last executing test programs: 4m17.319759655s ago: executing program 2 (id=1937): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="d80000000002010300000000000000000200001078000a80240002800c00028005000100110000000c00028005000100110000000600034000020000080001400000000108000140000000014000028006000340000100000c0002800500010000000000000002800500010011000000060003400000000006000340004600000c00028005000100100000004c000a80040002804400028014000180080001000a01010108000200ac1414aa2c00018014000300fc00000000000000000000000000000054000400fe80000000000000000000000000002a"], 0xd8}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0xa00, 0x801) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f0000000dc0)={0x1, 0x1, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x401, 0x80) fdatasync(r8) flistxattr(r8, &(0x7f0000000280)=""/149, 0x95) 4m17.031162534s ago: executing program 2 (id=1939): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) ioctl$UBLK_U_CMD_START_DEV(r1, 0xc0207506, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) fcntl$lock(r1, 0x5, &(0x7f0000000140)={0x0, 0x4, 0x2, 0x7, r2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) 4m16.921310443s ago: executing program 2 (id=1942): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c00078008000400080000000800010018000000080002000900000008000400050000000800040000040000"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x36, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 4m16.801138132s ago: executing program 2 (id=1945): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0\x00', 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000540)={0x2, @vbi={0xb3, 0x7, 0x100, 0x494e4f4b, [0x4b6fb5c, 0x8], [0x3], 0x1}}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setuid(0xee00) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='-2 -3 -4\n', 0x9) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'macvlan0\x00', 0x2000}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000701000/0x1000)=nil, 0x1000, &(0x7f00000004c0)=""/74) close(r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0), 0x0) close(r4) r5 = socket$inet(0x2, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, &(0x7f0000000900)={{0xffffffffffffffff, 0x0, 0x8, 0x3}, &(0x7f0000000540)=[{}, {}, {}, {}, {}]}) write$P9_RLOCK(r2, &(0x7f0000000300)={0x8, 0x35, 0x2, 0x3}, 0x8) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 4m16.690494315s ago: executing program 2 (id=1946): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs\x00', 0x0) mount(0x0, &(0x7f0000000440)='./my_debugfs\x00', &(0x7f0000000480)='debugfs\x00', 0x0, 0x0) chdir(&(0x7f00000004c0)='./my_debugfs\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, r0}, 0x38) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r2, 0xc, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000540)={0x21, 0x1}) chdir(&(0x7f0000000500)='./usb\x00') chdir(&(0x7f0000000540)='./uhci\x00') open(&(0x7f0000000580)='0000:00:1d.0\x00', 0x700, 0x0) 4m16.644600656s ago: executing program 2 (id=1951): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x4000080) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1000\n', 0x5) close(r1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 4m1.544280482s ago: executing program 32 (id=1951): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x4000080) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1000\n', 0x5) close(r1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 3m12.22050857s ago: executing program 0 (id=2831): openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x201}, 0x0, 0x0, 0x0) r3 = socket(0x2000000015, 0x80005, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xf4daaaba4d84d77b, 0x1}) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c", 0x5b}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa4"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c", 0xf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2", 0x57}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf82}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m11.990478612s ago: executing program 0 (id=2832): r0 = socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0xda, &(0x7f0000000040)={@random="b1df42c5c228", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x0, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x2c, 0x4, 0x1, 0x30, 0xc4, 0x66, 0x0, 0xa0, 0x1, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x14, 0x24, 0x1, 0x9, [{@loopback, 0xfffffffc}, {@broadcast, 0xe}]}, @timestamp={0x44, 0x18, 0x60, 0x0, 0xe, [0xb73, 0x8, 0xa7, 0xfffffffc, 0x7]}, @ssrr={0x89, 0x13, 0x71, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1, @rand_addr=0x64010101]}, @lsrr={0x83, 0x13, 0xa, [@loopback, @multicast2, @empty, @multicast2]}, @lsrr={0x83, 0x1b, 0xb, [@local, @rand_addr=0x64010102, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x21}, @dev={0xac, 0x14, 0x14, 0x23}]}, @rr={0x7, 0x7, 0x97, [@loopback]}, @timestamp_prespec={0x44, 0x14, 0xe8, 0x3, 0x8, [{@local}, {@remote, 0x200}]}, @timestamp_prespec={0x44, 0x14, 0x14, 0x3, 0x8, [{@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0xa4, 0xfff2, 0xfffff001, 0x4}}}}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) close(0xffffffffffffffff) 3m11.98982046s ago: executing program 0 (id=2833): syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c76133", 0xc5}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf90}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m11.75068132s ago: executing program 0 (id=2834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x12, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2a09e8dbe108598948224ad54afac11d875397bdb22d0000b520a1a93c527d3d458d54992861ac030000000000000000000000fdffff1b00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000080200000000000000000000640001000006020202020202070082848b960c121824"], 0x36) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1a) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000640), 0x0, 0x0, 0x2) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r5, 0xc028564d, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x7, 0x1c, 0x5, 0xfffffff7, 0x80000002, 0x800f6, 0x8000004]}) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./debug\x00', 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000280)='0000:00:01.0\x00', 0xd) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/dwc2-pci/new_id\x00', 0x1, 0x0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) file_setattr(r8, 0x0, &(0x7f00000005c0)={0x300, 0x81, 0xfe97, 0x7, 0x1}, 0x18, 0x1000) write(r7, &(0x7f0000000380)='1af4 1050\x00', 0xa) 3m10.695498987s ago: executing program 0 (id=2847): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000240)=[0x80, 0xfffc, 0x115], &(0x7f0000000280)=[0x1, 0x2, 0x1, 0x1000, 0x200, 0x37ac, 0x401, 0x5, 0x7], &(0x7f0000000380)=[0xa], &(0x7f00000003c0)=[0x3, 0x0, 0xc5, 0xfff5, 0x7fff, 0x2]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r6, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) 3m10.298276153s ago: executing program 0 (id=2852): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008085}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 3m10.121324293s ago: executing program 33 (id=2852): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008085}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 12.570344837s ago: executing program 3 (id=5350): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000120000000800080000000000080009000000010018"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 12.569925541s ago: executing program 3 (id=5352): r0 = msgget$private(0x0, 0x7fc) msgrcv(r0, 0xffffffffffffffff, 0x0, 0x0, 0x1000) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x3000) msgsnd(0x0, &(0x7f0000000440)={0x1}, 0x8, 0x0) 12.359918694s ago: executing program 3 (id=5357): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @empty}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}}) 12.308154828s ago: executing program 3 (id=5360): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 12.26033032s ago: executing program 3 (id=5361): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x8}]}, 0x10) 11.547027524s ago: executing program 3 (id=5380): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x48, &(0x7f0000000d40)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x12, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x12, 0x0, @gue={{0x2}, 'J?'}}}}}}}, 0x0) 11.453357952s ago: executing program 34 (id=5380): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x48, &(0x7f0000000d40)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x12, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x12, 0x0, @gue={{0x2}, 'J?'}}}}}}}, 0x0) 3.770026497s ago: executing program 5 (id=5518): socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) getpeername$unix(r3, &(0x7f0000000180), &(0x7f0000000240)=0x6e) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) 2.838296669s ago: executing program 5 (id=5537): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2.629374172s ago: executing program 1 (id=5542): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x1, 0x13838}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45}, 0x40000) 2.629303048s ago: executing program 5 (id=5543): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x2}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaabaaaaaaa86dd603c216b0008000020010000000000000000000000000002fe8000000000000000000000000000bb"], 0x0) 2.540192058s ago: executing program 1 (id=5544): unshare(0x6020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) 2.539845369s ago: executing program 5 (id=5545): sendmmsg(0xffffffffffffffff, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="16", 0xfffffffffffffde5}], 0x1}}, {{&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @random="29e86cdd11c2", 'lo\x00'}}, 0x80, &(0x7f0000005280)=[{&(0x7f0000000740)="78b6b0a58cb4ab0a63ac90de4f7d47e952b56cf20f92d89615b27e82a4b6635fde4de519cfe12051565e8cf0794303d1a420e86b6de0223207122ec0414d684291e8cc53369978c03a1fe452f299714a76c25435ab99f7ca610d5b68", 0x5c}, {&(0x7f00000007c0)="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", 0xfc}, {&(0x7f00000008c0)="4c3c854ea7cb370a16857e31bc89d1f98fe10805e776c3678b3d6d516e15dc06a409f146417eb166732e65eee8865da5661f281880ceb4237aa7f3794f1faa880028cb672947647f60caa85c5fffc990cbe6dc8965771c512fc1ea4ac199a2941f56db07a6642d08537a4b88f7c785d1a1702643a35d23e924598ededec8c5cbc5b46f2753ee", 0x86}, {&(0x7f0000004180)="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", 0x1000}, {&(0x7f0000005180)="158cb30aa5d9edc4af8129e05c4e2a40c61c5148a7d585515741e5e0d60272c0991ed5bdaaba573eca51a80f57313853f456e0f639862dc78d2694f55145f7614987f85e25948ddaa16ffef8794f48a0ab2df5511ef1d0f9b2dbbec7aa269230", 0x60}, {&(0x7f0000000980)="fb7826fc876e8f3ab04eb4c6c5cc9fbc27434b1117763349b638016d8f83e30056b741994c295e41af9e8d1a372b138618bfd34fbeaf028e50bd7f34620b232d392d5f2ba4fdccf9eae6eca5b7c42b0335e20dbce990a4fed9bc54fc92e4c9771177d8e8706e04013e46ff54f286aec85133e252a693ff", 0x77}], 0x6, &(0x7f0000000a00)=[{0x10, 0x109, 0x2}], 0x10}}], 0x2, 0xa3e4bbaf62f461ca) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x1, {0x4, 0x0, 0x2, 0x6, 0xffff, 0x0, {0x0, 0x0, 0x1, 0x0, 0xb905, 0x0, 0x40, 0x1, 0x7, 0x6000, 0x0, 0x0, r2, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x809000, 0x200, 0x2, 0x5, 0x3}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r3, 0x401070c9, &(0x7f0000000000)=0x14000000) shutdown(0xffffffffffffffff, 0x0) 2.4879666s ago: executing program 1 (id=5547): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2c841}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) 2.439525707s ago: executing program 5 (id=5549): ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2.43934745s ago: executing program 1 (id=5550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}]}, 0x28}}, 0x0) 2.376734354s ago: executing program 5 (id=5552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4008894) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd"], 0x240) 2.376647781s ago: executing program 1 (id=5553): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="1a", 0x1e91b, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="11", 0xfffd}], 0x1}}], 0x1, 0x8015) 2.289124635s ago: executing program 1 (id=5555): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) socket$inet6(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$netlink(0x10, 0x3, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b40000000000000061115c00000000001600000000000000950074000000000059552ac209e29f456e80207ac53a6a01d6931dc2d04f52654d4da6dab982d865703217850208f70d7e7592241198618784af3f24185e95d7edc1d6c1e075c088d6a828610ca463ccb90a50a4b38d9bb9656528a6d92c7ceed1d0f375afcd65408ccac06a9f131ab1d0642bdeea21d307e97734e40bbcb962cee8b49ea2c376e68d6302f4d3f6"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYRES64=r2], 0x20) 2.118902489s ago: executing program 4 (id=5559): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 1.974975233s ago: executing program 4 (id=5560): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000100)='map_files\x00') fchdir(r3) sendmmsg$unix(r0, &(0x7f0000005a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98}}, {{&(0x7f0000005840)=@file={0x1, './file2\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) 1.902512248s ago: executing program 4 (id=5562): open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4800) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000080), 0x0, 0xffffffffffffffc0, 0x2) 1.59932403s ago: executing program 6 (id=5565): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000037c0)={&(0x7f0000001540)={0x7c8, 0x12, 0x300, 0x70bd2b, 0x25dfdbff, {0x27, 0x0, 0x9, 0x95, {0x4e22, 0x4e22, [0x1, 0x4, 0x4, 0x8], [0x5bd3, 0x8, 0x1, 0x9], r0, [0x3eba, 0xfffff001]}, 0x65d6, 0x1000}, [@INET_DIAG_REQ_BYTECODE={0x6e, 0x1, "738d33cfcec2eecb98a93525346276436251daf084fe30396dfd40556fe846bfa5f171532e8141025b20fe7082f2de920ca475a2a06515ad48d4a8854e9125ed4da705418ac271aa85bd059b3680e8a629502a06401bbf354d4542ff690889a0668b0f2a4833143def10"}, @INET_DIAG_REQ_BYTECODE={0x5d, 0x1, "900906d2335c6b4ed599f498c468a5b2ae956d60bd4ddabf7dbc7ceaeaed1c289aa0f2f2ad9811ae47277515379ef37365c3c5c6b7dd06ae21593297e02ae7b4367087501bbbcf931a88441d8497f37e00908e682452483371"}, @INET_DIAG_REQ_BYTECODE={0x45, 0x1, "d06d1772746b42e3ca0827da5bcc539fc764ed5d2c23ea6331c98a11426ac9c52923135fb74f31ddcb75cfbe826765c48ee66e7d18feec310903ed8f5625bcd834"}, @INET_DIAG_REQ_BYTECODE={0x65e, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x7c8}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000000) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100), &(0x7f0000000000), 0x0) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.480124111s ago: executing program 6 (id=5566): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') get_mempolicy(0x0, 0x0, 0x8000000000000000, &(0x7f0000000000/0x400000)=nil, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 1.48000032s ago: executing program 6 (id=5567): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001600)=[{{&(0x7f0000001140)={0xa, 0x4e24, 0x0, @private2}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000010c0)="b3", 0x1}], 0x1}}], 0x1, 0x1) shutdown(r0, 0x1) connect$inet6(r0, &(0x7f0000001080)={0xa, 0x4e21, 0xfffffffe, @loopback, 0xfffffffa}, 0x1c) 1.410038196s ago: executing program 6 (id=5568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_disconnect={0xde}) 999.243153ms ago: executing program 4 (id=5569): r0 = syz_io_uring_setup(0x4b7, &(0x7f0000010400)={0x0, 0x8086e1, 0x0, 0x1, 0xfffffffd}, &(0x7f0000000500), &(0x7f0000000140), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)}], &(0x7f00000005c0), 0x1}, 0x20) 932.371596ms ago: executing program 4 (id=5570): r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x8000200d}) 440.429284ms ago: executing program 6 (id=5571): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000008100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000008040)=ANY=[@ANYBLOB="3000000000000000840000000100000000000010090200000a0000000700000003000000090000007f", @ANYBLOB="200000000000000084"], 0x50, 0x40d1}, 0x800) 440.254575ms ago: executing program 6 (id=5572): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}}, 0x0) 0s ago: executing program 4 (id=5573): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) kernel console output (not intermixed with test programs): 72114][ T4555] usb 6-1: config 0 interface 0 has no altsetting 0 [ 384.377089][ T4555] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 384.381056][ T4555] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 384.383901][ T4555] usb 6-1: Product: syz [ 384.385437][ T4555] usb 6-1: Manufacturer: syz [ 384.386970][ T4555] usb 6-1: SerialNumber: syz [ 384.390725][ T4555] usb 6-1: config 0 descriptor?? [ 384.394709][ T4555] hub 6-1:0.0: bad descriptor, ignoring hub [ 384.396659][ T4555] hub 6-1:0.0: probe with driver hub failed with error -5 [ 384.401254][ T4555] usb 6-1: selecting invalid altsetting 0 [ 384.804001][T20714] netlink: 'syz.1.5018': attribute type 1 has an invalid length. [ 385.149880][T20714] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 385.183264][T20719] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5022'. [ 385.195260][T20719] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20719 comm=syz.3.5022 [ 385.203433][ T42] kauditd_printk_skb: 36 callbacks suppressed [ 385.203446][ T42] audit: type=1400 audit(2000000015.990:21998): avc: denied { getopt } for pid=20718 comm="syz.3.5022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 385.308821][T20721] FAULT_INJECTION: forcing a failure. [ 385.308821][T20721] name failslab, interval 1, probability 0, space 0, times 0 [ 385.317747][T20721] CPU: 1 UID: 0 PID: 20721 Comm: syz.3.5023 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.317775][T20721] Tainted: [L]=SOFTLOCKUP [ 385.317781][T20721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 385.317791][T20721] Call Trace: [ 385.317799][T20721] [ 385.317808][T20721] dump_stack_lvl+0x100/0x190 [ 