avc: denied { unmount } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.746963][ T42] audit: type=1400 audit(1788522281.279:298): avc: denied { create } for pid=5961 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.748740][ T42] audit: type=1400 audit(1788522281.279:299): avc: denied { connect } for pid=5961 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.754128][ T5999] imon:send_packet: task interrupted [ 42.754178][ T5999] imon:send_packet: packet tx failed (-512) [ 42.754477][ T5999] imon:vfd_write: send packet #1 failed [ 42.758247][ T42] audit: type=1400 audit(1788522281.289:300): avc: denied { write } for pid=5961 comm="syz.2.30" path="socket:[8998]" dev="sockfs" ino=8998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.900936][ T850] usb 7-1: USB disconnect, device number 2 [ 42.963668][ T42] audit: type=1400 audit(1788522281.489:301): avc: denied { read write } for pid=6010 comm="syz.3.47" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 42.963734][ T42] audit: type=1400 audit(1788522281.489:302): avc: denied { open } for pid=6010 comm="syz.3.47" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 43.044073][ T65] Bluetooth: hci3: command tx timeout [ 43.055719][ T65] Bluetooth: hci2: command tx timeout [ 43.057697][ T5737] Bluetooth: hci0: command tx timeout [ 43.057719][ T5737] Bluetooth: hci1: command tx timeout [ 43.267473][ T6029] FAULT_INJECTION: forcing a failure. [ 43.267473][ T6029] name failslab, interval 1, probability 0, space 0, times 0 [ 43.267544][ T6029] CPU: 0 UID: 0 PID: 6029 Comm: syz.0.52 Not tainted syzkaller #0 PREEMPT(full) [ 43.267567][ T6029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.267575][ T6029] Call Trace: [ 43.267580][ T6029] [ 43.267584][ T6029] dump_stack_lvl+0x100/0x190 [ 43.267616][ T6029] should_fail_ex.cold+0x5/0xa [ 43.267632][ T6029] should_failslab+0xc2/0x120 [ 43.267651][ T6029] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 43.267662][ T6029] ? find_held_lock+0x2b/0x80 [ 43.267677][ T6029] ? alloc_inode+0x183/0x250 [ 43.267697][ T6029] alloc_inode+0x183/0x250 [ 43.267713][ T6029] path_from_stashed+0x25b/0x760 [ 43.267731][ T6029] pidfs_alloc_file+0xf8/0x290 [ 43.267744][ T6029] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 43.267763][ T6029] pidfd_prepare+0x107/0x1b0 [ 43.267776][ T6029] __x64_sys_pidfd_open+0x105/0x1a0 [ 43.267792][ T6029] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 43.267811][ T6029] do_syscall_64+0x123/0x790 [ 43.267829][ T6029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.267840][ T6029] RIP: 0033:0x7fd7def9e159 [ 43.267849][ T6029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.267859][ T6029] RSP: 002b:00007fd7dfe89018 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 43.267871][ T6029] RAX: ffffffffffffffda RBX: 00007fd7df225fa0 RCX: 00007fd7def9e159 [ 43.267878][ T6029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000021 [ 43.267885][ T6029] RBP: 00007fd7df035024 R08: 0000000000000000 R09: 0000000000000000 [ 43.267892][ T6029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.267898][ T6029] R13: 00007fd7df226038 R14: 00007fd7df225fa0 R15: 00007fffd8f0eaf8 [ 43.267933][ T6029] [ 43.495688][ T6046] warning: `syz.2.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 43.947319][ T6072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.60'. [ 44.012595][ T6078] nvmet_tcp: malformed ip/port passed: :8009 [ 44.056014][ T6080] syzkaller0: entered promiscuous mode [ 44.056154][ T6080] syzkaller0: entered allmulticast mode [ 44.081325][ T6082] syzkaller0: entered promiscuous mode [ 44.081381][ T6082] syzkaller0: entered allmulticast mode [ 44.195138][ T6084] syzkaller0: entered promiscuous mode [ 44.195191][ T6084] syzkaller0: entered allmulticast mode [ 44.247006][ T6086] syzkaller0: entered promiscuous mode [ 44.247674][ T6086] syzkaller0: entered allmulticast mode [ 44.309532][ T6090] syzkaller0: entered promiscuous mode [ 44.309587][ T6090] syzkaller0: entered allmulticast mode [ 44.312728][ T6093] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 44.648273][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'. [ 44.648757][ T6107] FAULT_INJECTION: forcing a failure. [ 44.648757][ T6107] name failslab, interval 1, probability 0, space 0, times 0 [ 44.648776][ T6107] CPU: 1 UID: 0 PID: 6107 Comm: syz.0.75 Not tainted syzkaller #0 PREEMPT(full) [ 44.648790][ T6107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 44.648796][ T6107] Call Trace: [ 44.648801][ T6107] [ 44.648806][ T6107] dump_stack_lvl+0x100/0x190 [ 44.648841][ T6107] should_fail_ex.cold+0x5/0xa [ 44.648858][ T6107] should_failslab+0xc2/0x120 [ 44.648877][ T6107] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 44.648890][ T6107] ? __alloc_skb+0x140/0x710 [ 44.648915][ T6107] __alloc_skb+0x140/0x710 [ 44.648933][ T6107] ? __alloc_skb+0x5b7/0x710 [ 44.648950][ T6107] ? __pfx___alloc_skb+0x10/0x10 [ 44.648969][ T6107] ? find_held_lock+0x2b/0x80 [ 44.648984][ T6107] ? atomic_notifier_call_chain+0x9e/0x1c0 [ 44.649003][ T6107] __inet6_rt_notify+0x1d8/0x4c0 [ 44.649018][ T6107] fib6_add_rt2node+0x1c1d/0x3df0 [ 44.649041][ T6107] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 44.649058][ T6107] ? fib6_add_1+0xe1c/0x1700 [ 44.649077][ T6107] ? fib6_add+0x60e/0x1eb0 [ 44.649093][ T6107] fib6_add+0x60e/0x1eb0 [ 44.649112][ T6107] ? do_raw_spin_lock+0x128/0x260 [ 44.649127][ T6107] ? __pfx_fib6_add+0x10/0x10 [ 44.649143][ T6107] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 44.649156][ T6107] ? __asan_memcpy+0x3c/0x60 [ 44.649176][ T6107] ip6_route_add+0xf9/0x1d0 [ 44.649189][ T6107] inet6_rtm_newroute+0x157/0x160 [ 44.649202][ T6107] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 44.649214][ T6107] ? __lock_acquire+0x4c5/0x1ec0 [ 44.649233][ T6107] ? find_held_lock+0x2b/0x80 [ 44.649248][ T6107] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 44.649260][ T6107] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 44.649272][ T6107] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 44.649286][ T6107] rtnetlink_rcv_msg+0x95e/0xe90 [ 44.649299][ T6107] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 44.649315][ T6107] ? ref_tracker_free+0x37e/0x6c0 [ 44.649329][ T6107] netlink_rcv_skb+0x159/0x420 [ 44.649346][ T6107] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 44.649359][ T6107] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 44.649381][ T6107] ? netlink_deliver_tap+0x1ae/0xcc0 [ 44.649399][ T6107] netlink_unicast+0x585/0x850 [ 44.649424][ T6107] ? __pfx_netlink_unicast+0x10/0x10 [ 44.649445][ T6107] netlink_sendmsg+0x8b0/0xda0 [ 44.649465][ T6107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.649485][ T6107] ? selinux_socket_sendmsg+0x198/0x2f0 [ 44.649505][ T6107] ____sys_sendmsg+0xa4d/0xbe0 [ 44.649519][ T6107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.649537][ T6107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 44.649558][ T6107] ___sys_sendmsg+0x190/0x1e0 [ 44.649574][ T6107] ? __pfx____sys_sendmsg+0x10/0x10 [ 44.649590][ T6107] ? futex_wait+0x11e/0x370 [ 44.649613][ T6107] ? find_held_lock+0x2b/0x80 [ 44.649636][ T6107] __sys_sendmsg+0x160/0x210 [ 44.649647][ T6107] ? __pfx___sys_sendmsg+0x10/0x10 [ 44.649665][ T6107] do_syscall_64+0x123/0x790 [ 44.649685][ T6107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.649698][ T6107] RIP: 0033:0x7fd7def9e159 [ 44.649709][ T6107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.649720][ T6107] RSP: 002b:00007fd7dfe89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.649731][ T6107] RAX: ffffffffffffffda RBX: 00007fd7df225fa0 RCX: 00007fd7def9e159 [ 44.649738][ T6107] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 44.649744][ T6107] RBP: 00007fd7df035024 R08: 0000000000000000 R09: 0000000000000000 [ 44.649750][ T6107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.649757][ T6107] R13: 00007fd7df226038 R14: 00007fd7df225fa0 R15: 00007fffd8f0eaf8 [ 44.649771][ T6107] [ 44.767632][ T6115] syzkaller0: entered promiscuous mode [ 44.767644][ T6115] syzkaller0: entered allmulticast mode [ 44.975404][ T6122] syzkaller0: entered promiscuous mode [ 44.975454][ T6122] syzkaller0: entered allmulticast mode [ 45.123961][ T65] Bluetooth: hci2: command tx timeout [ 45.124163][ T5731] Bluetooth: hci3: command tx timeout [ 45.136811][ T65] Bluetooth: hci1: command tx timeout [ 45.136875][ T65] Bluetooth: hci0: command tx timeout [ 45.235555][ T6125] kvm [6124]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x70 [ 45.236638][ T6125] kvm [6124]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000082 [ 45.482158][ T6141] CIFS: Attempting to mount //127.0.0.1/share [ 45.499145][ T6141] CIFS: decode_ntlmssp_challenge: authentication has been weakened as server does not support key exchange [ 45.508917][ T6141] CIFS: VFS: \\127.0.0.1 failed to connect to IPC (rc=-11) [ 45.512244][ T6141] CIFS: VFS: \\127.0.0.1 disabling echoes and oplocks [ 45.512296][ T6141] CIFS: VFS: \\127.0.0.1 disabling echoes and oplocks [ 45.512667][ T6141] CIFS: VFS: cifs_mount failed w/return code = -11 [ 45.612662][ T6147] dlm: closing connection to node 1 [ 45.616218][ T6147] dlm: io handling for node: 1 stopped [ 45.626082][ T6147] dlm: closing connection to node 1 done [ 46.114713][ T6159] CIFS: Attempting to mount //127.0.0.1/share [ 46.224580][ T6160] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0xfe [ 46.226213][ T6159] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 46.226352][ T6159] CIFS: VFS: cifs_mount failed w/return code = -11 [ 46.662424][ T6177] syzkaller0: entered promiscuous mode [ 46.662481][ T6177] syzkaller0: entered allmulticast mode [ 46.793583][ T42] kauditd_printk_skb: 92 callbacks suppressed [ 46.795125][ T42] audit: type=1400 audit(1788522285.319:395): avc: denied { write } for pid=6186 comm="syz.3.104" name="subsystems" dev="configfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 46.801229][ T6185] tipc: Started in network mode [ 46.801250][ T6185] tipc: Node identity c6a04e355c5d, cluster identity 4711 [ 46.801401][ T6185] tipc: Enabled bearer , priority 0 [ 46.802192][ T6185] syzkaller0: entered promiscuous mode [ 46.802206][ T6185] syzkaller0: entered allmulticast mode [ 46.807465][ T6185] tipc: Resetting bearer [ 46.807968][ T6185] syzkaller0: tun_net_xmit 90 [ 46.809818][ T6175] kvm [6174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x500000000 [ 46.815682][ T6184] tipc: Resetting bearer [ 46.817323][ T42] audit: type=1400 audit(1788522285.349:396): avc: denied { write } for pid=6186 