last executing test programs: 10.759858062s ago: executing program 2 (id=820): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x101002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000000c0)=@attr_other={0x0, 0x1, 0xfffffffffffffffe, 0x0}) r3 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x54, &(0x7f0000000000)=0x3, 0x4) 10.631872368s ago: executing program 2 (id=821): ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000540)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000900)={0x18, 0x1, 0x0, {0x6}}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8410, 0x0) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000680), &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x0, &(0x7f0000000780)=0x0) r10 = syz_ublk_add_dev(r6, r7, r8, r9, 0x0, 0x0) syz_io_uring_submit$UBLK(r7, r8, r9, &(0x7f00000007c0)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r5, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r10, 0xffff, 0x70, &(0x7f0000000840)={0x70, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x7}}}}) io_uring_enter(r6, 0x1, 0x1, 0x1, 0x0, 0x0) chdir(&(0x7f00000001c0)='./mnt\x00') mkdir(&(0x7f0000000300)='./control\x00', 0x111) rmdir(&(0x7f0000000380)='./control\x00') 10.541712357s ago: executing program 2 (id=822): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/nd/devices/dax0.0/namespace\x00', 0x1, 0x0) r0 = socket$inet(0x2, 0x1, 0x100) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCGSID(r5, 0x5429, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c0002"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r8, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r9 = socket(0xa, 0x3, 0x87) sendmsg(r9, &(0x7f0000000200)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2}, 0x880) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000800)={0x2, "7d55409eb7fda541ecaa269cacde06e99288c000d8c18def2fbd8f0c9522312c1d9938b2f3b3462e1b3f9bd43311ee45a0b9e1c90afc1da9643654d566c9f8bb", {0xdb, 0x272f}}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30001000001400000011000100"], 0x48}}, 0x0) 10.351444959s ago: executing program 2 (id=824): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000001940)={r0, r0, 0xc, 0x1, &(0x7f0000001a00)='\x00', 0xb, 0x1, 0x10cf, 0x4155, 0x1, 0x1, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000001a40)={0x1, &(0x7f0000001a80)=[{}]}) 10.351142863s ago: executing program 2 (id=825): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000300), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000003c0)={0x4, &(0x7f0000000400)=[{0x5, '\x00', @buffer={"2b90feffffffffffffff5cff3649ba7667b0a00b12e3f51b0f16a90c001c00ff", 0x20}, 0x5}, {0x15, '\x00', @st={0x4, [{0x1, @uvalue=0x5}, {0x3, @svalue=0x2}, {0x3, @svalue=0x7}, {0x1, @uvalue=0x2}]}, 0x6447}, {0x38, '\x00', @data=0x578941fc, 0x1}, {0x19, '\x00', @data=0x7, 0x2}]}) 10.290082407s ago: executing program 2 (id=827): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x1000003, 0x4008032, r1, 0xb57ef000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x1215c0, 0x1a8) r3 = fanotify_init(0x8, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4001041) fanotify_mark(r3, 0x105, 0x40001032, r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0x8880, 0x85) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000740)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00002eb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000800)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1608000004"], 0x50) io_uring_enter(r4, 0x4095, 0x7721, 0x16, 0x0, 0x0) add_key(&(0x7f00000008c0)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) getrandom(&(0x7f0000000900)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000480)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="cc3841bb3fe5e5fbb7b78153eabe7dfee8e52b5308a4b0d88302010cfd2d377a0fa8e613f5efe5f7319e550a790145478b085752a572aec2"], 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000080)={"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"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000004c0)=0xc99, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'ip6gretap0\x00', 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000640), 0xa8c01) write$sndseq(r7, &(0x7f0000000680)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) sendto$packet(r5, &(0x7f0000000540)="0b031260feffffff02005400f6a13bb1000000086086dd480300", 0x100a6, 0x0, &(0x7f0000000580)={0x11, 0x86dd, r6}, 0x50) 4.721740639s ago: executing program 3 (id=856): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x1}}, 0x18, &(0x7f0000000100)={&(0x7f0000000140)="92034724033eea403a", 0x9}}, 0xae) r3 = syz_open_dev$dri(&(0x7f0000000740), 0xb, 0x300) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000780)={0x10}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) r6 = eventfd2(0x9, 0x800) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000080)={0x1, r6}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000001000000000a00000a48000000060a0b040000000000000000020000001c0004801800018008000100666962000c00028008000240000000eb0900010073797a30000000000900020073797a3200"], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000640)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r11, @ANYBLOB="080005", @ANYRES32=r11], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) bind$can_j1939(r9, &(0x7f0000000300)={0x1d, r8, 0x0, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r9, &(0x7f0000000200)={&(0x7f0000000240), 0x18, &(0x7f0000000280)={&(0x7f00000002c0)="92034724033eea403a", 0x9}}, 0xee) r12 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi1\x00', 0xa2000, 0x0) readv(r12, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/118, 0x76}], 0x1) 4.40158143s ago: executing program 3 (id=858): add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f0000000380)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f8efde300a06082a8648ce3d040302306b3180303606035504030c2f436572746966696361746520766572696669636174696f6e4d7f469653412073656c662d74657374696e67206b65793020170d3634303431333232313632365a180f32313234303332303232314632365a303a3138303606035504030c2f4365727469666963618b6520766572696669636174696f6e2045434453412073656c662d74657374696e672aa648ce3d020106082a8648ce3d0301070342000407e56b51af71039ee2fe6e6a714ec7299fd85b1e69adfa1690e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8478efdfdd2b2300c0603551d130101ff04023000300b0603551d0f04040b020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7a00"/472, 0x1d8, 0xffffffffffffffff) (fail_nth: 10) 4.33183047s ago: executing program 3 (id=859): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040050) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtfilter={0x4bc, 0x2c, 0x4, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff}, {0xffff, 0x7}, {0xb, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x464, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x2}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x90}, @TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]}, @TCA_ROUTE4_POLICE={0x410, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x60}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7, 0xff, 0x3, 0x3ff, 0x4, 0x4, 0x5, 0x70e5, 0x1000000, 0x1, 0x1d6, 0x81, 0x1, 0x1, 0x1ff, 0x3, 0x7, 0x4, 0x6, 0x6, 0x42, 0x4f, 0x5, 0x2, 0xffffffff, 0xe, 0xf9, 0x1, 0x1, 0x2, 0x4, 0x200, 0x6, 0xfffffffa, 0x3, 0x0, 0xa0, 0xa8, 0xc, 0x2, 0x4000000, 0x935579fd, 0x6, 0x1, 0x4, 0x4, 0x8, 0x16, 0x200, 0x8001, 0xfffffb88, 0x7, 0xa2, 0xfff, 0x4, 0x9, 0x2, 0x4ec, 0x0, 0x42b, 0x7cd, 0x0, 0x0, 0x1, 0xfffffff8, 0x1, 0x7, 0xe, 0xc84, 0x4, 0x3, 0x191f, 0x4, 0x101, 0x9c, 0x4, 0x2, 0x0, 0x9, 0x589b4665, 0x3, 0x9, 0x5, 0x3, 0xe, 0x8, 0x3, 0xe3ec, 0x1, 0x5d1, 0x5, 0x6, 0x7c5c, 0x400, 0x3, 0x8, 0x4, 0x100, 0x50000000, 0x7, 0x8, 0x40, 0x200, 0x10001, 0x8, 0x9, 0x4, 0x4, 0xffff08e8, 0x8, 0x9, 0x2, 0x4, 0x8, 0xb, 0x101, 0x7, 0xe, 0xffff, 0xf, 0xffff, 0x6, 0x5, 0x6, 0x1, 0x0, 0x9, 0xffff, 0x3, 0x89cd, 0x4, 0x7f, 0x4, 0x0, 0x6, 0x7, 0x5, 0x8, 0xaa0, 0x40, 0x200, 0x0, 0x5, 0x5, 0x40, 0x4, 0xffffffff, 0x80000000, 0x4, 0x552, 0x0, 0xa, 0xd5a4, 0x9, 0xfffffffc, 0x0, 0x3, 0x9, 0x101, 0x100, 0x0, 0x80, 0xfffffff2, 0xb3, 0x5, 0x80000000, 0xed4, 0xea, 0x8, 0xfffffff8, 0x3238, 0xa59, 0xae, 0x6, 0x7, 0x0, 0x8, 0xffffffff, 0x2, 0x2, 0x5d, 0x2, 0xb, 0x9, 0x6, 0x81, 0x10001, 0x6, 0x40, 0x7, 0x90000, 0x3, 0x10001, 0xd8, 0x7, 0x12a, 0x3, 0x1, 0x2, 0x4000, 0x2000000, 0x8, 0x5, 0x800, 0x7, 0x1, 0x4, 0x7, 0x4, 0xfffffffb, 0x9, 0x8, 0x4, 0x9, 0x2, 0x8001, 0xf, 0x4, 0x3ff, 0x4, 0x3, 0xb7, 0x200, 0x52e, 0xe, 0x5, 0x0, 0x1, 0x8, 0x5, 0x4, 0x7ff, 0x7, 0xfffffff8, 0x8, 0x4, 0x8, 0x2, 0xfffffc01, 0x4, 0xffff, 0xcc4, 0x5d, 0xf, 0x5, 0x8, 0xb70, 0x81, 0xba, 0x5f, 0x8, 0x3, 0x0, 0xfff, 0x7]}]}, @TCA_ROUTE4_POLICE={0x1c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffb}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xe4}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x0, 0xd0}}, @TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @TCA_RATE={0x6, 0x5, {0x3, 0x10}}, @TCA_CHAIN={0x8, 0xb, 0xd}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) 4.051830365s ago: executing program 3 (id=860): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f00000011c0)={0xfffff35b, 0x5, 0xa0, 0x6408, 0x6d, 0x0, 0x8}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000980)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f0000001040)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f00000010c0)='27', 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="84", 0x1}, {&(0x7f0000000a80)="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", 0x583}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001280), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000012c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) readv(r6, &(0x7f0000001300)=[{&(0x7f0000001340)=""/244, 0xf4}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000001600)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={&(0x7f0000000000)="7125da23a69c0b3d0cf16de2c47fadb8508a3d54e7774b89ed91df67e8dd20d07de125fd1338ec3383d79569060c1d2e29722dcf40c4d7e6f360d7c80e6c85151c4731a55210870b457e977496725b6306940917a0592b57acf3326183e8f2c7b0579c28caf3fd87b118a48282fdb13c121499e775f08f1fb761e6e73cdc7756ec9710e70cba9daf4586a715ca83", &(0x7f00000000c0)=""/34, &(0x7f0000000100)="22df454b7555b2abe3d0fae3afb1cfca67ecb04bbd75c2000b357d", &(0x7f0000000140)="291d6087d070da7d41d26556bee5cc00ad534265bf7f60615a91d18ad1adcce09679966c206a90bf39616c2428503627ffaa16cd34318daf5418960be77bb241e47b34f0367bd4b0f5816b90ea66d49d378efb5a62d8ae5df5", 0x8, r8, 0x4}, 0x38) 3.731581671s ago: executing program 3 (id=864): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f00000000c0)="0000010042", 0x5, 0x1be) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x2, 0x40) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000340)=0x1, 0x4) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f00000003c0)=[{{&(0x7f0000000400)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000440)=[{&(0x7f00000004c0)="5338a3848b25e2", 0x7}], 0x1}}], 0x1, 0x20008000) shutdown(r2, 0x1) write(r1, &(0x7f0000000200)='tcp 2', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='1', 0x1) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) r4 = mq_open(&(0x7f00000001c0)='./-/(*[\x00', 0x1, 0x50, &(0x7f0000000300)={0xa4bf, 0x6, 0x8000, 0x2}) ftruncate(r4, 0x1) pwrite64(r0, &(0x7f0000000140)='PRIVHEAD', 0x8, 0xc00) r5 = syz_open_dev$loop(&(0x7f0000000480), 0x1000, 0x2) ioctl$LOOP_SET_FD(r5, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) 2.081726193s ago: executing program 1 (id=870): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x3e0, &(0x7f0000000200)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000340), 0x76}, 0x48) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x10000000000000cf, 0x0, [{0x40000108}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DM_TABLE_CLEAR(r0, 0xc138fd0a, &(0x7f0000000900)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1200, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, 0x0) 1.981083785s ago: executing program 1 (id=871): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000001a40)={0x0, 0x0}) 1.901901236s ago: executing program 1 (id=872): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = memfd_create(&(0x7f0000000080)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r1, 0x0) ftruncate(r1, 0x0) (async) mlock(&(0x7f0000106000/0x1000)=nil, 0x1000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/block/ram0/queue/discard_max_bytes\x00', 0x1a1041, 0x171) write(r2, &(0x7f0000000140)='1R', 0x2) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000180)={&(0x7f0000000000/0x4000)=nil, 0xfffffffffffffffb, 0x6, 0x4}) ioperm(0x1, 0xb2be, 0x163f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0xd, 0x0, 0x0) (async) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x201, &(0x7f0000000040)={0x0, 0x300}) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706373696d5f6e6574000a000400766470613000", 0x2e}], 0x1}, 0x0) 1.832063694s ago: executing program 1 (id=873): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000f80)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000fc0)=[{&(0x7f0000001000)='i', 0x20086}], 0x1}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x8, 0x10010, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000680)='./dev\x00', &(0x7f00000006c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyS0\x00', 0x20402, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = gettid() ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4008014) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x2c41, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000001140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000003180)="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", 0x2000, &(0x7f0000005180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005240)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000005280)={0x50, 0x0, r5, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x0, 0xfffffff8, 0x0, 0x0, 0x20, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000005300)='./file0\x00', 0x40242, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x20000800) sendmsg$NFT_BATCH(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a010800000000000000020000000900020073797a3000000000090001f372797a30000000001c000380180003801400010067656e65766530000000000000000000140000001100010000000000000000000000000a00"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x24040884) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a40)={0x1, &(0x7f0000000a80)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$TIOCMGET(r1, 0x5415, 0x0) r7 = syz_open_dev$media(&(0x7f0000000580), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f00000005c0)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) 1.751979661s ago: executing program 3 (id=874): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040805}, 0x0) ioctl$FE_READ_STATUS(r0, 0x80046f45, &(0x7f0000000380)) 961.810444ms ago: executing program 1 (id=875): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/versions\x00', 0x280c82, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f0000000080)={0x5, 0x0, 0x1, 0x1, 0x7}) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) chdir(&(0x7f0000000240)='./nfsd/versions\x00') r4 = accept4(r1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000080), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000000c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) write(r0, &(0x7f0000000200)=' 2 -3 +4 +4. +4.2\n', 0x13) 821.760031ms ago: executing program 0 (id=878): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="080026009015000008005700802a575f766cebd4ddc6ee8d0c0a24d2216ef422383527040000002897cf852db6c1aee9a6772b76897663c7ede82e85a925286833a21240d44a0b96ddb4"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4e015) 751.957751ms ago: executing program 0 (id=879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000a06010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) 651.923743ms ago: executing program 1 (id=880): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000001a40)={0x0, 0x0}) 651.21016ms ago: executing program 0 (id=881): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nf_conntrack/parameters/hashsize\x00', 0x400640, 0x19e) write(r0, &(0x7f00000000c0)='16', 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008, 0x40000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) getsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000100)={0x1, 0x3}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000180)={r2, 0x100}, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002940)={0x3, 0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/203, 0xcb}], &(0x7f0000002900)=[0x1, 0x22e7]}, 0x20) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$BLKGETNRZONES(r3, 0x80041285, &(0x7f0000000040)=0x8) bind$rds(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x1a2}, {0x0}, &(0x7f0000000740)=[{&(0x7f0000000780)=""/4099, 0x1003}], 0x1, 0xff01, 0xc}}], 0x48}, 0x0) 571.90588ms ago: executing program 0 (id=882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000002060108000000000000000a0100000a11000300686173683a69702c706f7274000000000900020073797a300000000005000100070000000500040000160000050005"], 0x68}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000) 571.538206ms ago: executing program 0 (id=883): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000100)={0xa, 0x4e22, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000029000000040000002f000000000000001800000000000000290000003b00000002000000000000002800"], 0x60}, 0x0) r1 = syz_usbip_server_init(0x1) write$usbip_server(r1, &(0x7f0000000000)=@ret_unlink={{0x4, 0x2, 0x0, 0x1, 0xc}}, 0x30) 0s ago: executing program 0 (id=884): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/rescan\x00', 0x1, 0x0) openat(r0, &(0x7f0000000180)='./sys\x00', 0x80001, 0x40) write(r0, &(0x7f0000000140)='1', 0x1) io_destroy(0x0) write(r0, &(0x7f00000001c0)="c9", 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='27', 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000010a"], 0x14}}, 0x0) write(r1, &(0x7f0000000080)="300000001c00010401000000000000002d000000010000008000000105000100300000000a0002000000000000000000", 0x30) kernel console output (not intermixed with test programs): mber: syz [ 75.756411][ T6799] nvme_fabrics: missing parameter 'traddr=%s' [ 75.944660][ T42] audit: type=1400 audit(1793234025.154:491): avc: denied { read } for pid=6762 comm="syz.2.282" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 75.944929][ T42] audit: type=1400 audit(1793234025.154:492): avc: denied { open } for pid=6762 comm="syz.2.282" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 75.945232][ T42] audit: type=1400 audit(1793234025.154:493): avc: denied { ioctl } for pid=6762 comm="syz.2.282" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0xc0189372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 75.948551][ T5120] Bluetooth: hci4: Frame reassembly failed (-84) [ 75.949295][ T6766] Bluetooth: hci4: Frame reassembly failed (-84) [ 76.091454][ T50] rtl8150 7-1:1.0: couldn't reset the device [ 76.091617][ T50] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 76.097400][ T50] usb 7-1: USB disconnect, device number 6 [ 76.540929][ T6718] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 76.606050][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.292'. [ 76.623133][ T24] cfg80211: failed to load regulatory.db [ 76.701089][ T6813] overlayfs: missing 'lowerdir' [ 76.842811][ T6822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.296'. [ 76.853700][ T6822] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 76.855704][ T6822] bond0 (unregistering): Released all slaves [ 77.089696][ T6828] syzkaller1: entered promiscuous mode [ 77.089719][ T6828] syzkaller1: entered allmulticast mode [ 77.255731][ T42] audit: type=1400 audit(1793234026.464:494): avc: denied { ioctl } for pid=6830 comm="syz.1.299" path="socket:[12199]" dev="sockfs" ino=12199 ioctlcmd=0x8004745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.980988][ T5791] Bluetooth: hci4: command 0xfc11 tx timeout [ 77.981124][ T67] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 79.766844][ T6816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 79.821358][ T42] audit: type=1400 audit(1793234029.024:495): avc: denied { getopt } for pid=6841 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.822660][ T42] audit: type=1400 audit(1793234029.034:496): avc: denied { ioctl } for pid=6841 comm="syz.1.302" path="socket:[12212]" dev="sockfs" ino=12212 ioctlcmd=0x80585882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.829147][ T6846] overlayfs: missing 'lowerdir' [ 79.868395][ T6851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.305'. [ 79.881465][ T6851] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 79.882523][ T6851] bond0 (unregistering): Released all slaves [ 80.009775][ T6864] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 80.099457][ T42] audit: type=1400 audit(1793234029.304:497): avc: denied { append } for pid=6874 comm="syz.0.313" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.112913][ T42] audit: type=1400 audit(1793234029.324:498): avc: denied { kexec_image_load } for pid=6874 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 80.127639][ T42] audit: type=1400 audit(1793234029.334:499): avc: denied { bind } for pid=6866 comm="syz.2.311" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.128021][ T42] audit: type=1400 audit(1793234029.334:500): avc: denied { name_bind } for pid=6866 comm="syz.2.311" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 80.128304][ T42] audit: type=1400 audit(1793234029.334:501): avc: denied { node_bind } for pid=6866 comm="syz.2.311" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 80.214336][ T6888] overlayfs: missing 'lowerdir' [ 80.241080][ T34] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 80.245568][ T42] audit: type=1400 audit(1793234029.454:502): avc: denied { map } for pid=6866 comm="syz.2.311" path="/46/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=6460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 80.314574][ T42] audit: type=1400 audit(1793234029.524:503): avc: denied { append } for pid=6891 comm="syz.0.316" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.316711][ T6892] dlm: no local IP address has been set [ 80.316728][ T6892] dlm: cannot start dlm midcomms -107 [ 80.317351][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 80.317372][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'. [ 80.341676][ T5637] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 1536 - 0 [ 80.341717][ T5637] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 1536 - 0 [ 80.341747][ T5637] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 1536 - 0 [ 80.341777][ T5637] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 1536 - 0 [ 80.382890][ T42] audit: type=1400 audit(1793234029.594:504): avc: denied { read append } for pid=6893 comm="syz.0.317" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 80.401920][ T34] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 80.404534][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.404553][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.404565][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.404586][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.406059][ T34] usb 6-1: config 0 descriptor?? [ 80.826028][ T34] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 80.865172][ T6900] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 80.883891][ T6902] netlink: 'syz.2.320': attribute type 1 has an invalid length. [ 80.920541][ T6905] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 80.965616][ T6910] netlink: 64 bytes leftover after parsing attributes in process `syz.3.322'. [ 80.965637][ T6910] netlink: 64 bytes leftover after parsing attributes in process `syz.3.322'. [ 80.965649][ T6910] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 80.965995][ T6910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.322'. [ 80.983560][ T6910] bond0: entered promiscuous mode [ 80.983900][ T6910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.998967][ T6910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.999274][ T6910] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 80.999791][ T6910] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 81.067133][ T6261] usb 6-1: USB disconnect, device number 9 [ 81.117314][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 81.117382][ T6917] bridge_slave_1: left allmulticast mode [ 81.117402][ T6917] bridge_slave_1: left promiscuous mode [ 81.117629][ T6917] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.119973][ T6917] bridge_slave_0: left allmulticast mode [ 81.119988][ T6917] bridge_slave_0: left promiscuous mode [ 81.120144][ T6917] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.166336][ T6919] FAULT_INJECTION: forcing a failure. [ 81.166336][ T6919] name failslab, interval 1, probability 0, space 0, times 0 [ 81.166382][ T6919] CPU: 1 UID: 0 PID: 6919 Comm: syz.3.325 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.166400][ T6919] Tainted: [L]=SOFTLOCKUP [ 81.166404][ T6919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.166421][ T6919] Call Trace: [ 81.166434][ T6919] [ 81.166440][ T6919] dump_stack_lvl+0x100/0x190 [ 81.166470][ T6919] should_fail_ex.cold+0x5/0xa [ 81.166489][ T6919] should_failslab+0xc2/0x120 [ 81.166506][ T6919] __kvmalloc_node_noprof+0x113/0x9b0 [ 81.166525][ T6919] ? file_tty_write.isra.0+0x6a7/0x8f0 [ 81.166541][ T6919] file_tty_write.isra.0+0x6a7/0x8f0 [ 81.166553][ T6919] ? security_file_permission+0x76/0x210 [ 81.166573][ T6919] ? rw_verify_area+0xce/0x6d0 [ 81.166591][ T6919] vfs_write+0x6af/0x1050 [ 81.166602][ T6919] ? __pfx_tty_write+0x10/0x10 [ 81.166614][ T6919] ? __pfx_vfs_write+0x10/0x10 [ 81.166631][ T6919] ? find_held_lock+0x2b/0x80 [ 81.166653][ T6919] ksys_write+0x12a/0x250 [ 81.166663][ T6919] ? __pfx_ksys_write+0x10/0x10 [ 81.166678][ T6919] do_syscall_64+0x123/0x790 [ 81.166696][ T6919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.166709][ T6919] RIP: 0033:0x7f603539f559 [ 81.166721][ T6919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.166733][ T6919] RSP: 002b:00007f603619d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 81.166745][ T6919] RAX: ffffffffffffffda RBX: 00007f6035625fa0 RCX: 00007f603539f559 [ 81.166752][ T6919] RDX: 0000000000001006 RSI: 0000200000001300 RDI: 0000000000000005 [ 81.166759][ T6919] RBP: 00007f603619d090 R08: 0000000000000000 R09: 0000000000000000 [ 81.166766][ T6919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.166773][ T6919] R13: 00007f6035626038 R14: 00007f6035625fa0 R15: 00007ffdac456648 [ 81.166789][ T6919] [ 81.192332][ T6922] overlayfs: missing 'lowerdir' [ 81.250003][ T6928] netlink: 'syz.3.329': attribute type 1 has an invalid length. [ 81.288463][ T6932] netlink: ct family unspecified [ 81.317094][ T6937] openvswitch: netlink: Port 196609 exceeds max allowable 65535 [ 81.540228][ T6948] Cannot find map_set index 135 as target [ 81.580023][ T6950] overlayfs: missing 'lowerdir' [ 81.645692][ T6954] netlink: 'syz.1.338': attribute type 10 has an invalid length. [ 81.645712][ T6954] netlink: 55 bytes leftover after parsing attributes in process `syz.1.338'. [ 81.706381][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'. [ 81.708125][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 81.825587][ T6963] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 81.931236][ T6972] ip_tables: iptables: counters copy to user failed while replacing table [ 82.036712][ T6985] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.117897][ T6987] dlm: no local IP address has been set [ 82.117908][ T6987] dlm: cannot start dlm midcomms -107 [ 82.119554][ T6989] netlink: 'syz.1.350': attribute type 1 has an invalid length. [ 82.175121][ T6992] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 82.175190][ T6992] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 82.208052][ T6998] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.353' sets config #1 [ 82.514963][ T7016] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 82.632938][ T7022] Invalid argument reading file caps for ./file0 [ 82.699395][ T7025] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 82.699439][ T7025] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 82.896002][ T7033] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 83.006875][ T7038] netlink: 'syz.1.369': attribute type 1 has an invalid length. [ 83.440916][ T50] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 83.582597][ T7066] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.375' sets config #0 [ 83.582883][ T7066] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.375' sets config #1 [ 83.598379][ T50] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 83.599530][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.599555][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.599572][ T50] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.599607][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.601638][ T50] usb 6-1: config 0 descriptor?? [ 84.017896][ T50] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 84.182605][ T7078] bond4: entered allmulticast mode [ 84.182985][ T7078] 8021q: adding VLAN 0 to HW filter on device bond4 [ 84.263067][ T6261] usb 6-1: USB disconnect, device number 10 [ 85.431250][ T7085] ceph: No mds server is up or the cluster is laggy [ 85.805478][ T7111] syz_tun: entered allmulticast mode [ 85.809613][ T7109] syz_tun: left allmulticast mode [ 85.884417][ T7116] netlink: 'syz.2.394': attribute type 1 has an invalid length. [ 85.935607][ T7121] overlayfs: missing 'workdir' [ 85.948376][ T7123] ubi0: attaching mtd0 [ 85.955798][ T7123] ubi0: scanning is finished [ 85.955804][ T7123] ubi0: empty MTD device detected [ 86.038090][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 86.038103][ T42] audit: type=1400 audit(1793234035.244:521): avc: denied { append } for pid=7136 comm="syz.3.401" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.058415][ T42] audit: type=1400 audit(1793234035.264:522): avc: denied { create } for pid=7131 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 86.145661][ T7123] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 86.145680][ T7123] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 86.145696][ T7123] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 86.145713][ T7123] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 86.145733][ T7123] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 86.145746][ T7123] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 86.145758][ T7123] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1740658177 [ 86.145773][ T7123] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 86.146538][ T7146] ubi0: background thread "ubi_bgt0d" started, PID 7146 [ 86.147207][ T42] audit: type=1400 audit(1793234035.354:523): avc: denied { write } for pid=7142 comm="syz.1.402" name="/" dev="9p" ino=71827789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.147250][ T42] audit: type=1400 audit(1793234035.354:524): avc: denied { add_name } for pid=7142 comm="syz.1.402" name="trace" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.147283][ T42] audit: type=1400 audit(1793234035.354:525): avc: denied { create } for pid=7142 comm="syz.1.402" name="trace" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 86.155052][ T42] audit: type=1400 audit(1793234035.364:526): avc: denied { watch watch_reads } for pid=7136 comm="syz.3.401" path="pipe:[3833]" dev="pipefs" ino=3833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 86.164399][ T42] audit: type=1400 audit(1793234035.374:527): avc: denied { map } for pid=7136 comm="syz.3.401" path="socket:[16621]" dev="sockfs" ino=16621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 86.165403][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.165477][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.165554][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.165627][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.165698][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.165777][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.165853][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.165924][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.165999][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.166075][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.166149][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.166222][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.166295][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.168983][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.169057][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.169129][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.169211][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.169284][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.169353][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.172515][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.172603][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.172669][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.172747][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.172819][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.172908][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.172977][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.173048][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.175518][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.175597][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.175671][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.175750][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.175822][ T7123] ubi: mtd0 is already attached to ubi0 [ 86.276124][ T7147] mmap: syz.3.401 (7147) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.342461][ T7152] overlayfs: failed to resolve './file0/file1': -2 [ 86.387859][ T7154] netlink: 'syz.0.404': attribute type 1 has an invalid length. [ 86.563851][ T7169] loop0: detected capacity change from 0 to 4096 [ 86.603781][ T7169] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 86.603803][ T7169] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 86.603814][ T7169] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 86.603857][ T7169] loop0: [ 86.719865][ T7173] smpboot: CPU 1 is now offline [ 86.760714][ T7173] smpboot: CPU 3 is now offline [ 86.792380][ T7173] device-mapper: table: 248:2: verity: Not enough arguments (-EINVAL) [ 86.792393][ T7173] device-mapper: ioctl: error adding target to table [ 86.814817][ T7176] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 86.845635][ T7176] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 86.867195][ T7182] netlink: 'syz.2.413': attribute type 1 has an invalid length. [ 86.936436][ T5895] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.957531][ T7189] ucma_write: process 177 (syz.2.416) changed security contexts after opening file descriptor, this is not allowed. [ 86.972498][ T7191] loop0: detected capacity change from 0 to 4096 [ 87.024835][ T7191] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 87.024850][ T7191] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 87.024857][ T7191] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 87.024884][ T7191] loop0: [ 87.030928][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 87.183182][ T10] usb 8-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 87.184048][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.184062][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.184074][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.184131][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.188466][ T10] usb 8-1: config 0 descriptor?? [ 87.227525][ T42] audit: type=1400 audit(1793234036.434:528): avc: denied { create } for pid=7199 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.393985][ T42] audit: type=1400 audit(1793234036.604:529): avc: denied { setopt } for pid=7195 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.395858][ T42] audit: type=1400 audit(1793234036.604:530): avc: denied { write } for pid=7195 comm="syz.0.419" name="core" dev="configfs" ino=2129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.510470][ T7209] FAULT_INJECTION: forcing a failure. [ 87.510470][ T7209] name failslab, interval 1, probability 0, space 0, times 0 [ 87.510509][ T7209] CPU: 1 UID: 0 PID: 7209 Comm: syz.0.422 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.510526][ T7209] Tainted: [L]=SOFTLOCKUP [ 87.510530][ T7209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.510545][ T7209] Call Trace: [ 87.510558][ T7209] [ 87.510563][ T7209] dump_stack_lvl+0x100/0x190 [ 87.510596][ T7209] should_fail_ex.cold+0x5/0xa [ 87.510623][ T7209] should_failslab+0xc2/0x120 [ 87.510644][ T7209] __kmalloc_cache_noprof+0x91/0x6d0 [ 87.510661][ T7209] ? alloc_fs_context+0x57/0xf40 [ 87.510681][ T7209] alloc_fs_context+0x57/0xf40 [ 87.510698][ T7209] ? __get_fs_type+0xe3/0x200 [ 87.510717][ T7209] __x64_sys_fsopen+0x16b/0x2d0 [ 87.510745][ T7209] do_syscall_64+0x123/0x790 [ 87.510764][ T7209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.510776][ T7209] RIP: 0033:0x7fb7f3d9f559 [ 87.510787][ T7209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.510799][ T7209] RSP: 002b:00007fb7f4ba2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 87.510812][ T7209] RAX: ffffffffffffffda RBX: 00007fb7f4025fa0 RCX: 00007fb7f3d9f559 [ 87.510820][ T7209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000500 [ 87.510828][ T7209] RBP: 00007fb7f4ba2090 R08: 0000000000000000 R09: 0000000000000000 [ 87.510835][ T7209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.510842][ T7209] R13: 00007fb7f4026038 R14: 00007fb7f4025fa0 R15: 00007ffc4b84c218 [ 87.510858][ T7209] [ 87.609073][ T10] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 87.723680][ T7218] netlink: 'syz.0.425': attribute type 1 has an invalid length. [ 87.810610][ T10] usb 8-1: USB disconnect, device number 9 [ 88.011835][ T7239] netlink: 'syz.2.434': attribute type 1 has an invalid length. [ 88.154546][ T7251] __nla_validate_parse: 33 callbacks suppressed [ 88.154561][ T7251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.439'. [ 88.370879][ T50] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 88.541048][ T50] usb 5-1: Invalid ep0 maxpacket: 32 [ 88.690843][ T50] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 88.750918][ T5895] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 88.860979][ T50] usb 5-1: Invalid ep0 maxpacket: 32 [ 88.861513][ T50] usb usb5-port1: attempt power cycle [ 88.900836][ T5895] usb 8-1: Using ep0 maxpacket: 8 [ 88.901527][ T5895] usb 8-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 88.902369][ T5895] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 88.902406][ T5895] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.902418][ T5895] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.902431][ T5895] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.902444][ T5895] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.902475][ T5895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.108255][ T5895] usb 8-1: GET_CAPABILITIES returned 0 [ 89.108274][ T5895] usbtmc 8-1:16.0: can't read capabilities [ 89.124148][ T7269] ntfs3(sr0): Primary boot signature is not NTFS. [ 89.124859][ T7269] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 89.129994][ T7269] ntfs3(sr0): Primary boot signature is not NTFS. [ 89.130081][ T7269] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 89.167171][ T7273] netlink: 'syz.2.445': attribute type 1 has an invalid length. [ 89.220959][ T50] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 89.241544][ T50] usb 5-1: Invalid ep0 maxpacket: 32 [ 89.303086][ T7278] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 89.308734][ T10] hid-generic 0005:10CF:4155.0008: unknown main item tag 0x0 [ 89.317757][ T10] hid-generic 0005:10CF:4155.0008: hidraw1: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 89.324655][ T10] usb 8-1: USB disconnect, device number 10 [ 89.371388][ T50] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 89.401331][ T50] usb 5-1: Invalid ep0 maxpacket: 32 [ 89.401571][ T50] usb usb5-port1: unable to enumerate USB device [ 89.810883][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 89.850992][ T79] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 89.960884][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 89.961590][ T24] usb 6-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 89.962465][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 89.964267][ T24] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 89.964283][ T24] usb 6-1: Product: syz [ 89.964294][ T24] usb 6-1: Manufacturer: syz [ 89.964306][ T24] usb 6-1: SerialNumber: syz [ 89.966487][ T24] usb 6-1: config 0 descriptor?? [ 89.967748][ T7288] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 89.968834][ T24] hub 6-1:0.0: bad descriptor, ignoring hub [ 89.968844][ T24] hub 6-1:0.0: probe with driver hub failed with error -5 [ 90.001430][ T79] usb 7-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 90.002344][ T79] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.002365][ T79] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.002384][ T79] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.002429][ T79] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.004581][ T79] usb 7-1: config 0 descriptor?? [ 90.283468][ T24] usb 6-1: USB disconnect, device number 11 [ 90.381043][ C0] ipvlan_process_outbound: 2 callbacks suppressed [ 90.417197][ T79] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 90.611274][ T79] usb 7-1: USB disconnect, device number 7 [ 90.781022][ T5895] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 90.871953][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.453'. [ 90.910927][ T5895] usb 6-1: device descriptor read/64, error -71 [ 91.150921][ T5895] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 91.243905][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 91.243923][ T42] audit: type=1400 audit(1793234040.454:552): avc: denied { append } for pid=7309 comm="syz.2.456" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 91.262114][ T7310] kvm: user requested TSC rate below hardware speed [ 91.290930][ T5895] usb 6-1: device descriptor read/64, error -71 [ 91.366929][ T7316] netlink: 80 bytes leftover after parsing attributes in process `syz.0.458'. [ 91.367591][ T42] audit: type=1400 audit(1793234040.574:553): avc: denied { read } for pid=7313 comm="syz.2.459" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.367820][ T7316] netlink: 'syz.0.458': attribute type 21 has an invalid length. [ 91.367838][ T7316] netlink: 156 bytes leftover after parsing attributes in process `syz.0.458'. [ 91.368539][ T42] audit: type=1400 audit(1793234040.574:554): avc: denied { open } for pid=7313 comm="syz.2.459" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.402464][ T5895] usb usb6-port1: attempt power cycle [ 91.413551][ T7318] sctp: [Deprecated]: syz.0.460 (pid 7318) Use of int in maxseg socket option. [ 91.413551][ T7318] Use struct sctp_assoc_value instead [ 91.417289][ T42] audit: type=1400 