385.317833][T20721] should_fail_ex.cold+0x5/0xa [ 385.317859][T20721] should_failslab+0xc2/0x120 [ 385.317882][T20721] kmem_cache_alloc_noprof+0x91/0x6a0 [ 385.317906][T20721] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 385.317933][T20721] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 385.317960][T20721] mmu_topup_memory_caches+0x25/0x170 [ 385.317990][T20721] kvm_mmu_load+0xe2/0x2570 [ 385.318012][T20721] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 385.318032][T20721] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 385.318053][T20721] ? __pfx_kvm_mmu_load+0x10/0x10 [ 385.318077][T20721] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 385.318101][T20721] ? kvm_check_and_inject_events+0x873/0x12a0 [ 385.318126][T20721] ? record_steal_time+0x3a0/0xbb0 [ 385.318150][T20721] vcpu_run+0x3aaa/0x5de0 [ 385.318186][T20721] ? __pfx_vcpu_run+0x10/0x10 [ 385.318223][T20721] ? rcu_is_watching+0x12/0xc0 [ 385.318255][T20721] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 385.318281][T20721] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 385.318321][T20721] kvm_vcpu_ioctl+0x730/0x1700 [ 385.318345][T20721] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 385.318365][T20721] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 385.318389][T20721] ? do_vfs_ioctl+0x226/0x13e0 [ 385.318417][T20721] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 385.318444][T20721] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 385.318476][T20721] ? __fget_files+0x215/0x3d0 [ 385.318495][T20721] ? hook_file_ioctl_common+0x140/0x440 [ 385.318523][T20721] ? selinux_file_ioctl+0x13b/0x290 [ 385.318548][T20721] ? selinux_file_ioctl+0xb6/0x290 [ 385.318577][T20721] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 385.318594][T20721] __x64_sys_ioctl+0x18e/0x210 [ 385.318623][T20721] do_syscall_64+0x115/0x870 [ 385.318644][T20721] ? clear_bhb_loop+0x40/0x90 [ 385.318665][T20721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.318684][T20721] RIP: 0033:0x7f2e55f9de99 [ 385.318702][T20721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.318716][T20721] RSP: 002b:00007f2e56ebf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.318735][T20721] RAX: ffffffffffffffda RBX: 00007f2e56225fa0 RCX: 00007f2e55f9de99 [ 385.318747][T20721] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 385.318758][T20721] RBP: 00007f2e56ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 385.318767][T20721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 385.318775][T20721] R13: 00007f2e56226038 R14: 00007f2e56225fa0 R15: 00007ffc897c2a08 [ 385.318799][T20721] [ 385.475428][T20724] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 385.528699][T20726] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5025'. [ 385.645697][ T42] audit: type=1400 audit(2000000016.430:21999): avc: denied { watch } for pid=20733 comm="syz.3.5029" path="/1318/file0" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 385.657225][ T42] audit: type=1400 audit(2000000016.440:22000): avc: denied { read } for pid=5446 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 385.768667][T20742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5030'. [ 385.822841][T20744] FAULT_INJECTION: forcing a failure. [ 385.822841][T20744] name failslab, interval 1, probability 0, space 0, times 0 [ 385.827888][T20744] CPU: 0 UID: 0 PID: 20744 Comm: syz.4.5031 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.827907][T20744] Tainted: [L]=SOFTLOCKUP [ 385.827912][T20744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 385.827920][T20744] Call Trace: [ 385.827926][T20744] [ 385.827932][T20744] dump_stack_lvl+0x100/0x190 [ 385.827951][T20744] should_fail_ex.cold+0x5/0xa [ 385.827968][T20744] should_failslab+0xc2/0x120 [ 385.827984][T20744] kmem_cache_alloc_noprof+0x91/0x6a0 [ 385.828000][T20744] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 385.828017][T20744] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 385.828035][T20744] mmu_topup_memory_caches+0x25/0x170 [ 385.828054][T20744] kvm_mmu_load+0xe2/0x2570 [ 385.828070][T20744] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 385.828083][T20744] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 385.828097][T20744] ? __pfx_kvm_mmu_load+0x10/0x10 [ 385.828112][T20744] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 385.828127][T20744] ? kvm_check_and_inject_events+0x873/0x12a0 [ 385.828144][T20744] ? record_steal_time+0x3a0/0xbb0 [ 385.828158][T20744] vcpu_run+0x3aaa/0x5de0 [ 385.828181][T20744] ? __pfx_vcpu_run+0x10/0x10 [ 385.828205][T20744] ? rcu_is_watching+0x12/0xc0 [ 385.828226][T20744] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 385.828243][T20744] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 385.828264][T20744] kvm_vcpu_ioctl+0x730/0x1700 [ 385.828279][T20744] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 385.828293][T20744] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 385.828308][T20744] ? do_vfs_ioctl+0x226/0x13e0 [ 385.828326][T20744] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 385.828343][T20744] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 385.828367][T20744] ? __fget_files+0x215/0x3d0 [ 385.828379][T20744] ? hook_file_ioctl_common+0x140/0x440 [ 385.828396][T20744] ? selinux_file_ioctl+0x13b/0x290 [ 385.828413][T20744] ? selinux_file_ioctl+0xb6/0x290 [ 385.828432][T20744] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 385.828447][T20744] __x64_sys_ioctl+0x18e/0x210 [ 385.828473][T20744] do_syscall_64+0x115/0x870 [ 385.828491][T20744] ? clear_bhb_loop+0x40/0x90 [ 385.828516][T20744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.828534][T20744] RIP: 0033:0x7f5fc8f9de99 [ 385.828547][T20744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.828565][T20744] RSP: 002b:00007f5fc9e10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.828585][T20744] RAX: ffffffffffffffda RBX: 00007f5fc9225fa0 RCX: 00007f5fc8f9de99 [ 385.828598][T20744] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 385.828609][T20744] RBP: 00007f5fc9e10090 R08: 0000000000000000 R09: 0000000000000000 [ 385.828618][T20744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 385.828630][T20744] R13: 00007f5fc9226038 R14: 00007f5fc9225fa0 R15: 00007ffc5038bca8 [ 385.828655][T20744] [ 386.039843][ T42] audit: type=1400 audit(2000000016.820:22001): avc: denied { ioctl } for pid=20752 comm="syz.3.5035" path="socket:[207292]" dev="sockfs" ino=207292 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 386.174881][T20765] bad cache= option: none [ 386.174881][T20765] [ 386.177538][T20765] CIFS: VFS: bad cache= option: none [ 386.303142][T20770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5039'. [ 386.307824][T20770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5039'. [ 386.346636][ T42] audit: type=1400 audit(2000000273.127:22002): avc: denied { write } for pid=20768 comm="syz.5.5040" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 386.351812][T20774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5041'. [ 386.537532][T20790] syzkaller0: left promiscuous mode [ 386.539984][T20790] syzkaller0: left allmulticast mode [ 386.597518][T20794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5050'. [ 386.700879][ T41] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 386.767707][ T42] audit: type=1400 audit(2000000273.547:22003): avc: denied { connect } for pid=20798 comm="syz.3.5052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 386.862906][ T41] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 386.868354][ T41] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 386.875191][ T41] usb 9-1: config 0 interface 0 has no altsetting 0 [ 386.879599][ T41] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 386.883942][ T41] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 386.887139][ T41] usb 9-1: Product: syz [ 386.888633][ T41] usb 9-1: Manufacturer: syz [ 386.890376][ T41] usb 9-1: SerialNumber: syz [ 386.899983][ T41] usb 9-1: config 0 descriptor?? [ 386.900259][T20811] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5057'. [ 386.905446][T20811] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5057'. [ 386.906019][ T41] hub 9-1:0.0: bad descriptor, ignoring hub [ 386.913509][ T41] hub 9-1:0.0: probe with driver hub failed with error -5 [ 386.919475][ T41] usb 9-1: selecting invalid altsetting 0 [ 386.993525][T20815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5059'. [ 387.204370][ T42] audit: type=1400 audit(2000000273.987:22004): avc: denied { create } for pid=20822 comm="syz.5.5062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 387.205153][T20824] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.210843][ T42] audit: type=1400 audit(2000000273.987:22005): avc: denied { write } for pid=20822 comm="syz.5.5062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 387.292318][ T5814] usb 9-1: USB disconnect, device number 32 [ 387.476984][ T42] audit: type=1400 audit(2000000274.257:22006): avc: denied { mount } for pid=20828 comm="syz.5.5064" name="/" dev="hugetlbfs" ino=206781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 387.482169][T20829] overlayfs: option "workdir=./file2" is useless in a non-upper mount, ignore [ 387.484448][ T42] audit: type=1400 audit(2000000274.267:22007): avc: denied { mounton } for pid=20828 comm="syz.5.5064" path="/545/file0/file0" dev="hugetlbfs" ino=206782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 387.487516][T20829] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 387.611279][ T1351] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 387.676279][T20835] FAULT_INJECTION: forcing a failure. [ 387.676279][T20835] name failslab, interval 1, probability 0, space 0, times 0 [ 387.682455][T20835] CPU: 2 UID: 0 PID: 20835 Comm: syz.5.5067 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.682482][T20835] Tainted: [L]=SOFTLOCKUP [ 387.682488][T20835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 387.682498][T20835] Call Trace: [ 387.682505][T20835] [ 387.682512][T20835] dump_stack_lvl+0x100/0x190 [ 387.682540][T20835] should_fail_ex.cold+0x5/0xa [ 387.682564][T20835] should_failslab+0xc2/0x120 [ 387.682610][T20835] kmem_cache_alloc_noprof+0x91/0x6a0 [ 387.682634][T20835] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 387.682660][T20835] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 387.682687][T20835] mmu_topup_memory_caches+0x25/0x170 [ 387.682716][T20835] kvm_mmu_load+0xe2/0x2570 [ 387.682747][T20835] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 387.682768][T20835] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 387.682791][T20835] ? __pfx_kvm_mmu_load+0x10/0x10 [ 387.682815][T20835] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 387.682837][T20835] ? kvm_check_and_inject_events+0x873/0x12a0 [ 387.682864][T20835] ? record_steal_time+0x3a0/0xbb0 [ 387.682889][T20835] vcpu_run+0x3aaa/0x5de0 [ 387.682949][T20835] ? __pfx_vcpu_run+0x10/0x10 [ 387.682987][T20835] ? rcu_is_watching+0x12/0xc0 [ 387.683018][T20835] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 387.683046][T20835] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 387.683076][T20835] kvm_vcpu_ioctl+0x730/0x1700 [ 387.683094][T20835] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 387.683111][T20835] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 387.683131][T20835] ? do_vfs_ioctl+0x226/0x13e0 [ 387.683152][T20835] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 387.683173][T20835] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 387.683208][T20835] ? __fget_files+0x215/0x3d0 [ 387.683222][T20835] ? hook_file_ioctl_common+0x140/0x440 [ 387.683244][T20835] ? selinux_file_ioctl+0x13b/0x290 [ 387.683265][T20835] ? selinux_file_ioctl+0xb6/0x290 [ 387.683287][T20835] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 387.683304][T20835] __x64_sys_ioctl+0x18e/0x210 [ 387.683326][T20835] do_syscall_64+0x115/0x870 [ 387.683342][T20835] ? clear_bhb_loop+0x40/0x90 [ 387.683360][T20835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.683375][T20835] RIP: 0033:0x7f988599de99 [ 387.683388][T20835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.683401][T20835] RSP: 002b:00007f98867a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.683419][T20835] RAX: ffffffffffffffda RBX: 00007f9885c25fa0 RCX: 00007f988599de99 [ 387.683428][T20835] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 387.683437][T20835] RBP: 00007f98867a1090 R08: 0000000000000000 R09: 0000000000000000 [ 387.683458][T20835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 387.683467][T20835] R13: 00007f9885c26038 R14: 00007f9885c25fa0 R15: 00007ffdf90fc9f8 [ 387.683487][T20835] [ 387.808314][ T1351] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 387.812457][ T1351] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 387.816450][ T1351] usb 9-1: config 0 interface 0 has no altsetting 0 [ 387.822324][ T1351] usb 9-1: string descriptor 0 read error: -22 [ 387.825021][ T1351] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 387.828567][ T1351] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 387.835589][ T1351] usb 9-1: config 0 descriptor?? [ 387.845798][ T1351] hub 9-1:0.0: bad descriptor, ignoring hub [ 387.847707][ T1351] hub 9-1:0.0: probe with driver hub failed with error -5 [ 387.854782][ T1351] usb 9-1: selecting invalid altsetting 0 [ 387.946525][T20843] netlink: 'syz.5.5069': attribute type 142 has an invalid length. [ 387.983304][T20845] netlink: 'syz.5.5070': attribute type 1 has an invalid length. [ 387.986038][T20846] netlink: 'syz.5.5070': attribute type 1 has an invalid length. [ 388.001280][T20845] 8021q: adding VLAN 0 to HW filter on device bond5 [ 388.015805][T20845] bond5: (slave geneve3): making interface the new active one [ 388.022098][T20845] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 388.105249][T20851] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 388.241365][ T4555] usb 6-1: USB disconnect, device number 39 [ 388.351342][ T1351] usb 9-1: USB disconnect, device number 33 [ 388.571164][T20867] syzkaller1: left promiscuous mode [ 388.573121][T20867] syzkaller1: left allmulticast mode [ 388.793199][T20886] comedi comedi0: Minor -4 is invalid! [ 388.900766][ T849] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 389.024327][T20901] netlink: 'syz.4.5092': attribute type 10 has an invalid length. [ 389.034593][T20901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.071149][ T849] usb 6-1: Using ep0 maxpacket: 8 [ 389.077403][ T849] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 389.081349][ T849] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 389.085584][ T849] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 389.089524][ T849] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 389.091362][T20901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.093835][ T849] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.103461][ T849] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 389.107280][ T849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.490907][ T58] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 389.640801][ T58] usb 10-1: Using ep0 maxpacket: 32 [ 389.645607][ T58] usb 10-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 389.648695][ T58] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.651564][ T58] usb 10-1: Product: syz [ 389.653007][ T58] usb 10-1: Manufacturer: syz [ 389.654545][ T58] usb 10-1: SerialNumber: syz [ 389.702086][T20914] FAULT_INJECTION: forcing a failure. [ 389.702086][T20914] name failslab, interval 1, probability 0, space 0, times 0 [ 389.706681][T20914] CPU: 0 UID: 0 PID: 20914 Comm: syz.4.5096 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.706708][T20914] Tainted: [L]=SOFTLOCKUP [ 389.706715][T20914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 389.706725][T20914] Call Trace: [ 389.706744][T20914] [ 389.706752][T20914] dump_stack_lvl+0x100/0x190 [ 389.706801][T20914] should_fail_ex.cold+0x5/0xa [ 389.706831][T20914] should_failslab+0xc2/0x120 [ 389.706862][T20914] kmem_cache_alloc_noprof+0x91/0x6a0 [ 389.706892][T20914] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 389.706948][T20914] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 389.706974][T20914] mmu_topup_memory_caches+0x25/0x170 [ 389.707014][T20914] kvm_mmu_load+0xe2/0x2570 [ 389.707037][T20914] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 389.707055][T20914] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 389.707074][T20914] ? __pfx_kvm_mmu_load+0x10/0x10 [ 389.707095][T20914] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 389.707116][T20914] ? kvm_check_and_inject_events+0x873/0x12a0 [ 389.707139][T20914] ? record_steal_time+0x3a0/0xbb0 [ 389.707159][T20914] vcpu_run+0x3aaa/0x5de0 [ 389.707189][T20914] ? __pfx_vcpu_run+0x10/0x10 [ 389.707216][T20914] ? rcu_is_watching+0x12/0xc0 [ 389.707244][T20914] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 389.707262][T20914] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 389.707283][T20914] kvm_vcpu_ioctl+0x730/0x1700 [ 389.707300][T20914] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 389.707313][T20914] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 389.707336][T20914] ? do_vfs_ioctl+0x226/0x13e0 [ 389.707359][T20914] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 389.707377][T20914] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 389.707404][T20914] ? __fget_files+0x215/0x3d0 [ 389.707415][T20914] ? hook_file_ioctl_common+0x140/0x440 [ 389.707433][T20914] ? selinux_file_ioctl+0x13b/0x290 [ 389.707451][T20914] ? selinux_file_ioctl+0xb6/0x290 [ 389.707470][T20914] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 389.707483][T20914] __x64_sys_ioctl+0x18e/0x210 [ 389.707502][T20914] do_syscall_64+0x115/0x870 [ 389.707519][T20914] ? clear_bhb_loop+0x40/0x90 [ 389.707534][T20914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.707547][T20914] RIP: 0033:0x7f5fc8f9de99 [ 389.707559][T20914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.707571][T20914] RSP: 