last executing test programs: 4m53.31074363s ago: executing program 2 (id=535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a3000000000180004"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) 4m52.486490721s ago: executing program 2 (id=538): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e22, @private=0xa010101}], 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x3}, 0x8) 4m51.081154851s ago: executing program 2 (id=543): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x29) write(r0, &(0x7f0000000000)='7', 0x1) socket$inet_smc(0x2b, 0x1, 0x0) 4m50.015314191s ago: executing program 2 (id=544): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x202, 0x1000, @empty}, 0x1c) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e1f, 0x2200005, @local, 0x1}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) 4m49.239178633s ago: executing program 2 (id=546): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1, 0x0, 0x0, 0x6000000}}], 0x1, 0x8000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) socket$inet6(0xa, 0x1, 0x5) 4m44.789658606s ago: executing program 2 (id=551): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f0000000000)={0x2, 0x3, 0x815, 0xa, 0x15e, 0x0}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) getpid() getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0xdcfe]}, 0x8, 0x80800) read$FUSE(r6, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_test', 0x82802, 0x1f8) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf90000000900030000000000ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601aaba5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}}) write(r1, &(0x7f0000000300)='k', 0x1) write(r1, &(0x7f00000001c0)="a3da96", 0x3) recvmmsg(r0, 0x0, 0x0, 0x10140, 0x0) 4m29.138064622s ago: executing program 32 (id=551): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f0000000000)={0x2, 0x3, 0x815, 0xa, 0x15e, 0x0}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) getpid() getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0xdcfe]}, 0x8, 0x80800) read$FUSE(r6, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_test', 0x82802, 0x1f8) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf90000000900030000000000ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601aaba5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}}) write(r1, &(0x7f0000000300)='k', 0x1) write(r1, &(0x7f00000001c0)="a3da96", 0x3) recvmmsg(r0, 0x0, 0x0, 0x10140, 0x0) 25.573003886s ago: executing program 3 (id=1202): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x929, &(0x7f0000000440)="0200000001") 24.075448758s ago: executing program 3 (id=1204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 22.863308577s ago: executing program 3 (id=1206): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f00000002c0)=0x101, 0x4) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x2000, 0x8, {}, {0x0, 0x2, 0x4, 0xc0, 0x3, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x976ac43becae565f, 0x5, {}, {0x1, 0x8, 0x8, 0x4, 0x29, 0x6, "0adb3ff8"}, 0x1000003, 0x1, {}, 0x0, 0x0, r3}) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000207010100000000000000000a0000060c0003400000001e0e30fc41345a9b9babe800000000053400078008000140000000cf08000240fffff200050001400000000208000240000001010800024000"], 0x54}}, 0x40010) 17.919563723s ago: executing program 3 (id=1212): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x929, &(0x7f0000000440)="0200000001") 16.085092846s ago: executing program 3 (id=1217): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pipe2(&(0x7f0000000080), 0x800) socket$inet6(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) userfaultfd(0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @local}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x38, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 14.56684524s ago: executing program 3 (id=1221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xb}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200440a0}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 9.804215408s ago: executing program 4 (id=1230): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff030000000000"], 0x428}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 9.65510426s ago: executing program 1 (id=1231): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 8.515133569s ago: executing program 1 (id=1233): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f00000002c0)=0x101, 0x4) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x2000, 0x8, {}, {0x0, 0x2, 0x4, 0xc0, 0x3, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x976ac43becae565f, 0x5, {}, {0x1, 0x8, 0x8, 0x4, 0x29, 0x6, "0adb3ff8"}, 0x1000003, 0x1, {}, 0x0, 0x0, r3}) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000207010100000000000000000a0000060c0003400000001e0e30fc41345a9b9babe800000000053400078008000140000000cf08000240fffff200050001400000000208000240000001010800024000"], 0x54}}, 0x40010) 8.514781529s ago: executing program 4 (id=1234): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109042, 0x15) 7.612881916s ago: executing program 4 (id=1235): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109042, 0x15) pwrite64(r0, &(0x7f0000000000)="ff", 0x1, 0x1000000) 7.16966766s ago: executing program 0 (id=1236): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x4002, 0x0) ioctl(r0, 0x929, &(0x7f0000000440)="0200000001") 6.886230097s ago: executing program 1 (id=1237): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000002180)="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", 0xff0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000040)={r1, 0x1000, &(0x7f0000001180)=""/4096}) 6.191663851s ago: executing program 4 (id=1238): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x100) 5.946567098s ago: executing program 0 (id=1239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 5.851708298s ago: executing program 1 (id=1240): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pipe2(&(0x7f0000000080), 0x800) socket$inet6(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) userfaultfd(0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @local}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x38, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 5.025920944s ago: executing program 4 (id=1241): r0 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='s\xcc\x00\x00\x00VN\xbc', &(0x7f0000000300)='//1#7.0.0.1/\xbb\x97yshare\x00$kV\xd6c\xa5\x19%\xe53\xefV5q\\\xb2.\x86\xd4\xaa\xcd\x05\xc6Z\x12\xb6R?\xee1\xc5\x80~~h\x95\xbd\xdf\xb2\xe1\x1fK>\xe2\x17\xb6F{\xb9\xd9\x00\x00\x00\x01\xf5+x\n\x1c\x06\xc9\xe1\xd9\xed\x9d3\t\xaa\x93\xcf\x1d\xb0\x02\xc3#\xd4>\x9b\x81/\x8e\v\xd5\xa2\x02_\xfc\x00\x00\x00\x00\x00\x00\x00\x00FGV\x18\xf5\x0e\xb3\x14%j\fu\x9b\xc7R\xe9\x03\xe5\x94\xa1\x7f\x06\xde\xde\xee\xb5f\xb5\x90\xb7;\xe4\xdc\x1f\xc9 1\xf5\x8dx\x9d\xd3\x7f,\x9a\x14kT:\\1\xa2\xff\x00\xd5#\xc6\x0f\x90\x16Ku\xa8\xedg\x8c-\xeb\xa0\xef\xef\x1f\x14?\\#\xb1J\x98\xfeO\xc8\x9f\xdb\xc7\\jU\xc5\xfaWcuNnXW%\x00\x00\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='ip\x00', &(0x7f0000000240)='127.0.0.1\x00', 0x0) r1 = syz_io_uring_setup(0x29d8, &(0x7f0000000540)={0x0, 0x2600, 0xc00, 0x2, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x1, 0x1, 0x61, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x14) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x28, {0x2, 0x4}, 0x9}, 0x1) 4.275705528s ago: executing program 0 (id=1242): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109042, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 4.038225138s ago: executing program 1 (id=1243): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109042, 0x15) pwrite64(r0, &(0x7f0000000000)="ff", 0x1, 0x1000000) 3.404577754s ago: executing program 4 (id=1244): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x2, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xc, 0x8, 0x0, 0x588, 0xfffb, 0x5, 0xd, 0x2}}]}}]}, 0x44}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) 2.942078812s ago: executing program 0 (id=1245): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f00000002c0)=0x101, 0x4) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x2000, 0x8, {}, {0x0, 0x2, 0x4, 0xc0, 0x3, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x976ac43becae565f, 0x5, {}, {0x1, 0x8, 0x8, 0x4, 0x29, 0x6, "0adb3ff8"}, 0x1000003, 0x1, {}, 0x0, 0x0, r3}) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000207010100000000000000000a0000060c0003400000001e0e30fc41345a9b9babe800000000053400078008000140000000cf08000240fffff200050001400000000208000240000001010800024000"], 0x54}}, 0x40010) 2.761459674s ago: executing program 1 (id=1246): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f0009058202", @ANYRESOCT], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='sessname=s1 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb, 0xe0, 0x4, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x3, 0x40, {0x9, 0x21, 0x3, 0x4, 0x1, {0x22, 0xd92}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0xff, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x4, 0x1, 0x7}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xad, 0x5, 0x9, 0x40}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100c}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000940)={0x24, &(0x7f00000006c0)={0x20, 0x7, 0xda, {0xda, 0x23, "8ab22f9ec0df19d42ca3dd4258b3c2ebb92835aee9a4f2deb5cb0c8ae5ec41f1d9e1a51dd86604ae7dd6092632cbfe2ba06d7e9bf1e2f00a583a19e7062e85316ca133553229e6ab8b659c3da763753690786ee70cb1bf2b7a88938a46b250e3fd03635d998bed24662d8b20345b21fbf52a26a459cf47424e9157828c311a36db4a86db4531f518b92fd9113c47b82247a184610e72d26af0a92dc510cb037d5300266c3131e55d26d197e81a4cf7b0e611bc22f67c52a137eed8612bacca83696d66d2f92603fcd6d2124f8eafacb770178c284cf0e91b"}}, &(0x7f00000007c0)={0x0, 0x3, 0x79, @string={0x79, 0x3, "d319843d6ec16b081e61217c4aeb5d91f57c0f3df9866ebac9b8dd641fdfd7d316cd5ab6939301985e3e4bc476fe58530176c15ee65c3fdd15b2d2dc5f7e36b31cdfe611825b48c155a1c1eeca96b166eed34e55b41dcf7cb7efc3014863ea2045bae06be1bc8b52eb4f046c186a8aeddb399ee13e129f"}}, &(0x7f00000008c0)={0x0, 0x22, 0xc, {[@global=@item_012={0x0, 0x1, 0x3}, @global=@item_012={0x0, 0x1, 0x4}, @global=@item_4={0x3, 0x1, 0xa, "c016ed33"}, @global=@item_4={0x3, 0x1, 0x2, "4a51ed06"}]}}, &(0x7f0000000900)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0x33c}}}}, &(0x7f0000000c80)={0x2c, 0x0, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x5}, 0x0, &(0x7f0000000b40), &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x2}}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="b6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno', 0x4) shutdown(r0, 0x1) 937.13509ms ago: executing program 0 (id=1247): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x4002, 0x0) ioctl(r0, 0x929, &(0x7f0000000440)="0200000001") 0s ago: executing program 0 (id=1248): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000002180)="c9b8bc80244e92823c87c54877cfdf2cbd85dd637f7fb5fa7b71866a76d58b62e624a9c4507042049407cd9efe483d7b15e800b9e58788f5b58f6625401048a99466b01f45795049d4a1b69ffb930d3dc04f3d4cfe6d179ad1d960e1f7292842fb390d9bcf522d20fdf9efcbee23f94fb022eb7fe5bc5eedf00cf18462eb98dad2dfadf9ea66a9b70695827762236d05463ece55433cb3c793e4dcc8aa1fd295b29072c16833c6852dcd62215ce37760d4506f1820f70d466a067a93fad1fd9e5c148b2cd4d6eea9093e9ae4676c9535131e0d8f3fe2d21b2cc901a28c2b3e9b65d5b8b0f081638422ca55aeb0e9f2b1a45285d263a798c356238a63384625ff32bcdeb89198d7522c7501520592b1534f7106282d5c2cda51b613fa2b3390225a4b24e4ca01d2a230335a9ab47bc71cd808c5928872af0e1093ff3a9e83fc123188f3acd0a44898c2f13fd7f58efa656534384d6fbe649c323f51f31208edd86f3a49705b88a0a9804bfcba1f0dc8d3bc3cc448cd7b66e635f5b17d9f9a48ea5c3ad8f14d0f1cb95d5e21c85a01c15fbc52a779ca9c6b416ee2161984ce6f23c72ae0f267fcd77ec49c290cf68f11e495cd0f9be34542ff9988932c48875e0e06a3a351577f5df8d80c7e7dcd391a57bb212274f25eaca6b09c1651f64ec9a291691427fb40f61254c6b07b793c350ef8daea36f7dbbf36c92d02c1421651e800828d409979551fa7b3c242ae434ff485372d5e63d86829e6a6198e64a9b27ca3841fadf340adb7cf3451cfb43ed6bb99584ccc0eda60f9013f3be1566a51a9cf8726a338c1af274cd2ee85d97ee9fa71f4d9723895eb0252951303308c07c41d21b55c9c0141a123f888c9c3f134aa5d4d9dc9f011821b1b07b67390ab70aff8650014b90f80fbed0394afc5dc155dd25df3be78d604d148c38462d9a2aa56c66d71edf21be640e2248211ad910b30730577df5f7f97a958247d21351fd20d1ea268deed116540f98854825042d70f31f223880db56d4e04ca90e1696513ec37691a0dda9c15b23c32147875645310e05fbf5764af088af7318e5a9a4cd2e89e6b9b5269bd61ec042b4e5fa5ba7726396f9bad37a6c0c0262147bc13abe1ab091163023551817167818a81fbf9dec69ab1145f90c65bda80d0d6ddfbf3da3c9152093c4d725e83c456eeebcb481cf6fb545a8a4ad184054bd63526ccff7e1cb64fac6b0b10e8177854e81996e2e05636234ae2b9c9dc925737f2b4fc53138ff5823168cbc2b3b34f75a26bef57c749b7bdf88886681e918fed3d3233c2ef46e6c609c363c06fc7c3889b79f1d407108bfebae1ab57b71980341894199a6a7a6abc76d267002918f455df9d2efef38e49e2eb365a54f79b36aa06f31c982c334909e371982a6fcbad2692ebe22bc5cf3edfe2e4a946dd8395524c9846e4871a3ac05226543c2ecc26203d84eaac3167b5ad067f97acbdfa75985897e704c97dcadcc0f22d959f99cca49f14f52e039dcd2c865660e1f7310e7dd381cfc59b7030afd90f9f86d9b0a1304c501a3101d3167b8800180da928b0c71831021d311c798894f3049ff12cb90d19e4691bf40354e3ae0f437439cfbe91e24cc2485e84db55d13d236780abc7a807a7f2d30fade7424e40422bbcb5f38a57f8d5410096d0de60314a358f6a647d7216b11dbc603bbf3942594ec3c25dd78ccb06f8982532405b57e2ecf8db1109fddb864e44c8c7078666e3ea1b441fabc96f489eadebf44af7a446db50e59eca5acbd032f6ff903cc85c489cfcb88f31886c8e8d818b3cb0ccd5009086c0a81764f92a5115fa20b1a0b1a5ebe587f1a44173a4bcb94f0a1e8cf490fdedb683c91aa8d9be13fa70ee65cea89ae4a4635d85087a081b3b06e73961f27594346423f648e622d57cd0ef063ebfa811d0e12f8be79dec19a03eb1cef2be79faad53ff26bdeb79446a8c1436cc9ac460174d00ca2d904bc7fd15b7e6e361c5e6a1514912de46a10ef935efb461047f42007c9d86039acd0fa000f07e9bb2a1ae800be2762341f137fceb2a69ab03cf3bda4199a43e162f3a72afe72b445242663b1645f022aee64ece487d231520bf7f501303bdfa2f9add3a4af96f5128979d6bbac116b9c70fe865a9edd37d0c646cdfd2dbfc8e8ebf78dcc59a002b1db763bf412aaa7940969e0d8af791782cb8a907f4c1ab7e9495cc7fb7968408b2ce03dadcd0417071974b0332f554e7498898236189bc374105f25c04535ffdf8186591caf648673340d8591ae9cce3a7d0f82986b0bc3c2d6e3d0f3d22155b7aed7437f11fb47693ce53cf4e4531669f7b736f45ac960ec2b4f70e474d076361395e2dbced14bf5b94e894299b0e46c459f6f41f24cbe1a3e1113ea80fff54e8dd2fe331c8eea0349ba0251c88f196a95bc95f4723137940720eb0857f1e6d4af4fbf4e85b7e0e590a338e565ef76eb88c1124ccf992b36b0d6a292419bb467da06a46f91baab0cd3e47c57c9939b17ce44c91f512baecfac7a6b9440a1e1db39ccfd15d44f2adab4b1fb39cfedc5a79e079c196cdf6b071d8bbd04ee54e74652594ba10f29c31ccd85d94863dfc67f2cd132385a540890f1e82404e299a9ac2996d36edbb558c6937048399ccb0a79af4d1f4c25262d7f5b5cc150ae7becd732e90a140ebaae68e42695dc1ddd4bb465f7466db339258334c1e5eedda3ac1638d32f63860546fccd5af67fdac1baffe46dec18a41f58fc876cfef7b62fd00bc598d5a18156cb204785de12eaf4dbefcf9ad1112bdaf8b8d4e3cdfd7eb7baf10a3091c5e6ee1fff284dd9ac4bb4cb832ab0c49f4b2880f59200748463d4158339e2d626ddfd7d8547a06a019d87bbfc5bfa1e7e4801e457ddcdf47b5fb35ec522b6457736c35fbde32c491e3adb521edef77116a018208dce6bdcf9bc7432f9cdf1b8f0686efa497c0a7044e72fb6f33e475a7bdceeccccbaa13a88df68e24ff9039cee59c5f0799f7842c2d21a7a7ff2f793f12ea49e34be214ca1d9af8cd5ffeb4121f6dcca26d93c2560d9c5fea851c358562ec693e7b5ac120f345e5868a4a3951371da303ef7f50505342c28349fbb19380f4989675bf32b3bb5daa14c764d8a8b7d3a929d0a1d0e9d84845a4d0b582140bd4519a2041889a04430ac7ac71309f30c733425ae11d8a2408511a2b83124fc9f57ca3b3e99324e7cb1faef290d8c8360972e3a342b431e4548306b22a934c8739c17bba66b9afb0182c639cf5a3d3afd32153e11e02fcd0a792de471b8bac7b86e5766eece24911021b0016e8e35f6ce910dc130f74142d9335fbbbae04e88999395bb102e9cb1e09b978109e2b6fc3687eb90a136f9041c7a80b094b222ee19f8959cf40b0c8364c3f5b43ce00d7830497f52e6a96b0c9faf471aed9bf4adf151d3d7b2964113c5c11c40f19d64677ff1e3517d9ee485eefadd8549e6ebff777a6b32272bf9e79eedc851db7329e4ed58001cd7a42cb806b04440898599bfb1aaa9ede9cb6dbd09615b8d36156c3ffb5bbdfdc899e4a78d8ff512721d70cd2c21f668f783f0b655ecab4a75e7a4aaf1e644978635190d1037b1ef4d052630a2c993b5a72313093e155405f3f85ab62f4ebc5f31848e75ffed7295c4a06b6905f5faea11dfdd9e74b56a2815038ea1a5c85d8fa4b87a7055dba4eab2332d812f4f86afc1a58ba516feb699ae91071c760718ed5b8a203a399c87f38b1850fefe1adfc96e95b258b77b3fa376da3959b169b678b94d19476ec6e2c4abadf6bd8060d73dbec3a32770c2a9151ca69c5d1cfbab5fd222db28337cb45a985c0941464cbeae02a827c3eed14ad698d6c535c567f40aba69fedc02195dbb497f6458998b9cbe4e145606578396442bdab7808c7bc1832a1f2c47730809ad509e7b9af68f4373a9eaa92905e5e899c61720e2976c60fe5e0c9934d27e214b058f1fa3f47b4da08aa170ced7c174382cc790936b35569dc2a5c0979d98625f5e2549080b38e0b067cb34c2a6ac5849a8de9377dc4a2b98fbfa722e23866822694a001df97ff39c28e706f73250bacdf84eb68e285d89bacb14b3c0fd5759d942d3698ab88db2cf58e68531bd0fc6574db8535e311358e1b99e52ccc1d55fb16c21a1f1b808c09546edde39691ec84152e1a4b55e9e220834f0168c5ad08e63f55b2f25f0b2a6cb7e7ed4cbc3cafdbe4d4f584fd931ed6fd50bbc444e6f81df98bbc4df3e5b04f805c6fd539ff7cd8aab56e7a4a208de7367a920e5a5aeae73d01078a8d2605384197b22f2089f590b4ac4f5fb8ce9e0b1129e608823e37b3270a206a86d029e881a57f42812aac00cbe2f740d0bf4982554a769777f2c020dcdc677524e152330693052d9f8f9259874ca554453b936a95a5c62b242abceda57299bcfa9c2b3232ceca0c81aced0ee0a0de4f1f44e0789c131f4272ef43007d31e7f5947bc0320edee2df1e6415d5dd19d9988c964ecf443d75c851f3fa59b07b91169442c0d7ab1973cd7823bfd64c4fad357ba1588755db16e34151e098a847062d404d53df3bdb0a53d7b017a2cf50c77a52d09aff245aea91e585bbe78d69e4e466aa8fb5c05975463bf7e1308b9d2057648f4d3ce352f1e5c2a82bc69389214781579468d470ad091a84eb3cb1a6c7d95948db025a6f493666ebcf9e16754164c384b87f3693a525f696eba140945e7cc00610d58f20923f6316066197c12881d8898b2d639aabdc10b05703dd8754703ce1f984d5f8577d5d202a67636f0555bc3a72cd083f38578a83b3584e1880c332c0ab1112fb61173363c09d67d29b1e97d41ee923b41f0dbe8a32c6cdf63b1da9eae59d5c6be75bb9a48a0ab732aa594c1aa1554cf789a032177795e79ab20eda36fc4f96533b5505dea6e56aec518ccc7bdb1a15c54a8a084dfebf1c94b0e9b218e9009187181a284d4eabd006e872032efc8f8e8dad0662e2ea30c3139ec7f69b39ab4ea685426390f3f8f3a5bc3cd7f198a1aac1368877ae2c40f4aed57630647817b8d6d872b6226a2a91649826e584b492e948bb067216c7b3730bf93ef7e25bb6cff157ea0beeb4e42cfce2526271559131fff6cc3ee0efb017053c72a16571c2a8f5a80536fb989404e512e29641193b1b8727780652b1de14b2cebe235b4583f7ef48ba95c136db636e8307935ca92db6923ee342e0648b805f126bdde1567434994c97ff7fab0fa3356b5ffffb1eeb31629887ea4bfe12565d86f095df8537fa1223aecaee041d078156adab05692e1e6160bc02f2ed8686493c71d0adf3782d3407bd794c4e7cf003894464734af8de7366367e3e222cc5aa9f740851fe41cd0355fffa5c3c9aab54293309b673e5c4c173fd6623674048a0db38de3078ed7dc1a477d95746d588fbdb15c48444b3f2c229b023cdc53a7a59dfebf77f83d9ecd4daa08b2efe551c57f05fe987971b10443893e1ed1f40814d5347e1afad39e422e5b8746aa6833a384cbec935ce463356ffc38a2237493bccbf6b2a724474aa65bd8e63d6f1c85355179242dcdb7c179d143e5180627770c2eb430da431394e49d1a2f94841fb4da8e0eaf5690fba0edf765d4857828897f8a5a840f980f3e489dff6a814b361815cb2432a08ad8e77336aae327e4752368844886d56177c2980799320c29054582267d345ef96162c4d41c647ac131b732b21332f4a10a764c6ce1fdb0849da5f6f03eb8faaa64a3857a4881672f223355e63036a06050a39ff1779dc0c09d22c9a2ca7", 