audit(1793234040.624:555): avc: denied { setopt } for pid=7317 comm="syz.0.460" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.473711][ T7318] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 91.767521][ T7326] netlink: 'syz.3.464': attribute type 12 has an invalid length. [ 91.863562][ T42] audit: type=1400 audit(1793234041.074:556): avc: denied { read } for pid=7327 comm="syz.0.465" name="cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 91.865333][ T7329] CacheFiles: Failed to register: -95 [ 91.980926][ C0] net_ratelimit: 44 callbacks suppressed [ 92.598618][ T42] audit: type=1400 audit(1793234041.804:557): avc: denied { ioctl } for pid=7334 comm="syz.3.467" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 92.716255][ T5895] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 92.743340][ T42] audit: type=1400 audit(1793234041.954:558): avc: denied { ioctl } for pid=7336 comm="syz.3.468" path="socket:[16184]" dev="sockfs" ino=16184 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.794954][ T7339] netlink: 24 bytes leftover after parsing attributes in process `syz.3.468'. [ 92.956611][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 93.005961][ T5895] usb 6-1: device not accepting address 14, error -71 [ 93.133253][ T42] audit: type=1400 audit(1793234042.344:559): avc: denied { read } for pid=7351 comm="syz.3.471" name="btrfs-control" dev="devtmpfs" ino=1349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 93.133300][ T42] audit: type=1400 audit(1793234042.344:560): avc: denied { open } for pid=7351 comm="syz.3.471" path="/dev/btrfs-control" dev="devtmpfs" ino=1349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 93.134860][ T7352] netlink: 40 bytes leftover after parsing attributes in process `syz.3.471'. [ 93.432012][ T42] audit: type=1400 audit(1793234042.644:561): avc: denied { create } for pid=7358 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.700533][ T7392] netlink: 40 bytes leftover after parsing attributes in process `syz.1.484'. [ 94.817052][ T7396] netlink: 80 bytes leftover after parsing attributes in process `syz.2.486'. [ 94.819127][ T7396] xt_l2tp: missing protocol rule (udp|l2tpip) [ 94.905256][ T37] IPVS: starting estimator thread 0... [ 94.990925][ T7399] IPVS: using max 42 ests per chain, 100800 per kthread [ 95.253268][ T67] Bluetooth: Frame is too long (len 38, expected len 31) [ 95.254380][ T67] Bluetooth: hci3: link tx timeout [ 95.254389][ T67] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 95.284018][ T7409] could not allocate digest TFM handle cryptd(blake2b-160) [ 95.641378][ T7421] netlink: 36 bytes leftover after parsing attributes in process `syz.0.492'. [ 95.835826][ T7461] tmpfs: Unknown parameter 'm' [ 95.919498][ T67] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 96.077530][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.499'. [ 96.077580][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 96.153118][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.499'. [ 96.153147][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 96.344772][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 96.344798][ T42] audit: type=1400 audit(1793234045.554:589): avc: denied { write } for pid=7487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.402852][ T7495] netlink: 'syz.3.501': attribute type 10 has an invalid length. [ 96.402901][ T7495] ipvlan0: entered allmulticast mode [ 96.402916][ T7495] veth0_vlan: entered allmulticast mode [ 96.404328][ T7495] team0: Device ipvlan0 failed to register rx_handler [ 96.417062][ T42] audit: type=1400 audit(1793234045.624:590): avc: denied { write } for pid=7493 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.506137][ T42] audit: type=1400 audit(1793234045.714:591): avc: denied { write } for pid=7499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.582837][ T42] audit: type=1400 audit(1793234045.794:592): avc: denied { write } for pid=7506 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.692697][ T42] audit: type=1400 audit(1793234045.904:593): avc: denied { write } for pid=7513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.757856][ T42] audit: type=1400 audit(1793234045.964:594): avc: denied { write } for pid=7517 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.799762][ T42] audit: type=1400 audit(1793234046.004:595): avc: denied { read } for pid=7520 comm="syz.0.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.853873][ T42] audit: type=1400 audit(1793234046.064:596): avc: denied { ioctl } for pid=7520 comm="syz.0.508" path="socket:[19484]" dev="sockfs" ino=19484 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.878735][ T42] audit: type=1400 audit(1793234046.084:597): avc: denied { write } for pid=7523 comm="syz.3.509" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.879870][ T42] audit: type=1400 audit(1793234046.084:598): avc: denied { read } for pid=7523 comm="syz.3.509" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.895474][ T7528] netlink: 48 bytes leftover after parsing attributes in process `syz.0.510'. [ 96.932762][ T7533] Invalid ELF header type: 3 != 1 [ 96.933963][ T7533] Invalid ELF header type: 2 != 1 [ 97.260963][ T67] Bluetooth: hci3: command tx timeout [ 97.430783][ C1] net_ratelimit: 154 callbacks suppressed [ 97.954219][ T7557] netlink: 'syz.2.519': attribute type 32 has an invalid length. [ 97.954237][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'. [ 98.125620][ T7570] FAULT_INJECTION: forcing a failure. [ 98.125620][ T7570] name failslab, interval 1, probability 0, space 0, times 0 [ 98.125651][ T7570] CPU: 0 UID: 0 PID: 7570 Comm: syz.1.523 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.125668][ T7570] Tainted: [L]=SOFTLOCKUP [ 98.125673][ T7570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.125688][ T7570] Call Trace: [ 98.125713][ T7570] [ 98.125719][ T7570] dump_stack_lvl+0x100/0x190 [ 98.125743][ T7570] should_fail_ex.cold+0x5/0xa [ 98.125762][ T7570] should_failslab+0xc2/0x120 [ 98.125777][ T7570] __kmalloc_noprof+0xfc/0x840 [ 98.125794][ T7570] ? rcu_is_watching+0x13/0xc0 [ 98.125808][ T7570] ? tomoyo_realpath_from_path+0xb6/0x690 [ 98.125824][ T7570] tomoyo_realpath_from_path+0xb6/0x690 [ 98.125837][ T7570] ? putname+0xb6/0x110 [ 98.125853][ T7570] tomoyo_mount_acl+0x334/0x8b0 [ 98.125871][ T7570] ? is_bpf_text_address+0x8a/0x1a0 [ 98.125885][ T7570] ? is_bpf_text_address+0x8a/0x1a0 [ 98.125901][ T7570] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 98.125919][ T7570] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 98.125937][ T7570] ? kernel_text_address+0x8d/0x100 [ 98.125953][ T7570] ? unwind_get_return_address+0x59/0xa0 [ 98.125966][ T7570] ? arch_stack_walk+0xa6/0xf0 [ 98.125986][ T7570] ? __lock_acquire+0x5c0/0x1f40 [ 98.126009][ T7570] ? tomoyo_mount_permission+0x1f6/0x460 [ 98.126030][ T7570] ? tomoyo_domain+0xb2/0x150 [ 98.126043][ T7570] ? tomoyo_profile+0x47/0x60 [ 98.126058][ T7570] tomoyo_mount_permission+0x214/0x460 [ 98.126076][ T7570] ? tomoyo_mount_permission+0x1f6/0x460 [ 98.126096][ T7570] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 98.126123][ T7570] security_sb_mount+0xdd/0x270 [ 98.126141][ T7570] path_mount+0x158/0x2850 [ 98.126161][ T7570] ? __pfx_path_mount+0x10/0x10 [ 98.126177][ T7570] ? lockdep_hardirqs_on+0x7d/0x110 [ 98.126198][ T7570] ? putname+0xb1/0x110 [ 98.126211][ T7570] ? kmem_cache_free+0x127/0x6c0 [ 98.126232][ T7570] ? __x64_sys_mount+0x293/0x310 [ 98.126248][ T7570] __x64_sys_mount+0x293/0x310 [ 98.126265][ T7570] ? __pfx___x64_sys_mount+0x10/0x10 [ 98.126287][ T7570] do_syscall_64+0x123/0x790 [ 98.126300][ T7570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.126314][ T7570] RIP: 0033:0x7f0cf699f559 [ 98.126324][ T7570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.126340][ T7570] RSP: 002b:00007f0cf78c4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 98.126353][ T7570] RAX: ffffffffffffffda RBX: 00007f0cf6c25fa0 RCX: 00007f0cf699f559 [ 98.126361][ T7570] RDX: 0000200000000600 RSI: 00002000000005c0 RDI: 0000200000000580 [ 98.126369][ T7570] RBP: 00007f0cf78c4090 R08: 0000000000000000 R09: 0000000000000000 [ 98.126376][ T7570] R10: 0000000023000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.126383][ T7570] R13: 00007f0cf6c26038 R14: 00007f0cf6c25fa0 R15: 00007ffc46483458 [ 98.126400][ T7570] [ 98.127403][ T7570] ERROR: Out of memory at tomoyo_realpath_from_path. [ 98.305191][ T7582] ip_tables: iptables: counters copy to user failed while replacing table [ 98.920871][ T34] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 99.100856][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 99.106637][ T34] usb 5-1: unable to get BOS descriptor or descriptor too short [ 99.106671][ T34] usb 5-1: New USB device found: idVendor=2100, idProduct=9e58, bcdDevice=66.20 [ 99.107552][ T34] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 99.107578][ T34] usb 5-1: can't read configurations, error -71 [ 99.323681][ T7614] program syz.3.536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.323733][ T7614] ata1.00: invalid transfer count 0 [ 99.340854][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 99.580964][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 99.658708][ T7627] netlink: 'syz.1.541': attribute type 1 has an invalid length. [ 99.658729][ T7627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.541'. [ 99.712225][ T7633] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 99.730979][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 99.743342][ T7634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.743673][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 99.743712][ T24] usb 7-1: New USB device found: idVendor=2100, idProduct=9e58, bcdDevice=66.20 [ 99.747421][ T7634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.749492][ T24] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 99.749521][ T24] usb 7-1: can't read configurations, error -71 [ 99.781651][ T41] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 99.931646][ T41] usb 8-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 99.932694][ T41] usb 8-1: config index 0 descriptor too short (expected 65374, got 45) [ 99.934684][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.934710][ T41] usb 8-1: Product: syz [ 99.934725][ T41] usb 8-1: Manufacturer: syz [ 99.934740][ T41] usb 8-1: SerialNumber: syz [ 100.180847][ T34] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 100.185745][ T41] rtl8150 8-1:1.0: couldn't reset the device [ 100.185967][ T41] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 100.193816][ T41] usb 8-1: USB disconnect, device number 11 [ 100.281444][ T7645] ima: policy update failed [ 100.340822][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 100.341552][ T34] usb 5-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 100.342482][ T34] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 100.342515][ T34] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 100.342547][ T34] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 100.342573][ T34] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 100.342609][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 100.344511][ T34] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 100.344530][ T34] usb 5-1: Product: syz [ 100.344545][ T34] usb 5-1: Manufacturer: syz [ 100.344558][ T34] usb 5-1: SerialNumber: syz [ 100.347389][ T34] usb 5-1: config 0 descriptor?? [ 100.353071][ T34] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 100.362527][ T34] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 100.408072][ T7650] netlink: 'syz.2.549': attribute type 5 has an invalid length. [ 100.553119][ T7661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.553'. [ 100.559836][ T41] usb 5-1: USB disconnect, device number 18 [ 100.559997][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 100.576666][ T41] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 100.685950][ T7668] 8021q: VLANs not supported on ip6_vti0 [ 100.741748][ T7672] ubi: mtd0 is already attached to ubi0 [ 100.741955][ T7672] FAULT_INJECTION: forcing a failure. [ 100.741955][ T7672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.741996][ T7672] CPU: 3 UID: 0 PID: 7672 Comm: syz.2.555 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.742024][ T7672] Tainted: [L]=SOFTLOCKUP [ 100.742032][ T7672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.742055][ T7672] Call Trace: [ 100.742073][ T7672] [ 100.742082][ T7672] dump_stack_lvl+0x100/0x190 [ 100.742127][ T7672] should_fail_ex.cold+0x5/0xa [ 100.742160][ T7672] _copy_from_user+0x2e/0xd0 [ 100.742195][ T7672] kstrtouint_from_user+0xd6/0x1d0 [ 100.742223][ T7672] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 100.742255][ T7672] ? iovec_from_user+0xda/0x140 [ 100.742285][ T7672] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 100.742310][ T7672] proc_fail_nth_write+0x83/0x220 [ 100.742333][ T7672] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 100.742366][ T7672] vfs_writev+0x5ed/0xdd0 [ 100.742404][ T7672] ? __pfx_vfs_writev+0x10/0x10 [ 100.742439][ T7672] ? lock_acquire+0x1d1/0x380 [ 100.742464][ T7672] ? __fget_files+0x34/0x3d0 [ 100.742497][ T7672] ? __fget_files+0x21f/0x3d0 [ 100.742528][ T7672] ? do_writev+0x13e/0x340 [ 100.742554][ T7672] do_writev+0x13e/0x340 [ 100.742581][ T7672] ? __pfx_do_writev+0x10/0x10 [ 100.742631][ T7672] do_syscall_64+0x123/0x790 [ 100.742661][ T7672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.742682][ T7672] RIP: 0033:0x7f16da79f559 [ 100.742699][ T7672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.742716][ T7672] RSP: 002b:00007f16db5c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 100.742736][ T7672] RAX: ffffffffffffffda RBX: 00007f16daa26180 RCX: 00007f16da79f559 [ 100.742750][ T7672] RDX: 0000000000000006 RSI: 00002000000006c0 RDI: 0000000000000009 [ 100.742762][ T7672] RBP: 00007f16da836b20 R08: 0000000000000000 R09: 0000000000000000 [ 100.742774][ T7672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.742786][ T7672] R13: 00007f16daa26218 R14: 00007f16daa26180 R15: 00007ffd6ad873b8 [ 100.742815][ T7672] [ 101.022478][ T7681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7681 comm=syz.3.559 [ 101.368781][ T7687] tmpfs: Unknown parameter 'mpolO©' [ 101.448206][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 101.448234][ T42] audit: type=1400 audit(1793234050.654:631): avc: denied { create } for pid=7693 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.448642][ T42] audit: type=1400 audit(1793234050.654:632): avc: denied { setopt } for pid=7693 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.450294][ T7694] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5126 sclass=netlink_tcpdiag_socket pid=7694 comm=syz.0.564 [ 101.478056][ T42] audit: type=1400 audit(1793234050.684:633): avc: denied { append } for pid=7695 comm="syz.1.565" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 101.556440][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 102.016072][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'. [ 102.016103][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'. [ 102.102927][ T7715] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 102.217826][ T7715] md0: Warning: Device ram0 is misaligned [ 102.276665][ T7718] usbcore.quirks: string doesn't fit in 127 chars. [ 102.592978][ T7732] netlink: 20 bytes leftover after parsing attributes in process `syz.2.576'. [ 102.597442][ T42] audit: type=1400 audit(1793234051.804:634): avc: denied { setopt } for pid=7730 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.620850][ C1] net_ratelimit: 55 callbacks suppressed [ 102.629440][ T7734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.917181][ T5120] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 102.919173][ T37] Bluetooth: hci4: Frame reassembly failed (-84) [ 102.931642][ T7744] pim6reg: entered allmulticast mode [ 104.639390][ T7707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.735936][ T7749] kvm [7748]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 104.750048][ T7757] netlink: 'syz.3.582': attribute type 21 has an invalid length. [ 104.750066][ T7757] netlink: 128 bytes leftover after parsing attributes in process `syz.3.582'. [ 104.750156][ T7757] netlink: 'syz.3.582': attribute type 4 has an invalid length. [ 104.750170][ T7757] netlink: 'syz.3.582': attribute type 5 has an invalid length. [ 104.750184][ T7757] netlink: 3 bytes leftover after parsing attributes in process `syz.3.582'. [ 104.757309][ T7749] kvm [7748]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 104.757613][ T7749] kvm [7748]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 104.829321][ T42] audit: type=1400 audit(1793234054.034:635): avc: denied { getopt } for pid=7761 comm="syz.3.584" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.908822][ T7766] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 104.908866][ T7766] overlayfs: failed to set xattr on upper [ 104.908872][ T7766] overlayfs: ...falling back to redirect_dir=nofollow. [ 104.908878][ T7766] overlayfs: ...falling back to index=off. [ 104.908884][ T7766] overlayfs: ...falling back to uuid=null. [ 104.917085][ T7766] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 104.944145][ T67] Bluetooth: hci4: command 0x1003 tx timeout [ 104.944939][ T5791] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 105.011353][ T7774] comedi comedi0: pcmmio: I/O port conflict (0x500,32) [ 105.071805][ T42] audit: type=1400 audit(1793234054.284:636): avc: denied { create } for pid=7780 comm="syz.0.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 105.073491][ T7782] scsi_nl_rcv_msg: discarding partial skb [ 105.075279][ T42] audit: type=1400 audit(1793234054.284:637): avc: denied { write } for pid=7780 comm="syz.0.591" path="socket:[20212]" dev="sockfs" ino=20212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 105.132153][ T42] audit: type=1400 audit(1793234054.334:638): avc: denied { setattr } for pid=7786 comm="syz.0.593" name="loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.483347][ T42] audit: type=1400 audit(1793234054.694:639): avc: denied { listen } for pid=7811 comm="syz.0.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.483760][ T42] audit: type=1400 audit(1793234054.694:640): avc: denied { accept } for pid=7811 comm="syz.0.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.810910][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 105.860957][ T6261] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 105.940932][ T24] usb 5-1: device descriptor read/64, error -71 [ 106.021525][ T6261] usb 8-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 106.022333][ T6261] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 106.022351][ T6261] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 106.022382][ T6261] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.025131][ T7822] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 106.035975][ T6261] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 106.190995][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 106.237228][ T79] usb 8-1: USB disconnect, device number 12 [ 106.321277][ T24] usb 5-1: device descriptor read/64, error -71 [ 106.431400][ T24] usb usb5-port1: attempt power cycle [ 106.451233][ T7818] netlink: 'syz.3.603': attribute type 21 has an invalid length. [ 106.451249][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.603'. [ 106.451405][ T7818] netlink: 'syz.3.603': attribute type 21 has an invalid length. [ 106.451420][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.603'. [ 106.620665][ T7842] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 106.770896][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 106.793938][ T24] usb 5-1: device descriptor read/8, error -71 [ 106.994525][ T34] libceph: connect (1)[c::]:6789 error -101 [ 106.994848][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 107.001152][ T34] libceph: connect (1)[c::]:6789 error -101 [ 107.001330][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 107.030878][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 107.051650][ T24] usb 5-1: device descriptor read/8, error -71 [ 107.064333][ T7858] netlink: 96 bytes leftover after parsing attributes in process `syz.3.614'. [ 107.161129][ T24] usb usb5-port1: unable to enumerate USB device [ 107.263605][ T34] libceph: connect (1)[c::]:6789 error -101 [ 107.263797][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 107.282584][ T7867] netlink: 92 bytes leftover after parsing attributes in process `syz.3.618'. [ 107.330866][ T79] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 107.348330][ T7869] bond4: entered allmulticast mode [ 107.348716][ T7869] 8021q: adding VLAN 0 to HW filter on device bond4 [ 107.480833][ T79] usb 7-1: Using ep0 maxpacket: 8 [ 107.481470][ T79] usb 7-1: New USB device found: idVendor=0525, idProduct=d292, bcdDevice=0.07 [ 107.482908][ T79] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 107.482928][ T79] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 107.482948][ T79] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 107.482968][ T79] usb 7-1: config 250 has no interface number 0 [ 107.483006][ T79] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 107.483027][ T79] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 107.483072][ T79] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 107.483090][ T79] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 107.483117][ T79] usb 7-1: config 250 interface 228 has no altsetting 0 [ 107.484515][ T79] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 107.484534][ T79] usb 7-1: Product: syz [ 107.484547][ T79] usb 7-1: SerialNumber: syz [ 107.488998][ T79] hub 7-1:250.228: bad descriptor, ignoring hub [ 107.489017][ T79] hub 7-1:250.228: probe with driver hub failed with error -5 [ 107.781169][ T50] net_ratelimit: 13 callbacks suppressed [ 107.781269][ T50] libceph: connect (1)[c::]:6789 error -101 [ 107.781457][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 107.801092][ T34] usb 7-1: USB disconnect, device number 10 [ 107.808344][ T7849] ceph: No mds server is up or the cluster is laggy [ 107.901586][ T7876] netlink: 64 bytes leftover after parsing attributes in process `syz.1.621'. [ 107.916092][ T7876] syzkaller1: entered promiscuous mode [ 107.916113][ T7876] syzkaller1: entered allmulticast mode [ 108.072767][ T7880] syz.1.622 (7880): /proc/7879/oom_adj is deprecated, please use /proc/7879/oom_score_adj instead. [ 108.073717][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 108.073733][ T42] audit: type=1400 audit(1793234057.284:643): avc: denied { read } for pid=7879 comm="syz.1.