002b:00007f5fc9e10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 389.707584][T20914] RAX: ffffffffffffffda RBX: 00007f5fc9225fa0 RCX: 00007f5fc8f9de99 [ 389.707591][T20914] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 389.707598][T20914] RBP: 00007f5fc9e10090 R08: 0000000000000000 R09: 0000000000000000 [ 389.707605][T20914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 389.707612][T20914] R13: 00007f5fc9226038 R14: 00007f5fc9225fa0 R15: 00007ffc5038bca8 [ 389.707626][T20914] [ 389.874154][ T58] usb 10-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 389.876523][T20917] usbtmc 6-1:16.0: simple usb_control_msg returned 0 [ 389.879011][ T58] usb 10-1: incorrect wMaxPacketSize 0x10 for BADD profile [ 389.915816][ T58] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 389.927527][ T58] usb 10-1: USB disconnect, device number 26 [ 389.949708][ T7349] udevd[7349]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.078669][ T5814] usb 6-1: USB disconnect, device number 40 [ 390.217767][T20925] __nla_validate_parse: 4 callbacks suppressed [ 390.217779][T20925] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5100'. [ 390.226125][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 390.226141][ T42] audit: type=1400 audit(2000000277.007:22018): avc: denied { bind } for pid=20924 comm="syz.3.5100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 390.533634][ T42] audit: type=1400 audit(2000000277.317:22019): avc: denied { setopt } for pid=20938 comm="syz.4.5107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 390.533824][ T42] audit: type=1400 audit(2000000277.317:22020): avc: denied { ioctl } for pid=20938 comm="syz.4.5107" path="socket:[209251]" dev="sockfs" ino=209251 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 390.534364][ T42] audit: type=1400 audit(2000000277.317:22021): avc: denied { write } for pid=20938 comm="syz.4.5107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 390.623077][T20944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.633329][T20946] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.635767][T20944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.639481][ T42] audit: type=1400 audit(2000000277.417:22022): avc: denied { execute } for pid=20948 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 390.659851][ T42] audit: type=1400 audit(2000000277.417:22023): avc: denied { execute_no_trans } for pid=20948 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 390.660236][T20946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5109'. [ 390.734596][ T42] audit: type=1400 audit(2000000277.517:22024): avc: denied { ioctl } for pid=20950 comm="syz-executor" path="socket:[209963]" dev="sockfs" ino=209963 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 390.747954][ T5750] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 390.762125][ T5750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 390.767320][ T5750] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 390.771189][ T5750] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 390.775307][ T5750] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 390.786582][ T42] audit: type=1400 audit(2000000277.567:22025): avc: denied { mounton } for pid=20950 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 391.092557][T12441] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 12132 - 0 [ 391.099677][T12441] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 391.103326][T12441] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.104340][T20971] SET target dimension over the limit! [ 391.110074][ T42] audit: type=1400 audit(2000000277.887:22026): avc: denied { ioctl } for pid=20972 comm="syz.5.5115" path="socket:[207834]" dev="sockfs" ino=207834 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 391.147134][T20975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=20975 comm=syz.5.5117 [ 391.232234][T12441] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 12132 - 0 [ 391.236006][T12441] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 391.239262][T12441] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.332493][T12441] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 12132 - 0 [ 391.335861][T12441] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 391.339090][T12441] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.447779][T12441] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 12132 - 0 [ 391.451303][T12441] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 391.454505][T12441] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.462213][T20950] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.464518][T20950] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.466885][T20950] bridge_slave_0: entered allmulticast mode [ 391.469822][T20950] bridge_slave_0: entered promiscuous mode [ 391.473752][T20950] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.476015][T20950] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.478202][T20950] bridge_slave_1: entered allmulticast mode [ 391.481399][T20950] bridge_slave_1: entered promiscuous mode [ 391.500020][T20950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.505542][T20950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.526556][T20950] team0: Port device team_slave_0 added [ 391.530385][T20950] team0: Port device team_slave_1 added [ 391.562064][T20950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.564993][T20950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.575312][T20950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.581441][T20950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.584111][T20950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.593150][T20950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.678890][T20950] hsr_slave_0: entered promiscuous mode [ 391.681525][T20950] hsr_slave_1: entered promiscuous mode [ 391.728812][T12441] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 12132 - 0 [ 391.738007][T12441] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 391.742189][T12441] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.870155][ T42] audit: type=1400 audit(2000000278.647:22027): avc: denied { write } for pid=20984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.142535][T12441] bond0 (unregistering): Released all slaves [ 392.147936][T12441] bond1 (unregistering): Released all slaves [ 392.159181][T12441] bond2 (unregistering): Released all slaves [ 392.203002][ T5446] 8021q: adding VLAN 0 to HW filter on device eth1 [ 392.302417][T12441] tipc: Left network mode [ 392.369382][T12441] IPVS: stopping master sync thread 12673 ... [ 392.418762][ T5446] 8021q: adding VLAN 0 to HW filter on device eth7 [ 392.657655][ T5446] 8021q: adding VLAN 0 to HW filter on device eth10 [ 392.803587][T12441] veth1_macvtap: left promiscuous mode [ 392.805648][T12441] veth0_macvtap: left promiscuous mode [ 392.807461][T12441] veth1_vlan: left promiscuous mode [ 392.809181][T12441] veth0_vlan: left promiscuous mode [ 392.870831][ T5091] Bluetooth: hci4: command tx timeout [ 393.005840][T21020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5124'. [ 393.031439][T21016] FAULT_INJECTION: forcing a failure. [ 393.031439][T21016] name failslab, interval 1, probability 0, space 0, times 0 [ 393.036094][T21016] CPU: 0 UID: 0 PID: 21016 Comm: syz.1.5123 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.036123][T21016] Tainted: [L]=SOFTLOCKUP [ 393.036129][T21016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 393.036147][T21016] Call Trace: [ 393.036154][T21016] [ 393.036163][T21016] dump_stack_lvl+0x100/0x190 [ 393.036190][T21016] should_fail_ex.cold+0x5/0xa [ 393.036215][T21016] should_failslab+0xc2/0x120 [ 393.036238][T21016] kmem_cache_alloc_noprof+0x91/0x6a0 [ 393.036256][T21016] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 393.036274][T21016] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 393.036292][T21016] mmu_topup_memory_caches+0x25/0x170 [ 393.036311][T21016] kvm_mmu_load+0xe2/0x2570 [ 393.036327][T21016] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 393.036339][T21016] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 393.036353][T21016] ? __pfx_kvm_mmu_load+0x10/0x10 [ 393.036369][T21016] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 393.036383][T21016] ? kvm_check_and_inject_events+0x873/0x12a0 [ 393.036400][T21016] ? record_steal_time+0x3a0/0xbb0 [ 393.036414][T21016] vcpu_run+0x3aaa/0x5de0 [ 393.036437][T21016] ? __pfx_vcpu_run+0x10/0x10 [ 393.036459][T21016] ? rcu_is_watching+0x12/0xc0 [ 393.036479][T21016] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 393.036496][T21016] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 393.036517][T21016] kvm_vcpu_ioctl+0x730/0x1700 [ 393.036532][T21016] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 393.036545][T21016] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 393.036562][T21016] ? do_vfs_ioctl+0x226/0x13e0 [ 393.036580][T21016] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 393.036597][T21016] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 393.036621][T21016] ? __fget_files+0x215/0x3d0 [ 393.036632][T21016] ? hook_file_ioctl_common+0x140/0x440 [ 393.036651][T21016] ? selinux_file_ioctl+0x13b/0x290 [ 393.036669][T21016] ? selinux_file_ioctl+0xb6/0x290 [ 393.036687][T21016] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 393.036701][T21016] __x64_sys_ioctl+0x18e/0x210 [ 393.036719][T21016] do_syscall_64+0x115/0x870 [ 393.036732][T21016] ? clear_bhb_loop+0x40/0x90 [ 393.036747][T21016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.036759][T21016] RIP: 0033:0x7f8e4039de99 [ 393.036771][T21016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.036783][T21016] RSP: 002b:00007f8e41354028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.036795][T21016] RAX: ffffffffffffffda RBX: 00007f8e40625fa0 RCX: 00007f8e4039de99 [ 393.036802][T21016] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 393.036809][T21016] RBP: 00007f8e41354090 R08: 0000000000000000 R09: 0000000000000000 [ 393.036816][T21016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 393.036822][T21016] R13: 00007f8e40626038 R14: 00007f8e40625fa0 R15: 00007ffd6e2bf3b8 [ 393.036838][T21016] [ 393.248279][T21026] netlink: 'syz.1.5125': attribute type 11 has an invalid length. [ 393.443930][T20950] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 393.454657][T20950] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 393.454776][T21031] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 393.457294][T20950] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 393.466909][T20950] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 393.469654][T20950] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 393.477144][T20950] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 393.479833][T20950] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 393.484439][T20950] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 393.529684][T20950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.539000][T20950] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.543978][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.546353][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.555376][T17657] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.558502][T17657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.733410][T21058] netlink: 'syz.5.5129': attribute type 1 has an invalid length. [ 393.760881][T21058] 8021q: adding VLAN 0 to HW filter on device bond6 [ 393.793263][T21058] bond6: (slave veth0_to_bond): making interface the new active one [ 393.798058][T21058] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 393.810588][T21058] bond6: entered promiscuous mode [ 393.812972][T21058] veth0_to_bond: entered promiscuous mode [ 393.815753][T21058] bond6: entered allmulticast mode [ 393.818009][T21058] veth0_to_bond: entered allmulticast mode [ 394.075706][T20950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.197880][T21102] FAULT_INJECTION: forcing a failure. [ 394.197880][T21102] name failslab, interval 1, probability 0, space 0, times 0 [ 394.202645][T21102] CPU: 2 UID: 0 PID: 21102 Comm: syz.5.5142 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.202666][T21102] Tainted: [L]=SOFTLOCKUP [ 394.202670][T21102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 394.202677][T21102] Call Trace: [ 394.202683][T21102] [ 394.202688][T21102] dump_stack_lvl+0x100/0x190 [ 394.202707][T21102] should_fail_ex.cold+0x5/0xa [ 394.202724][T21102] should_failslab+0xc2/0x120 [ 394.202740][T21102] kmem_cache_alloc_noprof+0x91/0x6a0 [ 394.202755][T21102] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 394.202773][T21102] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 394.202791][T21102] mmu_topup_memory_caches+0x25/0x170 [ 394.202810][T21102] kvm_mmu_load+0xe2/0x2570 [ 394.202826][T21102] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 394.202838][T21102] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 394.202852][T21102] ? __pfx_kvm_mmu_load+0x10/0x10 [ 394.202868][T21102] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 394.202882][T21102] ? kvm_check_and_inject_events+0x873/0x12a0 [ 394.202927][T21102] ? record_steal_time+0x3a0/0xbb0 [ 394.202942][T21102] vcpu_run+0x3aaa/0x5de0 [ 394.202964][T21102] ? __pfx_vcpu_run+0x10/0x10 [ 394.203075][T21102] ? rcu_is_watching+0x12/0xc0 [ 394.203105][T21102] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 394.203131][T21102] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 394.203164][T21102] kvm_vcpu_ioctl+0x730/0x1700 [ 394.203180][T21102] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 394.203193][T21102] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 394.203209][T21102] ? do_vfs_ioctl+0x226/0x13e0 [ 394.203227][T21102] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 394.203244][T21102] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 394.203268][T21102] ? __fget_files+0x215/0x3d0 [ 394.203279][T21102] ? hook_file_ioctl_common+0x140/0x440 [ 394.203296][T21102] ? selinux_file_ioctl+0x13b/0x290 [ 394.203314][T21102] ? selinux_file_ioctl+0xb6/0x290 [ 394.203333][T21102] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 394.203346][T21102] __x64_sys_ioctl+0x18e/0x210 [ 394.203364][T21102] do_syscall_64+0x115/0x870 [ 394.203377][T21102] ? clear_bhb_loop+0x40/0x90 [ 394.203392][T21102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.203404][T21102] RIP: 0033:0x7f988599de99 [ 394.203416][T21102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.203427][T21102] RSP: 002b:00007f98867a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 394.203439][T21102] RAX: ffffffffffffffda RBX: 00007f9885c25fa0 RCX: 00007f988599de99 [ 394.203446][T21102] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 394.203453][T21102] RBP: 00007f98867a1090 R08: 0000000000000000 R09: 0000000000000000 [ 394.203460][T21102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 394.203467][T21102] R13: 00007f9885c26038 R14: 00007f9885c25fa0 R15: 00007ffdf90fc9f8 [ 394.203482][T21102] [ 394.283255][T20950] veth0_vlan: entered promiscuous mode [ 394.337709][T20950] veth1_vlan: entered promiscuous mode [ 394.381513][T20950] veth0_macvtap: entered promiscuous mode [ 394.388142][T20950] veth1_macvtap: entered promiscuous mode [ 394.406750][T20950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.414816][T20950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.422375][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.435831][ T5813] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.438652][ T5813] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.443156][ T5813] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.544249][T17659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.546863][T17659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.595631][T21146] comedi comedi0: Minor -4 is invalid! [ 394.608433][T17653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.616838][T17653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.659678][T21153] i2c i2c-0: delete_device: Extra parameters [ 394.785303][T21163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5110'. [ 394.828762][T21163] macvlan1: entered allmulticast mode [ 394.837823][T21163] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 394.868983][T21163] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 394.869424][ T5750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 394.885153][ T5750] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 394.899005][ T5750] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 394.911432][ T5750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 394.921693][ T5750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 394.953107][ T5091] Bluetooth: hci4: command tx timeout [ 394.968337][T21172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5163'. [ 394.971946][T21172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5163'. [ 395.018164][T21155] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 395.024249][T21155] overlayfs: failed to set xattr on upper [ 395.027872][T21155] overlayfs: ...falling back to redirect_dir=nofollow. [ 395.030570][T21155] overlayfs: ...falling back to index=off. [ 395.031739][T21169] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 395.033142][T21155] overlayfs: ...falling back to uuid=null. [ 395.179300][ T7267] bridge0: port 3(syz_tun) entered disabled state [ 395.226531][ T7267] syz_tun (unregistering): left allmulticast mode [ 395.231325][ T7267] syz_tun (unregistering): left promiscuous mode [ 395.233382][ T7267] bridge0: port 3(syz_tun) entered disabled state [ 395.247470][T21188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5163'. [ 395.267838][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 395.267850][ T42] audit: type=1400 audit(2000000282.047:22065): avc: denied { write } for pid=21192 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.507391][T12441] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.512529][T12441] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.614718][T12441] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.618218][T21210] i2c