comm="syz.3.104" name="namespaces" dev="configfs" ino=11940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 46.818689][ T6187] nvmet: adding nsid 1 to subsystem testsubsys [ 46.826661][ T6184] tipc: Disabling bearer [ 46.827065][ T42] audit: type=1400 audit(1788522285.359:397): avc: denied { write } for pid=6186 comm="syz.3.104" name="subsystems" dev="configfs" ino=9817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 46.828457][ T42] audit: type=1400 audit(1788522285.359:398): avc: denied { write } for pid=6186 comm="syz.3.104" name="subsystems" dev="configfs" ino=9817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 46.850080][ T6175] kvm [6174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x500000000 [ 46.875957][ T6175] kvm [6174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x500000000 [ 46.889429][ T6191] syzkaller0: entered promiscuous mode [ 46.889460][ T6191] syzkaller0: entered allmulticast mode [ 46.889712][ T6175] kvm [6174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x500000000 [ 46.892289][ T6175] kvm [6174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x500000000 [ 46.895436][ T6191] 0: reclassify loop, rule prio 0, protocol 700 [ 46.914584][ T6175] kvm [6174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x500000000 [ 46.914965][ T6175] kvm [6174]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 46.940655][ T6175] kvm [6174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x500000000 [ 46.944563][ T6191] netlink: 168 bytes leftover after parsing attributes in process `syz.3.105'. [ 47.021673][ T42] audit: type=1400 audit(1788522285.549:399): avc: denied { create } for pid=6192 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.123696][ T42] audit: type=1400 audit(1788522285.649:400): avc: denied { write } for pid=6203 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.123778][ T42] audit: type=1400 audit(1788522285.649:401): avc: denied { nlmsg_write } for pid=6203 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.146597][ T42] audit: type=1400 audit(1788522285.679:402): avc: denied { create } for pid=6205 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 47.210687][ T42] audit: type=1326 audit(1788522285.739:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.2.115" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efeb839e159 code=0x0 [ 47.370048][ T42] audit: type=1804 audit(1788522285.899:404): pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.115" name="/newroot/28/file1" dev="fuse" ino=1 res=1 errno=0 [ 47.411154][ T6221] tc action pedit 'at' offset -2147483645 out of bounds [ 47.411213][ T6221] tc action pedit 'at' offset -2147483645 out of bounds [ 47.411241][ T6221] tc action pedit 'at' offset -2147483645 out of bounds [ 47.411261][ T6221] tc action pedit 'at' offset -2147483645 out of bounds [ 47.411268][ T6221] tc action pedit 'at' offset -2147483645 out of bounds [ 47.411273][ T6221] tc action pedit 'at' offset -2147483645 out of bounds [ 47.411279][ T6221] tc action pedit 'at' offset -2147483645 out of bounds [ 47.411284][ T6221] tc action pedit 'at' offset -2147483645 out of bounds [ 47.411290][ T6221] tc action pedit 'at' offset -2147483645 out of bounds [ 47.411296][ T6221] tc action pedit 'at' offset -2147483645 out of bounds [ 47.411307][ T6221] 0: reclassify loop, rule prio 0, protocol 800 [ 48.106593][ T6261] syzkaller0: entered promiscuous mode [ 48.106641][ T6261] syzkaller0: entered allmulticast mode [ 48.117308][ T6261] tipc: Enabled bearer , priority 0 [ 48.121078][ T6261] tipc: Resetting bearer [ 48.126054][ T6260] tipc: Resetting bearer [ 48.134691][ T6260] tipc: Disabling bearer [ 48.528341][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 48.604722][ T6283] jffs2: notice: (6283) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 48.668155][ T6286] syzkaller0: entered promiscuous mode [ 48.668207][ T6286] syzkaller0: entered allmulticast mode [ 48.750960][ T6293] netlink: 236 bytes leftover after parsing attributes in process `syz.1.140'. [ 48.774268][ T6297] o2cb: Local heartbeat has not been started. [ 48.775493][ T6288] ftl_cs: FTL header not found. [ 48.777992][ T6297] o2cb: Cluster check failed. Fix errors before retrying. [ 48.780403][ T6297] (syz.2.141,6297,3):user_dlm_register:674 ERROR: status = -22 [ 48.782214][ T6297] (syz.2.141,6297,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1" [ 48.813496][ T6299] tc action pedit offset must be on 32 bit boundaries [ 48.813560][ T6299] tc action pedit offset must be on 32 bit boundaries [ 48.813590][ T6299] tc action pedit offset must be on 32 bit boundaries [ 48.813609][ T6299] tc action pedit offset must be on 32 bit boundaries [ 48.813626][ T6299] tc action pedit offset must be on 32 bit boundaries [ 48.813644][ T6299] tc action pedit offset must be on 32 bit boundaries [ 48.813662][ T6299] tc action pedit offset must be on 32 bit boundaries [ 48.813680][ T6299] tc action pedit offset must be on 32 bit boundaries [ 48.813698][ T6299] tc action pedit offset must be on 32 bit boundaries [ 48.813716][ T6299] tc action pedit offset must be on 32 bit boundaries [ 48.813738][ T6299] 0: reclassify loop, rule prio 0, protocol 800 [ 48.857692][ T6288] block2mtd: mtd1: [/dev/loop0] erase_size = 0KiB [6] [ 49.108121][ T6318] i2c