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.150932][ T6261] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 108.263670][ T7894] netlink: 16 bytes leftover after parsing attributes in process `syz.3.626'. [ 108.268365][ T7895] affs: No valid root block on device nullb0 [ 108.285226][ T7895] afs: Unknown parameter '00000000000000000009' [ 108.315900][ T7898] FAULT_INJECTION: forcing a failure. [ 108.315900][ T7898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.315935][ T7898] CPU: 3 UID: 0 PID: 7898 Comm: syz.1.628 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.315952][ T7898] Tainted: [L]=SOFTLOCKUP [ 108.315956][ T7898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.315973][ T7898] Call Trace: [ 108.315986][ T7898] [ 108.315991][ T7898] dump_stack_lvl+0x100/0x190 [ 108.316015][ T7898] should_fail_ex.cold+0x5/0xa [ 108.316034][ T7898] _copy_from_user+0x2e/0xd0 [ 108.316072][ T7898] copy_msghdr_from_user+0x9f/0x4c0 [ 108.316091][ T7898] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 108.316111][ T7898] ? lock_acquire+0x1d1/0x380 [ 108.316128][ T7898] ? get_pid_task+0x2a/0x250 [ 108.316140][ T7898] ___sys_sendmsg+0x106/0x1e0 [ 108.316158][ T7898] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.316208][ T7898] ? get_pid_task+0x106/0x250 [ 108.316242][ T7898] ? find_held_lock+0x2b/0x80 [ 108.316265][ T7898] __sys_sendmsg+0x160/0x210 [ 108.316278][ T7898] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.316299][ T7898] do_syscall_64+0x123/0x790 [ 108.316313][ T7898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.316326][ T7898] RIP: 0033:0x7f0cf699f559 [ 108.316336][ T7898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.316348][ T7898] RSP: 002b:00007f0cf78c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.316360][ T7898] RAX: ffffffffffffffda RBX: 00007f0cf6c25fa0 RCX: 00007f0cf699f559 [ 108.316368][ T7898] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 108.316375][ T7898] RBP: 00007f0cf78c4090 R08: 0000000000000000 R09: 0000000000000000 [ 108.316382][ T7898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.316389][ T7898] R13: 00007f0cf6c26038 R14: 00007f0cf6c25fa0 R15: 00007ffc46483458 [ 108.316405][ T7898] [ 108.319636][ T7899] netlink: 196 bytes leftover after parsing attributes in process `syz.3.627'. [ 108.320496][ T7899] netlink: 196 bytes leftover after parsing attributes in process `syz.3.627'. [ 108.320530][ T7899] netlink: 19 bytes leftover after parsing attributes in process `syz.3.627'. [ 108.322344][ T42] audit: type=1400 audit(1793234057.534:644): avc: denied { write } for pid=7897 comm="syz.3.627" name="target" dev="configfs" ino=2128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.323097][ T6261] usb 7-1: Using ep0 maxpacket: 8 [ 108.325572][ T6261] usb 7-1: New USB device found: idVendor=0525, idProduct=d292, bcdDevice=0.07 [ 108.326412][ T6261] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 108.326426][ T6261] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 108.326437][ T6261] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 108.326449][ T6261] usb 7-1: config 250 has no interface number 0 [ 108.326469][ T6261] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 108.326484][ T6261] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 108.326497][ T6261] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.326509][ T6261] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 108.326524][ T6261] usb 7-1: config 250 interface 228 has no altsetting 0 [ 108.327730][ T6261] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 108.327741][ T6261] usb 7-1: Product: syz [ 108.327749][ T6261] usb 7-1: SerialNumber: syz [ 108.331923][ T6261] hub 7-1:250.228: bad descriptor, ignoring hub [ 108.331939][ T6261] hub 7-1:250.228: probe with driver hub failed with error -5 [ 108.366868][ T42] audit: type=1400 audit(1793234057.574:645): avc: granted { setsecparam } for pid=7900 comm="syz.1.629" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 108.611193][ T79] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 108.651085][ T931] usb 7-1: USB disconnect, device number 11 [ 108.738763][ T42] audit: type=1400 audit(1793234057.944:646): avc: denied { write } for pid=7859 comm="syz.2.616" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 108.742652][ T7860] ip_tables: iptables: counters copy to user failed while replacing table [ 108.761784][ T79] usb 6-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 108.764807][ T79] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.764833][ T79] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 108.764854][ T79] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 108.764876][ T79] usb 6-1: config 0 interface 0 has no altsetting 0 [ 108.766804][ T79] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 108.766821][ T79] usb 6-1: Product: syz [ 108.766834][ T79] usb 6-1: Manufacturer: syz [ 108.766845][ T79] usb 6-1: SerialNumber: syz [ 108.771539][ T79] usb 6-1: config 0 descriptor?? [ 108.783584][ T79] usb 6-1: selecting invalid altsetting 0 [ 108.803269][ T42] audit: type=1400 audit(1793234058.004:647): avc: denied { checkpoint_restore } for pid=7919 comm="syz.3.638" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.808307][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.638'. [ 108.848342][ T42] audit: type=1400 audit(1793234058.054:648): avc: denied { mounton } for pid=7921 comm="syz.0.639" path="/168/sys" dev="tmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 108.885882][ T42] audit: type=1400 audit(1793234058.094:649): avc: denied { sys_module } for pid=7921 comm="syz.0.639" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 108.886362][ T42] audit: type=1400 audit(1793234058.094:650): avc: denied { module_request } for pid=7921 comm="syz.0.639" kmod="" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 108.922854][ T42] audit: type=1400 audit(1793234058.134:651): avc: denied { write } for pid=7921 comm="syz.0.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.925187][ T42] audit: type=1400 audit(1793234058.134:652): avc: denied { ioctl } for pid=7921 comm="syz.0.639" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=948 ioctlcmd=0x40106f52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 108.975992][ T79] usb 6-1: USB disconnect, device number 16 [ 109.312442][ T7951] fuse-io-uring is disabled by module parameter [ 109.765678][ T7961] rxe_eth0 speed is unknown, defaulting to 1000 [ 109.798052][ T7964] syz.1.653 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 110.240616][ T7988] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 110.240654][ T7988] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 110.415465][ T8004] overlayfs: missing 'lowerdir' [ 110.990847][ T5209] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 111.141645][ T5209] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 111.142612][ T5209] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.142640][ T5209] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 111.142663][ T5209] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 111.142683][ T5209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.144615][ T5209] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 111.144633][ T5209] usb 5-1: Product: syz [ 111.144646][ T5209] usb 5-1: Manufacturer: syz [ 111.144660][ T5209] usb 5-1: SerialNumber: syz [ 111.148570][ T5209] usb 5-1: config 0 descriptor?? [ 111.154480][ T5209] usb 5-1: selecting invalid altsetting 0 [ 111.284175][ T8038] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 111.353678][ T5209] usb 5-1: USB disconnect, device number 23 [ 111.481785][ T8026] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 111.569185][ T8020] __nla_validate_parse: 2 callbacks suppressed [ 111.569197][ T8020] netlink: 48 bytes leftover after parsing attributes in process `syz.0.672'. [ 111.698981][ T8049] Bluetooth: hci0: expected 65520 bytes, got 19 bytes [ 111.990884][ T50] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 112.163150][ T50] usb 8-1: New USB device found: idVendor=0b48, idProduct=1008, bcdDevice=1.00 [ 112.164058][ T50] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.164101][ T50] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 112.164158][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.339526][ T8043] ima: policy update failed [ 112.374407][ T5791] Bluetooth: hci3: Malformed Event: 0x13 [ 112.375003][ T50] dvbdev: DVB: registering new adapter (DEC2000-t) [ 112.387135][ T50] usb 8-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 112.508372][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.695'. [ 112.509545][ T8078] FAULT_INJECTION: forcing a failure. [ 112.509545][ T8078] name failslab, interval 1, probability 0, space 0, times 0 [ 112.509572][ T8078] CPU: 0 UID: 0 PID: 8078 Comm: syz.0.695 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.509600][ T8078] Tainted: [L]=SOFTLOCKUP [ 112.509609][ T8078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.509621][ T8078] Call Trace: [ 112.509628][ T8078] [ 112.509636][ T8078] dump_stack_lvl+0x100/0x190 [ 112.509680][ T8078] should_fail_ex.cold+0x5/0xa [ 112.509711][ T8078] should_failslab+0xc2/0x120 [ 112.509746][ T8078] __kmalloc_cache_noprof+0x91/0x6d0 [ 112.509774][ T8078] ? apply_wqattrs_prepare+0x130/0x980 [ 112.509804][ T8078] apply_wqattrs_prepare+0x130/0x980 [ 112.509834][ T8078] __alloc_workqueue+0xdae/0x1900 [ 112.509872][ T8078] alloc_workqueue_noprof+0xc7/0x130 [ 112.509902][ T8078] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 112.509932][ T8078] ? lockdep_init_map_type+0x5c/0x250 [ 112.509960][ T8078] ? lockdep_init_map_type+0x5c/0x250 [ 112.509987][ T8078] ? __raw_spin_lock_init+0x3a/0x110 [ 112.510021][ T8078] wg_newlink+0x29e/0x7a0 [ 112.510050][ T8078] ? rtnl_create_link+0xa4b/0xf80 [ 112.510077][ T8078] ? __pfx_wg_newlink+0x10/0x10 [ 112.510106][ T8078] rtnl_newlink+0x1697/0x2620 [ 112.510142][ T8078] ? __pfx_rtnl_newlink+0x10/0x10 [ 112.510164][ T8078] ? avc_has_perm_noaudit+0x56/0x470 [ 112.510188][ T8078] ? find_held_lock+0x2b/0x80 [ 112.510207][ T8078] ? avc_has_perm_noaudit+0x11e/0x470 [ 112.510231][ T8078] ? avc_has_perm_noaudit+0x11e/0x470 [ 112.510281][ T8078] ? lock_acquire+0x1d1/0x380 [ 112.510306][ T8078] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 112.510330][ T8078] ? find_held_lock+0x2b/0x80 [ 112.510349][ T8078] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 112.510373][ T8078] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 112.510399][ T8078] ? __pfx_rtnl_newlink+0x10/0x10 [ 112.510424][ T8078] rtnetlink_rcv_msg+0x95e/0xe90 [ 112.510451][ T8078] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 112.510502][ T8078] ? __lock_acquire+0x5c0/0x1f40 [ 112.510535][ T8078] netlink_rcv_skb+0x159/0x420 [ 112.510559][ T8078] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 112.510586][ T8078] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 112.510618][ T8078] ? netlink_deliver_tap+0x1ae/0xb50 [ 112.510645][ T8078] netlink_unicast+0x668/0x950 [ 112.510677][ T8078] ? __pfx_netlink_unicast+0x10/0x10 [ 112.510709][ T8078] netlink_sendmsg+0x9ac/0x10c0 [ 112.510738][ T8078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.510767][ T8078] ? selinux_socket_sendmsg+0x198/0x2f0 [ 112.510797][ T8078] ? ____sys_sendmsg+0xa99/0xc30 [ 112.510821][ T8078] ____sys_sendmsg+0xa99/0xc30 [ 112.510845][ T8078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.510890][ T8078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.510927][ T8078] ___sys_sendmsg+0x190/0x1e0 [ 112.510957][ T8078] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.510984][ T8078] ? futex_wait+0x11e/0x370 [ 112.511041][ T8078] ? find_held_lock+0x2b/0x80 [ 112.511082][ T8078] __sys_sendmsg+0x160/0x210 [ 112.511105][ T8078] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.511142][ T8078] do_syscall_64+0x123/0x790 [ 112.511165][ T8078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.511186][ T8078] RIP: 0033:0x7fb7f3d9f559 [ 112.511203][ T8078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.511223][ T8078] RSP: 002b:00007fb7f4ba2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.511242][ T8078] RAX: ffffffffffffffda RBX: 00007fb7f4025fa0 RCX: 00007fb7f3d9f559 [ 112.511255][ T8078] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 112.511267][ T8078] RBP: 00007fb7f3e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 112.511278][ T8078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.511290][ T8078] R13: 00007fb7f4026038 R14: 00007fb7f4025fa0 R15: 00007ffc4b84c218 [ 112.511317][ T8078] [ 112.637391][ T50] ttusb_dec_send_command: command bulk message failed: error -71 [ 112.642271][ T50] usb 8-1: USB disconnect, device number 13 [ 112.972554][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.700'. [ 113.046812][ T8059] nvme nvme0: failed to connect socket: -512 [ 113.110824][ C1] net_ratelimit: 41 callbacks suppressed [ 113.129809][ T42] kauditd_printk_skb: 209 callbacks suppressed [ 113.129825][ T42] audit: type=1400 audit(1793234062.334:862): avc: denied { read write } for pid=8101 comm="syz.3.703" name="frontend0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 113.130105][ T42] audit: type=1400 audit(1793234062.334:863): avc: denied { open } for pid=8101 comm="syz.3.703" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 113.132393][ T42] audit: type=1400 audit(1793234062.344:864): avc: denied { mount } for pid=8101 comm="syz.3.703" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 113.135475][ T42] audit: type=1400 audit(1793234062.344:865): avc: denied { create } for pid=8101 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.136929][ T42] audit: type=1400 audit(1793234062.344:866): avc: denied { write } for pid=8101 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.137969][ T42] audit: type=1400 audit(1793234062.344:867): avc: denied { ioctl } for pid=8101 comm="syz.3.703" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=948 ioctlcmd=0x80046f45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 113.162388][ T42] audit: type=1400 audit(1793234062.374:868): avc: denied { unmount } for pid=5794 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 113.201295][ T42] audit: type=1400 audit(1793234062.414:869): avc: denied { map_create } for pid=8104 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 113.203446][ T42] audit: type=1400 audit(1793234062.414:870): avc: denied { map_read map_write } for pid=8104 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 113.204461][ T42] audit: type=1400 audit(1793234062.414:871): avc: denied { prog_load } for pid=8104 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 113.434985][ T8117] tmpfs: Cannot enable quota on remount [ 113.618529][ T8131] Could not find key with description: [syz] [ 113.618544][ T8131] process_request_key_err: No key [ 113.618554][ T8131] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 113.618563][ T8131] One or more global auth toks could not properly register; rc = [-2] [ 113.618603][ T8131] Error validating options; rc = [-2] [ 113.781552][ T8145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.718'. [ 113.833996][ T8148] netlink: 32 bytes leftover after parsing attributes in process `syz.1.720'. [ 113.983626][ T8159] Unknown cursor 12 [ 113.983654][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'. [ 114.240845][ T41] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 114.333564][ T8163] FAULT_INJECTION: forcing a failure. [ 114.333564][ T8163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.333601][ T8163] CPU: 0 UID: 0 PID: 8163 Comm: syz.3.725 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.333648][ T8163] Tainted: [L]=SOFTLOCKUP [ 114.333656][ T8163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.333669][ T8163] Call Trace: [ 114.333676][ T8163] [ 114.333684][ T8163] dump_stack_lvl+0x100/0x190 [ 114.333721][ T8163] should_fail_ex.cold+0x5/0xa [ 114.333754][ T8163] _copy_to_user+0x32/0xd0 [ 114.333783][ T8163] simple_read_from_buffer+0xcb/0x170 [ 114.333812][ T8163] proc_fail_nth_read+0x1af/0x230 [ 114.333841][ T8163] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.333870][ T8163] ? rw_verify_area+0xce/0x6d0 [ 114.333900][ T8163] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.333928][ T8163] vfs_read+0x1e4/0xb40 [ 114.333959][ T8163] ? lock_acquire+0x1d1/0x380 [ 114.333989][ T8163] ? __fget_files+0x34/0x3d0 [ 114.334014][ T8163] ? __pfx_vfs_read+0x10/0x10 [ 114.334044][ T8163] ? find_held_lock+0x2b/0x80 [ 114.334068][ T8163] ? __fget_files+0x215/0x3d0 [ 114.334097][ T8163] ? __fget_files+0x21f/0x3d0 [ 114.334131][ T8163] ksys_read+0x12a/0x250 [ 114.334151][ T8163] ? __pfx_ksys_read+0x10/0x10 [ 114.334180][ T8163] do_syscall_64+0x123/0x790 [ 114.334202][ T8163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.334221][ T8163] RIP: 0033:0x7f603535fd8e [ 114.334237][ T8163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 114.334254][ T8163] RSP: 002b:00007f603619cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.334272][ T8163] RAX: ffffffffffffffda RBX: 00007f603619d6c0 RCX: 00007f603535fd8e [ 114.334285][ T8163] RDX: 000000000000000f RSI: 00007f603619d0a0 RDI: 0000000000000003 [ 114.334297][ T8163] RBP: 00007f603619d090 R08: 0000000000000000 R09: 0000000000000000 [ 114.334308][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.334319][ T8163] R13: 00007f6035626038 R14: 00007f6035625fa0 R15: 00007ffdac456648 [ 114.334345][ T8163] [ 114.443189][ T8170] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65316 sclass=netlink_xfrm_socket pid=8170 comm=syz.0.728 [ 114.450825][ T41] usb 7-1: Using ep0 maxpacket: 32 [ 114.452888][ T41] usb 7-1: unable to get BOS descriptor or descriptor too short [ 114.452912][ T41] usb 7-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 114.456194][ T41] usb 7-1: string descriptor 0 read error: -22 [ 114.456263][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.462681][ T41] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 114.462701][ T41] dw2102: su3000_power_ctrl: 1, initialized 0 [ 114.469154][ T41] dvb-usb: bulk message failed: -22 (2/0) [ 114.472690][ T41] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.474009][ T41] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 114.474071][ T41] usb 7-1: media controller created [ 114.474289][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 114.474299][ T41] dw2102: i2c transfer failed. [ 114.474308][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 114.474315][ T41] dw2102: i2c transfer failed. [ 114.474321][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 114.474328][ T41] dw2102: i2c transfer failed. [ 114.474334][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 114.474341][ T41] dw2102: i2c transfer failed. [ 114.474347][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 114.474354][ T41] dw2102: i2c transfer failed. [ 114.474360][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 114.474367][ T41] dw2102: i2c transfer failed. [ 114.474371][ T41] dvb-usb: MAC address: 02:02:02:02:02:02 [ 114.496939][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.511784][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 114.511792][ T41] dw2102: command 0x0e transfer failed. [ 114.511796][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 114.511804][ T41] dw2102: command 0x0e transfer failed. [ 114.752310][ T8175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.730'. [ 114.821489][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 114.821504][ T41] dw2102: command 0x0e transfer failed. [ 114.821510][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 114.821520][ T41] dw2102: command 0x0e transfer failed. [ 114.821528][ T41] dvb-usb: bulk message failed: -22 (1/0) [ 114.821540][ T41] dw2102: command 0x51 transfer failed. [ 114.825244][ T8159] dvb-usb: bulk message failed: -22 (3/0) [ 114.825262][ T8159] dw2102: i2c transfer failed. [ 114.865867][ T5800] udevd[5800]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 114.871877][ T5802] udevd[5802]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 114.878731][ T41] DVB: Unable to find symbol ds3000_attach() [ 114.878737][ T41] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 114.931320][ T41] rc_core: IR keymap rc-su3000 not found [ 114.931330][ T41] Registered IR keymap rc-empty [ 114.936928][ T41] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 114.938822][ T41] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input17 [ 114.951075][ T41] dvb-usb: schedule remote query interval to 150 msecs. [ 114.951090][ T41] dw2102: su3000_power_ctrl: 0, initialized 1 [ 114.951102][ T41] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 114.955621][ T41] usb 7-1: USB disconnect, device