i2c-0: delete_device: Extra parameters [ 395.618799][T12441] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.734313][T12441] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.738569][T12441] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.774390][T21167] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.777367][T21167] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.780185][T21167] bridge_slave_0: entered allmulticast mode [ 395.783970][T21167] bridge_slave_0: entered promiscuous mode [ 395.788688][T21167] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.791702][T21167] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.794703][T21167] bridge_slave_1: entered allmulticast mode [ 395.799192][T21167] bridge_slave_1: entered promiscuous mode [ 395.831883][T12441] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.836229][T12441] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.867767][T21167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.872353][T21167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.887970][T21167] team0: Port device team_slave_0 added [ 395.891309][T21167] team0: Port device team_slave_1 added [ 395.905567][T21167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.907780][T21167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.916496][T21167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.921199][T21167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.923514][T21167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.932165][T21167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.965687][T21167] hsr_slave_0: entered promiscuous mode [ 395.968134][T21167] hsr_slave_1: entered promiscuous mode [ 395.970340][T21167] debugfs: 'hsr0' already exists in 'hsr' [ 395.972356][T21167] Cannot create hsr debugfs directory [ 396.059596][ T42] audit: type=1400 audit(2000000282.837:22066): avc: denied { mounton } for pid=21219 comm="syz.5.5169" path="/582/file0" dev="9p" ino=78395371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 396.164165][T12441] bridge_slave_1: left allmulticast mode [ 396.166657][T12441] bridge_slave_1: left promiscuous mode [ 396.169157][T12441] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.179875][T12441] bridge_slave_0: left allmulticast mode [ 396.184921][T12441] bridge_slave_0: left promiscuous mode [ 396.187777][T12441] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.372923][ T42] audit: type=1400 audit(2000000283.157:22067): avc: denied { create } for pid=21229 comm="syz.1.5175" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 396.381573][ T42] audit: type=1400 audit(2000000283.157:22068): avc: denied { setattr } for pid=21229 comm="syz.1.5175" name="file0" dev="tmpfs" ino=6706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 396.425144][ T5828] usb 9-1: new low-speed USB device number 34 using dummy_hcd [ 396.462337][T12441] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 396.464954][T12441] bridge2 (unregistering): left promiscuous mode [ 396.488871][T12441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.510312][T12441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.518926][T12441] bond0 (unregistering): Released all slaves [ 396.524603][T12441] bond1 (unregistering): Released all slaves [ 396.536401][T12441] bond2 (unregistering): Released all slaves [ 396.547161][T12441] bond3 (unregistering): Released all slaves [ 396.585903][ T5828] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 396.585930][ T5828] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 396.585945][ T5828] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 396.585960][ T5828] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 396.586430][T21230] lo speed is unknown, defaulting to 1000 [ 396.586757][ T5828] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 396.586778][ T5828] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 396.586792][ T5828] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 396.586806][ T5828] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 396.587546][ T5828] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 396.587567][ T5828] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 396.587581][ T5828] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 396.587595][ T5828] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 396.590040][ T5828] usb 9-1: string descriptor 0 read error: -22 [ 396.641111][ T5828] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 396.641141][ T5828] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.652376][ T5828] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 396.703501][T21230] lo speed is unknown, defaulting to 1000 [ 396.718421][T12441] : left promiscuous mode [ 396.749929][T21230] lo speed is unknown, defaulting to 1000 [ 396.788490][ T42] audit: type=1400 audit(2000000283.567:22069): avc: denied { write } for pid=21238 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.862486][ T42] audit: type=1400 audit(2000000283.647:22070): avc: denied { write } for pid=21241 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.868666][ T58] usb 9-1: USB disconnect, device number 34 [ 396.873309][T12441] tipc: Disabling bearer [ 396.908567][T12441] tipc: Left network mode [ 396.944040][ T5446] 8021q: adding VLAN 0 to HW filter on device eth1 [ 396.957599][ T5091] Bluetooth: hci1: command tx timeout [ 397.034470][ T5091] Bluetooth: hci4: command tx timeout [ 397.091640][ T42] audit: type=1400 audit(2000000283.877:22071): avc: denied { write } for pid=21248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.135425][T21230] infiniband syz1: set active [ 397.139928][ T10] lo speed is unknown, defaulting to 1000 [ 397.140762][T21230] infiniband syz1: added lo [ 397.150290][ T42] audit: type=1400 audit(2000000283.927:22072): avc: denied { write } for pid=21252 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.201931][T21230] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 397.208032][T21230] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 397.222073][T21230] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 397.232393][T21256] FAULT_INJECTION: forcing a failure. [ 397.232393][T21256] name failslab, interval 1, probability 0, space 0, times 0 [ 397.237462][T21256] CPU: 0 UID: 0 PID: 21256 Comm: syz.5.5179 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.237488][T21256] Tainted: [L]=SOFTLOCKUP [ 397.237494][T21256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 397.237505][T21256] Call Trace: [ 397.237511][T21256] [ 397.237519][T21256] dump_stack_lvl+0x100/0x190 [ 397.237546][T21256] should_fail_ex.cold+0x5/0xa [ 397.237570][T21256] should_failslab+0xc2/0x120 [ 397.237596][T21256] kmem_cache_alloc_noprof+0x91/0x6a0 [ 397.237620][T21256] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 397.237646][T21256] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 397.237672][T21256] mmu_topup_memory_caches+0x25/0x170 [ 397.237697][T21256] kvm_mmu_load+0xe2/0x2570 [ 397.237720][T21256] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 397.237742][T21256] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 397.237764][T21256] ? __pfx_kvm_mmu_load+0x10/0x10 [ 397.237784][T21256] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 397.237804][T21256] ? kvm_check_and_inject_events+0x873/0x12a0 [ 397.237826][T21256] ? record_steal_time+0x3a0/0xbb0 [ 397.237846][T21256] vcpu_run+0x3aaa/0x5de0 [ 397.237884][T21256] ? __pfx_vcpu_run+0x10/0x10 [ 397.237919][T21256] ? rcu_is_watching+0x12/0xc0 [ 397.237949][T21256] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 397.237972][T21256] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 397.238002][T21256] kvm_vcpu_ioctl+0x730/0x1700 [ 397.238025][T21256] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 397.238050][T21256] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 397.238072][T21256] ? do_vfs_ioctl+0x226/0x13e0 [ 397.238096][T21256] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 397.238119][T21256] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 397.238152][T21256] ? __fget_files+0x215/0x3d0 [ 397.238168][T21256] ? hook_file_ioctl_common+0x140/0x440 [ 397.238199][T21256] ? selinux_file_ioctl+0x13b/0x290 [ 397.238225][T21256] ? selinux_file_ioctl+0xb6/0x290 [ 397.238250][T21256] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 397.238274][T21256] __x64_sys_ioctl+0x18e/0x210 [ 397.238299][T21256] do_syscall_64+0x115/0x870 [ 397.238317][T21256] ? clear_bhb_loop+0x40/0x90 [ 397.238343][T21256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.238364][T21256] RIP: 0033:0x7f988599de99 [ 397.238378][T21256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.238393][T21256] RSP: 002b:00007f98867a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.238409][T21256] RAX: ffffffffffffffda RBX: 00007f9885c25fa0 RCX: 00007f988599de99 [ 397.238419][T21256] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 397.238429][T21256] RBP: 00007f98867a1090 R08: 0000000000000000 R09: 0000000000000000 [ 397.238438][T21256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 397.238447][T21256] R13: 00007f9885c26038 R14: 00007f9885c25fa0 R15: 00007ffdf90fc9f8 [ 397.238470][T21256] [ 397.283939][T21230] RDS/IB: syz1: added [ 397.353331][T21230] smc: adding ib device syz1 with port count 1 [ 397.357204][T21230] smc: ib device syz1 port 1 has no pnetid [ 397.369032][ T849] lo speed is unknown, defaulting to 1000 [ 397.454908][T21230] lo speed is unknown, defaulting to 1000 [ 397.473256][T21264] netlink: 'syz.5.5181': attribute type 49 has an invalid length. [ 397.493078][T21264] bond0: (slave bond_slave_0): Releasing backup interface [ 397.498669][ T42] audit: type=1400 audit(2000000284.277:22073): avc: denied { write } for pid=21262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.502807][T21260] FAULT_INJECTION: forcing a failure. [ 397.502807][T21260] name failslab, interval 1, probability 0, space 0, times 0 [ 397.511986][T21260] CPU: 0 UID: 0 PID: 21260 Comm: syz.4.5180 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.512016][T21260] Tainted: [L]=SOFTLOCKUP [ 397.512022][T21260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 397.512033][T21260] Call Trace: [ 397.512040][T21260] [ 397.512048][T21260] dump_stack_lvl+0x100/0x190 [ 397.512084][T21260] should_fail_ex.cold+0x5/0xa [ 397.512108][T21260] should_failslab+0xc2/0x120 [ 397.512132][T21260] kmem_cache_alloc_noprof+0x91/0x6a0 [ 397.512156][T21260] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 397.512176][T21260] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 397.512195][T21260] mmu_topup_memory_caches+0x25/0x170 [ 397.512213][T21260] kvm_mmu_load+0xe2/0x2570 [ 397.512229][T21260] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 397.512241][T21260] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 397.512255][T21260] ? __pfx_kvm_mmu_load+0x10/0x10 [ 397.512271][T21260] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 397.512285][T21260] ? kvm_check_and_inject_events+0x873/0x12a0 [ 397.512303][T21260] ? record_steal_time+0x3a0/0xbb0 [ 397.512317][T21260] vcpu_run+0x3aaa/0x5de0 [ 397.512340][T21260] ? __pfx_vcpu_run+0x10/0x10 [ 397.512362][T21260] ? rcu_is_watching+0x12/0xc0 [ 397.512382][T21260] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 397.512399][T21260] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 397.512421][T21260] kvm_vcpu_ioctl+0x730/0x1700 [ 397.512435][T21260] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 397.512449][T21260] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 397.512464][T21260] ? do_vfs_ioctl+0x226/0x13e0 [ 397.512483][T21260] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 397.512500][T21260] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 397.512524][T21260] ? __fget_files+0x215/0x3d0 [ 397.512535][T21260] ? hook_file_ioctl_common+0x140/0x440 [ 397.512555][T21260] ? selinux_file_ioctl+0x13b/0x290 [ 397.512573][T21260] ? selinux_file_ioctl+0xb6/0x290 [ 397.512592][T21260] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 397.512605][T21260] __x64_sys_ioctl+0x18e/0x210 [ 397.512624][T21260] do_syscall_64+0x115/0x870 [ 397.512637][T21260] ? clear_bhb_loop+0x40/0x90 [ 397.512651][T21260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.512663][T21260] RIP: 0033:0x7fc21359de99 [ 397.512674][T21260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.512685][T21260] RSP: 002b:00007fc21454b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.512698][T21260] RAX: ffffffffffffffda RBX: 00007fc213825fa0 RCX: 00007fc21359de99 [ 397.512705][T21260] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 397.512712][T21260] RBP: 00007fc21454b090 R08: 0000000000000000 R09: 0000000000000000 [ 397.512719][T21260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 397.512725][T21260] R13: 00007fc213826038 R14: 00007fc213825fa0 R15: 00007ffdac309458 [ 397.512740][T21260] [ 397.579378][ T42] audit: type=1400 audit(2000000284.357:22074): avc: denied { write } for pid=21268 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.582241][T21269] /dev/sg0: Can't lookup blockdev [ 397.667541][T21264] bond_slave_0: entered promiscuous mode [ 397.669429][T21264] bond_slave_0: entered allmulticast mode [ 397.701371][T21230] lo speed is unknown, defaulting to 1000 [ 397.891067][T21283] NILFS (nbd5): device size too small [ 397.945768][T21281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5183'. [ 397.976770][T21281] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 397.993257][T21167] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 398.000231][T21167] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 398.004120][T21167] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 398.013060][T21167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 398.029149][T21167] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 398.036652][T21167] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 398.040828][T21167] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 398.067391][T21167] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 398.092241][T21230] lo speed is unknown, defaulting to 1000 [ 398.137923][T21308] Cannot find add_set index 0 as target [ 398.224047][T21167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.248561][T21167] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.258491][T17659] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.260856][T17659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.276489][T17637] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.279687][T17637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.299028][T21318] kvm: kvm [21316]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x40000019) = 0x1 [ 398.315119][T21230] lo speed is unknown, defaulting to 1000 [ 398.316643][T21318] i2c i2c-0: new_device: Invalid device name [ 398.386229][T21331] binder_alloc: 21316: binder_alloc_buf, no vma [ 398.498403][T21230] lo speed is unknown, defaulting to 1000 [ 398.677234][T21331] syz.4.5188 (21331): drop_caches: 2 [ 398.742265][T21167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.830910][T21167] veth0_vlan: entered promiscuous mode [ 398.848070][T21167] veth1_vlan: entered promiscuous mode [ 398.873420][T21167] veth0_macvtap: entered promiscuous mode [ 398.883775][T21167] veth1_macvtap: entered promiscuous mode [ 398.906362][T21167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.945048][T12441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.948199][T12441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.960574][T12441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.964685][T12441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.973965][T12441] veth1_vlan: left promiscuous mode [ 398.976300][T12441] veth0_vlan: left promiscuous mode [ 399.006554][T21369] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20002 [ 399.044905][ T5750] Bluetooth: hci1: command tx timeout [ 399.122602][ T5750] Bluetooth: hci4: command tx timeout [ 399.241635][T21375] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5193'. [ 399.245673][T12441] team0 (unregistering): Port device team_slave_1 removed [ 399.312262][T21376] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5193'. [ 399.364391][T21167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.432825][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.441505][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.490128][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.490236][T21360] lo speed is unknown, defaulting to 1000 [ 399.499343][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.763247][ T5750] Bluetooth: hci0: command 0x0405 tx timeout [ 399.764308][ T5091] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 399.849805][T17637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.855534][T17637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.954853][T17653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.957380][T17653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.078922][T12441] IPVS: stop unused estimator thread 0... [ 400.126911][T21393] FAULT_INJECTION: forcing a failure. [ 400.126911][T21393] name failslab, interval 1, probability 0, space 0, times 0 [ 400.131751][T21393] CPU: 2 UID: 0 PID: 21393 Comm: syz.3.5161 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.131770][T21393] Tainted: [L]=SOFTLOCKUP [ 400.131774][T21393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 400.131781][T21393] Call Trace: [ 400.131786][T21393] [ 400.131791][T21393] dump_stack_lvl+0x100/0x190 [ 400.131810][T21393] should_fail_ex.cold+0x5/0xa [ 400.131826][T21393] should_failslab+0xc2/0x120 [ 400.131842][T21393] kmem_cache_alloc_noprof+0x91/0x6a0 [ 400.131857][T21393] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 400.131875][T21393] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 400.131893][T21393] mmu_topup_memory_caches+0x25/0x170 [ 400.131912][T21393] kvm_mmu_load+0xe2/0x2570 [ 400.131928][T21393] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 