i2c-0: new_device: Instantiated device rt1719 at 0x04 [ 49.127514][ T6320] syzkaller0: entered promiscuous mode [ 49.127561][ T6320] syzkaller0: entered allmulticast mode [ 49.266970][ T6328] netlink: 'syz.3.152': attribute type 10 has an invalid length. [ 49.270448][ T6328] syz_tun: entered promiscuous mode [ 49.277529][ T6328] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 49.284832][ T13] bond0: (slave bond_slave_0): interface is now down [ 49.284892][ T13] bond0: (slave bond_slave_1): interface is now down [ 49.284924][ T13] bond0: (slave syz_tun): interface is now down [ 49.304603][ T13] bond0: (slave bond_slave_0): interface is now down [ 49.304665][ T13] bond0: (slave bond_slave_1): interface is now down [ 49.304692][ T13] bond0: (slave syz_tun): interface is now down [ 49.320496][ T13] bond0: now running without any active interface! [ 49.331468][ T6334] CIFS: Attempting to mount //127.0.0.1/share [ 49.343765][ T6339] kAFS: bad VL server IP address [ 49.463726][ T6344] Fallback order for Node 0: 0 1 [ 49.463769][ T6344] Fallback order for Node 1: 1 0 [ 49.464024][ T6344] Built 2 zonelists, mobility grouping on. Total pages: 737187 [ 49.464034][ T6344] Policy zone: Normal [ 49.471302][ T6344] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110000 [ 49.471351][ T6344] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 49.471402][ T6344] raw: 057ff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 49.471413][ T6344] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 49.471419][ T6344] page dumped because: unmovable page [ 49.471425][ T6344] page_owner tracks the page as allocated [ 49.471429][ T6344] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc0(GFP_KERNEL|__GFP_ZERO|__GFP_NOWARN), pid 6344, tgid 6337 (syz.1.155), ts 49434811087 [ 49.471446][ T6344] post_alloc_hook+0xfd/0x120 [ 49.471478][ T6344] get_page_from_freelist+0x110d/0x35d0 [ 49.471494][ T6344] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 49.471509][ T6344] alloc_pages_node_noprof+0x93/0x200 [ 49.471525][ T6344] alloc_pages_exact_nid_noprof+0x32/0xe0 [ 49.471540][ T6344] init_section_page_ext+0x82/0x110 [ 49.471553][ T6344] page_ext_callback+0x1cb/0x2c0 [ 49.471564][ T6344] notifier_call_chain+0x99/0x3f0 [ 49.471578][ T6344] blocking_notifier_call_chain+0x69/0xa0 [ 49.471592][ T6344] online_pages+0x2b1/0x760 [ 49.471606][ T6344] memory_subsys_online+0x327/0x540 [ 49.471618][ T6344] device_online+0x15b/0x200 [ 49.471630][ T6344] state_store+0x196/0x1e0 [ 49.471641][ T6344] dev_attr_store+0x58/0x80 [ 49.471651][ T6344] sysfs_kf_write+0xf2/0x150 [ 49.471663][ T6344] kernfs_fop_write_iter+0x3e0/0x5f0 [ 49.471672][ T6344] page_owner free stack trace missing [ 49.524327][ T6347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 50.166084][ T6334] CIFS: VFS: cifs_mount failed w/return code = -512 [ 50.174811][ T6339] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 50.174913][ T6339] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 50.195285][ T6339] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 50.202198][ T6339] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 50.202276][ T6339] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 50.203691][ T6356] lo: entered allmulticast mode [ 50.211590][ T6339] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 50.216787][ T6339] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 50.216869][ T6339] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 50.224163][ T6339] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 50.227229][ T6339] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 50.227344][ T6339] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 50.235158][ T6339] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 50.714253][ T12] netdevsim netdevsim12 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.798456][ T6379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.166'. [ 50.940728][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.443941][ T5731] Bluetooth: hci0: command 0x0c1a tx timeout [ 51.760647][ T6421] lo speed is unknown, defaulting to 1000 [ 51.765638][ T6421] lo speed is unknown, defaulting to 1000 [ 51.768844][ T6421] lo speed is unknown, defaulting to 1000 [ 51.809157][ T6425] netlink: 48 bytes leftover after parsing attributes in process `syz.1.179'. [ 51.809874][ T6425] netlink: 'syz.1.179': attribute type 64 has an invalid length. [ 51.850962][ T6421] infiniband syz0: set active [ 51.851634][ T25] lo speed is unknown, defaulting to 1000 [ 51.851773][ T6421] infiniband syz0: added lo [ 51.860594][ T6421] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 51.860660][ T6421] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 51.861700][ T6421] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 51.883611][ T6421] RDS/IB: syz0: added [ 51.885239][ T6421] smc: adding ib device syz0 with port count 1 [ 51.885284][ T6421] smc: ib device syz0 port 1 has no pnetid [ 51.893252][ T6421] lo speed is unknown, defaulting to 1000 [ 51.899032][ T5704] lo speed is unknown, defaulting to 1000 [ 51.937588][ T5731] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 52.087336][ T6421] lo speed is unknown, defaulting to 1000 [ 52.121539][ T42] kauditd_printk_skb: 76 callbacks suppressed [ 52.121603][ T42] audit: type=1400 audit(1788522290.649:481): avc: denied { read write } for pid=6435 comm="syz.0.184" name="file0" dev="9p" ino=72377423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.121641][ T42] audit: type=1400 audit(1788522290.649:482): avc: denied { open } for pid=6435 comm="syz.0.184" path="/53/file0/file0" dev="9p" ino=72377423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.150245][ T42] audit: type=1400 audit(1788522290.679:483): avc: denied { sys_module } for pid=6435 comm="syz.0.184" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 52.171576][ T42] audit: type=1400 audit(1788522290.699:484): avc: denied { write } for pid=6435 comm="syz.0.184" name="/" dev="9p" ino=72377411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.236341][ T6421] lo speed is unknown, defaulting to 1000 [ 52.245243][ T5731] Bluetooth: hci3: command 0x0c1a tx timeout [ 52.245689][ T5731] Bluetooth: hci2: command 0x0c1a tx timeout [ 52.245708][ T5731] Bluetooth: hci1: command 0x0c1a tx timeout [ 52.338388][ T6421] lo speed is unknown, defaulting to 1000 [ 52.480208][ T42] audit: type=1400 audit(1788522291.009:485): avc: denied { write } for pid=6449 comm="syz.0.187" name="functions" dev="configfs" ino=11695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 52.491805][ T42] audit: type=1400 audit(1788522291.019:486): avc: denied { write } for pid=6449 comm="syz.0.187" name="strings" dev="configfs" ino=12898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 52.502139][ T42] audit: type=1400 audit(1788522291.019:487): avc: denied { write } for pid=6449 comm="syz.0.187" name="c.1" dev="configfs" ino=12897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 52.511770][ T42] audit: type=1400 audit(1788522291.019:488): avc: denied { write } for pid=6449 comm="syz.0.187" name="c.1" dev="configfs" ino=12897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 52.527543][ T6452] syz_tun: left promiscuous mode [ 52.536742][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.537287][ T6452] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.607239][ T6452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.610862][ T6452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.626891][ T65] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 52.659953][ T65] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 52.690320][ T6472] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 52.699439][ T42] audit: type=1400 audit(1788522291.229:489): avc: denied { mounton } for pid=6471 comm="syz.2.196" path="/proc/137/cgroup" dev="proc" ino=13278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 52.706935][ T42] audit: type=1400 audit(1788522291.229:490): avc: denied { getattr } for pid=6471 comm="syz.2.196" path="/proc/137/cgroup" dev="nsfs" ino=4026532863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.766110][ T65] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 52.784047][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.784639][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.786376][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.786400][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.796869][ T6450] configfs-gadget.g1 gadget.0: HOST MAC 46:1b:82:90:a1:6f [ 52.799619][ T6450] configfs-gadget.g1 gadget.0: MAC 2a:0e:37:88:84:84 [ 52.948505][ T6501] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 53.256620][ T6532] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 53.524246][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 53.557122][ T6557] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 53.593915][ T850] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 53.689023][ T6565] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 53.689087][ T6565] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 53.690349][ T6565] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 53.756966][ T850] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 53.762535][ T850] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.762611][ T850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.800384][ T850] as10x_usb: device has been detected [ 53.803738][ T850] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 53.813524][ T850] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 53.835437][ T850] as10x_usb: error during firmware upload part1 [ 53.835984][ T850] Registered device Abilis Systems DVB-Titan [ 54.223462][ T6606] udc dummy_udc.0: failed to start g1: -19 [ 54.228954][ T6606] UDC core: g1: couldn't find an available UDC or it's busy [ 54.334116][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 54.334148][ T5731] Bluetooth: hci3: command 0x0c1a tx timeout [ 54.336122][ T6624] program syz.0.259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.552595][ T6643] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 54.558717][ T6643] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 54.615429][ T6648] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 55.401477][ T6667] sg_write: data in/out 196864/172 bytes for SCSI command 0x0-- guessing data in; [ 55.401477][ T6667] program syz.1.274 not setting count and/or reply_len properly [ 55.512385][ T6684] comedi comedi4: bad chanlist[0]=0x00000010 chan=16 range length=2 [ 55.613958][ T5731] Bluetooth: hci0: command 0x0c1a tx timeout [ 55.713256][ T6701] /dev/sg0: Can't lookup blockdev [ 55.742121][ T5731] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 56.210952][ T6724] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 56.404838][ T5731] Bluetooth: hci3: command 0x0c1a tx timeout [ 56.404898][ T5731] Bluetooth: hci2: command 0x0c1a tx timeout [ 56.615823][ T6738] comedi comedi2: dac02: I/O base address or length out of range [ 56.680677][ T6742] UBIFS error (pid: 6742): cannot open "ubi0:testvol", error -19 [ 56.950724][ T6760] SELinux: policydb string does not match my string SE Linux [ 56.950964][ T6760] SELinux: failed to load policy [ 60.105380][ T6671] ================================================================== [ 60.105404][ T6671] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x4f3/0x5d0 [ 60.105437][ T6671] Read of size 4 at addr ffff88802f34ae3c by task syz.0.277/6671 [ 60.105445][ T6671] [ 60.105451][ T6671] CPU: 3 UID: 0 PID: 6671 Comm: syz.0.277 Not tainted syzkaller #0 PREEMPT(full) [ 60.105463][ T6671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.105469][ T6671] Call Trace: [ 60.105473][ T6671] [ 60.105477][ T6671] dump_stack_lvl+0x100/0x190 [ 60.105494][ T6671] print_report+0x13d/0x4b0 [ 60.105510][ T6671] ? __virt_addr_valid+0x239/0x430 [ 60.105522][ T6671] ? dvb_frontend_release+0x4f3/0x5d0 [ 60.105534][ T6671] kasan_report+0xdf/0x1c0 [ 60.105555][ T6671] ? dvb_frontend_release+0x4f3/0x5d0 [ 60.105569][ T6671] dvb_frontend_release+0x4f3/0x5d0 [ 60.105581][ T6671] ? __pfx_dvb_frontend_release+0x10/0x10 [ 60.105594][ T6671] __fput+0x3ff/0xb50 [ 60.105608][ T6671] task_work_run+0x150/0x240 [ 60.105623][ T6671] ? __pfx_task_work_run+0x10/0x10 [ 60.105639][ T6671] ? do_raw_spin_unlock+0x145/0x1e0 [ 60.105653][ T6671] do_exit+0x951/0x2ae0 [ 60.105667][ T6671] ? __pfx_do_exit+0x10/0x10 [ 60.105679][ T6671] ? do_raw_spin_lock+0x128/0x260 [ 60.105692][ T6671] ? find_held_lock+0x2b/0x80 [ 60.105705][ T6671] ? get_signal+0x7e0/0x21e0 [ 60.105717][ T6671] do_group_exit+0xd5/0x2a0 [ 60.105730][ T6671] get_signal+0x1ec7/0x21e0 [ 60.105742][ T6671] ? putname+0xb1/0x110 [ 60.105755][ T6671] ? __pfx_get_signal+0x10/0x10 [ 60.105766][ T6671] ? __lock_acquire+0x4c5/0x1ec0 [ 60.105777][ T6671] arch_do_signal_or_restart+0x91/0x7e0 [ 60.105793][ T6671] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 60.105810][ T6671] ? find_held_lock+0x2b/0x80 [ 60.105824][ T6671] ? __might_fault+0xc5/0x140 [ 60.105840][ T6671] exit_to_user_mode_loop+0x139/0x700 [ 60.105852][ T6671] ? rcu_is_watching+0x13/0xc0 [ 60.105866][ T6671] do_syscall_64+0x661/0x790 [ 60.105882][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.105893][ T6671] RIP: 0033:0x7fd7def5e98e [ 60.105901][ T6671] Code: Unable to access opcode bytes at 0x7fd7def5e964. [ 60.105906][ T6671] RSP: 002b:00007fd7dfe88b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 60.105918][ T6671] RAX: 0000000000000003 RBX: 00007fd7dfe896c0 RCX: 00007fd7def5e98e [ 60.105924][ T6671] RDX: 0000000000000400 RSI: 00007fd7dfe88c00 RDI: ffffffffffffff9c [ 60.105931][ T6671] RBP: 00007fd7dfe88c00 R08: 0000000000000000 R09: 0000000000000000 [ 60.105937][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 60.105943][ T6671] R13: 00007fd7df226038 R14: 00007fd7df225fa0 R15: 00007fffd8f0eaf8 [ 60.105953][ T6671] [ 60.105957][ T6671] [ 60.105960][ T6671] Allocated by task 1: [ 60.105964][ T6671] kasan_save_stack+0x30/0x50 [ 60.105975][ T6671] kasan_save_track+0x14/0x30 [ 60.105984][ T6671] __kasan_kmalloc+0xaa/0xb0 [ 60.105993][ T6671] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 60.106007][ T6671] dvb_register_device+0x1d6/0x1e20 [ 60.106019][ T6671] dvb_register_frontend+0x552/0x820 [ 60.106030][ T6671] vidtv_bridge_probe+0x44b/0xa30 [ 60.106046][ T6671] platform_probe+0x106/0x1d0 [ 60.106059][ T6671] really_probe+0x241/0xa60 [ 60.106068][ T6671] __driver_probe_device+0x210/0x460 [ 60.106076][ T6671] driver_probe_device+0x4a/0x140 [ 60.106085][ T6671] __driver_attach+0x21f/0x5b0 [ 60.106093][ T6671] bus_for_each_dev+0x13e/0x1d0 [ 60.106106][ T6671] bus_add_driver+0x305/0x5b0 [ 60.106119][ T6671] driver_register+0x1e2/0x360 [ 60.106129][ T6671] vidtv_bridge_init+0x52/0x80 [ 60.106142][ T6671] do_one_initcall+0x11c/0x6f0 [ 60.106152][ T6671] kernel_init_freeable+0x6ea/0x7b0 [ 60.106162][ T6671] kernel_init+0x21/0x1e0 [ 60.106175][ T6671] ret_from_fork+0x730/0xd60 [ 60.106185][ T6671] ret_from_fork_asm+0x1a/0x30 [ 60.106194][ T6671] [ 60.106196][ T6671] Freed by task 6671: [ 60.106201][ T6671] kasan_save_stack+0x30/0x50 [ 60.106210][ T6671] kasan_save_track+0x14/0x30 [ 60.106220][ T6671] kasan_save_free_info+0x3b/0x70 [ 60.106233][ T6671] __kasan_slab_free+0x5f/0x80 [ 60.106243][ T6671] kfree+0x22b/0x6d0 [ 60.106256][ T6671] dvb_device_put.part.0+0x57/0x90 [ 60.106267][ T6671] dvb_generic_release+0xe2/0x160 [ 60.106279][ T6671] dvb_frontend_release+0x13d/0x5d0 [ 60.106290][ T6671] __fput+0x3ff/0xb50 [ 60.106300][ T6671] task_work_run+0x150/0x240 [ 60.106314][ T6671] do_exit+0x951/0x2ae0 [ 60.106325][ T6671] do_group_exit+0xd5/0x2a0 [ 60.106337][ T6671] get_signal+0x1ec7/0x21e0 [ 60.106346][ T6671] arch_do_signal_or_restart+0x91/0x7e0 [ 60.106360][ T6671] exit_to_user_mode_loop+0x139/0x700 [ 60.106371][ T6671] do_syscall_64+0x661/0x790 [ 60.106381][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.106390][ T6671] [ 60.106392][ T6671] The buggy address belongs to the object at ffff88802f34ae00 [ 60.106392][ T6671] which belongs to the cache kmalloc-256 of size 256 [ 60.106400][ T6671] The buggy address is located 60 bytes inside of [ 60.106400][ T6671] freed 256-byte region [ffff88802f34ae00, ffff88802f34af00) [ 60.106409][ T6671] [ 60.106412][ T6671] The buggy address belongs to the physical page: [ 60.106416][ T6671] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f34a [ 60.106426][ T6671] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 60.106433][ T6671] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 60.106444][ T6671] page_type: f5(slab) [ 60.106453][ T6671] raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 60.106462][ T6671] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 60.106471][ T6671] head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 60.106479][ T6671] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 60.106488][ T6671] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 60.106496][ T6671] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 60.106502][ T6671] page dumped because: kasan: bad access detected [ 60.106506][ T6671] page_owner tracks the page as allocated [ 60.106509][ T6671] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 7324777915 [ 60.106525][ T6671] post_alloc_hook+0xfd/0x120 [ 60.106539][ T6671] get_page_from_freelist+0x110d/0x35d0 [ 60.106556][ T6671] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 60.106572][ T6671] new_slab+0xa9/0x6e0 [ 60.106585][ T6671] refill_objects+0xe3/0x410 [ 60.106598][ T6671] __pcs_replace_empty_main+0x35e/0x650 [ 60.106612][ T6671] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 60.106626][ T6671] bus_add_driver+0x92/0x5b0 [ 60.106639][ T6671] driver_register+0x1e2/0x360 [ 60.106649][ T6671] usb_register_driver+0x21c/0x3e0 [ 60.106661][ T6671] do_one_initcall+0x11c/0x6f0 [ 60.106670][ T6671] kernel_init_freeable+0x6ea/0x7b0 [ 60.106679][ T6671] kernel_init+0x21/0x1e0 [ 60.106691][ T6671] ret_from_fork+0x730/0xd60 [ 60.106701][ T6671] ret_from_fork_asm+0x1a/0x30 [ 60.106710][ T6671] page_owner free stack trace missing [ 60.106714][ T6671] [ 60.106716][ T6671] Memory state around the buggy address: [ 60.106720][ T6671] ffff88802f34ad00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 60.106727][ T6671] ffff88802f34ad80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 60.106734][ T6671] >ffff88802f34ae00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.106739][ T6671] ^ [ 60.106744][ T6671] ffff88802f34ae80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.106750][ T6671] ffff88802f34af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 60.106756][ T6671] ================================================================== [ 60.107608][ T6671] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 60.356276][ T6671] CPU: 3 UID: 0 PID: 6671 Comm: syz.0.277 Not tainted syzkaller #0 PREEMPT(full) [ 60.359146][ T6671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.362299][ T6671] Call Trace: [ 60.363389][ T6671] [ 60.364341][ T6671] dump_stack_lvl+0x100/0x190 [ 60.365880][ T6671] vpanic+0x553/0x970 [ 60.367228][ T6671] ? __pfx_vpanic+0x10/0x10 [ 60.368752][ T6671] ? rcu_is_watching+0x13/0xc0 [ 60.370379][ T6671] ? dvb_frontend_release+0x4f3/0x5d0 [ 60.372223][ T6671] panic+0xd1/0xe0 [ 60.373436][ T6671] ? __pfx_panic+0x10/0x10 [ 60.374847][ T6671] ? dvb_frontend_release+0x4f3/0x5d0 [ 60.376579][ T6671] ? preempt_schedule_common+0x3c/0xb0 [ 60.378294][ T6671] check_panic_on_warn.cold+0x19/0x34 [ 60.379985][ T6671] end_report.part.0+0x3a/0x90 [ 60.381497][ T6671] kasan_report.cold+0xe/0x18 [ 60.382983][ T6671] ? dvb_frontend_release+0x4f3/0x5d0 [ 60.384704][ T6671] dvb_frontend_release+0x4f3/0x5d0 [ 60.386335][ T6671] ? __pfx_dvb_frontend_release+0x10/0x10 [ 60.388248][ T6671] __fput+0x3ff/0xb50 [ 60.389608][ T6671] task_work_run+0x150/0x240 [ 60.391178][ T6671] ? __pfx_task_work_run+0x10/0x10 [ 60.392884][ T6671] ? do_raw_spin_unlock+0x145/0x1e0 [ 60.394628][ T6671] do_exit+0x951/0x2ae0 [ 60.395979][ T6671] ? __pfx_do_exit+0x10/0x10 [ 60.397463][ T6671] ? do_raw_spin_lock+0x128/0x260 [ 60.399105][ T6671] ? find_held_lock+0x2b/0x80 [ 60.400593][ T6671] ? get_signal+0x7e0/0x21e0 [ 60.402050][ T6671] do_group_exit+0xd5/0x2a0 [ 60.403535][ T6671] get_signal+0x1ec7/0x21e0 [ 60.405155][ T6671] ? putname+0xb1/0x110 [ 60.406564][ T6671] ? __pfx_get_signal+0x10/0x10 [ 60.408265][ T6671] ? __lock_acquire+0x4c5/0x1ec0 [ 60.409912][ T6671] arch_do_signal_or_restart+0x91/0x7e0 [ 60.411689][ T6671] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 60.413665][ T6671] ? find_held_lock+0x2b/0x80 [ 60.415167][ T6671] ? __might_fault+0xc5/0x140 [ 60.416711][ T6671] exit_to_user_mode_loop+0x139/0x700 [ 60.418420][ T6671] ? rcu_is_watching+0x13/0xc0 [ 60.420011][ T6671] do_syscall_64+0x661/0x790 [ 60.421571][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.423613][ T6671] RIP: 0033:0x7fd7def5e98e [ 60.425128][ T6671] Code: Unable to access opcode bytes at 0x7fd7def5e964. [ 60.427323][ T6671] RSP: 002b:00007fd7dfe88b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 