0xff8, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000040)={r1, 0x1000, &(0x7f0000001180)=""/4096}) kernel console output (not intermixed with test programs): 799][ T5998] bridge0: entered allmulticast mode [ 55.072612][ T5963] Set syz0 is full, maxelem 65536 reached [ 55.585149][ T65] Bluetooth: hci0: command tx timeout [ 55.587221][ T5084] Bluetooth: hci1: command tx timeout [ 55.596038][ T65] Bluetooth: hci3: command tx timeout [ 55.598775][ T5084] Bluetooth: hci2: command tx timeout [ 55.684795][ T6045] FAULT_INJECTION: forcing a failure. [ 55.684795][ T6045] name failslab, interval 1, probability 0, space 0, times 1 [ 55.690167][ T6045] CPU: 2 UID: 0 PID: 6045 Comm: syz.1.69 Not tainted syzkaller #0 PREEMPT(full) [ 55.690185][ T6045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.690192][ T6045] Call Trace: [ 55.690197][ T6045] [ 55.690202][ T6045] dump_stack_lvl+0x100/0x190 [ 55.690224][ T6045] should_fail_ex.cold+0x5/0xa [ 55.690241][ T6045] should_failslab+0xc2/0x120 [ 55.690262][ T6045] kmem_cache_alloc_noprof+0x91/0x6a0 [ 55.690281][ T6045] ? alloc_vfsmnt+0x23/0x710 [ 55.690296][ T6045] alloc_vfsmnt+0x23/0x710 [ 55.690308][ T6045] ? __pfx___might_resched+0x10/0x10 [ 55.690325][ T6045] clone_mnt+0x4b/0x930 [ 55.690341][ T6045] copy_tree+0xfc/0xbf0 [ 55.690351][ T6045] ? __pfx_down_write+0x10/0x10 [ 55.690368][ T6045] copy_mnt_ns+0x3fa/0x1180 [ 55.690382][ T6045] ? __pfx_copy_mnt_ns+0x10/0x10 [ 55.690395][ T6045] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 55.690411][ T6045] ? create_new_namespaces+0x30/0xac0 [ 55.690431][ T6045] create_new_namespaces+0xd3/0xac0 [ 55.690448][ T6045] ? bpf_lsm_capable+0x9/0x10 [ 55.690461][ T6045] ? security_capable+0x80/0x260 [ 55.690477][ T6045] unshare_nsproxy_namespaces+0xf2/0x220 [ 55.690498][ T6045] ksys_unshare+0x4a2/0xa70 [ 55.690509][ T6045] ? __pfx_ksys_unshare+0x10/0x10 [ 55.690542][ T6045] __x64_sys_unshare+0x31/0x40 [ 55.690556][ T6045] do_syscall_64+0x123/0x790 [ 55.690570][ T6045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.690581][ T6045] RIP: 0033:0x7f14ab79e159 [ 55.690591][ T6045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.690602][ T6045] RSP: 002b:00007f14ac73c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 55.690614][ T6045] RAX: ffffffffffffffda RBX: 00007f14aba25fa0 RCX: 00007f14ab79e159 [ 55.690621][ T6045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 55.690627][ T6045] RBP: 00007f14ab835024 R08: 0000000000000000 R09: 0000000000000000 [ 55.690634][ T6045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.690640][ T6045] R13: 00007f14aba26038 R14: 00007f14aba25fa0 R15: 00007ffd89e1c428 [ 55.690654][ T6045] [ 56.308502][ T6081] netlink: 40 bytes leftover after parsing attributes in process `syz.3.87'. [ 56.585490][ T6024] Set syz0 is full, maxelem 65536 reached [ 57.788072][ T65] Bluetooth: hci3: adv larger than maximum supported [ 57.788093][ T65] Bluetooth: hci3: Malformed LE Event: 0x0d [ 57.886647][ T6133] Set syz0 is full, maxelem 65536 reached [ 58.020435][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 58.020451][ T42] audit: type=1400 audit(1787932784.613:259): avc: denied { perfmon } for pid=6146 comm="syz.0.113" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 58.031302][ T42] audit: type=1400 audit(1787932784.623:260): avc: denied { prog_run } for pid=6146 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 58.081117][ T42] audit: type=1400 audit(1787932784.673:261): avc: denied { mount } for pid=6148 comm="syz.0.114" name="/" dev="autofs" ino=10638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 58.158941][ T6154] FAULT_INJECTION: forcing a failure. [ 58.158941][ T6154] name failslab, interval 1, probability 0, space 0, times 0 [ 58.164603][ T6154] CPU: 1 UID: 0 PID: 6154 Comm: syz.1.116 Not tainted syzkaller #0 PREEMPT(full) [ 58.164618][ T6154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.164624][ T6154] Call Trace: [ 58.164629][ T6154] [ 58.164633][ T6154] dump_stack_lvl+0x100/0x190 [ 58.164653][ T6154] should_fail_ex.cold+0x5/0xa [ 58.164668][ T6154] should_failslab+0xc2/0x120 [ 58.164686][ T6154] __kmalloc_cache_noprof+0x91/0x6b0 [ 58.164699][ T6154] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 58.164718][ T6154] ? sctp_endpoint_new+0xfc/0xb20 [ 58.164741][ T6154] sctp_endpoint_new+0xfc/0xb20 [ 58.164757][ T6154] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 58.164772][ T6154] ? lockdep_init_map_type+0x5c/0x250 [ 58.164791][ T6154] ? lockdep_init_map_type+0x5c/0x250 [ 58.164808][ T6154] ? lockdep_init_map_type+0x5c/0x250 [ 58.164827][ T6154] sctp_init_sock+0xe2b/0x1300 [ 58.164842][ T6154] ? __pfx_sctp_init_sock+0x10/0x10 [ 58.164857][ T6154] inet_create+0x94c/0x1060 [ 58.164870][ T6154] ? inet_create+0x94/0x1060 [ 58.164884][ T6154] __sock_create+0x339/0x860 [ 58.164901][ T6154] __sys_socket+0x14d/0x260 [ 58.164914][ T6154] ? fput+0x7c/0x100 [ 58.164930][ T6154] ? __pfx___sys_socket+0x10/0x10 [ 58.164943][ T6154] ? ksys_write+0x1ac/0x250 [ 58.164956][ T6154] ? __pfx_ksys_write+0x10/0x10 [ 58.164974][ T6154] __x64_sys_socket+0x72/0xb0 [ 58.164989][ T6154] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.165001][ T6154] do_syscall_64+0x123/0x790 [ 58.165013][ T6154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.165024][ T6154] RIP: 0033:0x7f14ab79e159 [ 58.165034][ T6154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.165046][ T6154] RSP: 002b:00007f14ac73c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 58.165057][ T6154] RAX: ffffffffffffffda RBX: 00007f14aba25fa0 RCX: 00007f14ab79e159 [ 58.165063][ T6154] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 0000000000000002 [ 58.165069][ T6154] RBP: 00007f14ab835024 R08: 0000000000000000 R09: 0000000000000000 [ 58.165075][ T6154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.165080][ T6154] R13: 00007f14aba26038 R14: 00007f14aba25fa0 R15: 00007ffd89e1c428 [ 58.165093][ T6154] [ 58.627892][ T6174] FAULT_INJECTION: forcing a failure. [ 58.627892][ T6174] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 58.632709][ T6174] CPU: 0 UID: 0 PID: 6174 Comm: syz.1.125 Not tainted syzkaller #0 PREEMPT(full) [ 58.632724][ T6174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.632732][ T6174] Call Trace: [ 58.632736][ T6174] [ 58.632741][ T6174] dump_stack_lvl+0x100/0x190 [ 58.632761][ T6174] should_fail_ex.cold+0x5/0xa [ 58.632777][ T6174] _copy_to_user+0x32/0xd0 [ 58.632796][ T6174] bpf_log_attr_finalize+0x169/0x1a0 [ 58.632811][ T6174] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 58.632829][ T6174] btf_new_fd+0x9c7/0x5bc0 [ 58.632842][ T6174] ? avc_has_perm_noaudit+0x145/0x3b0 [ 58.632859][ T6174] ? __pfx_btf_new_fd+0x10/0x10 [ 58.632872][ T6174] ? rcu_is_watching+0x13/0xc0 [ 58.632885][ T6174] ? cap_capable+0x107/0x430 [ 58.632901][ T6174] ? bpf_lsm_capable+0x9/0x10 [ 58.632913][ T6174] ? security_capable+0x80/0x260 [ 58.632926][ T6174] ? ns_capable+0xd2/0xf0 [ 58.632943][ T6174] __sys_bpf+0x13ef/0x4a30 [ 58.632962][ T6174] ? __pfx___sys_bpf+0x10/0x10 [ 58.632975][ T6174] ? find_held_lock+0x2b/0x80 [ 58.632987][ T6174] ? futex_wake+0x4ea/0x5e0 [ 58.633008][ T6174] ? rcu_read_lock_any_held+0x6a/0x90 [ 58.633021][ T6174] ? find_held_lock+0x2b/0x80 [ 58.633034][ T6174] ? ksys_write+0x190/0x250 [ 58.633046][ T6174] ? ksys_write+0x190/0x250 [ 58.633066][ T6174] ? __x64_sys_futex+0x34f/0x4d0 [ 58.633077][ T6174] ? __x64_sys_futex+0x358/0x4d0 [ 58.633089][ T6174] ? fput+0x7c/0x100 [ 58.633104][ T6174] ? __pfx___x64_sys_futex+0x10/0x10 [ 58.633115][ T6174] ? ksys_write+0x1ac/0x250 [ 58.633130][ T6174] ? __x64_sys_bpf+0xce/0x140 [ 58.633143][ T6174] __x64_sys_bpf+0xce/0x140 [ 58.633158][ T6174] ? do_syscall_64+0xae/0x790 [ 58.633171][ T6174] do_syscall_64+0x123/0x790 [ 58.633183][ T6174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.633195][ T6174] RIP: 0033:0x7f14ab79e159 [ 58.633210][ T6174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.633221][ T6174] RSP: 002b:00007f14ac73c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.633232][ T6174] RAX: ffffffffffffffda RBX: 00007f14aba25fa0 RCX: 00007f14ab79e159 [ 58.633239][ T6174] RDX: 0000000000000028 RSI: 0000200000000740 RDI: 0000000000000012 [ 58.633246][ T6174] RBP: 00007f14ab835024 R08: 0000000000000000 R09: 0000000000000000 [ 58.633253][ T6174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.633259][ T6174] R13: 00007f14aba26038 R14: 00007f14aba25fa0 R15: 00007ffd89e1c428 [ 58.633272][ T6174] [ 58.788242][ T42] audit: type=1400 audit(1787932785.383:262): avc: denied { read write } for pid=6177 comm="syz.1.127" name="video7" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 58.796541][ T42] audit: type=1400 audit(1787932785.383:263): avc: denied { open } for pid=6177 comm="syz.1.127" path="/dev/video7" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 58.804053][ T42] audit: type=1400 audit(1787932785.383:264): avc: denied { ioctl } for pid=6177 comm="syz.1.127" path="/dev/video7" dev="devtmpfs" ino=973 ioctlcmd=0x563f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 58.918864][ T42] audit: type=1400 audit(1787932785.513:265): avc: denied { unmount } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 59.009702][ T42] audit: type=1400 audit(1787932785.603:266): avc: denied { map_create } for pid=6193 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.017341][ T42] audit: type=1400 audit(1787932785.603:267): avc: denied { map_read map_write } for pid=6193 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.076875][ T42] audit: type=1400 audit(1787932785.673:268): avc: denied { read write } for pid=6197 comm="syz.1.137" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 59.325540][ T6210] Zero length message leads to an empty skb [ 60.553092][ T6289] nvmet: adding nsid 1 to subsystem testsubsys [ 60.580596][ T6289] nvme_fabrics: missing parameter 'transport=%s' [ 60.583251][ T6289] nvme_fabrics: missing parameter 'nqn=%s' [ 61.292375][ T65] Bluetooth: hci3: adv larger than maximum supported [ 61.292507][ T65] Bluetooth: hci3: Malformed LE Event: 0x0d [ 62.144992][ T5871] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 62.314037][ T5871] usb 6-1: Using ep0 maxpacket: 8 [ 62.317931][ T5871] usb 6-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=7e.68 [ 62.325412][ T5871] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 62.333205][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.337006][ T5871] usb 6-1: Product: syz [ 62.338705][ T5871] usb 6-1: Manufacturer: syz [ 62.340405][ T5871] usb 6-1: SerialNumber: syz [ 62.353015][ T5871] usb 6-1: config 0 descriptor?? [ 62.566300][ T5871] usb 6-1: USB disconnect, device number 2 [ 63.113063][ T6415] netlink: 'syz.0.227': attribute type 66 has an invalid length. [ 63.161639][ T6419] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 63.300247][ T6430] lo: left promiscuous mode [ 63.302110][ T6430] lo: left allmulticast mode [ 63.306643][ T6430] tunl0: left promiscuous mode [ 63.309033][ T6430] tunl0: left allmulticast mode [ 63.312163][ T6430] gre0: left promiscuous mode [ 63.314573][ T6430] gre0: left allmulticast mode [ 63.321560][ T6430] gretap0: left promiscuous mode [ 63.323394][ T6430] gretap0: left allmulticast mode [ 63.327814][ T6430] erspan0: left promiscuous mode [ 63.329475][ T6430] erspan0: left allmulticast mode [ 63.332750][ T6430] ip_vti0: left promiscuous mode [ 63.334787][ T6430] ip_vti0: left allmulticast mode [ 63.339224][ T6430] ip6_vti0: left promiscuous mode [ 63.340990][ T6430] ip6_vti0: left allmulticast mode [ 63.345516][ T6430] sit0: left promiscuous mode [ 63.347112][ T6430] sit0: left allmulticast mode [ 63.351373][ T6430] ip6tnl0: left promiscuous mode [ 63.353024][ T6430] ip6tnl0: left allmulticast mode [ 63.356373][ T6430] ip6gre0: left promiscuous mode [ 63.358258][ T6430] ip6gre0: left allmulticast mode [ 63.361902][ T6430] syz_tun: left promiscuous mode [ 63.363573][ T6430] syz_tun: left allmulticast mode [ 63.368157][ T6430] ip6gretap0: left promiscuous mode [ 63.369830][ T6430] ip6gretap0: left allmulticast mode [ 63.374365][ T6430] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.377586][ T6430] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.382455][ T6430] bridge0: left promiscuous mode [ 63.386065][ T6430] bridge0: left allmulticast mode [ 63.464754][ T6430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.472828][ T6430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.594291][ T5816] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.597923][ T5816] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.601032][ T5816] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.605739][ T5816] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.701138][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 63.701152][ T42] audit: type=1400 audit(1787932790.293:294): avc: denied { append } for pid=6439 comm="syz.1.235" name="001" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 63.794030][ T6446] FAULT_INJECTION: forcing a failure. [ 63.794030][ T6446] name failslab, interval 1, probability 0, space 0, times 0 [ 63.799482][ T6446] CPU: 2 UID: 0 PID: 6446 Comm: syz.1.238 Not tainted syzkaller #0 PREEMPT(full) [ 63.799507][ T6446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.799519][ T6446] Call Trace: [ 63.799528][ T6446] [ 63.799535][ T6446] dump_stack_lvl+0x100/0x190 [ 63.799584][ T6446] should_fail_ex.cold+0x5/0xa [ 63.799612][ T6446] should_failslab+0xc2/0x120 [ 63.799642][ T6446] kmem_cache_alloc_noprof+0x91/0x6a0 [ 63.799669][ T6446] ? prepare_creds+0x2c/0x950 [ 63.799698][ T6446] prepare_creds+0x2c/0x950 [ 63.799724][ T6446] keyctl_set_reqkey_keyring+0x8e/0x1c0 [ 63.799750][ T6446] __do_sys_keyctl+0x316/0x5a0 [ 63.799775][ T6446] do_syscall_64+0x123/0x790 [ 63.799799][ T6446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.799818][ T6446] RIP: 0033:0x7f14ab79e159 [ 63.799834][ T6446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.799851][ T6446] RSP: 002b:00007f14ac73c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 63.799868][ T6446] RAX: ffffffffffffffda RBX: 00007f14aba25fa0 RCX: 00007f14ab79e159 [ 63.799879][ T6446] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000000e [ 63.799889][ T6446] RBP: 00007f14ab835024 R08: 