400.131940][T21393] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 400.131954][T21393] ? __pfx_kvm_mmu_load+0x10/0x10 [ 400.131970][T21393] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 400.131984][T21393] ? kvm_check_and_inject_events+0x873/0x12a0 [ 400.132002][T21393] ? record_steal_time+0x3a0/0xbb0 [ 400.132016][T21393] vcpu_run+0x3aaa/0x5de0 [ 400.132038][T21393] ? __pfx_vcpu_run+0x10/0x10 [ 400.132060][T21393] ? rcu_is_watching+0x12/0xc0 [ 400.132080][T21393] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 400.132097][T21393] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 400.132119][T21393] kvm_vcpu_ioctl+0x730/0x1700 [ 400.132133][T21393] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 400.132146][T21393] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 400.132161][T21393] ? do_vfs_ioctl+0x226/0x13e0 [ 400.132179][T21393] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 400.132197][T21393] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 400.132220][T21393] ? __fget_files+0x215/0x3d0 [ 400.132231][T21393] ? hook_file_ioctl_common+0x140/0x440 [ 400.132249][T21393] ? selinux_file_ioctl+0x13b/0x290 [ 400.132266][T21393] ? selinux_file_ioctl+0xb6/0x290 [ 400.132285][T21393] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 400.132298][T21393] __x64_sys_ioctl+0x18e/0x210 [ 400.132316][T21393] do_syscall_64+0x115/0x870 [ 400.132329][T21393] ? clear_bhb_loop+0x40/0x90 [ 400.132344][T21393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.132356][T21393] RIP: 0033:0x7fab12f9de99 [ 400.132367][T21393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.132379][T21393] RSP: 002b:00007fab13f03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.132391][T21393] RAX: ffffffffffffffda RBX: 00007fab13225fa0 RCX: 00007fab12f9de99 [ 400.132398][T21393] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d [ 400.132405][T21393] RBP: 00007fab13f03090 R08: 0000000000000000 R09: 0000000000000000 [ 400.132411][T21393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.132418][T21393] R13: 00007fab13226038 R14: 00007fab13225fa0 R15: 00007ffcbf0069b8 [ 400.132432][T21393] [ 400.384400][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 400.384414][ T42] audit: type=1400 audit(2000000287.157:22103): avc: denied { write } for pid=21408 comm="syz.4.5196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 400.396499][T21410] netlink: 'syz.4.5196': attribute type 1 has an invalid length. [ 400.399159][T21410] netlink: 756 bytes leftover after parsing attributes in process `syz.4.5196'. [ 400.405735][ T42] audit: type=1400 audit(2000000287.187:22104): avc: denied { write } for pid=21407 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.463207][ T42] audit: type=1400 audit(2000000287.247:22105): avc: denied { write } for pid=21420 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.687842][T21432] FAULT_INJECTION: forcing a failure. [ 400.687842][T21432] name failslab, interval 1, probability 0, space 0, times 0 [ 400.693850][T21432] CPU: 3 UID: 0 PID: 21432 Comm: syz.5.5200 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.693879][T21432] Tainted: [L]=SOFTLOCKUP [ 400.693886][T21432] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 400.693897][T21432] Call Trace: [ 400.693905][T21432] [ 400.693914][T21432] dump_stack_lvl+0x100/0x190 [ 400.693942][T21432] should_fail_ex.cold+0x5/0xa [ 400.693966][T21432] should_failslab+0xc2/0x120 [ 400.693990][T21432] kmem_cache_alloc_noprof+0x91/0x6a0 [ 400.694013][T21432] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 400.694039][T21432] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 400.694066][T21432] mmu_topup_memory_caches+0x25/0x170 [ 400.694093][T21432] kvm_mmu_load+0xe2/0x2570 [ 400.694117][T21432] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 400.694136][T21432] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 400.694157][T21432] ? __pfx_kvm_mmu_load+0x10/0x10 [ 400.694178][T21432] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 400.694199][T21432] ? kvm_check_and_inject_events+0x873/0x12a0 [ 400.694225][T21432] ? record_steal_time+0x3a0/0xbb0 [ 400.694247][T21432] vcpu_run+0x3aaa/0x5de0 [ 400.694270][T21432] ? mark_held_locks+0x40/0x70 [ 400.694314][T21432] ? __pfx_vcpu_run+0x10/0x10 [ 400.694348][T21432] ? rcu_is_watching+0x12/0xc0 [ 400.694378][T21432] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 400.694403][T21432] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 400.694434][T21432] kvm_vcpu_ioctl+0x730/0x1700 [ 400.694456][T21432] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 400.694477][T21432] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 400.694501][T21432] ? do_vfs_ioctl+0x226/0x13e0 [ 400.694526][T21432] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 400.694551][T21432] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 400.694586][T21432] ? __fget_files+0x215/0x3d0 [ 400.694603][T21432] ? hook_file_ioctl_common+0x140/0x440 [ 400.694630][T21432] ? selinux_file_ioctl+0x13b/0x290 [ 400.694654][T21432] ? selinux_file_ioctl+0xb6/0x290 [ 400.694681][T21432] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 400.694707][T21432] __x64_sys_ioctl+0x18e/0x210 [ 400.694737][T21432] do_syscall_64+0x115/0x870 [ 400.694758][T21432] ? clear_bhb_loop+0x40/0x90 [ 400.694780][T21432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.694797][T21432] RIP: 0033:0x7f988599de99 [ 400.694815][T21432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.694830][T21432] RSP: 002b:00007f9886780028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.694850][T21432] RAX: ffffffffffffffda RBX: 00007f9885c26090 RCX: 00007f988599de99 [ 400.694885][T21432] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 400.694897][T21432] RBP: 00007f9886780090 R08: 0000000000000000 R09: 0000000000000000 [ 400.694907][T21432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.694916][T21432] R13: 00007f9885c26128 R14: 00007f9885c26090 R15: 00007ffdf90fc9f8 [ 400.694940][T21432] [ 400.734634][ T42] audit: type=1400 audit(2000000287.517:22106): avc: denied { map } for pid=21434 comm="syz.3.5202" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 400.978569][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 400.993936][ T5750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 401.003095][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 401.007684][ T5750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 401.010430][ T5750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 401.080742][ T9] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 401.121367][ T5091] Bluetooth: hci1: command tx timeout [ 401.204783][T21446] lo speed is unknown, defaulting to 1000 [ 401.254623][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.258438][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.261943][ T9] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 401.265357][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.272418][ T9] usb 8-1: config 0 descriptor?? [ 401.653026][T21446] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.655497][T21446] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.658151][T21446] bridge_slave_0: entered allmulticast mode [ 401.661461][T21446] bridge_slave_0: entered promiscuous mode [ 401.665766][T21446] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.668398][T21446] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.670605][T21446] bridge_slave_1: entered allmulticast mode [ 401.673547][T21446] bridge_slave_1: entered promiscuous mode [ 401.688207][T21440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.700243][T21440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.724828][T21446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.729586][T21446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.772913][T21446] team0: Port device team_slave_0 added [ 401.777377][T21446] team0: Port device team_slave_1 added [ 401.780833][ T5850] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 401.794325][T21446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.797132][T21446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.805481][T21446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.810412][T21446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.812756][T21446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.821586][T21446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.856628][T21446] hsr_slave_0: entered promiscuous mode [ 401.859634][T21446] hsr_slave_1: entered promiscuous mode [ 401.862145][T21446] debugfs: 'hsr0' already exists in 'hsr' [ 401.864415][T21446] Cannot create hsr debugfs directory [ 401.913938][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 401.918360][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 401.927442][T21497] FAULT_INJECTION: forcing a failure. [ 401.927442][T21497] name failslab, interval 1, probability 0, space 0, times 0 [ 401.930887][ T5850] usb 9-1: Using ep0 maxpacket: 8 [ 401.933950][ T9] usb 8-1: USB disconnect, device number 40 [ 401.935175][ T5850] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 401.939991][ T5850] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 401.943923][ T5850] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 401.944399][T21497] CPU: 2 UID: 0 PID: 21497 Comm: syz.5.5218 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.944429][T21497] Tainted: [L]=SOFTLOCKUP [ 401.944436][T21497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 401.944447][T21497] Call Trace: [ 401.944455][T21497] [ 401.944462][T21497] dump_stack_lvl+0x100/0x190 [ 401.944490][T21497] should_fail_ex.cold+0x5/0xa [ 401.944516][T21497] should_failslab+0xc2/0x120 [ 401.944542][T21497] __kmalloc_noprof+0xfc/0x820 [ 401.944565][T21497] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 401.944594][T21497] kernfs_fop_write_iter+0x26a/0x5f0 [ 401.944621][T21497] vfs_write+0x6ac/0x1050 [ 401.944650][T21497] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 401.944676][T21497] ? __pfx_vfs_write+0x10/0x10 [ 401.944720][T21497] ksys_write+0x12a/0x250 [ 401.944745][T21497] ? __pfx_ksys_write+0x10/0x10 [ 401.944779][T21497] do_syscall_64+0x115/0x870 [ 401.944799][T21497] ? clear_bhb_loop+0x40/0x90 [ 401.944822][T21497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.944839][T21497] RIP: 0033:0x7f988599de99 [ 401.944855][T21497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.944872][T21497] RSP: 002b:00007f98867a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 401.944890][T21497] RAX: ffffffffffffffda RBX: 00007f9885c25fa0 RCX: 00007f988599de99 [ 401.944901][T21497] RDX: 0000000000000003 RSI: 0000200000000400 RDI: 0000000000000003 [ 401.944912][T21497] RBP: 00007f98867a1090 R08: 0000000000000000 R09: 0000000000000000 [ 401.944923][T21497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.944934][T21497] R13: 00007f9885c26038 R14: 00007f9885c25fa0 R15: 00007ffdf90fc9f8 [ 401.944960][T21497] [ 402.010754][ T5850] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 402.014946][ T5850] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 402.018529][ T5850] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.024528][ T5850] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 402.028249][ T5850] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.088526][T21446] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.092626][T21446] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.206984][T21446] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.213314][T21446] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.240303][ T5850] usb 9-1: GET_CAPABILITIES returned 0 [ 402.242980][ T5850] usbtmc 9-1:16.0: can't read capabilities [ 402.318782][T21446] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.324157][T21446] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.427718][T21446] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.432374][T21446] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.442633][ T5850] usb 9-1: USB disconnect, device number 35 [ 402.502672][ T42] audit: type=1400 audit(2000000289.287:22107): avc: denied { write } for pid=21508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.562946][ T42] audit: type=1400 audit(2000000289.347:22108): avc: denied { write } for pid=21512 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.632556][T21446] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 402.639101][T21446] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.643044][T21446] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 402.648010][T21446] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.651202][T21446] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 402.657837][T21446] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 402.661452][T21446] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 402.666840][T21446] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 402.719454][T21446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.738362][T21446] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.744678][T17659] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.747746][T17659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.755935][T17659] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.759048][T17659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.991218][T21534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=21534 comm=syz.4.5222 [ 403.032357][T21446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.044207][ T42] audit: type=1400 audit(2000000289.827:22109): avc: denied { mounton } for pid=21537 comm="syz.4.5223" path="/22/proc/66/net/rpc/use-gss-proxy" dev="proc" ino=4026533561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=file permissive=1 [ 403.076352][T21446] veth0_vlan: entered promiscuous mode [ 403.083381][T21446] veth1_vlan: entered promiscuous mode [ 403.099785][T21446] veth0_macvtap: entered promiscuous mode [ 403.106485][T21446] veth1_macvtap: entered promiscuous mode [ 403.117345][T21446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.121548][ T5091] Bluetooth: hci2: command tx timeout [ 403.126574][T21446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.135081][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.138270][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.142416][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.147234][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.203575][ T5091] Bluetooth: hci1: command tx timeout [ 403.249658][T17653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.267999][T17653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.309267][ T42] audit: type=1400 audit(2000000290.087:22110): avc: denied { write } for pid=21541 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.312434][T17653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.323333][T17653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.375360][ T42] audit: type=1400 audit(2000000290.157:22111): avc: denied { write } for pid=21544 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.712893][ T849] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 403.851092][ T24] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 403.870941][ T849] usb 8-1: Using ep0 maxpacket: 8 [ 403.876661][ T849] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 403.879683][ T849] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 403.884095][ T849] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 403.887693][ T849] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 403.891509][ T849] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 403.894610][ T849] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.898554][ T849] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 403.901350][ T849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.952166][T21568] SET target dimension over the limit! [ 404.010804][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 404.014506][ T24] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 404.019990][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 404.024690][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 404.028581][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 404.032948][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 404.037019][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.042131][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 404.045648][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.114837][ T849] usb 8-1: GET_CAPABILITIES returned 0 [ 404.116813][ T849] usbtmc 8-1:16.0: can't read capabilities [ 404.174786][T21578] binder: 21577:21578 ioctl 890b 200000000080 returned -22 [ 404.252748][ T42] audit: type=1400 audit(2000000291.027:22112): avc: denied { write } for pid=21579 comm="syz.4.5237" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 404.267669][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 404.269901][ T24] usbtmc 6-1:16.0: can't read capabilities [ 404.320207][ T10] usb 8-1: USB disconnect, device number 41 [ 404.465185][ T5827] usb 6-1: USB disconnect, device number 41 [ 404.710985][ T24] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 404.861201][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 404.868327][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 404.877579][ T24] usb 9-1: config 252 has an invalid interface number: 198 but max is 0 [ 404.881606][ T24] usb 9-1: config 252 has no interface number 0 [ 404.886219][ T24] usb 9-1: New USB device found, idVendor=1740, idProduct=9701, bcdDevice=6d.85 [ 404.890105][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.894130][ T24] usb 9-1: Product: syz [ 404.895868][ T24] usb 9-1: Manufacturer: syz [ 404.897835][ T24] usb 9-1: SerialNumber: syz [ 405.004350][T21601] afs: Unknown parameter '' [ 405.190822][ T5091] Bluetooth: hci2: command tx timeout [ 405.251008][T21613] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5248'. [ 405.252165][T21608] FAULT_INJECTION: forcing a failure. [ 405.252165][T21608] name failslab, interval 1, probability 0, space 