60.429899][ T6671] RAX: 0000000000000003 RBX: 00007fd7dfe896c0 RCX: 00007fd7def5e98e [ 60.432423][ T6671] RDX: 0000000000000400 RSI: 00007fd7dfe88c00 RDI: ffffffffffffff9c [ 60.435085][ T6671] RBP: 00007fd7dfe88c00 R08: 0000000000000000 R09: 0000000000000000 [ 60.438041][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 60.440667][ T6671] R13: 00007fd7df226038 R14: 00007fd7df225fa0 R15: 00007fffd8f0eaf8 [ 60.443150][ T6671] [ 60.444977][ T6671] Kernel Offset: disabled [ 60.446341][ T6671] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:44:58 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806000bbc8 RCX=ffffffff826b674a RDX=0000000000000000 RSI=0000000000000008 RDI=ffff888029214b00 RBP=0000000000000000 RSP=ffffc900049bf918 R8 =0000000000000004 R9 =0000000000000008 R10=0000000000000000 R11=0000000000000000 R12=0000000000004847 R13=0000000000000008 R14=0000000000006000 R15=ffff88801c0b0000 RIP=ffffffff820bf010 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055555f3e2500 ffffffff 00c00000 GS =0000 ffff8880d5b60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6788bed158 CR3=0000000050e94000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 676e697a65657266 5f666c65732e7265 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe56bb5576 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe56bb5576 00007ffe56bb557c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6788a35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6788a35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6788a357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6788a35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636e00644674754f 6b2065736f6c6320 6f742064656c6961 66007265746c6966 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000003b800000004 000001d0000000e8 00000000000001d0 000000e800000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000004000001d0 000000e800000000 000001d0000000e8 0000000000000007 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff9bc4efd4 RBX=ffffffff9bc4efd0 RCX=ffffffff81e77ec3 RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff9bc4efd0 RBP=0000000000000002 RSP=ffffc900006b0d48 R8 =0000000000000000 R9 =fffff520000d61a2 R10=0000000000000003 R11=0000000000000000 R12=0000000000000008 R13=dffffc0000000000 R14=ffff88806a53ccc0 R15=1ffff920000d61b6 RIP=ffffffff827f070a RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055e00d1cfbe0 CR3=000000000eb96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefff800 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbab4bf1ce0 00007fbab4bf1ce0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e00d1eb9c0 000055e00d1eb9c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 00007fff5fd75cc0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbab4bf1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ff00000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 00007fff5fd75cc0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003a6166703a756b 733a302e30312d35 33712d6370727663 3a3174633a554d45 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00004d200d2c4550 0000000000000021 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffff88802f850000 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81b99291 RDI=fffffbfff1dbd80c RBP=ffffffff8edec060 RSP=ffffc90023a4f088 R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90023a4f1c8 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e72416 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055e00d1cfbe0 CR3=0000000050c9c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6576697372756365 725f64656772656d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb8e077c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb8e077c6 00007ffcb8e077cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efeb8435607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efeb8435647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efeb84357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efeb8435639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85affc25 RDI=ffffffff9bc64ca0 RBP=ffffffff9bc64c60 RSP=ffffc900239cf1f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000037363654 R12=0000000000000000 R13=0000000000000020 R14=0000000000000001 R15=ffffc900239cf508 RIP=ffffffff85affc4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055e00d1ef400 CR3=000000002a83e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000020 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 312e30362020205b 203a6c656e72656b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 205d313736365420 5b5d353434353031 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3838386666666620 7264646120746120 3420657a69732066 6f2064616552205d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e6b636568632065 7361656c70202c6e 6f69746172756769 666e6f6320746e65 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 747369736e6f636e 69206e6120687469 77207466656c206e 6565622065766168 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2079616d20306e61 6c77206563616672 65746e49202e7964 6165726c61206465 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7474696d6d6f6320 7365676e61686320 656d6f7320687469 772064656c696166 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000