0000000000000000 R09: 0000000000000000 [ 63.799899][ T6446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.799909][ T6446] R13: 00007f14aba26038 R14: 00007f14aba25fa0 R15: 00007ffd89e1c428 [ 63.799933][ T6446] [ 64.031401][ T6459] openvswitch: netlink: Flow actions attr not present in new flow. [ 64.074212][ T42] audit: type=1400 audit(1787932790.663:295): avc: denied { read append } for pid=6463 comm="syz.1.247" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 64.082050][ T42] audit: type=1400 audit(1787932790.663:296): avc: denied { open } for pid=6463 comm="syz.1.247" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 64.124233][ T42] audit: type=1400 audit(1787932790.723:297): avc: denied { bind } for pid=6463 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.132441][ T6464] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 64.135950][ T6464] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 64.151795][ T6464] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 64.160883][ T6464] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 64.164355][ T6464] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 64.177923][ T6464] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 64.189407][ T6464] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 64.192069][ T6464] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 64.201947][ T6464] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 64.207501][ T6464] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 64.209455][ T6464] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 64.234802][ T6464] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 64.325335][ T6485] netlink: 36 bytes leftover after parsing attributes in process `syz.1.256'. [ 64.942439][ T65] Bluetooth: hci0: adv larger than maximum supported [ 64.942555][ T65] Bluetooth: hci0: Malformed LE Event: 0x0d [ 65.198686][ T42] audit: type=1400 audit(1787932791.793:298): avc: denied { setopt } for pid=6509 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 65.234959][ T6513] FAULT_INJECTION: forcing a failure. [ 65.234959][ T6513] name failslab, interval 1, probability 0, space 0, times 0 [ 65.239497][ T6513] CPU: 3 UID: 0 PID: 6513 Comm: syz.3.267 Not tainted syzkaller #0 PREEMPT(full) [ 65.239513][ T6513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.239520][ T6513] Call Trace: [ 65.239525][ T6513] [ 65.239530][ T6513] dump_stack_lvl+0x100/0x190 [ 65.239551][ T6513] should_fail_ex.cold+0x5/0xa [ 65.239568][ T6513] should_failslab+0xc2/0x120 [ 65.239588][ T6513] __kvmalloc_node_noprof+0x116/0x970 [ 65.239606][ T6513] ? do_raw_spin_lock+0x128/0x260 [ 65.239623][ T6513] ? alloc_fdtable+0x17f/0x2d0 [ 65.239643][ T6513] alloc_fdtable+0x17f/0x2d0 [ 65.239661][ T6513] dup_fd+0x995/0xd10 [ 65.239679][ T6513] ? do_raw_spin_unlock+0x145/0x1e0 [ 65.239692][ T6513] ? _raw_spin_unlock+0x28/0x50 [ 65.239711][ T6513] ? copy_fs_struct+0x2a0/0x340 [ 65.239728][ T6513] ksys_unshare+0x7c7/0xa70 [ 65.239740][ T6513] ? __pfx_ksys_unshare+0x10/0x10 [ 65.239756][ T6513] __x64_sys_unshare+0x31/0x40 [ 65.239767][ T6513] do_syscall_64+0x123/0x790 [ 65.239781][ T6513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.239792][ T6513] RIP: 0033:0x7f6e71b9e159 [ 65.239803][ T6513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.239813][ T6513] RSP: 002b:00007f6e72a40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 65.239825][ T6513] RAX: ffffffffffffffda RBX: 00007f6e71e25fa0 RCX: 00007f6e71b9e159 [ 65.239832][ T6513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 65.239838][ T6513] RBP: 00007f6e71c35024 R08: 0000000000000000 R09: 0000000000000000 [ 65.239844][ T6513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.239850][ T6513] R13: 00007f6e71e26038 R14: 00007f6e71e25fa0 R15: 00007ffc3a03f2f8 [ 65.239864][ T6513] [ 65.344704][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.270'. [ 65.396645][ T6524] FAULT_INJECTION: forcing a failure. [ 65.396645][ T6524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.412534][ T6524] CPU: 2 UID: 0 PID: 6524 Comm: syz.2.272 Not tainted syzkaller #0 PREEMPT(full) [ 65.412555][ T6524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.412564][ T6524] Call Trace: [ 65.412568][ T6524] [ 65.412574][ T6524] dump_stack_lvl+0x100/0x190 [ 65.412596][ T6524] should_fail_ex.cold+0x5/0xa [ 65.412615][ T6524] strncpy_from_user+0x3b/0x2d0 [ 65.412632][ T6524] do_getname+0x78/0x390 [ 65.412646][ T6524] do_mq_open+0x173/0x9c0 [ 65.412662][ T6524] ? __pfx_do_mq_open+0x10/0x10 [ 65.412674][ T6524] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 65.412692][ T6524] __x64_sys_mq_open+0x152/0x1e0 [ 65.412707][ T6524] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 65.412731][ T6524] do_syscall_64+0x123/0x790 [ 65.412747][ T6524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.412759][ T6524] RIP: 0033:0x7f834e79e159 [ 65.412769][ T6524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.412781][ T6524] RSP: 002b:00007f834f6c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 65.412793][ T6524] RAX: ffffffffffffffda RBX: 00007f834ea25fa0 RCX: 00007f834e79e159 [ 65.412802][ T6524] RDX: 0000000000000020 RSI: 0000000000000040 RDI: 0000000000000000 [ 65.412808][ T6524] RBP: 00007f834e835024 R08: 0000000000000000 R09: 0000000000000000 [ 65.412814][ T6524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.412820][ T6524] R13: 00007f834ea26038 R14: 00007f834ea25fa0 R15: 00007fff0efb2728 [ 65.412836][ T6524] [ 65.577608][ T42] audit: type=1400 audit(1787932792.173:299): avc: denied { ioctl } for pid=6527 comm="syz.0.275" path="socket:[14054]" dev="sockfs" ino=14054 ioctlcmd=0x586d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.588098][ T6532] pimreg: entered allmulticast mode [ 65.665535][ T42] audit: type=1400 audit(1787932792.263:300): avc: denied { shutdown } for pid=6529 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.688016][ T42] audit: type=1400 audit(1787932792.263:301): avc: denied { read } for pid=6529 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.144124][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 66.224273][ T5084] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.224308][ T5729] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.227754][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 66.472725][ T6547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.282'. [ 66.557465][ T42] audit: type=1400 audit(1787932793.153:302): avc: denied { read } for pid=6554 comm="syz.2.286" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.565017][ T42] audit: type=1400 audit(1787932793.153:303): avc: denied { open } for pid=6554 comm="syz.2.286" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.461886][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'. [ 68.218662][ T65] Bluetooth: hci0: adv larger than maximum supported [ 68.218790][ T65] Bluetooth: hci0: Malformed LE Event: 0x0d [ 68.224387][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.304322][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 68.306961][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 68.309119][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.114208][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 69.114219][ T42] audit: type=1400 audit(1787932795.713:310): avc: denied { create } for pid=6648 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.121846][ T42] audit: type=1400 audit(1787932795.713:311): avc: denied { listen } for pid=6648 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.128377][ T42] audit: type=1400 audit(1787932795.713:312): avc: denied { accept } for pid=6648 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.314185][ T5084] Bluetooth: hci0: command 0x0c1a tx timeout [ 70.384150][ T5084] Bluetooth: hci1: command 0x0c1a tx timeout [ 70.384158][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.394218][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.864159][ T6596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 71.053789][ T6676] macvlan1: entered promiscuous mode [ 71.057358][ T6676] gretap0: entered promiscuous mode [ 71.095578][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.336'. [ 71.182287][ T42] audit: type=1400 audit(1787932797.773:313): avc: denied { ioctl } for pid=6679 comm="syz.3.338" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10141 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.202423][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.205908][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.250556][ T6698] netlink: 48 bytes leftover after parsing attributes in process `syz.3.344'. [ 71.280616][ T42] audit: type=1400 audit(1787932797.873:314): avc: denied { read } for pid=6700 comm="syz.3.345" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 71.291744][ T42] audit: type=1400 audit(1787932797.873:315): avc: denied { open } for pid=6700 comm="syz.3.345" path="/dev/dri/card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 71.300885][ T42] audit: type=1400 audit(1787932797.873:316): avc: denied { write } for pid=6700 comm="syz.3.345" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 71.312126][ T42] audit: type=1400 audit(1787932797.873:317): avc: denied { ioctl } for pid=6700 comm="syz.3.345" path="/dev/dri/card1" dev="devtmpfs" ino=637 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 71.321581][ T42] audit: type=1400 audit(1787932797.873:318): avc: denied { map } for pid=6700 comm="syz.3.345" path="/dev/dri/card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 71.329037][ T42] audit: type=1400 audit(1787932797.873:319): avc: denied { execute } for pid=6700 comm="syz.3.345" path="/dev/dri/card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 71.480962][ T6721] netlink: 48 bytes leftover after parsing attributes in process `syz.0.354'. [ 71.486512][ T65] Bluetooth: hci3: adv larger than maximum supported [ 71.486525][ T65] Bluetooth: hci3: Malformed LE Event: 0x0d [ 71.587769][ T6732] Set syz0 is full, maxelem 65536 reached [ 71.706276][ T6740] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.708881][ T6740] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.747403][ T6746] netlink: 48 bytes leftover after parsing attributes in process `syz.3.365'. [ 71.752165][ T6740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.756670][ T6740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.835028][ T6754] Set syz0 is full, maxelem 65536 reached [ 71.844122][ T5816] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.850039][ T5816] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.858423][ T5816] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.865192][ T5816] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.107219][ T6775] Set syz0 is full, maxelem 65536 reached [ 72.141049][ T6777] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 73.785386][ T6819] FAULT_INJECTION: forcing a failure. [ 73.785386][ T6819] name failslab, interval 1, probability 0, space 0, times 0 [ 73.789441][ T6819] CPU: 0 UID: 0 PID: 6819 Comm: syz.1.396 Not tainted syzkaller #0 PREEMPT(full) [ 73.789456][ T6819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.789462][ T6819] Call Trace: [ 73.789467][ T6819] [ 73.789471][ T6819] dump_stack_lvl+0x100/0x190 [ 73.789491][ T6819] should_fail_ex.cold+0x5/0xa [ 73.789507][ T6819] should_failslab+0xc2/0x120 [ 73.789525][ T6819] __kmalloc_cache_noprof+0x91/0x6b0 [ 73.789539][ T6819] ? copy_mount_options+0x55/0x190 [ 73.789554][ T6819] copy_mount_options+0x55/0x190 [ 73.789569][ T6819] __x64_sys_mount+0x1ab/0x310 [ 73.789585][ T6819] ? __pfx___x64_sys_mount+0x10/0x10 [ 73.789601][ T6819] do_syscall_64+0x123/0x790 [ 73.789615][ T6819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.789627][ T6819] RIP: 0033:0x7f14ab79e159 [ 73.789638][ T6819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.789648][ T6819] RSP: 002b:00007f14ac73c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.789659][ T6819] RAX: ffffffffffffffda RBX: 00007f14aba25fa0 RCX: 00007f14ab79e159 [ 73.789666][ T6819] RDX: 0000200000000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.789672][ T6819] RBP: 00007f14ab835024 R08: 00002000000001c0 R09: 0000000000000000 [ 73.789678][ T6819] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 73.789697][ T6819] R13: 00007f14aba26038 R14: 00007f14aba25fa0 R15: 00007ffd89e1c428 [ 73.789711][ T6819] [ 73.975136][ T65] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 74.065584][ T6838] ftl_cs: FTL header not found. [ 74.089641][ T6838] block2mtd: mtd1: [/dev/loop0] erase_size = 0KiB [6] [ 74.141556][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 74.141567][ T42] audit: type=1400 audit(1787932800.733:336): avc: denied { create } for pid=6844 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.151210][ T42] audit: type=1400 audit(1787932800.743:337): avc: denied { setopt } for pid=6844 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.158471][ T42] audit: type=1400 audit(1787932800.743:338): avc: denied { ioctl } for pid=6844 comm="syz.0.407" path="socket:[15545]" dev="sockfs" ino=15545 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.168011][ T42] audit: type=1400 audit(1787932800.743:339): avc: denied { write } for pid=6844 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.299094][ T6856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.412'. [ 74.390945][ T42] audit: type=1400 audit(1787932800.983:340): avc: denied { remount } for pid=6857 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 74.453909][ T42] audit: type=1400 audit(1787932801.043:341): avc: denied { watch } for pid=6864 comm="syz.0.415" path="/100" dev="tmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.489030][ T42] audit: type=1400 audit(1787932801.083:342): avc: denied { append } for pid=6867 comm="syz.2.418" name="media2" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.499749][ T5872] kernel write not supported for file /media2 (pid: 5872 comm: kworker/1:5) [ 74.500600][ T42] audit: type=1400 audit(1787932801.093:343): avc: denied { bind } for pid=6869 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.511828][ T42] audit: type=1400 audit(1787932801.093:344): avc: denied { name_bind } for pid=6869 comm="syz.0.417" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 74.519881][ T42] audit: type=1400 audit(1787932801.093:345): avc: denied { node_bind } for pid=6869 comm="syz.0.417" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 74.610851][ T6879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.422'. [ 74.808841][ T65] Bluetooth: hci2: adv larger than maximum supported [ 74.808857][ T65] Bluetooth: hci2: Malformed LE Event: 0x0d [ 75.106696][ T6894] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 75.323498][ T6899] warning: `syz.1.429' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.699756][ T6908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.433'. [ 76.445966][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 76.500674][ T6936] FAULT_INJECTION: forcing a failure. [ 76.500674][ T6936] name failslab, interval 1, probability 0, space 0, times 0 [ 76.504770][ T6936] CPU: 2 UID: 0 PID: 6936 Comm: syz.3.444 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.504789][ T6936] Tainted: [L]=SOFTLOCKUP [ 76.504792][ T6936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.504798][ T6936] Call Trace: [ 76.504802][ T6936] [ 76.504807][ T6936] dump_stack_lvl+0x100/0x190 [ 76.504826][ T6936] should_fail_ex.cold+0x5/0xa [ 76.504842][ T6936] should_failslab+0xc2/0x120 [ 76.504860][ T6936] __kmalloc_noprof+0xfc/0x820 [ 76.504875][ T6936] ? sk_prot_alloc+0x10b/0x2a0 [ 76.504890][ T6936] sk_prot_alloc+0x10b/0x2a0 [ 76.504904][ T6936] sk_alloc+0x36/0xe80 [ 76.504921][ T6936] alg_create+0xc1/0x180 [ 76.504935][ T6936] __sock_create+0x339/0x860 [ 76.504951][ T6936] __sys_socket+0x14d/0x260 [ 76.504983][ T6936] ? __pfx___sys_socket+0x10/0x10 [ 76.505003][ T6936] __x64_sys_socket+0x72/0xb0 [ 76.505018][ T6936] ? lockdep_hardirqs_on+0x7d/0x110 [ 76.505030][ T6936] do_syscall_64+0x123/0x790 [ 76.505044][ T6936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.505055][ T6936] RIP: 0033:0x7f6e71b9e159 [ 76.505065][ T6936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.505074][ T6936] RSP: 002b:00007f6e72a40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 76.505085][ T6936] RAX: ffffffffffffffda RBX: 00007f6e71e25fa0 RCX: 00007f6e71b9e159 [ 76.505092][ T6936] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 76.505099][ T6936] RBP: 00007f6e71c35024 R08: 0000000000000000 R09: 0000000000000000 [ 76.505105][ T6936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.505111][ T6936] R13: 00007f6e71e26038 R14: 00007f6e71e25fa0 R15: 00007ffc3a03f2f8 [ 76.505125][ T6936] [ 77.263251][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'. [ 77.423558][ C2] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 77.423689][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 79.937727][ T6980] syz.3.462 uses obsolete (PF_INET,SOCK_PACKET) [ 82.340264][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.465'. [ 82.340421][ T849] cfg80211: failed to load regulatory.db [ 86.542143][ T65] Bluetooth: hci3: adv larger than maximum supported [ 86.542213][ T65] Bluetooth: hci3: Malformed LE Event: 0x0d [ 87.643446][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 87.643472][ T42] audit: type=1400 audit(1787932814.233:353): avc: denied { bind } for pid=7007 comm="syz.0.