0, times 0 [ 405.252189][T21608] CPU: 0 UID: 0 PID: 21608 Comm: syz.3.5247 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.252205][T21608] Tainted: [L]=SOFTLOCKUP [ 405.252210][T21608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 405.252218][T21608] Call Trace: [ 405.252222][T21608] [ 405.252227][T21608] dump_stack_lvl+0x100/0x190 [ 405.252247][T21608] should_fail_ex.cold+0x5/0xa [ 405.252263][T21608] should_failslab+0xc2/0x120 [ 405.252279][T21608] kmem_cache_alloc_noprof+0x91/0x6a0 [ 405.252294][T21608] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 405.252312][T21608] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 405.252330][T21608] mmu_topup_memory_caches+0x25/0x170 [ 405.252348][T21608] kvm_mmu_load+0xe2/0x2570 [ 405.252365][T21608] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 405.252378][T21608] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 405.252397][T21608] ? __pfx_kvm_mmu_load+0x10/0x10 [ 405.252418][T21608] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 405.252439][T21608] ? kvm_check_and_inject_events+0x873/0x12a0 [ 405.252467][T21608] ? record_steal_time+0x3a0/0xbb0 [ 405.252490][T21608] vcpu_run+0x3aaa/0x5de0 [ 405.252517][T21608] ? __pfx_vcpu_run+0x10/0x10 [ 405.252539][T21608] ? rcu_is_watching+0x12/0xc0 [ 405.252565][T21608] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 405.252582][T21608] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 405.252604][T21608] kvm_vcpu_ioctl+0x730/0x1700 [ 405.252619][T21608] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 405.252632][T21608] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 405.252648][T21608] ? do_vfs_ioctl+0x226/0x13e0 [ 405.252666][T21608] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 405.252683][T21608] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 405.252706][T21608] ? __fget_files+0x215/0x3d0 [ 405.252718][T21608] ? hook_file_ioctl_common+0x140/0x440 [ 405.252735][T21608] ? selinux_file_ioctl+0x13b/0x290 [ 405.252765][T21608] ? selinux_file_ioctl+0xb6/0x290 [ 405.252784][T21608] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 405.252797][T21608] __x64_sys_ioctl+0x18e/0x210 [ 405.252816][T21608] do_syscall_64+0x115/0x870 [ 405.252829][T21608] ? clear_bhb_loop+0x40/0x90 [ 405.252843][T21608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.252856][T21608] RIP: 0033:0x7fab12f9de99 [ 405.252866][T21608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.252877][T21608] RSP: 002b:00007fab13f03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.252888][T21608] RAX: ffffffffffffffda RBX: 00007fab13225fa0 RCX: 00007fab12f9de99 [ 405.252895][T21608] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 405.252902][T21608] RBP: 00007fab13f03090 R08: 0000000000000000 R09: 0000000000000000 [ 405.252908][T21608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 405.252915][T21608] R13: 00007fab13226038 R14: 00007fab13225fa0 R15: 00007ffcbf0069b8 [ 405.252930][T21608] [ 405.274538][ T5750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 405.278927][ T5750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 405.279839][ T5750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 405.285332][ T5750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 405.296382][ T5750] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 405.629012][T12441] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.672177][T21611] lo speed is unknown, defaulting to 1000 [ 405.697259][T21638] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5254'. [ 405.764400][T12441] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.881280][T12441] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.912983][T21643] FAULT_INJECTION: forcing a failure. [ 405.912983][T21643] name failslab, interval 1, probability 0, space 0, times 0 [ 405.917853][T21643] CPU: 1 UID: 0 PID: 21643 Comm: syz.1.5255 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.917877][T21643] Tainted: [L]=SOFTLOCKUP [ 405.917883][T21643] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 405.917892][T21643] Call Trace: [ 405.917898][T21643] [ 405.917905][T21643] dump_stack_lvl+0x100/0x190 [ 405.917931][T21643] should_fail_ex.cold+0x5/0xa [ 405.917952][T21643] should_failslab+0xc2/0x120 [ 405.917974][T21643] kmem_cache_alloc_noprof+0x91/0x6a0 [ 405.917992][T21643] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 405.918018][T21643] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 405.918044][T21643] mmu_topup_memory_caches+0x25/0x170 [ 405.918070][T21643] kvm_mmu_load+0xe2/0x2570 [ 405.918090][T21643] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 405.918106][T21643] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 405.918124][T21643] ? __pfx_kvm_mmu_load+0x10/0x10 [ 405.918143][T21643] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 405.918162][T21643] ? kvm_check_and_inject_events+0x873/0x12a0 [ 405.918183][T21643] ? record_steal_time+0x3a0/0xbb0 [ 405.918201][T21643] vcpu_run+0x3aaa/0x5de0 [ 405.918221][T21643] ? mark_held_locks+0x40/0x70 [ 405.918247][T21643] ? __pfx_vcpu_run+0x10/0x10 [ 405.918274][T21643] ? rcu_is_watching+0x12/0xc0 [ 405.918302][T21643] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 405.918325][T21643] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 405.918354][T21643] kvm_vcpu_ioctl+0x730/0x1700 [ 405.918374][T21643] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 405.918392][T21643] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 405.918411][T21643] ? do_vfs_ioctl+0x226/0x13e0 [ 405.918433][T21643] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 405.918455][T21643] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 405.918486][T21643] ? __fget_files+0x215/0x3d0 [ 405.918501][T21643] ? hook_file_ioctl_common+0x140/0x440 [ 405.918524][T21643] ? selinux_file_ioctl+0x13b/0x290 [ 405.918554][T21643] ? selinux_file_ioctl+0xb6/0x290 [ 405.918580][T21643] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 405.918598][T21643] __x64_sys_ioctl+0x18e/0x210 [ 405.918624][T21643] do_syscall_64+0x115/0x870 [ 405.918642][T21643] ? clear_bhb_loop+0x40/0x90 [ 405.918661][T21643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.918677][T21643] RIP: 0033:0x7f138479de99 [ 405.918692][T21643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.918708][T21643] RSP: 002b:00007f1385721028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.918723][T21643] RAX: ffffffffffffffda RBX: 00007f1384a26090 RCX: 00007f138479de99 [ 405.918733][T21643] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d [ 405.918741][T21643] RBP: 00007f1385721090 R08: 0000000000000000 R09: 0000000000000000 [ 405.918750][T21643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 405.918758][T21643] R13: 00007f1384a26128 R14: 00007f1384a26090 R15: 00007ffdadc3a2b8 [ 405.918778][T21643] [ 406.126977][T12441] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.141111][T21611] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.144035][T21611] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.148312][T21611] bridge_slave_0: entered allmulticast mode [ 406.154907][T21611] bridge_slave_0: entered promiscuous mode [ 406.164938][T21611] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.167827][T21611] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.170310][T21611] bridge_slave_1: entered allmulticast mode [ 406.174345][T21611] bridge_slave_1: entered promiscuous mode [ 406.234347][T21611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.245013][T21611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.350235][T21611] team0: Port device team_slave_0 added [ 406.357919][T21611] team0: Port device team_slave_1 added [ 406.413744][T21611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.418272][T21611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.426487][T21611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.436553][T21611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.438785][T21611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.446979][T21611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.491218][T21611] hsr_slave_0: entered promiscuous mode [ 406.494361][T21611] hsr_slave_1: entered promiscuous mode [ 406.496750][T21611] debugfs: 'hsr0' already exists in 'hsr' [ 406.498516][T21611] Cannot create hsr debugfs directory [ 406.515200][T21660] FAULT_INJECTION: forcing a failure. [ 406.515200][T21660] name failslab, interval 1, probability 0, space 0, times 0 [ 406.520352][T21660] CPU: 0 UID: 0 PID: 21660 Comm: syz.1.5260 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.520383][T21660] Tainted: [L]=SOFTLOCKUP [ 406.520390][T21660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 406.520401][T21660] Call Trace: [ 406.520408][T21660] [ 406.520416][T21660] dump_stack_lvl+0x100/0x190 [ 406.520444][T21660] should_fail_ex.cold+0x5/0xa [ 406.520468][T21660] should_failslab+0xc2/0x120 [ 406.520492][T21660] kmem_cache_alloc_noprof+0x91/0x6a0 [ 406.520515][T21660] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 406.520543][T21660] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 406.520572][T21660] mmu_topup_memory_caches+0x25/0x170 [ 406.520600][T21660] kvm_mmu_load+0xe2/0x2570 [ 406.520639][T21660] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 406.520660][T21660] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 406.520687][T21660] ? __pfx_kvm_mmu_load+0x10/0x10 [ 406.520709][T21660] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 406.520732][T21660] ? kvm_check_and_inject_events+0x873/0x12a0 [ 406.520757][T21660] ? record_steal_time+0x3a0/0xbb0 [ 406.520779][T21660] vcpu_run+0x3aaa/0x5de0 [ 406.520816][T21660] ? __pfx_vcpu_run+0x10/0x10 [ 406.520850][T21660] ? rcu_is_watching+0x12/0xc0 [ 406.520880][T21660] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 406.520906][T21660] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 406.520939][T21660] kvm_vcpu_ioctl+0x730/0x1700 [ 406.520961][T21660] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 406.520982][T21660] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 406.521005][T21660] ? do_vfs_ioctl+0x226/0x13e0 [ 406.521031][T21660] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 406.521057][T21660] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 406.521094][T21660] ? __fget_files+0x215/0x3d0 [ 406.521111][T21660] ? hook_file_ioctl_common+0x140/0x440 [ 406.521139][T21660] ? selinux_file_ioctl+0x13b/0x290 [ 406.521164][T21660] ? selinux_file_ioctl+0xb6/0x290 [ 406.521192][T21660] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 406.521213][T21660] __x64_sys_ioctl+0x18e/0x210 [ 406.521240][T21660] do_syscall_64+0x115/0x870 [ 406.521260][T21660] ? clear_bhb_loop+0x40/0x90 [ 406.521283][T21660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.521302][T21660] RIP: 0033:0x7f138479de99 [ 406.521318][T21660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.521335][T21660] RSP: 002b:00007f1385742028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 406.521353][T21660] RAX: ffffffffffffffda RBX: 00007f1384a25fa0 RCX: 00007f138479de99 [ 406.521364][T21660] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 406.521375][T21660] RBP: 00007f1385742090 R08: 0000000000000000 R09: 0000000000000000 [ 406.521385][T21660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 406.521395][T21660] R13: 00007f1384a26038 R14: 00007f1384a25fa0 R15: 00007ffdadc3a2b8 [ 406.521420][T21660] [ 406.645493][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 406.645504][ T42] audit: type=1400 audit(2000000293.427:22115): avc: denied { accept } for pid=21661 comm="syz.3.5261" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 406.663225][ T42] audit: type=1400 audit(2000000293.447:22116): avc: denied { read } for pid=21661 comm="syz.3.5261" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 406.672893][ T42] audit: type=1400 audit(2000000293.447:22117): avc: denied { open } for pid=21661 comm="syz.3.5261" path="/dev/rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 406.681759][ T42] audit: type=1400 audit(2000000293.447:22118): avc: denied { ioctl } for pid=21661 comm="syz.3.5261" path="/dev/rtc0" dev="devtmpfs" ino=945 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 406.792796][T21666] 9p: Could not find request transport: 18446744073709551615 [ 406.844828][ T41] kernel read not supported for file /vcs (pid: 41 comm: kworker/3:1) [ 406.884238][T12441] bond2 (unregistering): (slave gretap1): Removing an active aggregator [ 406.893511][T12441] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 406.932812][T12441] bond5 (unregistering): (slave geneve3): Releasing active interface [ 406.945500][T12441] bond1 (unregistering): (slave geneve2): Releasing active interface [ 407.000294][T12441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.008120][T12441] bond0 (unregistering): Released all slaves [ 407.016306][T12441] bond1 (unregistering): Released all slaves [ 407.026047][T12441] bond2 (unregistering): Released all slaves [ 407.036667][T12441] bond3 (unregistering): Released all slaves [ 407.046799][T12441] bond4 (unregistering): Released all slaves [ 407.061689][T12441] bond5 (unregistering): Released all slaves [ 407.075782][T12441] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 407.079651][T12441] veth0_to_bond: left promiscuous mode [ 407.082141][T12441] veth0_to_bond: left allmulticast mode [ 407.086085][T12441] bond6 (unregistering): Released all slaves [ 407.279477][ T5750] Bluetooth: hci2: command tx timeout [ 407.335958][ T42] audit: type=1400 audit(2000000294.117:22119): avc: denied { ioctl } for pid=21683 comm="syz.3.5271" path="pid:[4026532874]" dev="nsfs" ino=4026532874 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 407.361244][ T5750] Bluetooth: hci3: command tx timeout [ 407.408116][ T42] audit: type=1400 audit(2000000294.187:22120): avc: denied { connect } for pid=21687 comm="syz.3.5272" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 407.433569][ T42] audit: type=1400 audit(2000000294.207:22121): avc: denied { write } for pid=21686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.475794][ T42] audit: type=1326 audit(2000000294.257:22122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21589 comm="syz.4.5241" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21359de99 code=0x7fc00000 [ 407.507868][ T24] usb 9-1: USB disconnect, device number 36 [ 407.512447][ T42] audit: type=1400 audit(2000000294.287:22123): avc: denied { write } for pid=21691 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.830033][T21694] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5273'. [ 407.834110][T21694] bridge_slave_0: left allmulticast mode [ 407.836341][T21694] bridge_slave_0: left promiscuous mode [ 407.838274][T21694] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.855355][ T5446] 8021q: adding VLAN 0 to HW filter on device eth1 [ 407.962515][T21703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5275'. [ 407.986390][ T42] audit: type=1400 audit(2000000294.767:22124): avc: denied { write } for pid=21702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.508590][T12441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.513297][T12441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.520976][T12441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.526144][T12441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.550209][T12441] veth1_macvtap: left promiscuous mode [ 408.554536][T12441] veth0_macvtap: left promiscuous mode [ 408.556449][T12441] veth1_vlan: left promiscuous mode [ 408.558486][T12441] veth0_vlan: left promiscuous mode [ 408.589152][T21747] block nbd4: shutting down sockets [ 408.831733][T12441] team0 (unregistering): Port device team_slave_1 removed [ 408.840359][T12441] team0 (unregistering): Port device team_slave_0 removed [ 409.207109][T21611] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 409.235970][T21611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 409.239914][T21611] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 409.249827][T21611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 409.255081][T21611] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 409.291155][T21611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 409.294980][T21611] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 409.308876][T21611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 409.360756][ T5750] Bluetooth: hci2: command tx timeout [ 409.428479][T21611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.440745][ T5750] Bluetooth: hci3: command tx timeout [ 409.443598][T21611] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.453495][T17637] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.456633][T17637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.476109][T17637] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.479205][T17637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.547342][T21796] loop5: detected capacity change from 0 to 7 [ 409.551947][T21796] loop5: p1 [ 409.553347][T21796] loop5: partition table partially beyond EOD, truncated [ 409.561665][T21796] loop5: p1 size 1952408940 extends beyond EOD, truncated [ 409.588331][T21802] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 409.703552][ T7349] udevd[7349]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 409.765556][T21819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5306'. [ 409.826158][T21825] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21825 comm=syz.1.5307 [ 409.900230][T21611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.055314][T21847] bond1: (slave ip6gretap1): making interface the new active one [ 410.058379][T21847] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 410.103639][T21856] program syz.4.5314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 410.149885][T21611] veth0_vlan: entered promiscuous mode [ 410.161326][T21611] veth1_vlan: entered promiscuous mode [ 410.182480][T21611] veth0_macvtap: entered promiscuous mode [ 410.186996][T21611] veth1_macvtap: entered promiscuous mode [ 