number 12 [ 115.009517][ T41] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 115.092885][ T8188] xt_CT: No such helper "pptp" [ 115.097267][ T8191] xt_CT: No such helper "pptp" [ 115.385008][ T8206] qnx4: unable to read the superblock [ 115.595478][ T8221] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 115.602149][ T931] hid-generic 0005:10CF:4155.000A: unknown main item tag 0x0 [ 115.616268][ T931] hid-generic 0005:10CF:4155.000A: hidraw1: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 115.779081][ T8187] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 115.796358][ T8230] xt_hashlimit: size too large, truncated to 1048576 [ 116.530140][ T8253] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 116.771902][ T8267] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20004 [ 116.876952][ T8272] netlink: 40 bytes leftover after parsing attributes in process `syz.1.758'. [ 117.140864][ T931] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 117.264051][ T8276] configfs: Unknown parameter 'fd' [ 117.266218][ T8276] loop2: detected capacity change from 0 to 7 [ 117.274801][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 117.277396][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 117.277519][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 117.278882][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 117.278917][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 117.279346][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 117.279377][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 117.279759][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 117.279830][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 117.280130][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 117.280185][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 117.282053][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 117.282120][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 117.282237][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 117.282282][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 117.282944][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 117.282991][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 117.283609][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 117.283661][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 117.283831][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 117.284145][ T8276] ldm_validate_partition_table(): Disk read failed. [ 117.284610][ T8276] Dev loop2: unable to read RDB block 0 [ 117.285110][ T8276] loop2: unable to read partition table [ 117.285219][ T8276] loop2: partition table beyond EOD, truncated [ 117.285238][ T8276] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 117.313657][ T931] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 117.314655][ T931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.314675][ T931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.314694][ T931] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.314744][ T931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.317988][ T931] usb 5-1: config 0 descriptor?? [ 117.376839][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 117.376854][ T8279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.762'. [ 117.741704][ T931] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 117.900963][ T67] Bluetooth: hci1: command 0x2016 tx timeout [ 118.269757][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.770'. [ 118.291453][ T42] kauditd_printk_skb: 289 callbacks suppressed [ 118.291466][ T42] audit: type=1400 audit(1793234067.504:1161): avc: denied { create } for pid=8305 comm="syz.2.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.293710][ T42] audit: type=1400 audit(1793234067.504:1162): avc: denied { write } for pid=8305 comm="syz.2.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.300909][ C1] net_ratelimit: 61 callbacks suppressed [ 118.323310][ T42] audit: type=1400 audit(1793234067.534:1163): avc: denied { execmem } for pid=8298 comm="syz.1.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 118.354884][ T42] audit: type=1400 audit(1793234067.564:1164): avc: denied { create } for pid=8313 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.357080][ T42] audit: type=1400 audit(1793234067.564:1165): avc: denied { write } for pid=8313 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.357242][ T42] audit: type=1400 audit(1793234067.564:1166): avc: denied { nlmsg_write } for pid=8313 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.367434][ T42] audit: type=1400 audit(1793234067.574:1167): avc: denied { create } for pid=8313 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.368289][ T42] audit: type=1400 audit(1793234067.574:1168): avc: denied { connect } for pid=8313 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.374671][ T42] audit: type=1400 audit(1793234067.584:1169): avc: denied { read } for pid=8313 comm="syz.3.773" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 118.375024][ T42] audit: type=1400 audit(1793234067.584:1170): avc: denied { open } for pid=8313 comm="syz.3.773" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 118.443789][ T931] hid-generic 0005:10CF:4155.000C: unknown main item tag 0x0 [ 118.451560][ T931] hid-generic 0005:10CF:4155.000C: hidraw2: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 118.572736][ T8328] netlink: 52 bytes leftover after parsing attributes in process `syz.3.778'. [ 118.572751][ T8328] netlink: 52 bytes leftover after parsing attributes in process `syz.3.778'. [ 118.572760][ T8328] netlink: 52 bytes leftover after parsing attributes in process `syz.3.778'. [ 118.751266][ T8338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.780'. [ 118.751281][ T8338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.780'. [ 119.980870][ T67] Bluetooth: hci1: command 0x2016 tx timeout [ 120.034570][ T931] hid-generic 0005:10CF:4155.000D: unknown main item tag 0x0 [ 120.039251][ T931] hid-generic 0005:10CF:4155.000D: hidraw2: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 120.069734][ T8360] ufs: You didn't specify the type of your ufs filesystem [ 120.069734][ T8360] [ 120.069734][ T8360] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 120.069734][ T8360] [ 120.069734][ T8360] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 120.069766][ T8360] ufs: ufstype=old is supported read-only [ 120.073865][ T8360] ufs: ufs_fill_super(): bad magic number [ 121.793259][ T8342] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.870438][ T8370] netlink: 'syz.3.792': attribute type 1 has an invalid length. [ 121.917412][ T8377] IPv6: sit1: Disabled Multicast RS [ 121.919636][ T8377] sit1: entered allmulticast mode [ 121.921621][ T8379] device-mapper: ioctl: Unable to rename non-existent device, syzc2 to uuid syzc3 [ 122.004522][ T8384] netlink: 104 bytes leftover after parsing attributes in process `syz.1.798'. [ 122.096323][ T8392] xt_SECMARK: invalid mode: 2 [ 122.125763][ T8392] fuse: fd is not a fuse device [ 122.271437][ T8399] loop0: detected capacity change from 0 to 1 [ 122.317779][ T8399] ldm_validate_privheads(): Disk read failed. [ 122.317834][ T8399] loop0: [ 122.317853][ T8399] loop0: partition table partially beyond EOD, truncated [ 122.362292][ T8401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.804'. [ 122.362459][ T8401] FAULT_INJECTION: forcing a failure. [ 122.362459][ T8401] name failslab, interval 1, probability 0, space 0, times 0 [ 122.362486][ T8401] CPU: 0 UID: 0 PID: 8401 Comm: syz.1.804 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.362511][ T8401] Tainted: [L]=SOFTLOCKUP [ 122.362516][ T8401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.362532][ T8401] Call Trace: [ 122.362545][ T8401] [ 122.362551][ T8401] dump_stack_lvl+0x100/0x190 [ 122.362578][ T8401] should_fail_ex.cold+0x5/0xa [ 122.362611][ T8401] should_failslab+0xc2/0x120 [ 122.362632][ T8401] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 122.362664][ T8401] ? __alloc_skb+0x140/0x710 [ 122.362691][ T8401] __alloc_skb+0x140/0x710 [ 122.362711][ T8401] ? __alloc_skb+0x5b7/0x710 [ 122.362725][ T8401] ? __pfx___alloc_skb+0x10/0x10 [ 122.362737][ T8401] ? if_nlmsg_size+0x4b/0xdc0 [ 122.362756][ T8401] rtmsg_ifinfo_build_skb+0x81/0x260 [ 122.362776][ T8401] rtmsg_ifinfo+0xa4/0x1b0 [ 122.362795][ T8401] __dev_notify_flags+0x362/0x4b0 [ 122.362809][ T8401] ? __pfx___dev_notify_flags+0x10/0x10 [ 122.362822][ T8401] ? __dev_change_flags+0x548/0x850 [ 122.362836][ T8401] ? __pfx___dev_change_flags+0x10/0x10 [ 122.362849][ T8401] ? validate_linkmsg+0x5ff/0xcd0 [ 122.362864][ T8401] ? __pfx_validate_linkmsg+0x10/0x10 [ 122.362881][ T8401] netif_change_flags+0x108/0x160 [ 122.362895][ T8401] do_setlink.isra.0+0x1b9f/0x3f50 [ 122.362912][ T8401] ? __pfx__bond_option_arp_ip_target_add+0x10/0x10 [ 122.362932][ T8401] ? __lock_acquire+0x5c0/0x1f40 [ 122.362949][ T8401] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 122.362965][ T8401] ? bond_option_arp_ip_targets_set+0x6a9/0x8d0 [ 122.363016][ T8401] ? bond_opt_parse+0x2fd/0x940 [ 122.363047][ T8401] ? __pfx_bond_option_arp_ip_targets_set+0x10/0x10 [ 122.363076][ T8401] ? _bond_options_arp_ip_target_set+0x163/0x230 [ 122.363099][ T8401] ? __bond_opt_set+0x3b8/0x6b0 [ 122.363128][ T8401] ? bond_changelink+0x3a1/0x2cb0 [ 122.363155][ T8401] ? __pfx_bond_changelink+0x10/0x10 [ 122.363177][ T8401] ? __pfx___mutex_lock+0x10/0x10 [ 122.363190][ T8401] ? rcu_is_watching+0x13/0xc0 [ 122.363203][ T8401] ? cap_capable+0x107/0x430 [ 122.363224][ T8401] ? netlink_ns_capable+0xfa/0x130 [ 122.363239][ T8401] rtnl_newlink+0x13c1/0x2620 [ 122.363260][ T8401] ? __pfx_rtnl_newlink+0x10/0x10 [ 122.363274][ T8401] ? avc_has_perm_noaudit+0x56/0x470 [ 122.363289][ T8401] ? find_held_lock+0x2b/0x80 [ 122.363301][ T8401] ? avc_has_perm_noaudit+0x11e/0x470 [ 122.363315][ T8401] ? avc_has_perm_noaudit+0x11e/0x470 [ 122.363343][ T8401] ? lock_acquire+0x1d1/0x380 [ 122.363358][ T8401] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 122.363374][ T8401] ? find_held_lock+0x2b/0x80 [ 122.363386][ T8401] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 122.363401][ T8401] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 122.363417][ T8401] ? __pfx_rtnl_newlink+0x10/0x10 [ 122.363433][ T8401] rtnetlink_rcv_msg+0x95e/0xe90 [ 122.363450][ T8401] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 122.363468][ T8401] ? __lock_acquire+0x5c0/0x1f40 [ 122.363488][ T8401] netlink_rcv_skb+0x159/0x420 [ 122.363502][ T8401] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 122.363518][ T8401] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 122.363538][ T8401] ? netlink_deliver_tap+0x1ae/0xb50 [ 122.363554][ T8401] netlink_unicast+0x668/0x950 [ 122.363570][ T8401] ? __pfx_netlink_unicast+0x10/0x10 [ 122.363596][ T8401] netlink_sendmsg+0x9ac/0x10c0 [ 122.363613][ T8401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.363630][ T8401] ? selinux_socket_sendmsg+0x198/0x2f0 [ 122.363649][ T8401] ? ____sys_sendmsg+0xa99/0xc30 [ 122.363665][ T8401] ____sys_sendmsg+0xa99/0xc30 [ 122.363680][ T8401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.363710][ T8401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.363741][ T8401] ? lock_acquire+0x1d1/0x380 [ 122.363767][ T8401] ? get_pid_task+0x2a/0x250 [ 122.363789][ T8401] ___sys_sendmsg+0x190/0x1e0 [ 122.363820][ T8401] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.363843][ T8401] ? get_pid_task+0x106/0x250 [ 122.363861][ T8401] ? find_held_lock+0x2b/0x80 [ 122.363883][ T8401] __sys_sendmsg+0x160/0x210 [ 122.363897][ T8401] ? __pfx___sys_sendmsg+0x10/0x10 [ 122.363918][ T8401] do_syscall_64+0x123/0x790 [ 122.363931][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.363945][ T8401] RIP: 0033:0x7f0cf699f559 [ 122.363955][ T8401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.363967][ T8401] RSP: 002b:00007f0cf78c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.363980][ T8401] RAX: ffffffffffffffda RBX: 00007f0cf6c25fa0 RCX: 00007f0cf699f559 [ 122.363988][ T8401] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 122.363995][ T8401] RBP: 00007f0cf78c4090 R08: 0000000000000000 R09: 0000000000000000 [ 122.364002][ T8401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.364009][ T8401] R13: 00007f0cf6c26038 R14: 00007f0cf6c25fa0 R15: 00007ffc46483458 [ 122.364026][ T8401] [ 122.391080][ T5209] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 122.438887][ T5791] Bluetooth: Frame is too long (len 38, expected len 31) [ 122.438949][ T5791] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 122.438962][ T5791] Bluetooth: Wrong link type (-22) [ 122.441366][ T5791] Bluetooth: hci1: link tx timeout [ 122.441376][ T5791] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.570850][ T5209] usb 8-1: Using ep0 maxpacket: 8 [ 122.573107][ T5209] usb 8-1: New USB device found: idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 122.582229][ T5209] usb 8-1: config 0 has no interfaces? [ 122.584549][ T5209] usb 8-1: New USB device strings: Mfr=1, Product=17, SerialNumber=3 [ 122.584559][ T5209] usb 8-1: Product: syz [ 122.584568][ T5209] usb 8-1: Manufacturer: syz [ 122.584578][ T5209] usb 8-1: SerialNumber: syz [ 122.594179][ T5209] usb 8-1: config 0 descriptor?? [ 122.804271][ T5209] usb 8-1: USB disconnect, device number 14 [ 123.103790][ T8418] netlink: 36 bytes leftover after parsing attributes in process `syz.2.810'. [ 123.106202][ T8418] netlink: 'syz.2.810': attribute type 3 has an invalid length. [ 123.106217][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 123.330362][ T42] kauditd_printk_skb: 117 callbacks suppressed [ 123.330381][ T42] audit: type=1400 audit(1793234072.534:1288): avc: denied { prog_load } for pid=8420 comm="syz.1.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 123.372395][ T42] audit: type=1400 audit(1793234072.584:1289): avc: denied { mounton } for pid=8422 comm="syz.1.812" path="/204/file0" dev="tmpfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 123.377371][ T42] audit: type=1400 audit(1793234072.584:1290): avc: denied { mount } for pid=8422 comm="syz.1.812" name="/" dev="overlay" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 123.378158][ T8423] FAULT_INJECTION: forcing a failure. [ 123.378158][ T8423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.378201][ T8423] CPU: 1 UID: 0 PID: 8423 Comm: syz.1.812 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.378228][ T8423] Tainted: [L]=SOFTLOCKUP [ 123.378236][ T8423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.378258][ T8423] Call Trace: [ 123.378279][ T8423] [ 123.378288][ T8423] dump_stack_lvl+0x100/0x190 [ 123.378342][ T8423] should_fail_ex.cold+0x5/0xa [ 123.378373][ T8423] strncpy_from_user+0x3b/0x2d0 [ 123.378423][ T8423] do_getname+0x78/0x390 [ 123.378454][ T8423] __x64_sys_renameat2+0xca/0x140 [ 123.378482][ T8423] do_syscall_64+0x123/0x790 [ 123.378510][ T8423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.378531][ T8423] RIP: 0033:0x7f0cf699f559 [ 123.378548][ T8423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.378567][ T8423] RSP: 002b:00007f0cf78c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 123.378587][ T8423] RAX: ffffffffffffffda RBX: 00007f0cf6c25fa0 RCX: 00007f0cf699f559 [ 123.378600][ T8423] RDX: ffffffffffffff9c RSI: 0000200000000440 RDI: ffffffffffffff9c [ 123.378619][ T8423] RBP: 00007f0cf78c4090 R08: 0000000000000000 R09: 0000000000000000 [ 123.378631][ T8423] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 123.378643][ T8423] R13: 00007f0cf6c26038 R14: 00007f0cf6c25fa0 R15: 00007ffc46483458 [ 123.378670][ T8423] [ 123.384367][ T42] audit: type=1400 audit(1793234072.594:1291): avc: denied { read } for pid=8424 comm="syz.3.813" name="btrfs-control" dev="devtmpfs" ino=1349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 123.384808][ T42] audit: type=1400 audit(1793234072.594:1292): avc: denied { open } for pid=8424 comm="syz.3.813" path="/dev/btrfs-control" dev="devtmpfs" ino=1349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 123.386161][ T42] audit: type=1400 audit(1793234072.594:1293): avc: denied { ioctl } for pid=8424 comm="syz.3.813" path="/dev/btrfs-control" dev="devtmpfs" ino=1349 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 123.388176][ T42] audit: type=1400 audit(1793234072.594:1294): avc: denied { ioctl } for pid=8424 comm="syz.3.813" path="/dev/video9" dev="devtmpfs" ino=979 ioctlcmd=0xc0585611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 123.393431][ T42] audit: type=1400 audit(1793234072.604:1295): avc: denied { unmount } for pid=5787 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 123.468773][ T42] audit: type=1400 audit(1793234072.674:1296): avc: denied { name_bind } for pid=8430 comm="syz.3.816" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 123.469034][ T42] audit: type=1400 audit(1793234072.674:1297): avc: denied { node_bind } for pid=8430 comm="syz.3.816" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 123.510810][ C1] net_ratelimit: 16 callbacks suppressed [ 123.529505][ T8433] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.817' sets config #0 [ 123.529706][ T8433] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.817' sets config #1 [ 123.880852][ T34] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 124.054775][ T34] usb 6-1: not running at top speed; connect to a high speed hub [ 124.054800][ T34] usb 6-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 124.056242][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 124.056267][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 124.059122][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.059137][ T34] usb 6-1: Product: syz [ 124.059151][ T34] usb 6-1: Manufacturer: syz [ 124.059165][ T34] usb 6-1: SerialNumber: syz [ 124.066406][ T8437] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 124.066500][ T8437] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 124.324805][ T34] rtl8150 6-1:1.0: couldn't reset the device [ 124.325073][ T34] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 124.341690][ T34] usb 6-1: USB disconnect, device number 17 [ 124.387641][ T8449] kvm [8448]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 124.461649][ T5791] Bluetooth: hci1: command 0x2016 tx timeout [ 124.614695][ T8462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.828'. [ 124.630763][ T8465] Invalid argument reading file caps for ./file0 [ 125.061825][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.831'. [ 125.114906][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.833'. [ 125.909962][ T8485] overlayfs: missing 'lowerdir' [ 127.181226][ T67] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 127.807049][ T8498] syzkaller0: entered promiscuous mode [ 127.807058][ T8498] syzkaller0: entered allmulticast mode [ 127.814340][ T8498] comedi comedi1: 8255: I/O base address not correctly aligned [ 128.424374][ T42] kauditd_printk_skb: 80 callbacks suppressed [ 128.424395][ T42] audit: type=1400 audit(1793234077.634:1378): avc: denied { unmount } for pid=5787 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 128.488002][ T6261] usb 5-1: USB disconnect, device number 24 [ 128.566625][ T42] audit: type=1400 audit(1793234077.774:1379): avc: denied { create } for pid=8518 comm="syz.3.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.569697][ T42] audit: type=1400 audit(1793234077.774:1380): avc: denied { create } for pid=8518 comm="syz.3.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 128.569984][ T42] audit: type=1400 audit(1793234077.774:1381): avc: denied { setopt } for pid=8518 comm="syz.3.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 128.595808][ T42] audit: type=1400 audit(1793234077.804:1382): avc: denied { read } for pid=8518 comm="syz.3.847" name="video1" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 128.596525][ T42] audit: type=1400 audit(1793234077.804:1383): avc: denied { read } for pid=8520 comm="syz.0.849" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 128.596688][ T42] audit: type=1400 audit(1793234077.804:1384): avc: denied { read write } for pid=8518 comm="syz.3.847" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 128.596978][ T42] audit: type=1400 audit(1793234077.804:1385): avc: denied { open } for pid=8518 comm="syz.3.847" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 128.598537][ T42] audit: type=1400 audit(1793234077.804:1386): avc: denied { setattr } for pid=8518 comm="syz.3.847" name="video1" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 128.598582][ T42] audit: type=1400 audit(1793234077.804:1387): avc: denied { bind } for pid=8518 comm="syz.3.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 128.883315][ C1] net_ratelimit: 12 callbacks suppressed [ 128.961220][ T8536] rnbd_client L127: Can't parse path i”±vºùPýäžúë ù|dÎ-yñþöY_~Xú®á‚G&PÄXtþ~450d5>!