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.948605][ T42] audit: type=1400 audit(1787932814.543:354): avc: denied { create } for pid=7012 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.046719][ T42] audit: type=1400 audit(1787932814.633:355): avc: denied { setopt } for pid=7012 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.685120][ T42] audit: type=1400 audit(1787932815.273:356): avc: denied { ioctl } for pid=7012 comm="syz.3.473" path="socket:[17522]" dev="sockfs" ino=17522 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.747293][ T42] audit: type=1400 audit(1787932815.343:357): avc: denied { bind } for pid=7012 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.329431][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 97.049049][ T42] audit: type=1400 audit(1787932823.643:358): avc: denied { map } for pid=7068 comm="syz.0.491" path="socket:[15827]" dev="sockfs" ino=15827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.072869][ T42] audit: type=1400 audit(1787932823.643:359): avc: denied { read } for pid=7068 comm="syz.0.491" path="socket:[15827]" dev="sockfs" ino=15827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.564797][ T42] audit: type=1400 audit(1787932825.153:360): avc: denied { setopt } for pid=7077 comm="syz.0.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.322895][ T42] audit: type=1400 audit(1787932825.913:361): avc: denied { execute } for pid=7082 comm="syz.3.495" name="file0" dev="tmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.343039][ T7083] process 'syz.3.495' launched './file0' with NULL argv: empty string added [ 99.363276][ T42] audit: type=1400 audit(1787932825.953:362): avc: denied { execute_no_trans } for pid=7082 comm="syz.3.495" path="/130/file0" dev="tmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.430441][ T42] audit: type=1400 audit(1787932826.023:363): avc: denied { read write } for pid=7085 comm="syz.2.496" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 99.448858][ T42] audit: type=1400 audit(1787932826.033:364): avc: denied { open } for pid=7085 comm="syz.2.496" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 99.508172][ T42] audit: type=1400 audit(1787932826.103:365): avc: denied { prog_load } for pid=7085 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 99.521762][ T7087] ucma_write: process 239 (syz.2.496) changed security contexts after opening file descriptor, this is not allowed. [ 100.720762][ T42] audit: type=1400 audit(1787932827.313:366): avc: denied { allowed } for pid=7098 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 101.689058][ T42] audit: type=1400 audit(1787932828.283:367): avc: denied { prog_run } for pid=7107 comm="syz.2.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 102.404051][ T7115] FAULT_INJECTION: forcing a failure. [ 102.404051][ T7115] name failslab, interval 1, probability 0, space 0, times 0 [ 102.421037][ T7115] CPU: 2 UID: 0 PID: 7115 Comm: syz.0.508 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.421061][ T7115] Tainted: [L]=SOFTLOCKUP [ 102.421069][ T7115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.421080][ T7115] Call Trace: [ 102.421102][ T7115] [ 102.421126][ T7115] dump_stack_lvl+0x100/0x190 [ 102.421247][ T7115] should_fail_ex.cold+0x5/0xa [ 102.421323][ T7115] should_failslab+0xc2/0x120 [ 102.421379][ T7115] kmem_cache_alloc_noprof+0x91/0x6a0 [ 102.421427][ T7115] ? vm_area_dup+0x27/0x8e0 [ 102.421484][ T7115] ? anon_vma_clone+0x2ba/0xcd0 [ 102.421610][ T7115] anon_vma_clone+0x2ba/0xcd0 [ 102.421846][ T7115] __split_vma+0x646/0x1800 [ 102.421959][ T7115] ? __pfx___split_vma+0x10/0x10 [ 102.421986][ T7115] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.422169][ T7115] ? rb_read_data_buffer.isra.0+0x174/0x470 [ 102.422319][ T7115] vms_gather_munmap_vmas+0x1d2/0x1720 [ 102.422418][ T7115] ? check_buffer+0x13f/0x820 [ 102.422510][ T7115] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 102.422638][ T7115] ? __pfx_trace_clock_local+0x10/0x10 [ 102.422742][ T7115] ? __rb_reserve_next.constprop.0+0x6f7/0x1640 [ 102.423025][ T7115] do_vmi_align_munmap+0x287/0x5f0 [ 102.423116][ T7115] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 102.423142][ T7115] ? rb_commit+0x129/0x9d0 [ 102.423840][ T7115] do_vmi_munmap+0x1f8/0x3e0 [ 102.423987][ T7115] do_munmap+0xba/0x100 [ 102.424063][ T7115] ? __pfx_do_munmap+0x10/0x10 [ 102.424246][ T7115] ? check_prep_vma+0x2d5/0x1080 [ 102.424367][ T7115] mremap_to+0x2b3/0x4c0 [ 102.424427][ T7115] ? __pfx_mremap_to+0x10/0x10 [ 102.424623][ T7115] __do_sys_mremap+0xc70/0x1780 [ 102.424826][ T7115] ? __pfx___do_sys_mremap+0x10/0x10 [ 102.424859][ T7115] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 102.425029][ T7115] ? trace_event_buffer_commit+0x20a/0xa80 [ 102.425182][ T7115] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 102.425434][ T7115] ? find_held_lock+0x2b/0x80 [ 102.425464][ T7115] ? trace_syscall_enter+0xd6/0x100 [ 102.425495][ T7115] ? trace_syscall_enter+0xd6/0x100 [ 102.425692][ T7115] do_syscall_64+0x123/0x790 [ 102.425761][ T7115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.425791][ T7115] RIP: 0033:0x7f68c439e159 [ 102.425839][ T7115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.425853][ T7115] RSP: 002b:00007f68c52d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 102.425871][ T7115] RAX: ffffffffffffffda RBX: 00007f68c4625fa0 RCX: 00007f68c439e159 [ 102.425882][ T7115] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000200000001000 [ 102.425892][ T7115] RBP: 00007f68c4435024 R08: 0000200000005000 R09: 0000000000000000 [ 102.425901][ T7115] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 102.425911][ T7115] R13: 00007f68c4626038 R14: 00007f68c4625fa0 R15: 00007ffd121234b8 [ 102.426157][ T7115] [ 102.853700][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 102.853728][ T42] audit: type=1400 audit(1787932829.443:372): avc: denied { map } for pid=7119 comm="syz.1.511" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 102.885257][ T42] audit: type=1400 audit(1787932829.453:373): avc: denied { execute } for pid=7119 comm="syz.1.511" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 102.975184][ T42] audit: type=1400 audit(1787932829.553:374): avc: denied { ioctl } for pid=7119 comm="syz.1.511" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 103.016854][ T7121] Trying to write to read-only block-device nullb0 [ 103.060108][ T42] audit: type=1400 audit(1787932829.653:375): avc: denied { bind } for pid=7119 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.080940][ T42] audit: type=1400 audit(1787932829.673:376): avc: denied { connect } for pid=7119 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.765962][ T42] audit: type=1400 audit(1787932831.363:377): avc: denied { getopt } for pid=7138 comm="syz.1.519" lport=45154 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 104.822164][ T65] Bluetooth: hci3: unknown advertising packet type: 0x31 [ 104.822389][ T65] Bluetooth: hci3: Dropping invalid advertising data [ 104.827739][ T65] Bluetooth: hci3: Malformed LE Event: 0x02 [ 105.445769][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.522'. [ 105.776614][ T7147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.523'. [ 105.827660][ T7147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.523'. [ 108.222501][ T42] audit: type=1400 audit(1787932834.813:378): avc: denied { getopt } for pid=7168 comm="syz.1.532" lport=48 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.665168][ C1] e1000e 0000:00:02.0 eth1: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5360 ms [ 109.673429][ T849] e1000e 0000:00:02.0 eth1: Reset adapter unexpectedly [ 112.508632][ T42] audit: type=1400 audit(1787932839.103:379): avc: denied { map_create } for pid=7192 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 112.607460][ T7193] Bluetooth: MGMT ver 1.23 [ 112.687027][ T42] audit: type=1400 audit(1787932839.283:380): avc: denied { create } for pid=7197 comm="syz.2.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 112.744500][ T42] audit: type=1400 audit(1787932839.333:381): avc: denied { bind } for pid=7197 comm="syz.2.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 112.764743][ T42] audit: type=1400 audit(1787932839.343:382): avc: denied { name_bind } for pid=7197 comm="syz.2.544" src=514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 112.791138][ T42] audit: type=1400 audit(1787932839.383:383): avc: denied { node_bind } for pid=7197 comm="syz.2.544" src=514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 112.834554][ T42] audit: type=1400 audit(1787932839.423:384): avc: denied { connect } for pid=7197 comm="syz.2.544" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.967054][ T42] audit: type=1400 audit(1787932840.563:385): avc: denied { name_bind } for pid=7203 comm="syz.1.548" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 117.277535][ T849] e1000e 0000:00:02.0 eth1: Hardware Error [ 118.734484][ T42] audit: type=1400 audit(1787932845.203:386): avc: denied { search } for pid=7229 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.754985][ T42] audit: type=1400 audit(1787932845.203:387): avc: denied { search } for pid=7229 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.805612][ T42] audit: type=1400 audit(1787932845.203:388): avc: denied { search } for pid=7229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.824375][ T42] audit: type=1400 audit(1787932845.203:389): avc: denied { search } for pid=7229 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.854452][ T42] audit: type=1400 audit(1787932845.273:390): avc: denied { read } for pid=7234 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.871164][ T42] audit: type=1400 audit(1787932845.273:391): avc: denied { read open } for pid=7234 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.908854][ T42] audit: type=1400 audit(1787932845.273:392): avc: denied { getattr } for pid=7234 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.229583][ T42] audit: type=1400 audit(1787932845.823:393): avc: denied { write } for pid=7229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.254329][ T42] audit: type=1400 audit(1787932845.833:394): avc: denied { add_name } for pid=7229 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.740663][ T7241] loop9: detected capacity change from 0 to 7 [ 120.461912][ T7241] Dev loop9: unable to read RDB block 7 [ 120.464553][ T7241] loop9: unable to read partition table [ 120.468525][ T7241] loop9: partition table beyond EOD, truncated [ 120.471088][ T7241] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 120.494847][ C3] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 1 [ 120.499051][ C3] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 121.514590][ T65] Bluetooth: hci2: unexpected event for opcode 0x080c [ 121.518687][ T42] audit: type=1400 audit(1787932848.113:395): avc: denied { write } for pid=7245 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.544787][ T42] audit: type=1400 audit(1787932848.113:396): avc: denied { remove_name } for pid=7245 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3969 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.465130][ T42] audit: type=1400 audit(1787932849.063:397): avc: denied { bind } for pid=7255 comm="syz.3.557" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.148821][ T7261] nvmet: disable ns before setting buffered_io value. [ 123.618930][ T42] audit: type=1400 audit(1787932850.213:398): avc: denied { write } for pid=7260 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.754470][ T7264] FAULT_INJECTION: forcing a failure. [ 123.754470][ T7264] name failslab, interval 1, probability 0, space 0, times 0 [ 123.760592][ T7264] CPU: 3 UID: 0 PID: 7264 Comm: syz.3.560 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.760617][ T7264] Tainted: [L]=SOFTLOCKUP [ 123.760627][ T7264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.760635][ T7264] Call Trace: [ 123.760646][ T7264] [ 123.760657][ T7264] dump_stack_lvl+0x100/0x190 [ 123.760729][ T7264] should_fail_ex.cold+0x5/0xa [ 123.760859][ T7264] should_failslab+0xc2/0x120 [ 123.760940][ T7264] __kmalloc_cache_noprof+0x91/0x6b0 [ 123.760996][ T7264] ? percpu_ref_init+0xec/0x3f0 [ 123.761082][ T7264] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 123.761132][ T7264] percpu_ref_init+0xec/0x3f0 [ 123.761173][ T7264] ? __init_waitqueue_head+0xca/0x150 [ 123.761272][ T7264] ioctx_alloc+0x3ee/0x21a0 [ 123.761293][ T7264] ? irqentry_exit+0x24d/0xa10 [ 123.761344][ T7264] ? irqentry_exit+0x24d/0xa10 [ 123.761558][ T7264] ? __pfx_ioctx_alloc+0x10/0x10 [ 123.761622][ T7264] ? __might_fault+0x111/0x140 [ 123.761745][ T7264] __x64_sys_io_setup+0xc9/0x220 [ 123.761834][ T7264] do_syscall_64+0x123/0x790 [ 123.761916][ T7264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.761951][ T7264] RIP: 0033:0x7f6e71b9e159 [ 123.762026][ T7264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.762041][ T7264] RSP: 002b:00007f6e72a40028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 123.762061][ T7264] RAX: ffffffffffffffda RBX: 00007f6e71e25fa0 RCX: 00007f6e71b9e159 [ 123.762073][ T7264] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000006 [ 123.762083][ T7264] RBP: 00007f6e71c35024 R08: 0000000000000000 R09: 0000000000000000 [ 123.762094][ T7264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.762105][ T7264] R13: 00007f6e71e26038 R14: 00007f6e71e25fa0 R15: 00007ffc3a03f2f8 [ 123.762356][ T7264] [ 124.901060][ T42] audit: type=1400 audit(1787932851.493:399): avc: denied { create } for pid=7273 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.902274][ T7272] FAULT_INJECTION: forcing a failure. [ 124.902274][ T7272] name failslab, interval 1, probability 0, space 0, times 0 [ 124.912777][ T7272] CPU: 3 UID: 0 PID: 7272 Comm: syz.3.563 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.912798][ T7272] Tainted: [L]=SOFTLOCKUP [ 124.912804][ T7272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.912813][ T7272] Call Trace: [ 124.912828][ T7272] [ 124.912845][ T7272] dump_stack_lvl+0x100/0x190 [ 124.912943][ T7272] should_fail_ex.cold+0x5/0xa [ 124.913080][ T7272] should_failslab+0xc2/0x120 [ 124.913118][ T7272] __kvmalloc_node_noprof+0x116/0x970 [ 124.913199][ T7272] ? io_uring_setup.cold+0x1f4/0x1cde [ 124.913369][ T7272] io_uring_setup.cold+0x1f4/0x1cde [ 124.913469][ T7272] ? __pfx_io_uring_setup+0x10/0x10 [ 124.913496][ T7272] ? find_held_lock+0x2b/0x80 [ 124.913537][ T7272] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 124.913578][ T7272] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 124.913956][ T7272] ? find_held_lock+0x2b/0x80 [ 124.913988][ T7272] ? trace_syscall_enter+0xd6/0x100 [ 124.914018][ T7272] ? trace_syscall_enter+0xd6/0x100 [ 124.914163][ T7272] __x64_sys_io_uring_setup+0xc2/0x170 [ 124.914241][ T7272] do_syscall_64+0x123/0x790 [ 124.914303][ T7272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.914333][ T7272] RIP: 0033:0x7f6e71b9e159 [ 124.914378][ T7272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.914392][ T7272] RSP: 002b:00007f6e72a3ffb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 124.914414][ T7272] RAX: ffffffffffffffda RBX: 0000200000000080 RCX: 00007f6e71b9e159 [ 124.914424][ T7272] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000020 [ 124.914434][ T7272] RBP: 00007f6e71c35024 R08: 0000000000000000 R09: 0000000000000000 [ 124.914443][ T7272] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 124.914453][ T7272] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc3a03f2f8 [ 124.914696][ T7272] [ 124.919830][ T42] audit: type=1400 audit(1787932851.503:400): avc: denied { write } for pid=7270 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.076098][ T42] audit: type=1400 audit(1787932851.633:401): avc: denied { write } for pid=7273 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 125.086549][ T42] audit: type=1400 audit(1787932851.643:402): avc: denied { nlmsg_write } for pid=7273 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 125.194254][ T42] audit: type=1400 audit(1787932851.783:403): avc: denied { setopt } for pid=7273 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 125.220276][ T42] audit: type=1400 audit(1787932851.813:404): avc: denied { write } for pid=7273 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 126.199864][ T65] Bluetooth: hci0: unexpected event for opcode 0x080c [ 127.291598][ T42] audit: type=1400 audit(1787932853.883:405): avc: denied { write } for pid=7282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.673429][ T65] Bluetooth: hci1: Malformed LE Event: 0x0d [ 127.745649][ T7291] ubi: mtd0 is already attached to ubi0 [ 128.511318][ T65] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 128.987128][ T42] audit: type=1400 audit(1787932855.573:406): avc: denied { connect } for pid=7293 comm="syz.0.