410.195630][T21611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.213532][T21611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.223925][T12441] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.227460][T12441] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.240579][T12441] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.245232][T12441] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.256028][T21866] netlink: 71 bytes leftover after parsing attributes in process `syz.4.5317'. [ 410.335506][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.340361][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.403789][T17665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.407171][T17665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.516386][T21875] FAULT_INJECTION: forcing a failure. [ 410.516386][T21875] name fail_page_alloc, interval 1, probability 100, space 0, times 0 [ 410.521284][T21875] CPU: 0 UID: 0 PID: 21875 Comm: syz.5.5246 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.521304][T21875] Tainted: [L]=SOFTLOCKUP [ 410.521308][T21875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 410.521315][T21875] Call Trace: [ 410.521321][T21875] [ 410.521326][T21875] dump_stack_lvl+0x100/0x190 [ 410.521346][T21875] should_fail_ex.cold+0x5/0xa [ 410.521359][T21875] ? prepare_alloc_pages+0x16d/0x5f0 [ 410.521378][T21875] should_fail_alloc_page+0xeb/0x140 [ 410.521395][T21875] prepare_alloc_pages+0x1f0/0x5f0 [ 410.521413][T21875] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 410.521428][T21875] ? __pfx_stack_trace_save+0x10/0x10 [ 410.521442][T21875] ? stack_depot_save_flags+0x27/0x9d0 [ 410.521462][T21875] ? kasan_save_stack+0x3f/0x50 [ 410.521477][T21875] ? kasan_save_stack+0x30/0x50 [ 410.521491][T21875] ? kasan_save_track+0x14/0x30 [ 410.521503][T21875] ? __kasan_kmalloc+0xaa/0xb0 [ 410.521516][T21875] ? __kvmalloc_node_noprof+0x34f/0x970 [ 410.521529][T21875] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 410.521543][T21875] ? mmu_topup_memory_caches+0xbc/0x170 [ 410.521562][T21875] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 410.521574][T21875] ? kvm_vcpu_ioctl+0x730/0x1700 [ 410.521586][T21875] ? do_syscall_64+0x115/0x870 [ 410.521611][T21875] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 410.521627][T21875] ? policy_nodemask+0xed/0x4f0 [ 410.521646][T21875] alloc_pages_mpol+0x1fb/0x540 [ 410.521662][T21875] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 410.521679][T21875] ? __kvmalloc_node_noprof+0x36d/0x970 [ 410.521695][T21875] alloc_pages_noprof+0x1a/0x160 [ 410.521713][T21875] get_free_pages_noprof+0x10/0xb0 [ 410.521728][T21875] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 410.521746][T21875] mmu_topup_memory_caches+0xbc/0x170 [ 410.521763][T21875] kvm_mmu_load+0xe2/0x2570 [ 410.521780][T21875] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 410.521792][T21875] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 410.521806][T21875] ? __pfx_kvm_mmu_load+0x10/0x10 [ 410.521821][T21875] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 410.521836][T21875] ? kvm_check_and_inject_events+0x873/0x12a0 [ 410.521853][T21875] ? record_steal_time+0x3a0/0xbb0 [ 410.521867][T21875] vcpu_run+0x3aaa/0x5de0 [ 410.521890][T21875] ? __pfx_vcpu_run+0x10/0x10 [ 410.521911][T21875] ? rcu_is_watching+0x12/0xc0 [ 410.521932][T21875] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 410.521949][T21875] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 410.521970][T21875] kvm_vcpu_ioctl+0x730/0x1700 [ 410.521990][T21875] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 410.522003][T21875] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 410.522018][T21875] ? do_vfs_ioctl+0x226/0x13e0 [ 410.522035][T21875] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 410.522053][T21875] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 410.522077][T21875] ? __fget_files+0x215/0x3d0 [ 410.522088][T21875] ? hook_file_ioctl_common+0x140/0x440 [ 410.522105][T21875] ? selinux_file_ioctl+0x13b/0x290 [ 410.522123][T21875] ? selinux_file_ioctl+0xb6/0x290 [ 410.522142][T21875] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 410.522155][T21875] __x64_sys_ioctl+0x18e/0x210 [ 410.522173][T21875] do_syscall_64+0x115/0x870 [ 410.522186][T21875] ? clear_bhb_loop+0x40/0x90 [ 410.522201][T21875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.522213][T21875] RIP: 0033:0x7f944fd9de99 [ 410.522224][T21875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.522236][T21875] RSP: 002b:00007f9450cc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.522248][T21875] RAX: ffffffffffffffda RBX: 00007f9450025fa0 RCX: 00007f944fd9de99 [ 410.522255][T21875] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 410.522261][T21875] RBP: 00007f9450cc5090 R08: 0000000000000000 R09: 0000000000000000 [ 410.522268][T21875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 410.522274][T21875] R13: 00007f9450026038 R14: 00007f9450025fa0 R15: 00007fff76bb8118 [ 410.522288][T21875] [ 411.240219][T21895] overlay: ./file0 is not a directory [ 411.520934][ T5750] Bluetooth: hci3: command tx timeout [ 411.915807][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 411.915826][ T42] audit: type=1400 audit(2000000298.697:22145): avc: denied { write } for pid=21908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.026549][ T42] audit: type=1400 audit(2000000298.807:22146): avc: denied { write } for pid=21913 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.214362][T21921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5337'. [ 412.241227][T21915] smpboot: CPU 1 is now offline [ 412.429267][T21932] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5342'. [ 412.433363][T21917] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 412.451725][T21932] ipvlan2: entered allmulticast mode [ 412.457474][T21932] veth0: entered allmulticast mode [ 412.538921][ T42] audit: type=1400 audit(2000000299.317:22147): avc: denied { read } for pid=21939 comm="syz.5.5346" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 412.556536][ T42] audit: type=1400 audit(2000000299.317:22148): avc: denied { open } for pid=21939 comm="syz.5.5346" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 412.558082][T21942] loop5: detected capacity change from 0 to 7 [ 412.571269][ T42] audit: type=1400 audit(2000000299.337:22149): avc: denied { ioctl } for pid=21939 comm="syz.5.5346" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 412.664542][T21952] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21952 comm=syz.1.5351 [ 412.713141][T21957] bridge0: port 3(syz_tun) entered blocking state [ 412.716075][T21957] bridge0: port 3(syz_tun) entered disabled state [ 412.717863][ T42] audit: type=1400 audit(2000000299.497:22150): avc: denied { create } for pid=21940 comm="syz.4.5347" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 412.719143][T21957] syz_tun: entered allmulticast mode [ 412.737173][T21957] syz_tun: entered promiscuous mode [ 412.741013][T21957] bridge0: port 3(syz_tun) entered blocking state [ 412.744177][T21957] bridge0: port 3(syz_tun) entered forwarding state [ 412.751933][T21942] Dev loop5: unable to read RDB block 7 [ 412.752516][T21948] support for cryptoloop has been removed. Use dm-crypt instead. [ 412.754156][T21942] loop5: unable to read partition table [ 412.754854][T21942] loop5: partition table beyond EOD, truncated [ 412.762248][T21942] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 412.791379][T21962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5355'. [ 412.803526][ T42] audit: type=1400 audit(2000000299.577:22151): avc: denied { unlink } for pid=20950 comm="syz-executor" name="file0" dev="tmpfs" ino=375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 412.821315][ T42] audit: type=1400 audit(2000000299.597:22152): avc: denied { read write } for pid=21961 comm="syz.5.5354" name="file0" dev="tmpfs" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 412.829835][ T42] audit: type=1400 audit(2000000299.597:22153): avc: denied { open } for pid=21961 comm="syz.5.5354" path="/11/file0" dev="tmpfs" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 412.842053][ T42] audit: type=1400 audit(2000000299.597:22154): avc: denied { ioctl } for pid=21961 comm="syz.5.5354" path="/11/file0" dev="tmpfs" ino=73 ioctlcmd=0x1263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 412.859094][T21962] bond1 (unregistering): Released all slaves [ 412.876312][T21971] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5358'. [ 412.912747][T21971] macvlan2: entered promiscuous mode [ 412.915563][T21971] macvlan2: entered allmulticast mode [ 412.918377][T21971] veth1_to_bridge: entered promiscuous mode [ 412.924477][T21971] veth1_to_bridge: entered allmulticast mode [ 412.950442][T21971] team0: Port device macvlan2 added [ 413.515923][T22011] program syz.1.5375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 413.591323][ T5750] Bluetooth: hci3: command tx timeout [ 413.648180][T22020] sctp: [Deprecated]: syz.4.5377 (pid 22020) Use of int in max_burst socket option. [ 413.648180][T22020] Use struct sctp_assoc_value instead [ 413.720554][T12441] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.854434][T12441] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.880854][T22025] ip6gre1: entered promiscuous mode [ 413.883196][T22025] ip6gre1: entered allmulticast mode [ 413.903953][ T5091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 413.910613][ T5091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 413.919534][ T5091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 413.925268][ T5091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 413.928223][ T5091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 414.038714][T12441] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.132971][T22040] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5387'. [ 414.137161][T22040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5387'. [ 414.223416][T12441] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.339160][T22026] lo speed is unknown, defaulting to 1000 [ 414.474997][T12441] bridge_slave_1: left allmulticast mode [ 414.476872][T12441] bridge_slave_1: left promiscuous mode [ 414.479374][T12441] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.493541][T12441] bridge_slave_0: left allmulticast mode [ 414.495789][T12441] bridge_slave_0: left promiscuous mode [ 414.498642][T12441] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.823403][T12441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.842059][T12441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.847239][T12441] bond0 (unregistering): Released all slaves [ 414.874328][ T5446] 8021q: adding VLAN 0 to HW filter on device eth1 [ 415.186764][ T5446] 8021q: adding VLAN 0 to HW filter on device eth7 [ 415.219389][T22026] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.222459][T22026] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.228995][T22026] bridge_slave_0: entered allmulticast mode [ 415.233528][T22026] bridge_slave_0: entered promiscuous mode [ 415.237339][T22026] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.242160][T22026] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.245286][T22026] bridge_slave_1: entered allmulticast mode [ 415.249419][T22026] bridge_slave_1: entered promiscuous mode [ 415.288900][T22026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.296981][T22026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.319023][T22026] team0: Port device team_slave_0 added [ 415.322340][T22026] team0: Port device team_slave_1 added [ 415.364463][T22026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.367409][T22026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.388283][T22026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.394888][T22026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.397798][T22026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.408374][T22026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.491807][T22026] hsr_slave_0: entered promiscuous mode [ 415.495142][T22026] hsr_slave_1: entered promiscuous mode [ 415.498017][T22026] debugfs: 'hsr0' already exists in 'hsr' [ 415.500402][T22026] Cannot create hsr debugfs directory [ 415.547335][ T5446] 8021q: adding VLAN 0 to HW filter on device eth8 [ 415.598131][T22121] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 415.843465][T22026] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 415.852151][T22026] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 415.861674][T22026] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 415.907637][T22026] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 415.917711][ T5446] 8021q: adding VLAN 0 to HW filter on device eth9 [ 415.923339][T22026] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 415.931914][T22026] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 415.937998][T22026] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 415.955577][T22026] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 415.993263][ T5091] Bluetooth: hci0: command tx timeout [ 416.008804][T22158] Cannot find del_set index 2 as target [ 416.092030][T22170] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 416.116707][T12441] hsr_slave_0: left promiscuous mode [ 416.120355][T12441] hsr_slave_1: left promiscuous mode [ 416.123761][T12441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.126574][T12441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.129995][T12441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.132643][T12441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.138013][T12441] veth1_macvtap: left promiscuous mode [ 416.139840][T12441] veth0_macvtap: left promiscuous mode [ 416.145118][T12441] veth1_vlan: left promiscuous mode [ 416.147076][T12441] veth0_vlan: left promiscuous mode [ 416.332317][T12441] team0 (unregistering): Port device team_slave_1 removed [ 416.340967][T12441] team0 (unregistering): Port device team_slave_0 removed [ 416.463001][T22026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.476167][T22026] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.481903][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.484293][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.496769][T17659] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.499069][T17659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.521101][T22026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 416.524774][T22026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 416.842067][T22026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.003617][T22026] veth0_vlan: entered promiscuous mode [ 417.018309][T22026] veth1_vlan: entered promiscuous mode [ 417.052521][T22026] veth0_macvtap: entered promiscuous mode [ 417.057300][T22026] veth1_macvtap: entered promiscuous mode [ 417.067922][T22026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.074585][T22026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.085343][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.094173][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.103896][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.107009][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.159591][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 417.159603][ T42] audit: type=1400 audit(2000000303.937:22176): avc: denied { setopt } for pid=22220 comm="syz.4.5439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 417.198996][T17657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.207627][T17657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.232248][T17665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.234873][T17665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.248128][T22224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5440'. [ 417.823251][T22243] smpboot: CPU 1 is now offline [ 418.071550][T22257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.084251][ T5091] Bluetooth: hci0: command tx timeout [ 418.518946][T22281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5462'. [ 418.580409][T22286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5465'. [ 418.589212][T22286] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5465'. [ 418.731345][T22297] tmpfs: Bad value for 'mpol' [ 419.405435][T22335] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5485'. [ 419.408400][T22335] netlink: 188 bytes leftover after parsing attributes in process `syz.6.5485'. [ 419.583280][T22346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5490'. [ 419.953551][T22362] xt_hashlimit: size too large, truncated to 1048576 [ 419.956366][T22362] xt_hashlimit: max too large, truncated to 1048576 [ 419.959412][T22362] xt_hashlimit: overflow, rate too high: 0 [ 420.151343][ T5091] Bluetooth: hci0: command tx timeout [ 420.195884][T22371] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 420.997135][T22392] tun0: tun_chr_ioctl cmd 1074025698 [ 421.191735][T22399] program syz.4.5510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.616481][ T42] audit: type=1400 audit(2000000308.397:22177): avc: denied { execute_no_trans } for pid=22421 comm="syz.1.5522" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 421.662816][ T42] audit: type=1400 audit(2000000308.447:22178): avc: denied { execute } for pid=22424 comm="syz.1.5523" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=220755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 422.231460][ T5091] Bluetooth: hci0: command tx timeout [ 422.249766][T22453] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 423.149139][T22506] ip_tables: iptables: counters copy to user failed while replacing table [ 423.264141][ T42] audit: type=1400 audit(2000000310.037:22179): avc: denied { mounton } for pid=22508 comm="syz.4.5560" path="/proc/299/task" dev="proc" ino=222277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 425.163879][ T42] audit: type=1326 audit(2000000311.927:22180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22534 comm="syz.4.5570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21359de99 