¹›JSç"w e,: -22 [ 128.965014][ T67] Bluetooth: hci1: unexpected event for opcode 0x2029 [ 129.025845][ T8532] rxe_eth0 speed is unknown, defaulting to 1000 [ 129.540833][ T6261] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 129.693479][ T6261] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 129.709086][ T6261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.709108][ T6261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.709126][ T6261] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.709180][ T6261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.746054][ T6261] usb 5-1: config 0 descriptor?? [ 130.145013][ T8551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.856'. [ 130.177151][ T6261] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 130.407096][ T8554] FAULT_INJECTION: forcing a failure. [ 130.407096][ T8554] name failslab, interval 1, probability 0, space 0, times 0 [ 130.407128][ T8554] CPU: 2 UID: 0 PID: 8554 Comm: syz.3.858 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.407151][ T8554] Tainted: [L]=SOFTLOCKUP [ 130.407157][ T8554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.407177][ T8554] Call Trace: [ 130.407193][ T8554] [ 130.407200][ T8554] dump_stack_lvl+0x100/0x190 [ 130.407237][ T8554] should_fail_ex.cold+0x5/0xa [ 130.407269][ T8554] should_failslab+0xc2/0x120 [ 130.407290][ T8554] __kmalloc_cache_noprof+0x91/0x6d0 [ 130.407313][ T8554] ? x509_cert_parse+0x50/0x910 [ 130.407342][ T8554] x509_cert_parse+0x50/0x910 [ 130.407369][ T8554] x509_key_preparse+0x65/0x9c0 [ 130.407389][ T8554] asymmetric_key_preparse+0xce/0x1d0 [ 130.407411][ T8554] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 130.407434][ T8554] __key_create_or_update+0x3f6/0xe10 [ 130.407479][ T8554] ? __pfx___key_create_or_update+0x10/0x10 [ 130.407505][ T8554] ? lookup_user_key+0x58c/0x14f0 [ 130.407531][ T8554] ? __pfx_lookup_user_key+0x10/0x10 [ 130.407572][ T8554] key_create_or_update+0x42/0x60 [ 130.407600][ T8554] __do_sys_add_key+0x2e8/0x460 [ 130.407621][ T8554] ? __pfx___do_sys_add_key+0x10/0x10 [ 130.407639][ T8554] ? ksys_write+0x1ac/0x250 ** 147 printk messages dropped ** ** 343 printk messages dropped ** ** 233 printk messages dropped ** ** 148 printk messages dropped ** ** 116 printk messages dropped ** ** 156 printk messages dropped ** ** 188 printk messages dropped ** ** 182 printk messages dropped ** ** 181 printk messages dropped ** ** 190 printk messages dropped ** ** 101 printk messages dropped ** ** 123 printk messages dropped ** ** 138 printk messages dropped ** ** 225 printk messages dropped ** ** 204 printk messages dropped ** ** 222 printk messages dropped ** ** 208 printk messages dropped ** ** 126 printk messages dropped ** ** 5 printk messages dropped ** [ 130.700205][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.859'. [ 130.736238][ T8563] xt_hashlimit: size too large, truncated to 1048576 [ 130.800457][ T8565] FAULT_INJECTION: forcing a failure. [ 130.800457][ T8565] name failslab, interval 1, probability 0, space 0, times 0 [ 130.800494][ T8565] CPU: 1 UID: 0 PID: 8565 Comm: syz.3.860 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.800521][ T8565] Tainted: [L]=SOFTLOCKUP [ 130.800529][ T8565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.800541][ T8565] Call Trace: [ 130.800548][ T8565] [ 130.800557][ T8565] dump_stack_lvl+0x100/0x190 [ 130.800594][ T8565] should_fail_ex.cold+0x5/0xa [ 130.800625][ T8565] should_failslab+0xc2/0x120 [ 130.800647][ T8565] kmem_cache_alloc_noprof+0x92/0x6a0 [ 130.800677][ T8565] ? security_file_alloc+0x34/0x2c0 [ 130.800702][ T8565] security_file_alloc+0x34/0x2c0 [ 130.800740][ T8565] init_file+0x95/0x480 [ 130.800768][ T8565] alloc_empty_file+0x79/0x1c0 [ 130.800796][ T8565] alloc_file_pseudo+0x17e/0x290 [ 130.800827][ T8565] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 130.800855][ T8565] ? alloc_fd+0x471/0x7a0 [ 130.800883][ T8565] sock_alloc_file+0x50/0x210 ** 195 printk messages dropped ** ** 169 printk messages dropped ** ** 182 printk messages dropped ** ** 191 printk messages dropped ** ** 156 printk messages dropped ** ** 126 printk messages dropped ** ** 160 printk messages dropped ** ** 168 printk messages dropped ** ** 175 printk messages dropped ** ** 171 printk messages dropped ** ** 181 printk messages dropped ** ** 159 printk messages dropped ** ** 150 printk messages dropped ** ** 163 printk messages dropped ** ** 183 printk messages dropped ** ** 165 printk messages dropped ** ** 170 printk messages dropped ** ** 140 printk messages dropped ** ** 145 printk messages dropped ** ** 139 printk messages dropped ** ** 170 printk messages dropped ** ** 182 printk messages dropped ** ** 147 printk messages dropped ** ** 175 printk messages dropped ** ** 173 printk messages dropped ** ** 159 printk messages dropped ** ** 96 printk messages dropped ** ** 123 printk messages dropped ** ** 114 printk messages dropped ** ** 152 printk messages dropped ** ** 168 printk messages dropped ** ** 175 printk messages dropped ** ** 166 printk messages dropped ** ** 147 printk messages dropped ** ** 97 printk messages dropped ** ** 99 printk messages dropped ** ** 95 printk messages dropped ** ** 111 printk messages dropped ** ** 115 printk messages dropped ** ** 147 printk messages dropped ** ** 138 printk messages dropped ** ** 129 printk messages dropped ** ** 117 printk messages dropped ** ** 163 printk messages dropped ** ** 164 printk messages dropped ** ** 125 printk messages dropped ** ** 173 printk messages dropped ** ** 176 printk messages dropped ** ** 170 printk messages dropped ** ** 156 printk messages dropped ** ** 145 printk messages dropped ** ** 162 printk messages dropped ** ** 167 printk messages dropped ** ** 179 printk messages dropped ** ** 180 printk messages dropped ** ** 170 printk messages dropped ** ** 171 printk messages dropped ** ** 101 printk messages dropped ** ** 110 printk messages dropped ** ** 171 printk messages dropped ** ** 181 printk messages dropped ** ** 169 printk messages dropped ** ** 172 printk messages dropped ** ** 170 printk messages dropped ** ** 162 printk messages dropped ** ** 162 printk messages dropped ** ** 175 printk messages dropped ** ** 176 printk messages dropped ** ** 174 printk messages dropped ** ** 173 printk messages dropped ** ** 171 printk messages dropped ** ** 98 printk messages dropped ** ** 259 printk messages dropped ** ** 102 printk messages dropped ** ** 107 printk messages dropped ** ** 98 printk messages dropped ** ** 59 printk messages dropped ** [ 130.970702][ T8567] netlink: 68 bytes leftover after parsing attributes in process `syz.0.861'. [ 131.026725][ T5895] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 131.051608][ T8571] FAULT_INJECTION: forcing a failure. [ 131.051608][ T8571] name failslab, interval 1, probability 0, space 0, times 0 [ 131.051633][ T8571] CPU: 3 UID: 0 PID: 8571 Comm: syz.0.863 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.051660][ T8571] Tainted: [L]=SOFTLOCKUP [ 131.051667][ T8571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.051685][ T8571] Call Trace: [ 131.051692][ T8571] [ 131.051701][ T8571] dump_stack_lvl+0x100/0x190 [ 131.051758][ T8571] should_fail_ex.cold+0x5/0xa [ 131.051790][ T8571] should_failslab+0xc2/0x120 [ 131.051813][ T8571] __kmalloc_cache_noprof+0x91/0x6d0 [ 131.051840][ T8571] ? ceph_get_tree+0x188/0x1fd0 [ 131.051867][ T8571] ceph_get_tree+0x188/0x1fd0 [ 131.051889][ T8571] ? bpf_lsm_capable+0x9/0x10 [ 131.051909][ T8571] ? security_capable+0x80/0x260 [ 131.051936][ T8571] vfs_get_tree+0x92/0x320 [ 131.051963][ T8571] vfs_cmd_create+0xd7/0x2a0 [ 131.051984][ T8571] __do_sys_fsconfig+0x55a/0xcb0 [ 131.052005][ T8571] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 131.052037][ T8571] do_syscall_64+0x123/0x790 [ 131.052060][ T8571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.052082][ T8571] RIP: 0033:0x7fb7f3d9f559 [ 131.052098][ T8571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.052120][ T8571] RSP: 002b:00007fb7f4ba2028 EFLAGS: 00000246 ** 127 printk messages dropped ** ** 127 printk messages dropped ** ** 123 printk messages dropped ** ** 57 printk messages dropped ** [ 131.058186][ T8571] cramfs: checking physical address 0x000000002c720000 for linear cramfs image [ 131.058365][ T8571] cramfs: wrong magic [ 131.064570][ T8571] cramfs: wrong magic [ 131.171638][ T5895] usb 6-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01 [ 131.172611][ T5895] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 131.172635][ T5895] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 131.175405][ T5895] usb 6-1: string descriptor 0 read error: -22 [ 131.175530][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.180424][ T5895] etas_es58x 6-1:1.0: Starting (null) (null) (Serial Number (null)) [ 131.180600][ T5895] etas_es58x 6-1:1.0: could not retrieve the product info string [ 131.280507][ T8576] loop6: detected capacity change from 0 to 4096 ** 1115 printk messages dropped ** ** 87 printk messages dropped ** ** 79 printk messages dropped ** ** 102 printk messages dropped ** ** 115 printk messages dropped ** ** 111 printk messages dropped ** ** 109 printk messages dropped ** ** 131 printk messages dropped ** ** 111 printk messages dropped ** ** 109 printk messages dropped ** ** 124 printk messages dropped ** ** 107 printk messages dropped ** ** 108 printk messages dropped ** ** 103 printk messages dropped ** [ 131.460366][ T5499] etas_es58x 6-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 131.460982][ C0] etas_es58x 6-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 131.462284][ C0] etas_es58x 6-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 131.462532][ C0] etas_es58x 6-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 131.462745][ C0] etas_es58x 6-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 131.462972][ C0] etas_es58x 6-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 131.463040][ T5499] etas_es58x 6-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 131.479335][ T8576] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 131.479350][ T8576] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 131.479383][ T8576] loop6: [ 131.520549][ T931] usb 6-1: USB disconnect, device number 18 [ 131.522208][ T931] etas_es58x 6-1:1.0: Disconnecting (null) (null) [ 131.730333][ T5499] etas_es58x 6-1:1.0: es58x_alloc_rx_urbs: Could not setup any rx URBs [ 131.775663][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 131.775953][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 131.776177][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 131.776196][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 131.984131][ T5195] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 131.984145][ T5195] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 131.984177][ T5195] loop6: [ 132.297312][ T34] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 132.533750][ T34] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 132.535072][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.535094][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.535111][ T34] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.535160][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.537662][ T34] usb 5-1: config 0 descriptor?? [ 132.752921][ T8615] kvm_do_msr_access: 332 callbacks suppressed [ 132.944117][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.944166][ T1447] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.140925][ T8626] netlink: 52 bytes leftover after parsing attributes in process `syz.1.873'. [ 133.164111][ T34] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 133.323765][ T5895] usb 5-1: USB disconnect, device number 26 [ 133.807595][ T42] kauditd_printk_skb: 151 callbacks suppressed [ 133.807605][ T42] audit: type=1400 audit(1793234083.014:1539): avc: denied { unmount } for pid=5787 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 133.867991][ T42] audit: type=1400 audit(1793234083.074:1540): avc: denied { name_bind } for pid=8630 comm="syz.0.876" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 133.868037][ T42] audit: type=1400 audit(1793234083.074:1541): avc: denied { node_bind } for pid=8630 comm="syz.0.876" saddr=127.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 133.894462][ T42] audit: type=1400 audit(1793234083.104:1542): avc: denied { unmount } for pid=5787 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 133.917992][ T42] audit: type=1400 audit(1793234083.124:1543): avc: denied { create } for pid=8632 comm="syz.0.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 133.918502][ T42] audit: type=1400 audit(1793234083.124:1544): avc: denied { bind } for pid=8632 comm="syz.0.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 133.919008][ T42] audit: type=1400 audit(1793234083.124:1545): avc: denied { allowed } for pid=8632 comm="syz.0.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 133.919932][ T42] audit: type=1400 audit(1793234083.124:1546): avc: denied { create } for pid=8632 comm="syz.0.877" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 133.920459][ T42] audit: type=1400 audit(1793234083.124:1547): avc: denied { map } for pid=8632 comm="syz.0.877" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 ** 589 printk messages dropped ** ** 186 printk messages dropped ** ** 191 printk messages dropped ** ** 183 printk messages dropped ** ** 192 printk messages dropped ** ** 178 printk messages dropped ** ** 177 printk messages dropped ** ** 180 printk messages dropped ** ** 173 printk messages dropped ** ** 169 printk messages dropped ** ** 178 printk messages dropped ** ** 199 printk messages dropped ** ** 174 printk messages dropped ** ** 184 printk messages dropped ** ** 175 printk messages dropped ** ** 174 printk messages dropped ** ** 203 printk messages dropped ** ** 179 printk messages dropped ** ** 185 printk messages dropped ** ** 187 printk messages dropped ** ** 196 printk messages dropped ** ** 185 printk messages dropped ** ** 189 printk messages dropped ** ** 174 printk messages dropped ** ** 185 printk messages dropped ** ** 173 printk messages dropped ** ** 176 printk messages dropped ** ** 173 printk messages dropped ** ** 185 printk messages dropped ** ** 200 printk messages dropped ** ** 189 printk messages dropped ** ** 184 printk messages dropped ** ** 180 printk messages dropped ** ** 43 printk messages dropped ** ** 100 printk messages dropped ** ** 187 printk messages dropped ** ** 221 printk messages dropped ** ** 182 printk messages dropped ** ** 304 printk messages dropped ** ** 190 printk messages dropped ** ** 192 printk messages dropped ** ** 186 printk messages dropped ** ** 188 printk messages dropped ** ** 182 printk messages dropped ** ** 192 printk messages dropped ** ** 183 printk messages dropped ** ** 176 printk messages dropped ** ** 130 printk messages dropped ** ** 128 printk messages dropped ** ** 95 printk messages dropped ** ** 126 printk messages dropped ** ** 128 printk messages dropped ** ** 131 printk messages dropped ** ** 126 printk messages dropped ** ** 126 printk messages dropped ** ** 129 printk messages dropped ** ** 132 printk messages dropped ** ** 135 printk messages dropped ** ** 130 printk messages dropped ** ** 119 printk messages dropped ** ** 116 printk messages dropped ** ** 122 printk messages dropped ** ** 121 printk messages dropped ** ** 147 printk messages dropped ** ** 157 printk messages dropped ** ** 129 printk messages dropped ** ** 136 printk messages dropped ** ** 76 printk messages dropped ** ** 68 printk messages dropped ** ** 75 printk messages dropped ** ** 68 printk messages dropped ** ** 69 printk messages dropped ** ** 72 printk messages dropped ** ** 71 printk messages dropped ** ** 65 printk messages dropped ** ** 81 printk messages dropped ** ** 74 printk messages dropped ** ** 72 printk messages dropped ** ** 73 printk messages dropped ** ** 71 printk messages dropped ** ** 64 printk messages dropped ** ** 72 printk messages dropped ** ** 74 printk messages dropped ** ** 72 printk messages dropped ** ** 78 printk messages dropped ** ** 71 printk messages dropped ** ** 76 printk messages dropped ** ** 75 printk messages dropped ** ** 80 printk messages dropped ** ** 73 printk messages dropped ** ** 97 printk messages dropped ** ** 89 printk messages dropped ** ** 78 printk messages dropped ** ** 75 printk messages dropped ** ** 74 printk messages dropped ** ** 4 printk messages dropped ** ** 64 printk messages dropped ** ** 85 printk messages dropped ** ** 85 printk messages dropped ** ** 86 printk messages dropped ** ** 84 printk messages dropped ** ** 82 printk messages dropped ** ** 76 printk messages dropped ** ** 78 printk messages dropped ** ** 75 printk messages dropped ** ** 78 printk messages dropped ** ** 75 printk messages dropped ** ** 94 printk messages dropped ** ** 100 printk messages dropped ** ** 105 printk messages dropped ** ** 102 printk messages dropped ** ** 102 printk messages dropped ** ** 99 printk messages dropped ** ** 100 printk messages dropped ** ** 83 printk messages dropped ** ** 91 printk messages dropped ** ** 98 printk messages dropped ** ** 135 printk messages dropped ** ** 175 printk messages dropped ** ** 156 printk messages dropped ** ** 136 printk messages dropped ** ** 134 printk messages dropped ** ** 135 printk messages dropped ** ** 131 printk messages dropped ** ** 134 printk messages dropped ** ** 125 printk messages dropped ** ** 133 printk messages dropped ** ** 127 printk messages dropped ** ** 140 printk messages dropped ** ** 132 printk messages dropped ** ** 138 printk messages dropped ** ** 136 printk messages dropped ** ** 135 printk messages dropped ** ** 130 printk messages dropped ** ** 123 printk messages dropped ** ** 94 printk messages dropped ** ** 96 printk messages dropped ** ** 95 printk messages dropped ** ** 101 printk messages dropped ** ** 96 printk messages dropped ** ** 106 printk messages dropped ** ** 170 printk messages dropped ** ** 113 printk messages dropped ** ** 78 printk messages dropped ** ** 77 printk messages dropped ** ** 94 printk messages dropped ** ** 94 printk messages dropped ** ** 81 printk messages dropped ** ** 92 printk messages dropped ** ** 92 printk messages dropped ** ** 108 printk messages dropped ** ** 107 printk messages dropped ** ** 106 printk messages dropped ** ** 99 printk messages dropped ** ** 100 printk messages dropped ** ** 98 printk messages dropped ** ** 98 printk messages dropped ** ** 98 printk messages dropped ** ** 93 printk messages dropped ** ** 99 printk messages dropped ** ** 92 printk messages dropped ** ** 91 printk messages dropped ** ** 96 printk messages dropped ** ** 99 printk messages dropped ** ** 87 printk messages dropped ** ** 79 printk messages dropped ** ** 77 printk messages dropped ** ** 30 printk messages dropped ** ** 1 printk messages dropped ** [ 134.141611][ C1] net_ratelimit: 51 callbacks suppressed [ 134.211742][ T8645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.882'. [ 134.233497][ T5794] svc: failed to register nfsdv3 RPC service (errno 5). [ 134.233510][ T5794] failed to unregister tcp with rpcbind [ 134.242270][ T8647] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 134.242286][ T8647] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 134.246316][ T8647] vhci_hcd vhci_hcd.0: Device attached [ 134.246851][ T8648] vhci_hcd: cannot find the pending unlink 2 [ 134.247226][ T8648] vhci_hcd: connection closed [ 134.249952][ T5637] vhci_hcd vhci_hcd.0: stop threads [ 134.250386][ T5637] vhci_hcd vhci_hcd.0: release socket [ 134.250407][ T5637] vhci_hcd vhci_hcd.0: disconnect device [ 134.795051][ T8651] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 134.798029][ T8651] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 134.808845][ T8651] pci 0000:00:1d.0: Adding to iommu group 8 [ 134.819509][ T8651] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 134.822599][ T8651] ================================================================== [ 134.8226 ** replaying previous printk message ** [ 134.822622][ T8651] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x148/0x1b0 [ 134.822639][ T8460] 842_compress: add hash index8 8 pos 40 data d3c2b211191614cd [ 134.822654][ T8460] 842_compress: add hash index4 10 pos 40 data d3c2b211 [ 134.822663][ T8651] Read of size 1 at addr ffff888023ca9418 by task syz.0.884/8651 [ 134.822670][ T8460] 842_compress: add hash index4 11 pos 40 data 191614cd [ 134.822681][ T8651] [ 134.822686][ T8460] 842_compress: add hash index2 20 pos 40 data d3c2 [ 134.822701][ T8460] 842_compress: add hash index2 21 pos 40 data b211 [ 134.822697][ T8651] CPU: 0 UID: 0 PID: 8651 Comm: syz.0.884 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.822727][ T8651] Tainted: [L]=SOFTLOCKUP [ 134.822736][ T8651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.822749][ T8651] Call Trace: [ 134.822759][ T8651] [ 134.822762][ T8460] 842_compress: add hash index2 22 pos 40 data 1916 [ 134.822768][ T8651] dump_stack_lvl+0x100/0x190 [ 134.822778][ T8460] 842_compress: add hash index2 23 pos 40 data 14cd [ 134.822796][ T8460] 842_compress: template 0 [ 134.822806][ T8460] 842_compress: add 5 bits 0 [ 134.822803][ T8651] print_report+0x13d/0x4b0 [ 134.822817][ T8460] 842_compress: op 28 [ 134.822826][ T8460] 842_compress: add 64 bits 93251f420fc6f816 [ 134.822839][ T8460] 842_compress: add 32 bits 93251f42 [ 134.822834][ T8651] ? __virt_addr_valid+0x239/0x430 [ 134.822851][ T8460] 842_compress: add 32 bits fc6f816 [ 134.822863][ T8460] 842_compress: op 40 [ 134.822873][ T8460] 842_compress: op 40 [ 134.822863][ T8651] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 134.822882][ T8460] 842_compress: op 40 [ 134.822891][ T8460] 842_compress: add hash index8 9 pos 48 data 93251f420fc6f816 [ 134.822894][ T8651] kasan_report+0xdf/0x1c0 [ 134.822907][ T8460] 842_compress: add hash index4 12 pos 48 data 93251f42 [ 134.822940][ T8651] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 134.822983][ T8651] acpi_ns_get_attached_object+0x148/0x1b0 [ 134.822998][ T8460] 842_compress: add hash index4 13 pos 48 data fc6f816 [ 134.823015][ T8460] 842_compress: add hash index2 24 pos 48 data 9325 [ 134.823015][ T8651] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 134.823031][ T8460] 842_compress: add hash index2 25 pos 48 data 1f42 [ 134.823046][ T8460] 842_compress: add hash index2 26 pos 48 data fc6 [ 134.823048][ T8651] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 