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.008976][ T42] audit: type=1400 audit(1787932855.603:407): avc: denied { bind } for pid=7293 comm="syz.0.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.044828][ T42] audit: type=1400 audit(1787932855.633:408): avc: denied { write } for pid=7293 comm="syz.0.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 130.404431][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 130.404452][ T42] audit: type=1400 audit(1787932856.993:410): avc: denied { write } for pid=7299 comm="syz.0.572" name="usb_gadget" dev="configfs" ino=5684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 130.833220][ T7301] Need at least one configuration in g1. [ 130.906917][ T7301] udc dummy_udc.0: failed to start g1: -22 [ 130.917752][ T7301] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 130.981183][ T7301] UDC core: g1: couldn't find an available UDC or it's busy [ 132.100266][ T7306] FAULT_INJECTION: forcing a failure. [ 132.100266][ T7306] name failslab, interval 1, probability 0, space 0, times 0 [ 132.105503][ T7306] CPU: 1 UID: 0 PID: 7306 Comm: syz.0.574 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.105527][ T7306] Tainted: [L]=SOFTLOCKUP [ 132.105533][ T7306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.105543][ T7306] Call Trace: [ 132.105560][ T7306] [ 132.105579][ T7306] dump_stack_lvl+0x100/0x190 [ 132.105683][ T7306] should_fail_ex.cold+0x5/0xa [ 132.105850][ T7306] should_failslab+0xc2/0x120 [ 132.105897][ T7306] __kvmalloc_node_noprof+0x116/0x970 [ 132.105992][ T7306] ? io_uring_setup.cold+0x1f4/0x1cde [ 132.106176][ T7306] io_uring_setup.cold+0x1f4/0x1cde [ 132.106286][ T7306] ? __pfx_io_uring_setup+0x10/0x10 [ 132.106315][ T7306] ? find_held_lock+0x2b/0x80 [ 132.106368][ T7306] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 132.106420][ T7306] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 132.106879][ T7306] ? find_held_lock+0x2b/0x80 [ 132.106917][ T7306] ? trace_syscall_enter+0xd6/0x100 [ 132.106952][ T7306] ? trace_syscall_enter+0xd6/0x100 [ 132.107116][ T7306] __x64_sys_io_uring_setup+0xc2/0x170 [ 132.107195][ T7306] do_syscall_64+0x123/0x790 [ 132.107266][ T7306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.107299][ T7306] RIP: 0033:0x7f68c439e159 [ 132.107360][ T7306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.107377][ T7306] RSP: 002b:00007f68c52d1fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 132.107398][ T7306] RAX: ffffffffffffffda RBX: 0000200000000080 RCX: 00007f68c439e159 [ 132.107410][ T7306] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000020 [ 132.107423][ T7306] RBP: 00007f68c4435024 R08: 0000000000000000 R09: 0000000000000000 [ 132.107435][ T7306] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 132.107447][ T7306] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd121234b8 [ 132.107716][ T7306] [ 132.554526][ T65] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 132.559780][ T65] Bluetooth: hci0: Injecting HCI hardware error event [ 132.565155][ T65] Bluetooth: hci0: hardware error 0x00 [ 132.658780][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.661253][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.318019][ T42] audit: type=1400 audit(1787932859.913:411): avc: denied { execute } for pid=7310 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 133.335490][ T42] audit: type=1400 audit(1787932859.913:412): avc: denied { execute_no_trans } for pid=7310 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 133.453840][ T7308] syzkaller0: entered promiscuous mode [ 133.456988][ T7308] syzkaller0: entered allmulticast mode [ 133.532336][ T7308] tipc: Started in network mode [ 133.543471][ T7308] tipc: Node identity a68eb9b616f8, cluster identity 4711 [ 133.614335][ T7308] tipc: Enabled bearer , priority 0 [ 133.671350][ T7307] tipc: Resetting bearer [ 134.072283][ T7307] tipc: Disabling bearer [ 134.634948][ T65] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 135.396139][ T42] audit: type=1400 audit(1787932861.983:413): avc: denied { read write } for pid=7320 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 135.422287][ T42] audit: type=1400 audit(1787932862.003:414): avc: denied { open } for pid=7320 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 136.015378][ T5084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 136.053412][ T5084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 136.067908][ T5084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 136.105978][ T5084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.125431][ T5084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 136.702959][ T7328] netlink: 76 bytes leftover after parsing attributes in process `syz.3.579'. [ 137.293099][ T7331] capability: warning: `syz.0.582' uses 32-bit capabilities (legacy support in use) [ 138.576369][ T5084] Bluetooth: hci4: command tx timeout [ 139.268173][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.928725][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.635364][ T5084] Bluetooth: hci4: command tx timeout [ 140.639605][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.281915][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.707175][ T5084] Bluetooth: hci4: command tx timeout [ 143.111519][ T7369] FAULT_INJECTION: forcing a failure. [ 143.111519][ T7369] name failslab, interval 1, probability 0, space 0, times 0 [ 143.117041][ T7369] CPU: 1 UID: 0 PID: 7369 Comm: syz.3.596 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.117066][ T7369] Tainted: [L]=SOFTLOCKUP [ 143.117072][ T7369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.117082][ T7369] Call Trace: [ 143.117097][ T7369] [ 143.117113][ T7369] dump_stack_lvl+0x100/0x190 [ 143.117209][ T7369] should_fail_ex.cold+0x5/0xa [ 143.117404][ T7369] should_failslab+0xc2/0x120 [ 143.117481][ T7369] __kmalloc_noprof+0xfc/0x820 [ 143.117517][ T7369] ? trace_kmalloc+0xeb/0x110 [ 143.117566][ T7369] ? lsm_blob_alloc+0x68/0x90 [ 143.117740][ T7369] lsm_blob_alloc+0x68/0x90 [ 143.117837][ T7369] security_sk_alloc+0x2d/0x290 [ 143.117896][ T7369] sk_prot_alloc+0x12a/0x2a0 [ 143.118007][ T7369] sk_alloc+0x36/0xe80 [ 143.118168][ T7369] __netlink_create+0x5e/0x2c0 [ 143.118210][ T7369] ? __wake_up+0x3f/0x60 [ 143.118298][ T7369] netlink_create+0x29b/0x610 [ 143.118349][ T7369] ? __pfx_genl_bind+0x10/0x10 [ 143.118385][ T7369] ? __pfx_genl_unbind+0x10/0x10 [ 143.118423][ T7369] ? __pfx_genl_release+0x10/0x10 [ 143.118561][ T7369] __sock_create+0x339/0x860 [ 143.118756][ T7369] __sys_socket+0x14d/0x260 [ 143.118849][ T7369] ? __pfx___sys_socket+0x10/0x10 [ 143.118890][ T7369] ? find_held_lock+0x2b/0x80 [ 143.118949][ T7369] ? trace_syscall_enter+0xd6/0x100 [ 143.119006][ T7369] ? trace_syscall_enter+0xd6/0x100 [ 143.119154][ T7369] __x64_sys_socket+0x72/0xb0 [ 143.119235][ T7369] do_syscall_64+0x123/0x790 [ 143.119406][ T7369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.119463][ T7369] RIP: 0033:0x7f6e71b9f9c7 [ 143.119510][ T7369] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.119526][ T7369] RSP: 002b:00007f6e72a3ef98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 143.119545][ T7369] RAX: ffffffffffffffda RBX: 00007f6e71e25fa0 RCX: 00007f6e71b9f9c7 [ 143.119557][ T7369] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 143.119567][ T7369] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 143.119578][ T7369] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 143.119588][ T7369] R13: 00007f6e71e26038 R14: 00007f6e71e25fa0 R15: 00007ffc3a03f2f8 [ 143.119893][ T7369] [ 144.206069][ T12] bridge_slave_1: left allmulticast mode [ 144.211838][ T12] bridge_slave_1: left promiscuous mode [ 144.218824][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.311622][ T12] bridge_slave_0: left allmulticast mode [ 144.313481][ T12] bridge_slave_0: left promiscuous mode [ 144.325533][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.784962][ T5084] Bluetooth: hci4: command tx timeout [ 145.943222][ T42] audit: type=1400 audit(1787932872.533:415): avc: denied { read } for pid=7388 comm="syz.0.605" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 145.965047][ T42] audit: type=1400 audit(1787932872.543:416): avc: denied { open } for pid=7388 comm="syz.0.605" path="/153/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 146.305738][ T7391] FAULT_INJECTION: forcing a failure. [ 146.305738][ T7391] name failslab, interval 1, probability 0, space 0, times 0 [ 146.310299][ T7391] CPU: 0 UID: 0 PID: 7391 Comm: syz.1.606 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.310322][ T7391] Tainted: [L]=SOFTLOCKUP [ 146.310330][ T7391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.310341][ T7391] Call Trace: [ 146.310365][ T7391] [ 146.310389][ T7391] dump_stack_lvl+0x100/0x190 [ 146.310503][ T7391] should_fail_ex.cold+0x5/0xa [ 146.310580][ T7391] should_failslab+0xc2/0x120 [ 146.310637][ T7391] __kmalloc_noprof+0xfc/0x820 [ 146.310715][ T7391] ? trace_kmalloc+0xeb/0x110 [ 146.310794][ T7391] ? lsm_blob_alloc+0x68/0x90 [ 146.310905][ T7391] lsm_blob_alloc+0x68/0x90 [ 146.310964][ T7391] security_sk_alloc+0x2d/0x290 [ 146.311053][ T7391] sk_prot_alloc+0x12a/0x2a0 [ 146.311150][ T7391] sk_alloc+0x36/0xe80 [ 146.311275][ T7391] __netlink_create+0x5e/0x2c0 [ 146.311333][ T7391] ? __wake_up+0x3f/0x60 [ 146.311498][ T7391] netlink_create+0x29b/0x610 [ 146.311590][ T7391] ? __pfx_genl_bind+0x10/0x10 [ 146.311671][ T7391] ? __pfx_genl_unbind+0x10/0x10 [ 146.311702][ T7391] ? __pfx_genl_release+0x10/0x10 [ 146.311792][ T7391] __sock_create+0x339/0x860 [ 146.312035][ T7391] __sys_socket+0x14d/0x260 [ 146.312092][ T7391] ? __pfx___sys_socket+0x10/0x10 [ 146.312114][ T7391] ? find_held_lock+0x2b/0x80 [ 146.312142][ T7391] ? trace_syscall_enter+0xd6/0x100 [ 146.312173][ T7391] ? trace_syscall_enter+0xd6/0x100 [ 146.312354][ T7391] __x64_sys_socket+0x72/0xb0 [ 146.312473][ T7391] do_syscall_64+0x123/0x790 [ 146.312588][ T7391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.312636][ T7391] RIP: 0033:0x7f14ab79f9c7 [ 146.312716][ T7391] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.312737][ T7391] RSP: 002b:00007f14ac73af98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 146.312767][ T7391] RAX: ffffffffffffffda RBX: 00007f14aba25fa0 RCX: 00007f14ab79f9c7 [ 146.312783][ T7391] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 146.312799][ T7391] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 146.312815][ T7391] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 146.312831][ T7391] R13: 00007f14aba26038 R14: 00007f14aba25fa0 R15: 00007ffd89e1c428 [ 146.313284][ T7391] [ 146.598777][ T12] gretap0 (unregistering): left promiscuous mode [ 147.087344][ T42] audit: type=1400 audit(1787932873.673:417): avc: denied { map_read map_write } for pid=7396 comm="syz.1.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 147.371870][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.461014][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.504146][ T12] bond0 (unregistering): Released all slaves [ 151.078598][ T42] audit: type=1400 audit(1787932877.673:418): avc: denied { write } for pid=7417 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.466591][ T12] macvlan1: left promiscuous mode [ 151.651828][ T7427] FAULT_INJECTION: forcing a failure. [ 151.651828][ T7427] name failslab, interval 1, probability 0, space 0, times 0 [ 151.670014][ T7427] CPU: 0 UID: 0 PID: 7427 Comm: syz.3.619 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.670039][ T7427] Tainted: [L]=SOFTLOCKUP [ 151.670046][ T7427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.670055][ T7427] Call Trace: [ 151.670072][ T7427] [ 151.670091][ T7427] dump_stack_lvl+0x100/0x190 [ 151.670198][ T7427] should_fail_ex.cold+0x5/0xa [ 151.670319][ T7427] should_failslab+0xc2/0x120 [ 151.670366][ T7427] __kvmalloc_node_noprof+0x116/0x970 [ 151.670438][ T7427] ? percpu_ref_init+0xec/0x3f0 [ 151.670478][ T7427] ? io_alloc_cache_init+0x38/0x170 [ 151.670626][ T7427] io_alloc_cache_init+0x38/0x170 [ 151.670717][ T7427] io_uring_setup.cold+0x450/0x1cde [ 151.670880][ T7427] ? __pfx_io_uring_setup+0x10/0x10 [ 151.670912][ T7427] ? find_held_lock+0x2b/0x80 [ 151.670944][ T7427] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 151.670967][ T7427] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 151.671332][ T7427] ? find_held_lock+0x2b/0x80 [ 151.671376][ T7427] ? trace_syscall_enter+0xd6/0x100 [ 151.671420][ T7427] ? trace_syscall_enter+0xd6/0x100 [ 151.671549][ T7427] __x64_sys_io_uring_setup+0xc2/0x170 [ 151.671601][ T7427] do_syscall_64+0x123/0x790 [ 151.671708][ T7427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.671748][ T7427] RIP: 0033:0x7f6e71b9e159 [ 151.671808][ T7427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.671820][ T7427] RSP: 002b:00007f6e72a3ffb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 151.671834][ T7427] RAX: ffffffffffffffda RBX: 0000200000000080 RCX: 00007f6e71b9e159 [ 151.671842][ T7427] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000020 [ 151.671849][ T7427] RBP: 00007f6e71c35024 R08: 0000000000000000 R09: 0000000000000000 [ 151.671857][ T7427] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 151.671864][ T7427] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc3a03f2f8 [ 151.672085][ T7427] [ 151.919346][ T12] hsr_slave_0: left promiscuous mode [ 151.937065][ T12] hsr_slave_1: left promiscuous mode [ 151.951359][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.954293][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.993448][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.004374][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.200959][ T12] veth1_macvtap: left promiscuous mode [ 152.203121][ T12] veth0_macvtap: left promiscuous mode [ 152.216343][ T12] veth1_vlan: left promiscuous mode [ 152.222041][ T12] veth0_vlan: left promiscuous mode [ 152.425725][ T42] audit: type=1400 audit(1787932879.023:419): avc: denied { write } for pid=7430 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.539651][ T5084] Bluetooth: hci2: unexpected event for opcode 0x2019 [ 155.928939][ T12] team0 (unregistering): Port device team_slave_1 removed [ 156.213762][ T12] team0 (unregistering): Port device team_slave_0 removed [ 157.595804][ T5084] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 157.599754][ T5084] Bluetooth: hci2: Injecting HCI hardware error event [ 157.605102][ T65] Bluetooth: hci2: hardware error 0x00 [ 158.128507][ T5436] 8021q: adding VLAN 0 to HW filter on device eth2 [ 159.396498][ T7472] block2mtd: error: cannot open device /dev/loop0 [ 159.675387][ T65] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 159.957189][ T7320] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.966882][ T7320] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.979194][ T7320] bridge_slave_0: entered allmulticast mode [ 160.005805][ T7320] bridge_slave_0: entered promiscuous mode [ 160.037756][ T7320] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.043709][ T7320] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.050045][ T7320] bridge_slave_1: entered allmulticast mode [ 160.099808][ T7320] bridge_slave_1: entered promiscuous mode [ 161.036953][ T7320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.192270][ T7320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.967330][ T7320] team0: Port device team_slave_0 added [ 162.047776][ T7320] team0: Port device team_slave_1 added [ 162.451436][ T42] audit: type=1400 audit(1787932889.043:420): avc: denied { write } for pid=7496 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.893373][ T7320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.897908][ T7320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.907244][ T7320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.948910][ T7320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.951679][ T7320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.960987][ T7320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.394820][ T42] audit: type=1400 audit(1787932889.983:421): avc: denied { write } for pid=7508 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.094403][ T7320] hsr_slave_0: entered promiscuous mode [ 164.117945][ T7320] hsr_slave_1: entered promiscuous mode [ 164.138404][ T7320] debugfs: 'hsr0' already exists in 'hsr' [ 164.140514][ T7320] Cannot create hsr debugfs directory [ 164.753007][ T5436] 8021q: adding VLAN 0 to HW filter on device eth3 [ 164.842033][ T7515] FAULT_INJECTION: forcing a failure. [ 164.842033][ T7515] name failslab, interval 1, probability 0, space 0, times 0 [ 164.846575][ T7515] CPU: 2 UID: 0 PID: 7515 Comm: syz.0.646 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.846596][ T7515] Tainted: [L]=SOFTLOCKUP [ 164.846620][ T7515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.846629][ T7515] Call Trace: [ 164.846642][ T7515] [ 164.846662][ T7515] dump_stack_lvl+0x100/0x190 [ 164.846750][ T7515] should_fail_ex.cold+0x5/0xa [ 164.846895][ T7515] should_failslab+0xc2/0x120 [ 164.846934][ T7515] __kmalloc_flags_noprof+0x122/0x8b0 [ 164.847008][ T7515] ? alloc_slab_obj_exts+0x5a/0x160 [ 164.847176][ T7515] alloc_slab_obj_exts+0x5a/0x160 [ 164.847230][ T7515] __memcg_slab_post_alloc_hook+0x3da/0x1150 [ 164.847421][ T7515] ? kasan_unpoison+0x27/0x60 [ 164.847519][ T7515] __kvmalloc_node_noprof+0x73b/0x970 [ 164.847590][ T7515] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 164.847635][ T7515] ? alloc_fdtable+0x110/0x2d0 [ 164.847838][ T7515] alloc_fdtable+0x110/0x2d0 [ 164.847926][ T7515] dup_fd+0x995/0xd10 [ 164.848004][ T7515] ? do_raw_spin_unlock+0x53/0x1e0 [ 164.848035][ T7515] ? do_raw_spin_unlock+0x145/0x1e0 [ 164.848114][ T7515] ? _raw_spin_unlock+0x28/0x50 [ 164.848173][ T7515] ? copy_fs_struct+0x2a0/0x340 [ 164.848261][ T7515] ksys_unshare+0x7c7/0xa70 [ 164.848315][ T7515] ? __pfx_ksys_unshare+0x10/0x10 [ 164.848363][ T7515] ? find_held_lock+0x2b/0x80 [ 164.848406][ T7515] ? trace_syscall_enter+0xd6/0x100 [ 164.848449][ T7515] ? trace_syscall_enter+0xd6/0x100 [ 164.848609][ T7515] __x64_sys_unshare+0x31/0x40 [ 164.848657][ T7515] do_syscall_64+0x123/0x790 [ 164.848791][ T7515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.848835][ T7515] RIP: 0033:0x7f68c439e159 [ 164.848905][ T7515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.848919][ T7515] RSP: 002b:00007f68c52d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 164.848936][ T7515] RAX: ffffffffffffffda RBX: 00007f68c4625fa0 RCX: 00007f68c439e159 [ 164.848945][ T7515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 164.848954][ T7515] RBP: 00007f68c4435024 R08: 0000000000000000 R09: 0000000000000000 [ 164.848963][ T7515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.848972][ T7515] R13: 00007f68c4626038 R14: 00007f68c4625fa0 R15: 00007ffd121234b8 [ 164.849239][ T7515] [ 166.694113][ T42] audit: type=1400 audit(1787932893.283:422): avc: denied { write } for pid=7519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.724226][ T42] audit: type=1400 audit(1787932894.313:423): avc: denied { write } for pid=7536 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.428048][ T7320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 168.517532][ T7320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 168.552304][ T7320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 168.629643][ T7320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 168.686010][ T5436] 8021q: adding VLAN 0 to HW filter on device eth4 [ 168.692312][ T7320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 168.843051][ T7320] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 168.868722][ T7320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 168.943828][ T7320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 169.190748][ T7557] misc userio: The device must be registered before sending interrupts [ 170.399285][ T7320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.450322][ T42] audit: type=1400 audit(1787932897.043:424): avc: denied { write } for pid=7562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.652256][ T7320] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.855921][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.859212][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.017757][ T1055] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.021303][ T1055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.512368][ T42] audit: type=1400 audit(1787932898.103:425): avc: denied { write } for pid=7574 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.510491][ T5436] 8021q: adding VLAN 0 to HW filter on device eth5 [ 173.026889][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'. [ 177.131320][ T7320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.526762][ T7641] misc userio: Invalid payload size [ 177.530730][ T7641] misc userio: The device must be registered before sending interrupts [ 180.462850][ T7320] veth0_vlan: entered promiscuous mode [ 180.676639][ T7320] veth1_vlan: entered promiscuous mode [ 181.342650][ T7320] veth0_macvtap: entered promiscuous mode [ 181.459970][ T7320] veth1_macvtap: entered promiscuous mode [ 181.591398][ T65] Bluetooth: hci1: adv larger than maximum supported [ 181.591431][ T65] Bluetooth: hci1: Malformed LE Event: 0x0d [ 181.721410][ T7320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.880675][ T7320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.175544][ T5816] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.180982][ T5816] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.188141][ T5816] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.349793][ T5592] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.567690][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.576298][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.287831][ T1055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.294409][ T1055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.171649][ T65] Bluetooth: hci1: unexpected event for opcode 0x2019 [ 187.284141][ T42] audit: type=1400 audit(1787932913.863:426): avc: denied { write } for pid=7711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.057648][ T42] audit: type=1400 audit(1787932915.653:427): avc: denied { write } for pid=7729 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.074651][ T7734] netlink: 60 bytes leftover after parsing attributes in process `syz.4.722'. [ 191.184773][ T65] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 191.188811][ T65] Bluetooth: hci1: Injecting HCI hardware error event [ 191.192585][ T42] audit: type=1400 audit(1787932917.783:428): avc: denied { write } for pid=7751 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.195409][ T5084] Bluetooth: hci1: hardware error 0x00 [ 192.590654][ T42] audit: type=1400 audit(1787932919.183:429): avc: denied { write } for pid=7769 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.058789][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.738'. [ 193.354540][ T5084] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 194.102822][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.109386][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.376685][ T42] audit: type=1400 audit(1787932921.973:430): avc: denied { write } for pid=7788 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.648257][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 196.664570][ T42] audit: type=1400 audit(1787932923.253:431): avc: denied { write } for pid=7810 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.085887][ T42] audit: type=1400 audit(1787932925.673:432): avc: denied { write } for pid=7833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.003112][ T7845] netlink: 24 bytes leftover after parsing attributes in process `syz.3.758'. [ 200.462902][ T42] audit: type=1400 audit(1787932927.053:433): avc: denied { write } for pid=7846 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.694893][ T42] audit: type=1400 audit(1787932927.283:434): avc: denied { setopt } for pid=7834 comm="syz.1.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 200.790557][ T42] audit: type=1400 audit(1787932927.383:435): avc: denied { write } for pid=7834 comm="syz.1.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 201.473102][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.762'. [ 202.992714][ T7873] netlink: 24 bytes leftover after parsing attributes in process `syz.3.767'. [ 203.531619][ T7875] netlink: 24 bytes leftover after parsing attributes in process `syz.3.769'. [ 204.436787][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 207.584858][ T7906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.780'. [ 208.533355][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.782'. [ 211.412656][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.790'. [ 212.272229][ T42] audit: type=1400 audit(1787932938.863:436): avc: denied { mounton } for pid=7942 comm="syz.4.793" path="/20/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 212.280139][ T7945] ======================================================= [ 212.280139][ T7945] WARNING: The mand mount option has been deprecated and [ 212.280139][ T7945] and is ignored by this kernel. Remove the mand [ 212.280139][ T7945] option from the mount to silence this warning. [ 212.280139][ T7945] ======================================================= [ 212.336624][ T7945] 9pnet_fd: p9_fd_create_unix (7945): problem connecting socket: ./proc/net/rpc/auth.unix.ip/channel: -111 [ 215.247155][ T7965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.802'. [ 215.723581][ T7971] netlink: 48 bytes leftover after parsing attributes in process `syz.0.805'. [ 215.760555][ T7970] netlink: 60 bytes leftover after parsing attributes in process `syz.1.804'. [ 216.361781][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.807'. [ 218.301616][ T42] audit: type=1400 audit(1787932944.893:437): avc: denied { write } for pid=7992 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.098004][ T8007] netlink: 48 bytes leftover after parsing attributes in process `syz.1.816'. [ 219.387947][ T8011] netlink: 60 bytes leftover after parsing attributes in process `syz.3.817'. [ 219.449177][ T42] audit: type=1400 audit(1787932946.043:438): avc: denied { write } for pid=8006 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.192410][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.820'. [ 220.437180][ T5084] Bluetooth: hci4: link tx timeout [ 220.440110][ T5084] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 222.467428][ T65] Bluetooth: hci4: command 0x0406 tx timeout [ 222.614441][ T42] audit: type=1400 audit(1787932949.193:439): avc: denied { getopt } for pid=8029 comm="syz.1.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 225.150269][ T42] audit: type=1400 audit(1787932951.743:440): avc: denied { write } for pid=8046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.279494][ T8057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.833'. [ 226.352907][ T42] audit: type=1400 audit(1787932952.943:441): avc: denied { write } for pid=8062 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.174192][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.844'. [ 231.702912][ T42] audit: type=1400 audit(1787932958.293:442): avc: denied { read write } for pid=8124 comm="syz.4.854" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 231.739271][ T42] audit: type=1400 audit(1787932958.303:443): avc: denied { open } for pid=8124 comm="syz.4.854" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 231.946609][ T5872] input: syz0 as /devices/virtual/misc/uhid/0007:0001:0002.0002/input/input6 [ 231.989950][ T42] audit: type=1400 audit(1787932958.583:444): avc: denied { read } for pid=5119 comm="acpid" name="mouse2" dev="devtmpfs" ino=2860 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 232.007832][ T8129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.856'. [ 232.011226][ T42] audit: type=1400 audit(1787932958.583:445): avc: denied { open } for pid=5119 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2860 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 232.020954][ T42] audit: type=1400 audit(1787932958.603:446): avc: denied { ioctl } for pid=5119 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2860 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 232.130144][ T5872] hid-generic 0007:0001:0002.0002: input,hidraw1: HID v0.01 Mouse [syz0] on syz0 [ 232.947148][ T8131] fido_id[8131]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 234.825825][ T42] audit: type=1400 audit(1787932961.413:447): avc: denied { listen } for pid=8157 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.967715][ T42] audit: type=1400 audit(1787932961.553:448): avc: denied { setopt } for pid=8157 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.998623][ T42] audit: type=1400 audit(1787932961.583:449): avc: denied { write } for pid=8157 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.078974][ T8163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.867'. [ 235.845459][ T8166] netlink: 68 bytes leftover after parsing attributes in process `syz.4.869'. [ 236.051929][ T5832] input: syz0 as /devices/virtual/misc/uhid/0007:0001:0002.0003/input/input7 [ 236.162131][ T5832] hid-generic 0007:0001:0002.0003: input,hidraw1: HID v0.01 Mouse [syz0] on syz0 [ 237.316136][ T42] audit: type=1400 audit(1787932963.903:450): avc: denied { create } for pid=8178 comm="syz.4.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 237.423378][ T42] audit: type=1400 audit(1787932964.013:451): avc: denied { listen } for pid=8178 comm="syz.4.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 237.473001][ T8179] netlink: 'syz.4.874': attribute type 2 has an invalid length. [ 237.537591][ T42] audit: type=1400 audit(1787932964.133:452): avc: denied { connect } for pid=8178 comm="syz.4.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 237.610045][ T42] audit: type=1400 audit(1787932964.203:453): avc: denied { write } for pid=8178 comm="syz.4.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 237.668177][ T42] audit: type=1400 audit(1787932964.253:454): avc: denied { accept } for pid=8178 comm="syz.4.