code=0x7fc00000 [ 426.054571][T22541] ================================================================== [ 426.057197][T22541] BUG: KASAN: slab-use-after-free in __release_resource+0x276/0x2c0 [ 426.059819][T22541] Read of size 8 at addr ffff888024f28f38 by task syz.4.5573/22541 [ 426.063606][ T42] audit: type=1400 audit(2000000312.847:22181): avc: denied { write } for pid=5718 comm="syz-executor" path="pipe:[5931]" dev="pipefs" ino=5931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 426.064479][T22541] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 426.064497][T22541] CPU: 0 UID: 0 PID: 22541 Comm: syz.4.5573 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.064524][T22541] Tainted: [L]=SOFTLOCKUP [ 426.064532][T22541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 426.064544][T22541] Call Trace: [ 426.064552][T22541] [ 426.064560][T22541] dump_stack_lvl+0x100/0x190 [ 426.064588][T22541] print_report+0x13d/0x4b0 [ 426.064615][T22541] ? __virt_addr_valid+0x239/0x430 [ 426.064652][T22541] ? __release_resource+0x276/0x2c0 [ 426.064678][T22541] kasan_report+0xdf/0x1c0 [ 426.064702][T22541] ? __release_resource+0x276/0x2c0 [ 426.064728][T22541] __release_resource+0x276/0x2c0 [ 426.064753][T22541] release_resource+0x26/0x40 [ 426.064776][T22541] pci_remove_bus_device+0x2d3/0x3b0 [ 426.064798][T22541] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 426.064820][T22541] remove_store+0x123/0x140 [ 426.064843][T22541] ? __pfx_remove_store+0x10/0x10 [ 426.064864][T22541] ? find_held_lock+0x2b/0x80 [ 426.064889][T22541] ? sysfs_file_kobj+0xe4/0x290 [ 426.064918][T22541] ? sysfs_file_kobj+0xe4/0x290 [ 426.064944][T22541] ? __pfx_remove_store+0x10/0x10 [ 426.064966][T22541] dev_attr_store+0x58/0x80 [ 426.064989][T22541] ? __pfx_dev_attr_store+0x10/0x10 [ 426.065012][T22541] sysfs_kf_write+0xf2/0x150 [ 426.065037][T22541] kernfs_fop_write_iter+0x3e0/0x5f0 [ 426.065059][T22541] ? __pfx_sysfs_kf_write+0x10/0x10 [ 426.065084][T22541] vfs_write+0x6ac/0x1050 [ 426.065110][T22541] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 426.065133][T22541] ? __pfx_vfs_write+0x10/0x10 [ 426.065162][T22541] ksys_write+0x12a/0x250 [ 426.065187][T22541] ? __pfx_ksys_write+0x10/0x10 [ 426.065215][T22541] do_syscall_64+0x115/0x870 [ 426.065234][T22541] ? clear_bhb_loop+0x40/0x90 [ 426.065254][T22541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.065273][T22541] RIP: 0033:0x7fc21359de99 [ 426.065289][T22541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.065308][T22541] RSP: 002b:00007fc21454b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 426.065328][T22541] RAX: ffffffffffffffda RBX: 00007fc213825fa0 RCX: 00007fc21359de99 [ 426.065340][T22541] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 426.065350][T22541] RBP: 00007fc213633eaf R08: 0000000000000000 R09: 0000000000000000 [ 426.065361][T22541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.065372][T22541] R13: 00007fc213826038 R14: 00007fc213825fa0 R15: 00007ffdac309458 [ 426.065388][T22541] [ 426.065394][T22541] [ 426.168166][T22541] Allocated by task 14295: [ 426.169988][T22541] kasan_save_stack+0x30/0x50 [ 426.171942][T22541] kasan_save_track+0x14/0x30 [ 426.173856][T22541] __kasan_kmalloc+0xaa/0xb0 [ 426.175731][T22541] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 426.178249][T22541] kmemdup_noprof+0x29/0x60 [ 426.179683][T22541] platform_device_add_resources+0x37/0x100 [ 426.182110][T22541] dwc2_pci_probe+0x1d3/0x360 [ 426.184008][T22541] local_pci_probe+0xdd/0x1b0 [ 426.185897][T22541] pci_call_probe+0x176/0x800 [ 426.187800][T22541] pci_device_probe+0x1cd/0x370 [ 426.189755][T22541] really_probe+0x241/0xa60 [ 426.191633][T22541] __driver_probe_device+0x20e/0x450 [ 426.193747][T22541] driver_probe_device+0x4a/0x140 [ 426.195781][T22541] __driver_attach+0x21f/0x5b0 [ 426.197378][T22541] bus_for_each_dev+0x13e/0x1d0 [ 426.199230][T22541] pci_add_dynid+0x2b5/0x370 [ 426.201079][T22541] new_id_store+0x2a9/0x5b0 [ 426.202917][T22541] drv_attr_store+0x74/0xb0 [ 426.204744][T22541] sysfs_kf_write+0xf2/0x150 [ 426.206611][T22541] kernfs_fop_write_iter+0x3e0/0x5f0 [ 426.208742][T22541] vfs_write+0x6ac/0x1050 [ 426.210443][T22541] ksys_write+0x12a/0x250 [ 426.211813][T22541] do_syscall_64+0x115/0x870 [ 426.213468][T22541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.215835][T22541] [ 426.216752][T22541] Freed by task 22541: [ 426.218031][T22541] kasan_save_stack+0x30/0x50 [ 426.219721][T22541] kasan_save_track+0x14/0x30 [ 426.221629][T22541] kasan_save_free_info+0x3b/0x70 [ 426.223649][T22541] __kasan_slab_free+0x5f/0x80 [ 426.225524][T22541] kfree+0x22b/0x6c0 [ 426.226769][T22541] platform_device_release+0x8a/0xb0 [ 426.228629][T22541] device_release+0xd2/0x270 [ 426.230498][T22541] kobject_put+0x1f7/0x640 [ 426.232170][T22541] put_device+0x1f/0x30 [ 426.233481][T22541] platform_device_unregister+0x45/0x50 [ 426.235593][T22541] dwc2_pci_remove+0x55/0xd0 [ 426.237453][T22541] pci_device_remove+0xb2/0x1d0 [ 426.239034][T22541] device_remove+0xcb/0x180 [ 426.240589][T22541] device_release_driver_internal+0x44e/0x620 [ 426.243062][T22541] pci_stop_bus_device+0x120/0x160 [ 426.244749][T22541] pci_stop_and_remove_bus_device+0x58/0xa0 [ 426.246812][T22541] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 426.249383][T22541] remove_store+0x123/0x140 [ 426.250924][T22541] dev_attr_store+0x58/0x80 [ 426.252522][T22541] sysfs_kf_write+0xf2/0x150 [ 426.254381][T22541] kernfs_fop_write_iter+0x3e0/0x5f0 [ 426.256516][T22541] vfs_write+0x6ac/0x1050 [ 426.258196][T22541] ksys_write+0x12a/0x250 [ 426.259564][T22541] do_syscall_64+0x115/0x870 [ 426.261210][T22541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.263587][T22541] [ 426.264556][T22541] The buggy address belongs to the object at ffff888024f28f00 [ 426.264556][T22541] which belongs to the cache kmalloc-128 of size 128 [ 426.269351][T22541] The buggy address is located 56 bytes inside of [ 426.269351][T22541] freed 128-byte region [ffff888024f28f00, ffff888024f28f80) [ 426.274142][T22541] [ 426.275131][T22541] The buggy address belongs to the physical page: [ 426.277614][T22541] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024f28900 pfn:0x24f28 [ 426.280994][T22541] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 426.284094][T22541] page_type: f5(slab) [ 426.285351][T22541] raw: 00fff00000000200 ffff88801bc42a00 ffffea0000b0e5d0 ffffea000163df50 [ 426.288479][T22541] raw: ffff888024f28900 000000080010000f 00000000f5000000 0000000000000000 [ 426.291417][T22541] page dumped because: kasan: bad access detected [ 426.293781][T22541] page_owner tracks the page as allocated [ 426.296077][T22541] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 89, tgid 89 (kworker/u33:4), ts 5339951401, free_ts 0 [ 426.302896][T22541] post_alloc_hook+0xfd/0x120 [ 426.304395][T22541] get_page_from_freelist+0xf48/0x3530 [ 426.306506][T22541] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 426.308886][T22541] new_slab+0xa2/0x640 [ 426.310503][T22541] refill_objects+0xe3/0x410 [ 426.312000][T22541] __pcs_replace_empty_main+0x376/0x680 [ 426.314041][T22541] __kmalloc_noprof+0x66d/0x820 [ 426.315988][T22541] lsm_blob_alloc+0x68/0x90 [ 426.317793][T22541] security_task_alloc+0x2a/0x260 [ 426.319842][T22541] copy_process+0x2b94/0x8030 [ 426.321742][T22541] kernel_clone+0x176/0x9d0 [ 426.323574][T22541] user_mode_thread+0xcc/0x110 [ 426.325485][T22541] call_usermodehelper_exec_work+0xcb/0x180 [ 426.327533][T22541] process_one_work+0xa23/0x1940 [ 426.329238][T22541] worker_thread+0x5ef/0xe50 [ 426.331121][T22541] kthread+0x370/0x450 [ 426.332816][T22541] page_owner free stack trace missing [ 426.334480][T22541] [ 426.335286][T22541] Memory state around the buggy address: [ 426.337522][T22541] ffff888024f28e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 426.340527][T22541] ffff888024f28e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 426.343283][T22541] >ffff888024f28f00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 426.346447][T22541] ^ [ 426.348320][T22541] ffff888024f28f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 426.351421][T22541] ffff888024f29000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 426.354604][T22541] ================================================================== [ 426.358284][T22541] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 426.361044][T22541] CPU: 0 UID: 0 PID: 22541 Comm: syz.4.5573 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.364607][T22541] Tainted: [L]=SOFTLOCKUP [ 426.366107][T22541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 426.370028][T22541] Call Trace: [ 426.371379][T22541] [ 426.372322][T22541] dump_stack_lvl+0x100/0x190 [ 426.373904][T22541] vpanic+0x552/0x970 [ 426.375545][T22541] ? __pfx_vpanic+0x10/0x10 [ 426.377370][T22541] ? mark_held_locks+0x40/0x70 [ 426.379141][T22541] ? irqentry_exit+0x24d/0xa00 [ 426.380906][T22541] ? __release_resource+0x276/0x2c0 [ 426.383042][T22541] panic+0xd1/0xe0 [ 426.384563][T22541] ? __pfx_panic+0x10/0x10 [ 426.386373][T22541] check_panic_on_warn.cold+0x19/0x34 [ 426.388063][T22541] end_report.part.0+0x3a/0x90 [ 426.389869][T22541] kasan_report.cold+0xe/0x18 [ 426.391763][T22541] ? __release_resource+0x276/0x2c0 [ 426.393573][T22541] __release_resource+0x276/0x2c0 [ 426.395108][T22541] release_resource+0x26/0x40 [ 426.396905][T22541] pci_remove_bus_device+0x2d3/0x3b0 [ 426.398924][T22541] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 426.400945][T22541] remove_store+0x123/0x140 [ 426.402567][T22541] ? __pfx_remove_store+0x10/0x10 [ 426.404548][T22541] ? find_held_lock+0x2b/0x80 [ 426.406298][T22541] ? sysfs_file_kobj+0xe4/0x290 [ 426.407784][T22541] ? sysfs_file_kobj+0xe4/0x290 [ 426.409565][T22541] ? __pfx_remove_store+0x10/0x10 [ 426.411530][T22541] dev_attr_store+0x58/0x80 [ 426.413227][T22541] ? __pfx_dev_attr_store+0x10/0x10 [ 426.414810][T22541] sysfs_kf_write+0xf2/0x150 [ 426.416616][T22541] kernfs_fop_write_iter+0x3e0/0x5f0 [ 426.418693][T22541] ? __pfx_sysfs_kf_write+0x10/0x10 [ 426.420413][T22541] vfs_write+0x6ac/0x1050 [ 426.421927][T22541] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 426.424034][T22541] ? __pfx_vfs_write+0x10/0x10 [ 426.425908][T22541] ksys_write+0x12a/0x250 [ 426.427603][T22541] ? __pfx_ksys_write+0x10/0x10 [ 426.429279][T22541] do_syscall_64+0x115/0x870 [ 426.430668][T22541] ? clear_bhb_loop+0x40/0x90 [ 426.432530][T22541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.434848][T22541] RIP: 0033:0x7fc21359de99 [ 426.436565][T22541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.443484][T22541] RSP: 002b:00007fc21454b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 426.446643][T22541] RAX: ffffffffffffffda RBX: 00007fc213825fa0 RCX: 00007fc21359de99 [ 426.449129][T22541] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 426.452235][T22541] RBP: 00007fc213633eaf R08: 0000000000000000 R09: 0000000000000000 [ 426.454632][T22541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.457751][T22541] R13: 00007fc213826038 R14: 00007fc213825fa0 R15: 00007ffdac309458 [ 426.460226][T22541] [ 426.462090][T22541] Kernel Offset: disabled [ 426.463828][T22541] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:54:02 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a38b65 RDI=ffffffff9ba07b40 RBP=ffffffff9ba07b00 RSP=ffffc900049e7548 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000032 R14=ffffffff9b6fa216 R15=ffffffff85a38b00 RIP=ffffffff85a38b8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc21454b6c0 ffffffff 00c00000 GS =0000 ffff8880d5ddc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd70633f88 CR3=00000000366cb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004040101 Opmask01=0000000000000001 Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd70657e70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000002d ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c17dfc5f30 000055c17e1e86d0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c17dfbe290 000055c17dfbee60 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69626572004d52 4c4147495300676e 697361656c657200 4d52455447495300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b4c474057004d52 4c4147495300424b 4c56444049405700 4d52455447495300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80410004803e0004 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000e002400000001 0008000500000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000070014 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000007 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2069652032392036 2065202062200065 0a62200a62206534 0a5f363400206462 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b57eaa RDX=ffff88801eaea540 RSI=ffffffff81b57ece RDI=ffff88801eaea540 RBP=0000000000000001 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=0000000000000000 RIP=ffffffff81b57ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5edc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1384a27dac CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f445815d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc9522b136 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc9522b136 00007ffc9522b13c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4457434492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44574344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4457434636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44574344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44575f0600 00007f44575f05e0 00007f44575f05e8 00007f44575f0618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44575f05f8 00007f44575f05c8 00007f44575f0600 00007f44575f05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b4b982a354ed29b eb085778bc4ad6d1 3d6f8dee07f56852 5b8a48ec6e79e26b ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40cf175c2d0e4921 32a7eb058f732b88 b5b6427bbea94226 634412a1ba857b68 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9a8bff1b203f0cdc 1299067fa1147be0 8895f85b5b4d797f 65da4549b73753fa ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 29746e50300d0d62 0055b27fe97d75b1 ce91352efffffff2 00000000000025de ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a63c800 RCX=ffffffff81fdebd4 RDX=ffff88801eea0000 RSI=ffffffff81fdebae RDI=ffff88801eea0000 RBP=ffffc90000157cd8 RSP=ffffc90000157b60 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a733c60 R12=0000000000000003 R13=ffffed100d4c7901 R14=ffff88806a63c808 R15=0000000000000001 RIP=ffffffff81fdebb0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fdc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c30a232 CR3=0000000033e23000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000fda3b69a DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000000000000 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d3e7061fd0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d3e7065d40 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffff0000000000ff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73730c445b6c6823 73730c445b6c6823 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737332 737326a5c948ce73 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e31303a30303a 303030302f30303a 303030306963702f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d55fb99aa2f653ef 000055d6ba38e960 0000000000000071 0000000000317075 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c384132302c34 4132302c31413230 2c323832302c4635 32302c443532302c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3532302c42353230 2c413532302c4134 32302c343432302c 363132302c453032 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c433032302c42 3032302c41303230 2c393032302c3830 32302c363032302c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a38b65 RDI=ffffffff9ba07b40 RBP=ffffffff9ba07b00 RSP=ffffc900007af838 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000036 R14=ffffffff9b6fa1e5 R15=ffffffff85a38b00 RIP=ffffffff85a38b8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff89e757e20 CR3=0000000025963000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000000f9 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000ffffff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6dfe0630 00007ffc6dfe0630 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff89dbf0823 00007ff89dbf0823 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff89dbf0e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff89dbf0e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555567622a78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6963702f7375622f 7379732f2e01ffff ffffffffffffab08 0280030fffffffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0102100003800401 000000080606017b 8c31020803800300 0400020800028004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01c70800080046ee 0065766f6d65722f 302e31303a30303a 303030302f736563 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697665642f696370 2f7375622f737973 2f2e01ffffffffff ffffffab08028003 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0fffffffffffff04 0010000180040004 0fffffffffffff04 0a0145ae00736673 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a040009ec030c04 0009e8030210b880 840009e6030010b0 80840009e6030401 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e206c6c61637379 7320746820737320 3265737320657373 207273786620786d ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6373745f746e6174 736e6f63206d6c20 7063737464722062 6731657064702078 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 706f74736e6f6e20 79676f6c6f706f74 78206c706f6e2064 6f6f675f70657220 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6973796870207374 6962203634203a09 73657a6973207373 65726464610a3436 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 67616e616d207265 776f700a6c617574 7269762073746962 203834202c6c6163 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000060000006f 666e697570632f63 6f72702f0000000d 0a0a3a746e656d65 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01000000ffffffb0 0000000400000018 0000002c00000040 0000005400000070