134.823061][ T8460] 842_compress: add hash index2 27 pos 48 data f816 [ 134.823080][ T8460] 842_compress: template 0 [ 134.823075][ T8651] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 134.823089][ T8460] 842_compress: add 5 bits 0 [ 134.823100][ T8460] 842_compress: op 28 [ 134.823110][ T8460] 842_compress: add 64 bits 6cecfdb8507988fd [ 134.823109][ T8651] ? acpi_ds_create_operand+0x267/0xc20 [ 134.823123][ T8460] 842_compress: add 32 bits 6cecfdb8 [ 134.823135][ T8460] 842_compress: add 32 bits 507988fd [ 134.823134][ T8651] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 134.823147][ T8460] 842_compress: op 40 [ 134.823156][ T8460] 842_compress: op 40 [ 134.823167][ T8460] 842_compress: op 40 [ 134.823166][ T8651] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 134.823177][ T8460] 842_compress: add hash index8 a pos 50 data 6cecfdb8507988fd [ 134.823192][ T8460] 842_compress: add hash index4 14 pos 50 data 6cecfdb8 [ 134.823196][ T8651] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 134.823208][ T8460] 842_compress: add hash index4 15 pos 50 data 507988fd [ 134.823224][ T8460] 842_compress: add hash index2 28 pos 50 data 6cec [ 134.823222][ T8651] ? __asan_memset+0x23/0x50 [ 134.823239][ T8460] 842_compress: add hash index2 29 pos 50 data fdb8 [ 134.823254][ T8460] 842_compress: add hash index2 2a pos 50 data 5079 [ 134.823249][ T8651] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 134.823269][ T8460] 842_compress: add hash index2 2b pos 50 data 88fd [ 134.823278][ T8651] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 134.823287][ T8460] 842_compress: template 0 [ 134.823296][ T8460] 842_compress: add 5 bits 0 [ 134.823308][ T8460] 842_compress: op 28 [ 134.823302][ T8651] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 134.823318][ T8460] 842_compress: add 64 bits 7f5f0323c1c674de [ 134.823330][ T8460] 842_compress: add 32 bits 7f5f0323 [ 134.823327][ T8651] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 134.823342][ T8460] 842_compress: add 32 bits c1c674de [ 134.823355][ T8460] 842_compress: op 40 [ 134.823350][ T8651] ? acpi_ut_trace_ptr+0x141/0x2a0 [ 134.823364][ T8460] 842_compress: op 40 [ 134.823373][ T8460] 842_compress: op 40 [ 134.823383][ T8460] 842_compress: add hash index8 b pos 58 data 7f5f0323c1c674de [ 134.823381][ T8651] acpi_ds_exec_end_op+0xb78/0x1e60 [ 134.823400][ T8460] 842_compress: add hash index4 16 pos 58 data 7f5f0323 [ 134.823406][ T8651] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 134.823415][ T8460] 842_compress: add hash index4 17 pos 58 data c1c674de [ 134.823435][ T8460] 842_compress: add hash index2 2c pos 58 data 7f5f [ 134.823429][ T8651] acpi_ps_parse_loop+0x5e1/0x26e0 [ 134.823451][ T8460] 842_compress: add hash index2 2d pos 58 data 323 [ 134.823467][ T8460] 842_compress: add hash index2 2e pos 58 data c1c6 [ 134.823471][ T8651] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 134.823487][ T8460] 842_compress: add hash index2 2f pos 58 data 74de [ 134.823493][ T8651] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 134.823505][ T8460] 842_compress: template 0 [ 134.823514][ T8460] 842_compress: add 5 bits 0 [ 134.823526][ T8460] 842_compress: op 28 [ 134.823525][ T8651] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 134.823536][ T8460] 842_compress: add 64 bits b84cbde5177f2b0c [ 134.823548][ T8460] 842_compress: add 32 bits b84cbde5 [ 134.823553][ T8651] ? acpi_ut_create_thread_state+0x6d/0x170 [ 134.823560][ T8460] 842_compress: add 32 bits 177f2b0c [ 134.823572][ T8460] 842_compress: op 40 [ 134.823582][ T8460] 842_compress: op 40 [ 134.823583][ T8651] acpi_ps_parse_aml+0x81e/0x1120 [ 134.823592][ T8460] 842_compress: op 40 [ 134.823601][ T8460] 842_compress: add hash index8 c pos 60 data b84cbde5177f2b0c [ 134.823617][ T8460] 842_compress: add hash index4 18 pos 60 data b84cbde5 [ 134.823612][ T8651] acpi_ps_execute_method+0x5c4/0xe90 [ 134.823632][ T8460] 842_compress: add hash index4 19 pos 60 data 177f2b0c [ 134.823648][ T8460] 842_compress: add hash index2 30 pos 60 data b84c [ 134.823643][ T8651] acpi_ns_evaluate+0x640/0x1670 [ 134.823662][ T8460] 842_compress: add hash index2 31 pos 60 data bde5 [ 134.823678][ T8460] 842_compress: add hash index2 32 pos 60 data 177f [ 134.823675][ T8651] acpi_ut_evaluate_object+0xf7/0x610 [ 134.823693][ T8460] 842_compress: add hash index2 33 pos 60 data 2b0c [ 134.823710][ T8460] 842_compress: template 0 [ 134.823707][ T8651] acpi_rs_get_prt_method_data+0xa0/0x150 [ 134.823738][ T8651] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 134.823765][ T8460] 842_compress: add 5 bits 0 [ 134.823767][ T8651] ? acpi_ut_status_exit+0x111/0x1c0 [ 134.823779][ T8460] 842_compress: op 28 [ 134.823788][ T8460] 842_compress: add 64 bits cd365fabe5b15e03 [ 134.823801][ T8460] 842_compress: add 32 bits cd365fab [ 134.823793][ T8651] ? acpi_rs_validate_parameters+0x104/0x210 [ 134.823813][ T8460] 842_compress: add 32 bits e5b15e03 [ 134.823826][ T8460] 842_compress: op 40 [ 134.823824][ T8651] acpi_get_irq_routing_table+0xb8/0x140 [ 134.823835][ T8460] 842_compress: op 40 [ 134.823844][ T8460] 842_compress: op 40 [ 134.823853][ T8460] 842_compress: add hash index8 d pos 68 data cd365fabe5b15e03 [ 134.823856][ T8651] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 134.823869][ T8460] 842_compress: add hash index4 1a pos 68 data cd365fab [ 134.823884][ T8460] 842_compress: add hash index4 1b pos 68 data e5b15e03 [ 134.823888][ T8651] ? do_raw_spin_lock+0x128/0x260 [ 134.823900][ T8460] 842_compress: add hash index2 34 pos 68 data cd36 [ 134.823915][ T8460] 842_compress: add hash index2 35 pos 68 data 5fab [ 134.823910][ T8651] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 134.823931][ T8460] 842_compress: add hash index2 36 pos 68 data e5b1 [ 134.823946][ T8460] 842_compress: add hash index2 37 pos 68 data 5e03 [ 134.823943][ T8651] ? mark_held_locks+0x40/0x70 [ 134.823964][ T8460] 842_compress: template 0 [ 134.823974][ T8460] 842_compress: add 5 bits 0 [ 134.823985][ T8460] 842_compress: op 28 [ 134.823971][ T8651] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 134.823994][ T8460] 842_compress: add 64 bits a06b9b93d227f9 [ 134.824008][ T8460] 842_compress: add 32 bits a06b9b [ 134.824007][ T8651] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 134.824020][ T8460] 842_compress: add 32 bits 93d227f9 [ 134.824031][ T8460] 842_compress: op 40 [ 134.824041][ T8460] 842_compress: op 40 [ 134.824050][ T8460] 842_compress: op 40 [ 134.824040][ T8651] ? pci_conf1_read+0x138/0x240 [ 134.824060][ T8460] 842_compress: add hash index8 e pos 70 data a06b9b93d227f9 [ 134.824075][ T8460] 842_compress: add hash index4 1c pos 70 data a06b9b [ 134.824076][ T8651] acpi_pci_irq_lookup+0x8e/0x6b0 [ 134.824091][ T8460] 842_compress: add hash index4 1d pos 70 data 93d227f9 [ 134.824107][ T8460] 842_compress: add hash index2 38 pos 70 data a0 [ 134.824108][ T8651] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 134.824123][ T8460] 842_compress: add hash index2 39 pos 70 data 6b9b [ 134.824138][ T8460] 842_compress: add hash index2 3a pos 70 data 93d2 [ 134.824137][ T8651] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 134.824153][ T8460] 842_compress: add hash index2 3b pos 70 data 27f9 [ 134.824171][ T8460] 842_compress: template 0 [ 134.824167][ T8651] ? irqentry_exit+0x202/0xab0 [ 134.824181][ T8460] 842_compress: add 5 bits 0 [ 134.824193][ T8460] 842_compress: op 28 [ 134.824189][ T8651] acpi_pci_irq_enable+0x1f5/0x6f0 [ 134.824203][ T8460] 842_compress: add 64 bits 5c0a16e391460c11 [ 134.824216][ T8460] 842_compress: op 40 [ 134.824225][ T8460] 842_compress: op 40 [ 134.824220][ T8651] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 134.824235][ T8460] 842_compress: op 40 [ 134.824244][ T8460] 842_compress: add hash index8 f pos 78 data 5c0a16e391460c11 [ 134.824261][ T8460] 842_compress: add hash index4 1e pos 78 data 5c0a16e3 [ 134.824253][ T8651] ? __pfx_pci_enable_resources+0x10/0x10 [ 134.824276][ T8460] 842_compress: add hash index4 1f pos 78 data 91460c11 [ 134.824285][ T8651] ? __pfx___pci_set_power_state+0x10/0x10 [ 134.824291][ T8460] 842_compress: add hash index2 3c pos 78 data 5c0a [ 134.824306][ T8460] 842_compress: add hash index2 3d pos 78 data 16e3 [ 134.824321][ T8460] 842_compress: add hash index2 3e pos 78 data 9146 [ 134.824315][ T8651] pcibios_enable_device+0xb6/0xe0 [ 134.824336][ T8460] 842_compress: add hash index2 3f pos 78 data c11 [ 134.824346][ T8651] do_pci_enable_device+0x21f/0x4a0 [ 134.824354][ T8460] 842_compress: template 0 [ 134.824364][ T8460] 842_compress: add 5 bits 0 [ 134.824375][ T8460] 842_compress: op 28 [ 134.824373][ T8651] ? __pfx_do_pci_enable_device+0x10/0x10 [ 134.824385][ T8460] 842_compress: add 64 bits 2365594a9750b4f8 [ 134.824397][ T8460] 842_compress: add 32 bits 2365594a [ 134.824401][ T8651] ? pci_update_current_state+0x102/0x240 [ 134.824409][ T8460] 842_compress: add 32 bits 9750b4f8 [ 134.824421][ T8460] 842_compress: op 40 [ 134.824432][ T8460] 842_compress: op 40 [ 134.824429][ T8651] ? __pfx_pci_update_current_state+0x10/0x10 [ 134.824442][ T8460] 842_compress: op 40 [ 134.824451][ T8460] 842_compress: add hash index8 10 pos 80 data 2365594a9750b4f8 [ 134.824457][ T8651] ? __lock_acquire+0x5c0/0x1f40 [ 134.824467][ T8460] 842_compress: add hash index4 20 pos 80 data 2365594a [ 134.824488][ T8460] 842_compress: add hash index4 21 pos 80 data 9750b4f8 [ 134.824486][ T8651] pci_enable_device_flags+0x27c/0x370 [ 134.824503][ T8460] 842_compress: add hash index2 40 pos 80 data 2365 [ 134.824519][ T8460] 842_compress: add hash index2 41 pos 80 data 594a [ 134.824532][ T8460] 842_compress: add hash index2 42 pos 80 data 9750 [ 134.824520][ T8651] quirk_usb_early_handoff+0x17f/0x1360 [ 134.824547][ T8460] 842_compress: add hash index2 43 pos 80 data b4f8 [ 134.824564][ T8460] 842_compress: template 0 [ 134.824558][ T8651] ? lock_acquire+0x1d1/0x380 [ 134.824574][ T8460] 842_compress: add 5 bits 0 [ 134.824584][ T8460] 842_compress: op 28 [ 134.824594][ T8460] 842_compress: add 64 bits eff8141fa85193e1 [ 134.824586][ T8651] ? pci_fixup_device+0x328/0x4d0 [ 134.824605][ T8460] 842_compress: add 32 bits eff8141f [ 134.824617][ T8460] 842_compress: add 32 bits a85193e1 [ 134.824620][ T8651] ? __pfx_quirk_usb_early_handoff+0x10/0x10 [ 134.824629][ T8460] 842_compress: op 40 [ 134.824638][ T8460] 842_compress: op 40 [ 134.824648][ T8460] 842_compress: op 40 [ 134.824645][ T8651] ? ktime_get+0x22c/0x320 [ 134.824657][ T8460] 842_compress: add hash index8 11 pos 88 data eff8141fa85193e1 [ 134.824672][ T8460] 842_compress: add hash index4 22 pos 88 data eff8141f [ 134.824678][ T8651] ? lockdep_hardirqs_on+0x7d/0x110 [ 134.824687][ T8460] 842_compress: add hash index4 23 pos 88 data a85193e1 [ 134.824702][ T8460] 842_compress: add hash index2 44 pos 88 data eff8 [ 134.824711][ T8651] ? ktime_get+0x23e/0x320 [ 134.824741][ T8651] ? __pfx_quirk_usb_early_handoff+0x10/0x10 [ 134.824765][ T8460] 842_compress: add hash index2 45 pos 88 data 141f [ 134.824763][ T8651] pci_fixup_device+0x334/0x4d0 [ 134.824781][ T8460] 842_compress: add hash index2 46 pos 88 data a851 [ 134.824797][ T8460] 842_compress: add hash index2 47 pos 88 data 93e1 [ 134.824797][ T8651] pci_bus_add_device+0x55/0x100 [ 134.824815][ T8460] 842_compress: template 0 [ 134.824817][ T8651] pci_bus_add_devices+0x9a/0x1f0 [ 134.824826][ T8460] 842_compress: add 5 bits 0 [ 134.824838][ T8460] 842_compress: op 28 [ 134.824838][ T8651] pci_rescan_bus+0x2a/0x40 [ 134.824848][ T8460] 842_compress: add 64 bits c4f698546c23abc3 [ 134.824860][ T8460] 842_compress: add 32 bits c4f69854 [ 134.824862][ T8651] rescan_store+0xfb/0x130 [ 134.824872][ T8460] 842_compress: add 32 bits 6c23abc3 [ 134.824884][ T8460] 842_compress: op 40 [ 134.824894][ T8460] 842_compress: op 40 [ 134.824888][ T8651] ? __pfx_rescan_store+0x10/0x10 [ 134.824903][ T8460] 842_compress: op 40 [ 134.824913][ T8460] 842_compress: add hash index8 12 pos 90 data c4f698546c23abc3 [ 134.824917][ T8651] ? sysfs_file_kobj+0xe4/0x290 [ 134.824929][ T8460] 842_compress: add hash index4 24 pos 90 data c4f69854 [ 134.824945][ T8460] 842_compress: add hash index4 25 pos 90 data 6c23abc3 [ 134.824944][ T8651] ? __pfx_rescan_store+0x10/0x10 [ 134.824960][ T8460] 842_compress: add hash index2 48 pos 90 data c4f6 [ 134.824976][ T8460] 842_compress: add hash index2 49 pos 90 data 9854 [ 134.824969][ T8651] bus_attr_store+0x74/0xb0 [ 134.824991][ T8460] 842_compress: add hash index2 4a pos 90 data 6c23 [ 134.825006][ T8460] 842_compress: add hash index2 4b pos 90 data abc3 [ 134.825004][ T8651] ? __pfx_bus_attr_store+0x10/0x10 [ 134.825023][ T8460] 842_compress: template 0 [ 134.825034][ T8460] 842_compress: add 5 bits 0 [ 134.825032][ T8651] sysfs_kf_write+0xf2/0x150 [ 134.825045][ T8460] 842_compress: op 28 [ 134.825054][ T8460] 842_compress: add 64 bits 77fd238502a38c65 [ 134.825059][ T8651] kernfs_fop_write_iter+0x3e0/0x5f0 [ 134.825067][ T8460] 842_compress: add 32 bits 77fd2385 [ 134.825079][ T8460] 842_compress: add 32 bits 2a38c65 [ 134.825081][ T8651] ? __pfx_sysfs_kf_write+0x10/0x10 [ 134.825091][ T8460] 842_compress: op 40 [ 134.825100][ T8460] 842_compress: op 40 [ 134.825110][ T8460] 842_compress: op 40 [ 134.825109][ T8651] vfs_write+0x6af/0x1050 [ 134.825120][ T8460] 842_compress: add hash index8 13 pos 98 data 77fd238502a38c65 [ 134.825129][ T8651] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 134.825137][ T8460] 842_compress: add hash index4 26 pos 98 data 77fd2385 [ 134.825154][ T8460] 842_compress: add hash index4 27 pos 98 data 2a38c65 [ 134.825153][ T8651] ? __pfx_vfs_write+0x10/0x10 [ 134.825169][ T8460] 842_compress: add hash index2 4c pos 98 data 77fd [ 134.825185][ T8460] 842_compress: add hash index2 4d pos 98 data 2385 [ 134.825183][ T8651] ? find_held_lock+0x2b/0x80 [ 134.825200][ T8460] 842_compress: add hash index2 4e pos 98 data 2a3 [ 134.825215][ T8460] 842_compress: add hash index2 4f pos 98 data 8c65 [ 134.825214][ T8651] ksys_write+0x12a/0x250 [ 134.825233][ T8460] 842_compress: template 0 [ 134.825233][ T8651] ? __pfx_ksys_write+0x10/0x10 [ 134.825244][ T8460] 842_compress: add 5 bits 0 [ 134.825256][ T8460] 842_compress: op 28 [ 134.825255][ T8651] do_syscall_64+0x123/0x790 [ 134.825267][ T8460] 842_compress: add 64 bits 208a9d45af30c9d8 [ 134.825280][ T8460] 842_compress: add 32 bits 208a9d45 [ 134.825275][ T8651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.825292][ T8460] 842_compress: add 32 bits af30c9d8 [ 134.825298][ T8651] RIP: 0033:0x7fb7f3d9f559 [ 134.825305][ T8460] 842_compress: op 40 [ 134.825316][ T8460] 842_compress: op 40 [ 134.825317][ T8651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.825325][ T8460] 842_compress: op 40 [ 134.825335][ T8460] 842_compress: add hash index8 14 pos a0 data 208a9d45af30c9d8 [ 134.825338][ T8651] RSP: 002b:00007fb7f4ba2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.825351][ T8460] 842_compress: add hash index4 28 pos a0 data 208a9d45 [ 134.825360][ T8651] RAX: ffffffffffffffda RBX: 00007fb7f4025fa0 RCX: 00007fb7f3d9f559 [ 134.825368][ T8460] 842_compress: add hash index4 29 pos a0 data af30c9d8 [ 134.825375][ T8651] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 134.825384][ T8460] 842_compress: add hash index2 50 pos a0 data 208a [ 134.825388][ T8651] RBP: 00007fb7f3e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 134.825399][ T8460] 842_compress: add hash index2 51 pos a0 data 9d45 [ 134.825402][ T8651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.825415][ T8651] R13: 00007fb7f4026038 R14: 00007fb7f4025fa0 R15: 00007ffc4b84c218 [ 134.825414][ T8460] 842_compress: add hash index2 52 pos a0 data af30 [ 134.825430][ T8460] 842_compress: add hash index2 53 pos a0 data c9d8 [ 134.825436][ T8651] [ 134.825444][ T8651] [ 134.825448][ T8460] 842_compress: template 0 [ 134.825449][ T8651] Allocated by task 1: [ 134.825459][ T8460] 842_compress: add 5 bits 0 [ 134.825461][ T8651] kasan_save_stack+0x30/0x50 [ 134.825471][ T8460] 842_compress: op 28 [ 134.825485][ T8460] 842_compress: add 64 bits 573a6c7570905798 [ 134.825492][ T8651] kasan_save_track+0x14/0x30 [ 134.825498][ T8460] 842_compress: add 32 bits 573a6c75 [ 134.825510][ T8460] 842_compress: add 32 bits 70905798 [ 134.825511][ T8651] __kasan_slab_alloc+0x89/0x90 [ 134.825523][ T8460] 842_compress: op 40 [ 134.825533][ T8460] 842_compress: op 40 [ 134.825530][ T8651] kmem_cache_alloc_noprof+0x269/0x6a0 [ 134.825541][ T8460] 842_compress: op 40 [ 134.825550][ T8460] 842_compress: add hash index8 15 pos a8 data 573a6c7570905798 [ 134.825560][ T8651] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 134.825566][ T8460] 842_compress: add hash index4 2a pos a8 data 573a6c75 [ 134.825581][ T8460] 842_compress: add hash index4 2b pos a8 data 70905798 [ 134.825582][ T8651] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 134.825597][ T8460] 842_compress: add hash index2 54 pos a8 data 573a [ 134.825604][ T8651] acpi_ds_build_internal_object+0x173/0x790 [ 134.825613][ T8460] 842_compress: add hash index2 55 pos a8 data 6c75 [ 134.825625][ T8651] acpi_ds_create_node+0xe3/0x280 [ 134.825628][ T8460] 842_compress: add hash index2 56 pos a8 data 7090 [ 134.825644][ T8460] 842_compress: add hash index2 57 pos a8 data 5798 [ 134.825644][ T8651] acpi_ds_exec_end_op+0x10cf/0x1e60 [ 134.825661][ T8460] 842_compress: template 0 [ 134.825666][ T8651] acpi_ps_parse_loop+0x5e1/0x26e0 [ 134.825671][ T8460] 842_compress: add 5 bits 0 [ 134.825683][ T8460] 842_compress: op 28 [ 134.825693][ T8460] 842_compress: add 64 bits ea160e6b49618ea2 [ 134.825689][ T8651] acpi_ps_parse_aml+0x81e/0x1120 [ 134.825706][ T8460] 842_compress: add 32 bits ea160e6b [ 134.825712][ T8651] acpi_ps_execute_table+0x393/0x500 [ 134.825738][ T8651] acpi_ns_execute_table+0x596/0x970 [ 134.825765][ T8460] 842_compress: add 32 bits 49618ea2 [ 134.825766][ T8651] acpi_ns_parse_table+0xcb/0x160 [ 134.825779][ T8460] 842_compress: op 40 [ 134.825788][ T8460] 842_compress: op 40 [ 134.825798][ T8460] 842_compress: op 40 [ 134.825795][ T8651] acpi_ns_load_table+0xc9/0x490 [ 134.825808][ T8460] 842_compress: add hash index8 16 pos b0 data ea160e6b49618ea2 [ 134.825824][ T8460] 842_compress: add hash index4 2c pos b0 data ea160e6b [ 134.825822][ T8651] acpi_tb_load_namespace+0x2b0/0x8f0 [ 134.825839][ T8460] 842_compress: add hash index4 2d pos b0 data 49618ea2 [ 134.825843][ T8651] acpi_load_tables+0x89/0x160 [ 134.825855][ T8460] 842_compress: add hash index2 58 pos b0 data ea16 [ 134.825863][ T8651] acpi_init+0x146/0x840 [ 134.825871][ T8460] 842_compress: add hash index2 59 pos b0 data e6b [ 134.825886][ T8460] 842_compress: add hash index2 5a pos b0 data 4961 [ 134.825889][ T8651] do_one_initcall+0x11c/0x6f0 [ 134.825902][ T8460] 842_compress: add hash index2 5b pos b0 data 8ea2 [ 134.825912][ T8651] kernel_init_freeable+0x6ea/0x7b0 [ 134.825920][ T8460] 842_compress: template 0 [ 134.825929][ T8460] 842_compress: add 5 bits 0 [ 134.825934][ T8651] kernel_init+0x21/0x1e0 [ 134.825941][ T8460] 842_compress: op 28 [ 134.825950][ T8460] 842_compress: add 64 bits 6484b0708b8a85c1 [ 134.825963][ T8460] 842_compress: op 40 [ 134.825956][ T8651] ret_from_fork+0x730/0xd60 [ 134.825973][ T8460] 842_compress: op 40 [ 134.825982][ T8460] 842_compress: op 40 [ 134.825991][ T8460] 842_compress: add hash index8 17 pos b8 data 6484b0708b8a85c1 [ 134.825986][ T8651] ret_from_fork_asm+0x1a/0x30 [ 134.826012][ T8651] [ 134.826008][ T8460] 842_compress: add hash index4 2e pos b8 data 6484b070 [ 134.826016][ T8651] Freed by task 6083: [ 134.826024][ T8460] 842_compress: add hash index4 2f pos b8 data 8b8a85c1 [ 134.826026][ T8651] kasan_save_stack+0x30/0x50 [ 134.826040][ T8460] 842_compress: add hash index2 5c pos b8 data 6484 [ 134.826054][ T8460] 842_compress: add hash index2 5d pos b8 data b070 [ 134.826056][ T8651] kasan_save_track+0x14/0x30 [ 134.826070][ T8460] 842_compress: add hash index2 5e pos b8 data 8b8a [ 134.826073][ T8651] kasan_save_free_info+0x3b/0x70 [ 134.826085][ T8460] 842_compress: add hash index2 5f pos b8 data 85c1 [ 134.826102][ T8460] 842_compress: template 0 [ 134.826098][ T8651] __kasan_slab_free+0x5f/0x80 [ 134.826113][ T8460] 842_compress: add 5 bits 0 [ 134.826124][ T8460] 842_compress: op 28 [ 134.826117][ T8651] kmem_cache_free+0x127/0x6c0 [ 134.826134][ T8460] 842_compress: add 64 bits 4dcfef2a113aae5 [ 134.826146][ T8460] 842_compress: add 32 bits 4dcfef2 [ 134.826142][ T8651] acpi_os_release_object+0x1c/0x30 [ 134.826158][ T8460] 842_compress: add 32 bits a113aae5 [ 134.826170][ T8460] 842_compress: op 40 [ 134.826167][ T8651] acpi_ut_delete_object_desc+0xea/0x130 [ 134.826181][ T8460] 842_compress: op 40 [ 134.826191][ T8460] 842_compress: op 40 [ 134.826186][ T8651] acpi_ut_update_ref_count.part.0+0x510/0x2250 [ 134.826201][ T8460] 842_compress: add hash index8 18 pos c0 data 4dcfef2a113aae5 [ 134.826217][ T8460] 842_compress: add hash index4 30 pos c0 data 4dcfef2 [ 134.826214][ T8651] acpi_ut_update_object_reference+0x5f9/0x800 [ 134.826232][ T8460] 842_compress: add hash index4 31 pos c0 data a113aae5 [ 134.826241][ T8651] acpi_ut_remove_reference+0x192/0x1d0 [ 134.826247][ T8460] 842_compress: add hash index2 60 pos c0 data 4dc [ 134.826262][ T8460] 842_compress: add hash index2 61 pos c0 data fef2 [ 134.826267][ T8651] acpi_rs_get_prt_method_data+0xcd/0x150 [ 134.826278][ T8460] 842_compress: add hash index2 62 pos c0 data a113 [ 134.826292][ T8460] 842_compress: add hash index2 63 pos c0 data aae5 [ 134.826295][ T8651] acpi_get_irq_routing_table+0xb8/0x140 [ 134.826310][ T8460] 842_compress: template 0 [ 134.826319][ T8460] 842_compress: add 5 bits 0 [ 134.826330][ T8460] 842_compress: op 28 [ 134.826323][ T8651] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 134.826341][ T8460] 842_compress: add 64 bits 72669883fefcc82a [ 134.826353][ T8460] 842_compress: add 32 bits 72669883 [ 134.826351][ T8651] acpi_pci_irq_lookup+0x8e/0x6b0 [ 134.826365][ T8460] 842_compress: add 32 bits fefcc82a [ 134.826377][ T8460] 842_compress: op 40 [ 134.826386][ T8460] 842_compress: op 40 [ 134.826378][ T8651] acpi_pci_irq_disable+0x1a8/0x360 [ 134.826396][ T8460] 842_compress: op 40 [ 134.826405][ T8460] 842_compress: add hash index8 19 pos c8 data 72669883fefcc82a [ 134.826406][ T8651] pcibios_disable_device+0x89/0xb0 [ 134.826421][ T8460] 842_compress: add hash index4 32 pos c8 data 72669883 [ 134.826437][ T8460] 842_compress: add hash index4 33 pos c8 data fefcc82a [ 134.826433][ T8651] do_pci_disable_device+0x9f/0x100 [ 134.826452][ T8460] 842_compress: add hash index2 64 pos c8 data 7266 [ 134.826458][ T8651] pci_disable_device+0x130/0x270 [ 134.826468][ T8460] 842_compress: add hash index2 65 pos c8 data 9883 [ 134.826482][ T8651] usb_hcd_pci_remove+0x1ed/0x300 [ 134.826488][ T8460] 842_compress: add hash index2 66 pos c8 data fefc [ 134.826504][ T8460] 842_compress: add hash index2 67 pos c8 data c82a [ 134.826507][ T8651] pci_device_remove+0xb2/0x1d0 [ 134.826521][ T8460] 842_compress: template 0 [ 134.826531][ T8460] 842_compress: add 5 bits 0 [ 134.826528][ T8651] device_remove+0xcb/0x180 [ 134.826543][ T8460] 842_compress: op 28 [ 134.826552][ T8460] 842_compress: add 64 bits e0467d1e95aa51ca [ 134.826547][ T8651] device_release_driver_internal+0x441/0x610 [ 134.826565][ T8460] 842_compress: add 32 bits e0467d1e [ 134.826577][ T8460] 842_compress: add 32 bits 95aa51ca [ 134.826572][ T8651] pci_stop_bus_device+0x120/0x160 [ 134.826589][ T8460] 842_compress: op 40 [ 134.826599][ T8460] 842_compress: op 40 [ 134.826596][ T8651] pci_stop_and_remove_bus_device+0x58/0xa0 [ 134.826609][ T8460] 842_compress: op 40 [ 134.826618][ T8460] 842_compress: add hash index8 1a pos d0 data e0467d1e95aa51ca [ 134.826623][ T8651] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 134.826634][ T8460] 842_compress: add hash index4 34 pos d0 data e0467d1e [ 134.826649][ T8460] 842_compress: add hash index4 35 pos d0 data 95aa51ca [ 134.826652][ T8651] remove_store+0x123/0x140 [ 134.826665][ T8460] 842_compress: add hash index2 68 pos d0 data e046 [ 134.826680][ T8460] 842_compress: add hash index2 69 pos d0 data 7d1e [ 134.826680][ T8651] dev_attr_store+0x58/0x80 [ 134.826696][ T8460] 842_compress: add hash index2 6a pos d0 data 95aa [ 134.826704][ T8651] sysfs_kf_write+0xf2/0x150 [ 134.826725][ T8651] kernfs_fop_write_iter+0x3e0/0x5f0 [ 134.826711][ T8460] 842_compress: add hash index2 6b pos d0 data 51ca [ 134.826746][ T8651] vfs_write+0x6af/0x1050 [ 134.826762][ T8651] ksys_write+0x12a/0x250 [ 134.826778][ T8460] 842_compress: template 0 [ 134.826780][ T8651] do_syscall_64+0x123/0x790 [ 134.826789][ T8460] 842_compress: add 5 bits 0 [ 134.826801][ T8460] 842_compress: op 28 [ 134.826797][ T8651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.826811][ T8460] 842_compress: add 64 bits c6db878e78ec5b0a [ 134.826817][ T8651] [ 134.826821][ T8651] The buggy address belongs to the object at ffff888023ca9410 [ 134.826821][ T8651] which belongs to the cache Acpi-Operand of size 72 [ 134.826825][ T8460] 842_compress: add 32 bits c6db878e [ 134.826836][ T8460] 842_compress: add 32 bits 78ec5b0a [ 134.826838][ T8651] The buggy address is located 8 bytes inside of [ 134.826838][ T8651] freed 72-byte region [ffff888023ca9410, ffff888023ca9458) [ 134.826849][ T8460] 842_compress: op 40 [ 134.826859][ T8651] [ 134.826860][ T8460] 842_compress: op 40 [ 134.826864][ T8651] The buggy address belongs to the physical page: [ 134.826870][ T8460] 842_compress: op 40 [ 134.826874][ T8651] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888023ca9958 pfn:0x23ca9 [ 134.826879][ T8460] 842_compress: add hash index8 1b pos d8 data c6db878e78ec5b0a [ 134.826894][ T8651] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 134.826896][ T8460] 842_compress: add hash index4 36 pos d8 data c6db878e [ 134.826913][ T8651] page_type: f5(slab) [ 134.826913][ T8460] 842_compress: add hash index4 37 pos d8 data 78ec5b0a [ 134.826953][ T8460] 842_compress: add hash index2 6c pos d8 data c6db [ 134.826956][ T8651] raw: 00fff00000000200 ffff88801d44da40 ffffea00008f3710 ffffea00008f0e90 [ 134.826968][ T8460] 842_compress: add hash index2 6d pos d8 data 878e [ 134.826981][ T8651] raw: ffff888023ca9958 0000000200270010 00000000f5000000 0000000000000000 [ 134.826984][ T8460] 842_compress: add hash index2 6e pos d8 data 78ec [ 134.826994][ T8651] page dumped because: kasan: bad access detected [ 134.827000][ T8460] 842_compress: add hash index2 6f pos d8 data 5b0a [ 134.827004][ T8651] page_owner tracks the page as allocated [ 134.827018][ T8460] 842_compress: template 0 [ 134.827011][ T8651] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3305129762 [ 134.827029][ T8460] 842_compress: add 5 bits 0 [ 134.827040][ T8460] 842_compress: op 28 [ 134.827043][ T8651] post_alloc_hook+0xfd/0x120 [ 134.827050][ T8460] 842_compress: add 64 bits 1cad953a919249fd [ 134.827062][ T8460] 842_compress: add 32 bits 1cad953a [ 134.827074][ T8460] 842_compress: add 32 bits 919249fd [ 134.827067][ T8651] get_page_from_freelist+0x1113/0x35e0 [ 134.827086][ T8460] 842_compress: op 40 [ 134.827097][ T8460] 842_compress: op 40 [ 134.827095][ T8651] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 134.827106][ T8460] 842_compress: op 40 [ 134.827116][ T8460] 842_compress: add hash index8 1c pos e0 data 1cad953a919249fd [ 134.827122][ T8651] new_slab+0xb1/0x6d0 [ 134.827133][ T8460] 842_compress: add hash index4 38 pos e0 data 1cad953a [ 134.827144][ T8651] refill_objects+0xe3/0x410 [ 134.827149][ T8460] 842_compress: add hash index4 39 pos e0 data 919249fd [ 134.827164][ T8460] 842_compress: add hash index2 70 pos e0 data 1cad [ 134.827168][ T8651] __pcs_replace_empty_main+0x35e/0x650 [ 134.827180][ T8460] 842_compress: add hash index2 71 pos e0 data 953a [ 134.827195][ T8460] 842_compress: add hash index2 72 pos e0 data 9192 [ 134.827192][ T8651] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 134.827210][ T8460] 842_compress: add hash index2 73 pos e0 data 49fd [ 134.827220][ T8651] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 134.827228][ T8460] 842_compress: template 0 [ 134.827237][ T8460] 842_compress: add 5 bits 0 [ 134.827240][ T8651] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 134.827250][ T8460] 842_compress: op 28 [ 134.827259][ T8460] 842_compress: add 64 bits 37db98064a9751ce [ 134.827261][ T8651] acpi_ds_build_internal_object+0x173/0x790 [ 134.827272][ T8460] 842_compress: add 32 bits 37db9806 [ 134.827281][ T8651] acpi_ds_build_internal_package_obj+0x481/0xe60 [ 134.827285][ T8460] 842_compress: add 32 bits 4a9751ce [ 134.827298][ T8460] 842_compress: op 40 [ 134.827302][ T8651] acpi_ds_eval_data_object_operands+0x2fd/0x640 [ 134.827308][ T8460] 842_compress: op 40 [ 134.827318][ T8460] 842_compress: op 40 [ 134.827323][ T8651] acpi_ds_exec_end_op+0xe41/0x1e60 [ 134.827328][ T8460] 842_compress: add hash index8 1d pos e8 data 37db98064a9751ce [ 134.827345][ T8460] 842_compress: add hash index4 3a pos e8 data 37db9806 [ 134.827343][ T8651] acpi_ps_parse_loop+0x5e1/0x26e0 [ 134.827361][ T8460] 842_compress: add hash index4 3b pos e8 data 4a9751ce [ 134.827364][ T8651] acpi_ps_parse_aml+0x81e/0x1120 [ 134.827377][ T8460] 842_compress: add hash index2 74 pos e8 data 37db [ 134.827386][ T8651] acpi_ps_execute_table+0x393/0x500 [ 134.827393][ T8460] 842_compress: add hash index2 75 pos e8 data 9806 [ 134.827411][ T8651] page_owner free stack trace missing [ 134.827408][ T8460] 842_compress: add hash index2 76 pos e8 data 4a97 [ 134.827418][ T8651] [ 134.827423][ T8651] Memory state around the buggy address: [ 134.827424][ T8460] 842_compress: add hash index2 77 pos e8 data 51ce [ 134.827433][ T8651] ffff888023ca9300: 00 00 00 00 fc fc fc fc fa fb fb fb fb fb fb fb [ 134.827443][ T8460] 842_compress: template 0 [ 134.827447][ T8651] ffff888023ca9380: fb fc fc fc fc fa fb fb fb fb fb fb fb fb fc fc [ 134.827453][ T8460] 842_compress: add 5 bits 0 [ 134.827462][ T8651] >ffff888023ca9400: fc fc fa fb fb fb fb fb fb fb fb fc fc fc fc fa [ 134.827464][ T8460] 842_compress: op 28 [ 134.827474][ T8651] ^ [ 134.827480][ T8460] 842_compress: add 64 bits 569bf151bd5f214c [ 134.827484][ T8651] ffff888023ca9480: fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb [ 134.827493][ T8460] 842_compress: add 32 bits 569bf151 [ 134.827499][ T8651] ffff888023ca9500: fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb [ 134.827506][ T8460] 842_compress: add 32 bits bd5f214c [ 134.827511][ T8651] ================================================================== [ 134.827518][ T8460] 842_compress: op 40 [ 134.827529][ T8460] 842_compress: op 40 [ 134.827538][ T8460] 842_compress: op 40 [ 134.827547][ T8460] 842_compress: add hash index8 1e pos f0 data 569bf151bd5f214c [ 134.827565][ T8460] 842_compress: add hash index4 3c pos f0 data 569bf151 [ 134.827580][ T8460] 842_compress: add hash index4 3d pos f0 data bd5f214c [ 134.827593][ T8460] 842_compress: add hash index2 78 pos f0 data 569b [ 134.827608][ T8460] 842_compress: add hash index2 79 pos f0 data f151 [ 134.827622][ T8460] 842_compress: add hash index2 7a pos f0 data bd5f [ 134.827626][ T8651] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 135.960876][ T8651] CPU: 0 UID: 0 PID: 8651 Comm: syz.0.884 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.964540][ T8651] Tainted: [L]=SOFTLOCKUP [ 135.966034][ T8651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.969475][ T8651] Call Trace: [ 135.970673][ T8651] [ 135.971738][ T8651] dump_stack_lvl+0x100/0x190 [ 135.973415][ T8651] vpanic+0x2dc/0x6f8 [ 135.974793][ T8651] panic+0xd1/0xe0 [ 135.976094][ T8651] ? __pfx_panic+0x10/0x10 [ 135.977621][ T8651] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 135.979687][ T8651] ? preempt_schedule+0x57/0xd0 [ 135.981369][ T8651] check_panic_on_warn.cold+0x19/0x34 [ 135.983291][ T8651] end_report.part.0+0x3a/0x90 [ 135.985067][ T8651] kasan_report.cold+0xe/0x18 [ 135.986812][ T8651] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 135.989022][ T8651] acpi_ns_get_attached_object+0x148/0x1b0 [ 135.991176][ T8651] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 135.993346][ T8651] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 135.995243][ T8651] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 135.997605][ T8651] ? acpi_ds_create_operand+0x267/0xc20 [ 135.999639][ T8651] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 136.001667][ T8651] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 136.003780][ T8651] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 136.005403][ T8651] ? __asan_memset+0x23/0x50 [ 136.006851][ T8651] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 136.008714][ T8651] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 136.010384][ T8651] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 136.012252][ T8651] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 136.014022][ T8651] ? acpi_ut_trace_ptr+0x141/0x2a0 [ 136.015582][ T8651] acpi_ds_exec_end_op+0xb78/0x1e60 [ 136.017141][ T8651] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 136.018826][ T8651] acpi_ps_parse_loop+0x5e1/0x26e0 [ 136.020374][ T8651] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 136.022003][ T8651] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 136.023665][ T8651] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 136.025430][ T8651] ? acpi_ut_create_thread_state+0x6d/0x170 [ 136.027171][ T8651] acpi_ps_parse_aml+0x81e/0x1120 [ 136.028675][ T8651] acpi_ps_execute_method+0x5c4/0xe90 [ 136.030331][ T8651] acpi_ns_evaluate+0x640/0x1670 [ 136.031888][ T8651] acpi_ut_evaluate_object+0xf7/0x610 [ 136.033562][ T8651] acpi_rs_get_prt_method_data+0xa0/0x150 [ 136.035336][ T8651] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 136.037295][ T8651] ? acpi_ut_status_exit+0x111/0x1c0 [ 136.038942][ T8651] ? acpi_rs_validate_parameters+0x104/0x210 [ 136.040799][ T8651] acpi_get_irq_routing_table+0xb8/0x140 [ 136.042555][ T8651] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 136.044513][ T8651] ? do_raw_spin_lock+0x128/0x260 [ 136.046077][ T8651] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 136.047899][ T8651] ? mark_held_locks+0x40/0x70 [ 136.049394][ T8651] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 136.051356][ T8651] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 136.053172][ T8651] ? pci_conf1_read+0x138/0x240 [ 136.054695][ T8651] acpi_pci_irq_lookup+0x8e/0x6b0 [ 136.056317][ T8651] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 136.058063][ T8651] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 136.059955][ T8651] ? irqentry_exit+0x202/0xab0 [ 136.061445][ T8651] acpi_pci_irq_enable+0x1f5/0x6f0 [ 136.063063][ T8651] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 136.064787][ T8651] ? __pfx_pci_enable_resources+0x10/0x10 [ 136.066560][ T8651] ? __pfx___pci_set_power_state+0x10/0x10 [ 136.068389][ T8651] pcibios_enable_device+0xb6/0xe0 [ 136.069994][ T8651] do_pci_enable_device+0x21f/0x4a0 [ 136.071622][ T8651] ? __pfx_do_pci_enable_device+0x10/0x10 [ 136.073399][ T8651] ? pci_update_current_state+0x102/0x240 [ 136.075170][ T8651] ? __pfx_pci_update_current_state+0x10/0x10 [ 136.077051][ T8651] ? __lock_acquire+0x5c0/0x1f40 [ 136.078598][ T8651] pci_enable_device_flags+0x27c/0x370 [ 136.080302][ T8651] quirk_usb_early_handoff+0x17f/0x1360 [ 136.082017][ T8651] ? lock_acquire+0x1d1/0x380 [ 136.083516][ T8651] ? pci_fixup_device+0x328/0x4d0 [ 136.085091][ T8651] ? __pfx_quirk_usb_early_handoff+0x10/0x10 [ 136.086952][ T8651] ? ktime_get+0x22c/0x320 [ 136.088356][ T8651] ? lockdep_hardirqs_on+0x7d/0x110 [ 136.089977][ T8651] ? ktime_get+0x23e/0x320 [ 136.091382][ T8651] ? __pfx_quirk_usb_early_handoff+0x10/0x10 [ 136.093250][ T8651] pci_fixup_device+0x334/0x4d0 [ 136.094768][ T8651] pci_bus_add_device+0x55/0x100 [ 136.096326][ T8651] pci_bus_add_devices+0x9a/0x1f0 [ 136.097892][ T8651] pci_rescan_bus+0x2a/0x40 [ 136.099326][ T8651] rescan_store+0xfb/0x130 [ 136.100721][ T8651] ? __pfx_rescan_store+0x10/0x10 [ 136.102323][ T8651] ? sysfs_file_kobj+0xe4/0x290 [ 136.103922][ T8651] ? __pfx_rescan_store+0x10/0x10 [ 136.105531][ T8651] bus_attr_store+0x74/0xb0 [ 136.106974][ T8651] ? __pfx_bus_attr_store+0x10/0x10 [ 136.108598][ T8651] sysfs_kf_write+0xf2/0x150 [ 136.110046][ T8651] kernfs_fop_write_iter+0x3e0/0x5f0 [ 136.111690][ T8651] ? __pfx_sysfs_kf_write+0x10/0x10 [ 136.113369][ T8651] vfs_write+0x6af/0x1050 [ 136.114722][ T8651] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 136.116536][ T8651] ? __pfx_vfs_write+0x10/0x10 [ 136.118038][ T8651] ? find_held_lock+0x2b/0x80 [ 136.119521][ T8651] ksys_write+0x12a/0x250 [ 136.120811][ T8651] ? __pfx_ksys_write+0x10/0x10 [ 136.122336][ T8651] do_syscall_64+0x123/0x790 [ 136.123831][ T8651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.125660][ T8651] RIP: 0033:0x7fb7f3d9f559 [ 136.127062][ T8651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.132951][ T8651] RSP: 002b:00007fb7f4ba2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.135550][ T8651] RAX: ffffffffffffffda RBX: 00007fb7f4025fa0 RCX: 00007fb7f3d9f559 [ 136.137983][ T8651] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 136.140417][ T8651] RBP: 00007fb7f3e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 136.142854][ T8651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.145328][ T8651] R13: 00007fb7f4026038 R14: 00007fb7f4025fa0 R15: 00007ffc4b84c218 [ 136.147774][ T8651] [ 136.149467][ T8651] Kernel Offset: disabled [ 136.150841][ T8651] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:34:44 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c0c735 RDI=ffffffff9cf39a00 RBP=ffffffff9cf399c0 RSP=ffffc90007fae8a0 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=706d6f635f323438 R12=0000000000000000 R13=0000000000000032 R14=0000000000000008 R15=ffffc90007faebb8 RIP=ffffffff85c0c75f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb7f4ba26c0 ffffffff 00c00000 GS =0000 ffff8880d448e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb7f4027dac CR3=000000000011f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 656d69745f656c64 692e7166622e6f69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4b84c706 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4b84c706 00007ffc4b84c70c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb7f3e3714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb7f3e37184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb7f3e372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb7f3e37176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000088 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000088 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff930cba66 RBX=ffffffff92820b5c RCX=dffffc0000000000 RDX=0000000000000007 RSI=0000000000000000 RDI=ffffffff92820b50 RBP=ffffffff92820b50 RSP=ffffc90007adf510 R8 =ffffffff930cba90 R9 =0000000000000007 R10=0000000000000200 R11=000000000000b24b R12=ffffffff92820b68 R13=ffffffff81b24b82 R14=ffffffff92820b50 R15=ffffffff92820b50 RIP=ffffffff81bb425e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbba7a5ec80 ffffffff 00c00000 GS =0000 ffff8880d458e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f61423c86de CR3=000000002f0b7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0460000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f2287b1600 000055f2287b1600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc7ce64f0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20646461203a7373 6572706d6f635f32 3438205d30363438 54205b5d31383433 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d72657020676e69 72755f6f693d7373 616c637420745f6d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64617379733a725f 6d64617379733a74 6f6f723d74786574 6e6f637420745f6d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64617379733a725f 6d64617379733a74 6f6f723d74786574 6e6f637320223737 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382e302e7a797322 3d6d6d6f63203233 36383d6469702020 726f66207d206465 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88801e3b4b00 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900007cfda8 RSP=ffffc900007cf950 R8 =0000000000000000 R9 =0000000000000002 R10=0000000000000003 R11=53414b203a475542 R12=ffffffff90dfe400 R13=ffffc900007cfda8 R14=0000000000000000 R15=ffffc900007cfdb4 RIP=ffffffff820e4cf0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d468e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb7f4ba1ff8 CR3=000000003a136000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000001ffffffff ffffffffe50805b0 030280020005ae03 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffe50805 d0030280020005ce 0303fc020005cc03 00020005ca030000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03028c020005ec03 02d4020005ea0300 0000000000000000 0000000001ffffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fc0304040005f803 00020005f6030002 0005f40300048400 05f00300020005ee ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00010fffffffffff ff04058004018c10 00060178962005ec 000807a080808002 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0802808080800220 05cc002005ac000a 00040a05f0030008 0006840300080005 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fc0304040005f803 00020005f6030002 0005f40300048400 05f00300020005ee ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03028c020005ec03 02d4020005ea0300 0000000000000000 0000000001ffffff ZMM25=c0616953c0616953 c0616953c0616953 c0616953c0616953 c0616953c0616953 c0616953c0616953 c0616953c0616953 c0616953c0616953 c0616953c0616953 ZMM26=1397e8281397e828 1397e8281397e828 1397e8281397e828 1397e8281397e828 1397e8281397e828 1397e8281397e828 1397e8281397e828 1397e8281397e828 ZMM27=3d1969263d196926 3d1969263d196926 3d1969263d196926 3d1969263d196926 3d1969263d196926 3d1969263d196926 3d1969263d196926 3d1969263d196926 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4f0500004f050000 4f0500004f050000 4f0500004f050000 4f0500004f050000 4f0500004f050000 4f0500004f050000 4f0500004f050000 4f0500004f050000 info registers vcpu 3 CPU#3 RAX=8000000000000001 RBX=0000000000000000 RCX=0000000000000001 RDX=ffff88802ca38000 RSI=ffffffff8201913e RDI=0000000000000005 RBP=ffff88806a044580 RSP=ffffc9000d3c6a48 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=ffffed10059472b3 R13=0000000000000003 R14=ffffed100d4088b1 R15=0000000000000001 RIP=ffffffff820e5320 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f16db5ea6c0 ffffffff 00c00000 GS =0000 ffff8880d478e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb7f4b80ff8 CR3=000000002f0cd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0460000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f2287b1600 000055f2287b1600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc7ce64f0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20646461203a7373 6572706d6f635f32 3438205d30363438 54205b5d31393835 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d72657020676e69 72755f6f693d7373 616c637420745f6d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64617379733a725f 6d64617379733a74 6f6f723d74786574 6e6f637420745f6d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64617379733a725f 6d64617379733a74 6f6f723d74786574 6e6f637320223737 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382e302e7a797322 3d6d6d6f63203233 36383d6469702020 726f66207d206465 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000