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 237.842794][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.876'. [ 238.580083][ T8184] fido_id[8184]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 238.986241][ T42] audit: type=1400 audit(1787932965.573:455): avc: denied { write } for pid=8188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.761994][ T8204] netlink: 68 bytes leftover after parsing attributes in process `syz.3.881'. [ 240.163546][ T42] audit: type=1400 audit(1787932966.753:456): avc: denied { write } for pid=8205 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.706929][ T5817] input: syz0 as /devices/virtual/misc/uhid/0007:0001:0002.0004/input/input8 [ 240.857893][ T5817] hid-generic 0007:0001:0002.0004: input,hidraw1: HID v0.01 Mouse [syz0] on syz0 [ 241.566864][ T8221] netlink: 16 bytes leftover after parsing attributes in process `syz.4.886'. [ 241.607349][ T8223] netlink: 20 bytes leftover after parsing attributes in process `syz.0.887'. [ 241.897455][ T8219] fido_id[8219]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 242.691221][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.890'. [ 242.698279][ T42] audit: type=1400 audit(1787932969.293:457): avc: denied { write } for pid=8225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.990471][ T42] audit: type=1400 audit(1787932970.583:458): avc: denied { write } for pid=8242 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.705277][ T5084] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 246.710268][ T5084] Bluetooth: hci4: Injecting HCI hardware error event [ 246.715355][ T5084] Bluetooth: hci4: hardware error 0x00 [ 247.572073][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.908'. [ 247.773582][ T42] audit: type=1400 audit(1787932974.363:459): avc: denied { write } for pid=8284 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.884248][ T5084] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 249.480481][ T42] audit: type=1400 audit(1787932976.043:460): avc: denied { write } for pid=8301 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.368327][ T42] audit: type=1400 audit(1787932977.953:461): avc: denied { write } for pid=8313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.535888][ T42] audit: type=1400 audit(1787932979.123:462): avc: denied { write } for pid=8323 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.676005][ T8326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.919'. [ 254.280035][ T42] audit: type=1400 audit(1787932980.863:463): avc: denied { write } for pid=8335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.395980][ T42] audit: type=1400 audit(1787932981.993:464): avc: denied { write } for pid=8350 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.523452][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.526306][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.238626][ T42] audit: type=1400 audit(1787932983.833:465): avc: denied { write } for pid=8365 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.335424][ T42] audit: type=1400 audit(1787932985.913:466): avc: denied { write } for pid=8389 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.348313][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.939'. [ 261.787158][ T42] audit: type=1400 audit(1787932988.383:467): avc: denied { write } for pid=8405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.926169][ T42] audit: type=1400 audit(1787932989.523:468): avc: denied { write } for pid=8417 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.441304][ T8431] syzkaller0: entered promiscuous mode [ 264.443620][ T8431] syzkaller0: entered allmulticast mode [ 264.808435][ T42] audit: type=1400 audit(1787932991.393:469): avc: denied { write } for pid=8433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.832478][ T42] audit: type=1400 audit(1787932992.423:470): avc: denied { write } for pid=8450 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.142656][ T42] audit: type=1400 audit(1787932994.723:471): avc: denied { write } for pid=8463 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.213385][ T8470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.963'. [ 269.441691][ T42] audit: type=1400 audit(1787932996.023:472): avc: denied { write } for pid=8476 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.771724][ T8491] Dead loop on virtual device ip6_vti0 (net 31), fix it urgently! [ 271.086723][ T42] audit: type=1400 audit(1787932997.683:473): avc: denied { write } for pid=8488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.056828][ T42] audit: type=1400 audit(1787932998.643:474): avc: denied { write } for pid=8500 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.346775][ T8508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.974'. [ 273.175397][ T8512] FAULT_INJECTION: forcing a failure. [ 273.175397][ T8512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.181172][ T8512] CPU: 2 UID: 0 PID: 8512 Comm: syz.1.978 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.181198][ T8512] Tainted: [L]=SOFTLOCKUP [ 273.181208][ T8512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.181221][ T8512] Call Trace: [ 273.181252][ T8512] [ 273.181270][ T8512] dump_stack_lvl+0x100/0x190 [ 273.181333][ T8512] should_fail_ex.cold+0x5/0xa [ 273.181450][ T8512] _copy_from_user+0x2e/0xd0 [ 273.181553][ T8512] memdup_user+0x6b/0xe0 [ 273.181603][ T8512] strndup_user+0x78/0xe0 [ 273.181658][ T8512] __x64_sys_fsopen+0x9e/0x220 [ 273.181734][ T8512] do_syscall_64+0x123/0x790 [ 273.181899][ T8512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.181922][ T8512] RIP: 0033:0x7f14ab79e159 [ 273.181953][ T8512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.181965][ T8512] RSP: 002b:00007f14ac73c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 273.181981][ T8512] RAX: ffffffffffffffda RBX: 00007f14aba25fa0 RCX: 00007f14ab79e159 [ 273.181989][ T8512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 273.181999][ T8512] RBP: 00007f14ab835024 R08: 0000000000000000 R09: 0000000000000000 [ 273.182008][ T8512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.182017][ T8512] R13: 00007f14aba26038 R14: 00007f14aba25fa0 R15: 00007ffd89e1c428 [ 273.182287][ T8512] [ 273.742962][ T8517] IPv6: NLM_F_CREATE should be specified when creating new route [ 275.553063][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'. [ 275.641242][ T8529] Bluetooth: hci0: unsupported parameter 255 [ 275.644051][ T8529] Bluetooth: hci0: unsupported parameter 255 [ 276.290813][ T8538] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.989'. [ 278.829064][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.995'. [ 279.401817][ T8565] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.998'. [ 279.504739][ T42] audit: type=1400 audit(1787933006.093:475): avc: denied { write } for pid=8560 comm="syz.0.997" name="nullb" dev="configfs" ino=3878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 279.597125][ T8562] null_blk: nullb1: using native zone append [ 279.905080][ T8571] Bluetooth: hci0: invalid length 0, exp 2 for type 27 [ 280.477049][ T8562] null_blk: disk nullb1 created [ 280.701455][ T1159] IPVS: starting estimator thread 0... [ 280.815675][ T8579] IPVS: using max 4 ests per chain, 9600 per kthread [ 282.509967][ T8194] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 282.597006][ T8194] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 282.692983][ T8595] Bluetooth: hci0: invalid length 0, exp 2 for type 27 [ 283.691895][ T8602] fido_id[8602]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 284.055714][ T121] IPVS: starting estimator thread 0... [ 284.145281][ T8611] IPVS: using max 5 ests per chain, 12000 per kthread [ 284.634620][ T8615] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1018'. [ 286.956603][ T8635] capability: warning: `syz.3.1027' uses deprecated v2 capabilities in a way that may be insecure [ 289.518284][ T8655] syzkaller0: entered promiscuous mode [ 289.528521][ T8655] syzkaller0: entered allmulticast mode [ 294.800432][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 294.814673][ T8698] bridge_slave_1: left allmulticast mode [ 294.824888][ T8698] bridge_slave_1: left promiscuous mode [ 294.841478][ T8698] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.441749][ T8698] bridge_slave_0: left allmulticast mode [ 296.532525][ T8698] bridge_slave_0: left promiscuous mode [ 296.547449][ T8698] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.029033][ T42] audit: type=1400 audit(1787933023.623:476): avc: denied { create } for pid=8709 comm="syz.0.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 297.076650][ T42] audit: type=1400 audit(1787933023.673:477): avc: denied { setopt } for pid=8709 comm="syz.0.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 302.957234][ T42] audit: type=1400 audit(1787933029.543:478): avc: denied { sqpoll } for pid=8720 comm="syz.4.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 303.140881][ T42] audit: type=1400 audit(1787933029.733:479): avc: denied { append } for pid=8724 comm="syz.0.1056" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 303.471293][ T1347] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 303.859964][ T1347] usb 9-1: Using ep0 maxpacket: 8 [ 303.885915][ T1347] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 303.989566][ T42] audit: type=1400 audit(1787933029.903:480): avc: denied { write } for pid=8721 comm="syz.1.1055" name="configs" dev="configfs" ino=16708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 303.997533][ T42] audit: type=1400 audit(1787933029.933:481): avc: denied { write } for pid=8721 comm="syz.1.1055" name="functions" dev="configfs" ino=16707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 303.999243][ T1347] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 304.064588][ T1347] usb 9-1: config 0 has no interface number 0 [ 304.078892][ T1347] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 304.093400][ T1347] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 304.126608][ T1347] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 304.155230][ T1347] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 304.167550][ T1347] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.216273][ T42] audit: type=1400 audit(1787933029.963:482): avc: denied { write } for pid=8721 comm="syz.1.1055" name="c.1" dev="configfs" ino=22027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 304.238979][ T42] audit: type=1400 audit(1787933029.983:483): avc: denied { write } for pid=8721 comm="syz.1.1055" name="c.1" dev="configfs" ino=22027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 304.355631][ T8726] loop5: detected capacity change from 0 to 2640 [ 304.368035][ T8726] Buffer I/O error on dev loop5, logical block 0, async page read [ 304.371303][ T8726] Buffer I/O error on dev loop5, logical block 0, async page read [ 304.377357][ T8726] Buffer I/O error on dev loop5, logical block 0, async page read [ 304.382683][ T8726] Buffer I/O error on dev loop5, logical block 0, async page read [ 304.389212][ T8726] Buffer I/O error on dev loop5, logical block 0, async page read [ 304.399677][ T8726] Buffer I/O error on dev loop5, logical block 0, async page read [ 304.425741][ T8726] Buffer I/O error on dev loop5, logical block 0, async page read [ 304.438378][ T8726] Buffer I/O error on dev loop5, logical block 0, async page read [ 304.471028][ T8726] ldm_validate_partition_table(): Disk read failed. [ 304.519220][ T8726] Buffer I/O error on dev loop5, logical block 0, async page read [ 304.521996][ T8726] Buffer I/O error on dev loop5, logical block 0, async page read [ 304.541481][ T1347] usb 9-1: config 0 descriptor?? [ 304.587596][ T8726] Dev loop5: unable to read RDB block 0 [ 304.831751][ T1347] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 304.857299][ T8726] loop5: unable to read partition table [ 304.896490][ T8726] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 304.929851][ T42] audit: type=1400 audit(1787933031.513:484): avc: denied { create } for pid=8720 comm="syz.4.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 304.995876][ T42] audit: type=1400 audit(1787933031.593:485): avc: denied { read } for pid=8720 comm="syz.4.1057" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 305.036122][ T42] audit: type=1400 audit(1787933031.603:486): avc: denied { open } for pid=8720 comm="syz.4.1057" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 305.113183][ T1347] usb 9-1: USB disconnect, device number 2 [ 305.416201][ T1347] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 307.090874][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 309.109389][ T42] audit: type=1400 audit(1787933035.703:487): avc: denied { mount } for pid=8753 comm="syz.0.1068" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 309.948281][ T42] audit: type=1400 audit(1787933036.533:488): avc: denied { unmount } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 310.573155][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 311.190538][ T8770] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1065'. [ 311.794229][ T42] audit: type=1400 audit(1787933038.353:489): avc: denied { create } for pid=8771 comm="syz.0.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 311.816442][ T42] audit: type=1400 audit(1787933038.363:490): avc: denied { write } for pid=8771 comm="syz.0.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 312.092045][ T42] audit: type=1400 audit(1787933038.683:491): avc: denied { mount } for pid=8773 comm="syz.1.1075" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 312.148143][ T8775] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 5001287 (only 8 groups) [ 313.054688][ T1347] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 313.245177][ T1347] usb 6-1: Using ep0 maxpacket: 16 [ 313.254470][ T1347] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 313.303655][ T1347] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.324189][ T1347] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.334878][ T1347] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 313.341861][ T1347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.399868][ T1347] usb 6-1: config 0 descriptor?? [ 314.055172][ T1347] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 314.059962][ T1347] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 314.062601][ T1347] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 314.069960][ T1347] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 314.078439][ T1347] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 314.082118][ T1347] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 314.087696][ T1347] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 314.090295][ T1347] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 314.092746][ T1347] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 314.097998][ T1347] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 314.101819][ T1347] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 314.173104][ T1347] microsoft 0003:045E:07DA.0006: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 314.368840][ T10] usb 6-1: USB disconnect, device number 3 [ 315.461253][ T8799] fido_id[8799]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/report_descriptor': No such file or directory [ 316.966732][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.969233][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.084337][ T849] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 319.273290][ T849] usb 6-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 2.00 [ 319.299890][ T849] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.330618][ T849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 319.337030][ T849] usb 6-1: Product: syz [ 319.338653][ T849] usb 6-1: Manufacturer: syz [ 319.466488][ T849] ldusb 6-1:1.0: Interrupt in endpoint not found [ 319.729837][ T849] usb 6-1: USB disconnect, device number 4 [ 320.704658][ T5873] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 320.884648][ T5873] usb 8-1: Using ep0 maxpacket: 8 [ 320.905250][ T5873] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 320.946673][ T5873] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.958352][ T5873] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 320.964527][ T5873] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 320.976473][ T5873] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 320.983596][ T5873] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.173582][ T5873] hub 8-1:1.0: bad descriptor, ignoring hub [ 321.179319][ T5873] hub 8-1:1.0: probe with driver hub failed with error -5 [ 321.194633][ T5873] cdc_wdm 8-1:1.0: skipping garbage [ 321.199335][ T5873] cdc_wdm 8-1:1.0: skipping garbage [ 321.231032][ T5873] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 321.233545][ T5873] cdc_wdm 8-1:1.0: Unknown control protocol [ 321.446380][ T10] usb 8-1: USB disconnect, device number 2 [ 321.661471][ T42] audit: type=1400 audit(1787933048.233:492): avc: denied { mount } for pid=8832 comm="syz.3.1093" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 321.678306][ T42] audit: type=1400 audit(1787933048.273:493): avc: denied { mounton } for pid=8832 comm="syz.3.1093" path="/294/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 322.552259][ T42] audit: type=1400 audit(1787933049.123:494): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 322.588732][ T42] audit: type=1400 audit(1787933049.163:495): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 322.749689][ T8843] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 5001287 (only 8 groups) [ 324.297627][ T5872] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 324.514757][ T5872] usb 6-1: Using ep0 maxpacket: 8 [ 324.527683][ T5872] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 324.558442][ T5872] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 324.567922][ T5872] usb 6-1: config 0 has no interface number 0 [ 324.570237][ T5872] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 324.573880][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.619283][ T5872] usb 6-1: config 0 descriptor?? [ 324.728262][ T5872] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 324.876640][ T5872] usb 6-1: USB disconnect, device number 5 [ 329.530588][ T5872] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 330.004503][ T5872] usb 6-1: Using ep0 maxpacket: 32 [ 332.999979][ T5872] usb 6-1: device descriptor read/all, error -71 [ 339.746166][ T1347] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 339.937112][ T1347] usb 9-1: Using ep0 maxpacket: 32 [ 339.948487][ T1347] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 339.976040][ T1347] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.037845][ T1347] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.040620][ T1347] usb 9-1: Product: syz [ 340.042465][ T1347] usb 9-1: Manufacturer: syz [ 340.043834][ T1347] usb 9-1: SerialNumber: syz [ 340.105720][ T1347] usb 9-1: config 0 descriptor?? [ 340.236220][ T1347] usb 9-1: No union descriptors [ 340.274961][ T1347] usb 9-1: unsupported MDLM descriptors [ 342.002556][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1136'. [ 342.961397][ T5513] usb 9-1: USB disconnect, device number 3 [ 347.625073][ T5817] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 347.819075][ T5817] usb 8-1: Using ep0 maxpacket: 32 [ 347.882124][ T5817] usb 8-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 347.915936][ T5817] usb 8-1: config index 0 descriptor too short (expected 19, got 18) [ 347.944691][ T5817] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.950643][ T5817] usb 8-1: Product: syz [ 347.952079][ T5817] usb 8-1: Manufacturer: syz [ 347.957986][ T5817] usb 8-1: SerialNumber: syz [ 348.088965][ T5817] usb 8-1: config 0 descriptor?? [ 348.176796][ T5817] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 348.186508][ T5817] dvb-usb: bulk message failed: -22 (2/0) [ 348.335313][ T5817] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 348.348687][ T5817] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 348.351854][ T5817] usb 8-1: media controller created [ 348.719904][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 349.034311][ T5817] usb 8-1: selecting invalid altsetting 7 [ 349.039495][ T5817] cxusb: set interface failed [ 349.041183][ T5817] dvb-usb: bulk message failed: -22 (1/0) [ 349.581261][ T5817] DVB: Unable to find symbol lgdt330x_attach() [ 349.583554][ T5817] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 350.123186][ T5817] rc_core: IR keymap rc-dvico-portable not found [ 350.128533][ T5817] Registered IR keymap rc-empty [ 350.177062][ T5817] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 350.211428][ T5817] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input9 [ 350.278069][ T5817] dvb-usb: schedule remote query interval to 100 msecs. [ 350.282254][ T5817] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 350.335408][ T5817] usb 8-1: USB disconnect, device number 3 [ 351.308557][ T5817] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 351.442720][ T8999] syzkaller0: entered promiscuous mode [ 351.463309][ T8999] syzkaller0: entered allmulticast mode [ 352.747749][ T9020] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1154'. [ 358.727895][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 358.911698][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 358.921464][ T24] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 358.952390][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.986583][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.992328][ T24] usb 5-1: Product: syz [ 359.001776][ T24] usb 5-1: Manufacturer: syz [ 359.003581][ T24] usb 5-1: SerialNumber: syz [ 359.137684][ T24] usb 5-1: config 0 descriptor?? [ 359.244542][ T24] usb 5-1: No union descriptors [ 359.271615][ T24] usb 5-1: unsupported MDLM descriptors [ 362.980403][ T24] usb 5-1: USB disconnect, device number 2 [ 364.173125][ T9072] syzkaller0: entered promiscuous mode [ 364.178225][ T9072] syzkaller0: entered allmulticast mode [ 371.772658][ T9122] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1186'. [ 372.285363][ T42] audit: type=1400 audit(1787933098.873:496): avc: denied { ioctl } for pid=9124 comm="syz.4.1193" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 374.974317][ T41] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 375.164304][ T41] usb 5-1: Using ep0 maxpacket: 8 [ 375.177255][ T41] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 375.187906][ T41] usb 5-1: no configurations [ 375.189467][ T41] usb 5-1: can't read configurations, error -22 [ 375.394966][ T41] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 375.619892][ T41] usb 5-1: Using ep0 maxpacket: 8 [ 375.642709][ T41] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 375.661929][ T41] usb 5-1: no configurations [ 375.663599][ T41] usb 5-1: can't read configurations, error -22 [ 375.677787][ T41] usb usb5-port1: attempt power cycle [ 376.054892][ T41] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 376.080443][ T41] usb 5-1: Using ep0 maxpacket: 8 [ 376.094899][ T41] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 376.108333][ T41] usb 5-1: no configurations [ 376.110008][ T41] usb 5-1: can't read configurations, error -22 [ 376.275137][ T41] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 376.306805][ T41] usb 5-1: Using ep0 maxpacket: 8 [ 376.322502][ T41] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 376.332193][ T41] usb 5-1: no configurations [ 376.333773][ T41] usb 5-1: can't read configurations, error -22 [ 376.352992][ T41] usb usb5-port1: unable to enumerate USB device [ 376.416664][ T9143] syzkaller0: entered promiscuous mode [ 376.421031][ T9143] syzkaller0: entered allmulticast mode [ 378.413340][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.418814][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.919593][ T9215] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1220'. [ 390.108676][ T9216] syzkaller0: entered promiscuous mode [ 390.115496][ T9216] syzkaller0: entered allmulticast mode [ 394.538171][ T9241] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1233'. [ 400.380942][ T9278] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1245'. [ 400.747873][ T1347] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 401.341635][ T1347] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 401.372942][ T1347] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 401.378787][ T1347] usb 6-1: config 0 has no interface number 0 [ 401.380913][ T1347] usb 6-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid maxpacket 12592, setting to 64 [ 401.424792][ T1347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.427529][ T1347] usb 6-1: Product: syz [ 401.428992][ T1347] usb 6-1: Manufacturer: syz [ 401.430548][ T1347] usb 6-1: SerialNumber: syz [ 401.508345][ T1347] usb 6-1: config 0 descriptor?? [ 401.538901][ T9275] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 402.277646][ T9277] rnbd_client L607: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 402.359465][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.416394][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.451060][ T9277] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 402.456662][ T9277] rtrs_client L2639: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 402.461768][ T9277] ================================================================== [ 402.464247][ T9277] BUG: KASAN: null-ptr-deref in trace_event_raw_event_rtrs_clt_conn_class+0x348/0x4a0 [ 402.467157][ T9277] Read of size 255 at addr 0000000000000000 by task syz.1.1246/9277 [ 402.471218][ T9277] [ 402.472322][ T9277] CPU: 2 UID: 0 PID: 9277 Comm: syz.1.1246 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.472341][ T9277] Tainted: [L]=SOFTLOCKUP [ 402.472347][ T9277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 402.472354][ T9277] Call Trace: [ 402.472363][ T9277] [ 402.472372][ T9277] dump_stack_lvl+0x100/0x190 [ 402.472412][ T9277] kasan_report+0xdf/0x1c0 [ 402.472456][ T9277] ? trace_event_raw_event_rtrs_clt_conn_class+0x348/0x4a0 [ 402.472514][ T9277] kasan_check_range+0x10f/0x1e0 [ 402.472541][ T9277] __asan_memcpy+0x23/0x60 [ 402.472573][ T9277] trace_event_raw_event_rtrs_clt_conn_class+0x348/0x4a0 [ 402.472598][ T9277] ? __pfx_trace_event_raw_event_rtrs_clt_conn_class+0x10/0x10 [ 402.472688][ T9277] rtrs_clt_close_conns+0x1d6/0x2c0 [ 402.472725][ T9277] rtrs_clt_open+0xd55/0x1450 [ 402.472786][ T9277] rnbd_clt_map_device+0x12eb/0x2730 [ 402.472846][ T9277] ? mark_held_locks+0x40/0x70 [ 402.472880][ T9277] ? __pfx_rnbd_clt_map_device+0x10/0x10 [ 402.472903][ T9277] ? __irq_work_queue_local+0x1f4/0x510 [ 402.472933][ T9277] ? __pfx___irq_work_queue_local+0x10/0x10 [ 402.472949][ T9277] ? __pfx_console_unlock+0x10/0x10 [ 402.472975][ T9277] ? preempt_schedule_thunk+0x16/0x40 [ 402.472996][ T9277] ? __pfx_rnbd_clt_link_ev+0x10/0x10 [ 402.473039][ T9277] ? irq_work_queue+0xd1/0x100 [ 402.473189][ T9277] ? rnbd_clt_map_device_store+0x640/0xe00 [ 402.473211][ T9277] ? rnbd_clt_map_device_store+0x72f/0xe00 [ 402.473264][ T9277] rnbd_clt_map_device_store+0x7c6/0xe00 [ 402.473325][ T9277] ? __pfx_rnbd_clt_map_device_store+0x10/0x10 [ 402.473356][ T9277] ? rb_read_data_buffer.isra.0+0x174/0x470 [ 402.473385][ T9277] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 402.473484][ T9277] ? __pfx_check_buffer+0x10/0x10 [ 402.473646][ T9277] ? ring_buffer_lock_reserve+0x4bb/0x1220 [ 402.473787][ T9277] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 402.473829][ T9277] ? trace_event_buffer_commit+0x20a/0xa80 [ 402.473883][ T9277] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 402.473915][ T9277] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 402.473990][ T9277] ? find_held_lock+0x2b/0x80 [ 402.474011][ T9277] ? sysfs_file_kobj+0xe4/0x290 [ 402.474046][ T9277] ? __pfx_rnbd_clt_map_device_store+0x10/0x10 [ 402.474077][ T9277] ? dev_attr_store+0x58/0x80 [ 402.474094][ T9277] dev_attr_store+0x58/0x80 [ 402.474119][ T9277] ? __pfx_dev_attr_store+0x10/0x10 [ 402.474142][ T9277] sysfs_kf_write+0xf2/0x150 [ 402.474183][ T9277] kernfs_fop_write_iter+0x3e0/0x5f0 [ 402.474203][ T9277] ? __pfx_sysfs_kf_write+0x10/0x10 [ 402.474246][ T9277] vfs_write+0x6af/0x1050 [ 402.474279][ T9277] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 402.474316][ T9277] ? __pfx_vfs_write+0x10/0x10 [ 402.474333][ T9277] ? find_held_lock+0x2b/0x80 [ 402.474440][ T9277] ksys_write+0x12a/0x250 [ 402.474465][ T9277] ? __pfx_ksys_write+0x10/0x10 [ 402.474483][ T9277] ? trace_syscall_enter+0xd6/0x100 [ 402.474539][ T9277] do_syscall_64+0x123/0x790 [ 402.474578][ T9277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.474596][ T9277] RIP: 0033:0x7f14ab79e159 [ 402.474616][ T9277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.474628][ T9277] RSP: 002b:00007f14ac71b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 402.474641][ T9277] RAX: ffffffffffffffda RBX: 00007f14aba26090 RCX: 00007f14ab79e159 [ 402.474650][ T9277] RDX: 0000000000000033 RSI: 0000200000000600 RDI: 0000000000000007 [ 402.474658][ T9277] RBP: 00007f14ab835024 R08: 0000000000000000 R09: 0000000000000000 [ 402.474665][ T9277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.474676][ T9277] R13: 00007f14aba26128 R14: 00007f14aba26090 R15: 00007ffd89e1c428 [ 402.474759][ T9277] [ 402.474764][ T9277] ================================================================== [ 402.594755][ T9277] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 402.597125][ T9277] CPU: 2 UID: 0 PID: 9277 Comm: syz.1.1246 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.600544][ T9277] Tainted: [L]=SOFTLOCKUP [ 402.601893][ T9277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 402.604920][ T9277] Call Trace: [ 402.606012][ T9277] [ 402.607015][ T9277] dump_stack_lvl+0x100/0x190 [ 402.608555][ T9277] vpanic+0x553/0x970 [ 402.609879][ T9277] ? __pfx_vpanic+0x10/0x10 [ 402.611440][ T9277] ? mark_held_locks+0x40/0x70 [ 402.613101][ T9277] ? irqentry_exit+0x24d/0xa10 [ 402.614684][ T9277] ? trace_event_raw_event_rtrs_clt_conn_class+0x348/0x4a0 [ 402.616887][ T9277] panic+0xd1/0xe0 [ 402.618090][ T9277] ? __pfx_panic+0x10/0x10 [ 402.619541][ T9277] check_panic_on_warn.cold+0x19/0x34 [ 402.621213][ T9277] end_report.part.0+0x3a/0x90 [ 402.622727][ T9277] kasan_report.cold+0xe/0x18 [ 402.624273][ T9277] ? trace_event_raw_event_rtrs_clt_conn_class+0x348/0x4a0 [ 402.626685][ T9277] kasan_check_range+0x10f/0x1e0 [ 402.628297][ T9277] __asan_memcpy+0x23/0x60 [ 402.629761][ T9277] trace_event_raw_event_rtrs_clt_conn_class+0x348/0x4a0 [ 402.631923][ T9277] ? __pfx_trace_event_raw_event_rtrs_clt_conn_class+0x10/0x10 [ 402.634207][ T9277] rtrs_clt_close_conns+0x1d6/0x2c0 [ 402.635764][ T9277] rtrs_clt_open+0xd55/0x1450 [ 402.637307][ T9277] rnbd_clt_map_device+0x12eb/0x2730 [ 402.638940][ T9277] ? mark_held_locks+0x40/0x70 [ 402.640442][ T9277] ? __pfx_rnbd_clt_map_device+0x10/0x10 [ 402.642284][ T9277] ? __irq_work_queue_local+0x1f4/0x510 [ 402.644125][ T9277] ? __pfx___irq_work_queue_local+0x10/0x10 [ 402.646082][ T9277] ? __pfx_console_unlock+0x10/0x10 [ 402.647668][ T9277] ? preempt_schedule_thunk+0x16/0x40 [ 402.649343][ T9277] ? __pfx_rnbd_clt_link_ev+0x10/0x10 [ 402.651466][ T9277] ? irq_work_queue+0xd1/0x100 [ 402.653076][ T9277] ? rnbd_clt_map_device_store+0x640/0xe00 [ 402.654948][ T9277] ? rnbd_clt_map_device_store+0x72f/0xe00 [ 402.656867][ T9277] rnbd_clt_map_device_store+0x7c6/0xe00 [ 402.658747][ T9277] ? __pfx_rnbd_clt_map_device_store+0x10/0x10 [ 402.660773][ T9277] ? rb_read_data_buffer.isra.0+0x174/0x470 [ 402.662744][ T9277] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 402.664658][ T9277] ? __pfx_check_buffer+0x10/0x10 [ 402.666387][ T9277] ? ring_buffer_lock_reserve+0x4bb/0x1220 [ 402.668476][ T9277] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 402.670511][ T9277] ? trace_event_buffer_commit+0x20a/0xa80 [ 402.672480][ T9277] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 402.674559][ T9277] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 402.676729][ T9277] ? find_held_lock+0x2b/0x80 [ 402.678311][ T9277] ? sysfs_file_kobj+0xe4/0x290 [ 402.679921][ T9277] ? __pfx_rnbd_clt_map_device_store+0x10/0x10 [ 402.681956][ T9277] ? dev_attr_store+0x58/0x80 [ 402.683447][ T9277] dev_attr_store+0x58/0x80 [ 402.684993][ T9277] ? __pfx_dev_attr_store+0x10/0x10 [ 402.686684][ T9277] sysfs_kf_write+0xf2/0x150 [ 402.688125][ T9277] kernfs_fop_write_iter+0x3e0/0x5f0 [ 402.689782][ T9277] ? __pfx_sysfs_kf_write+0x10/0x10 [ 402.691398][ T9277] vfs_write+0x6af/0x1050 [ 402.692781][ T9277] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 402.694635][ T9277] ? __pfx_vfs_write+0x10/0x10 [ 402.696134][ T9277] ? find_held_lock+0x2b/0x80 [ 402.697885][ T9277] ksys_write+0x12a/0x250 [ 402.699440][ T9277] ? __pfx_ksys_write+0x10/0x10 [ 402.701138][ T9277] ? trace_syscall_enter+0xd6/0x100 [ 402.702913][ T9277] do_syscall_64+0x123/0x790 [ 402.704410][ T9277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.706255][ T9277] RIP: 0033:0x7f14ab79e159 [ 402.707673][ T9277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.713519][ T9277] RSP: 002b:00007f14ac71b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 402.716044][ T9277] RAX: ffffffffffffffda RBX: 00007f14aba26090 RCX: 00007f14ab79e159 [ 402.718635][ T9277] RDX: 0000000000000033 RSI: 0000200000000600 RDI: 0000000000000007 [ 402.721186][ T9277] RBP: 00007f14ab835024 R08: 0000000000000000 R09: 0000000000000000 [ 402.723942][ T9277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.726667][ T9277] R13: 00007f14aba26128 R14: 00007f14aba26090 R15: 00007ffd89e1c428 [ 402.729378][ T9277] [ 402.731129][ T9277] Kernel Offset: disabled [ 402.732471][ T9277] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:05:29 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000004 RBX=ffff88805cb492c4 RCX=0000000000000004 RDX=ffff8880326ba580 RSI=0000000000000004 RDI=0000000000000000 RBP=00000000000002b4 RSP=ffffc900001073a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000004 R11=0000000000000001 R12=000000000000069c R13=0000000000000004 R14=0000005db5fbddc8 R15=ffff88805cb49010 RIP=ffffffff820afbe0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6d1649a880 ffffffff 00c00000 GS =0000 ffff8880d5ba2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f14ac6f8fd0 CR3=000000003c676000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fce00000 Opmask01=0000000000080811 Opmask02=000000000301003f Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 312e746567646167 2d7761723a737265 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055eb2b32ddf0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055eb2b390280 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff00ffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373269858468cb3 737326999f9236c3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737273737326 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 54003d534b4e494c 564544003d4d4554 535953425553003d 4854415056454400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055eb2b323b10 000055eb2b369118 0000000000000041 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080080783 RBX=0000000000000000 RCX=ffff88802ae6d1b0 RDX=000000000000009d RSI=ffffffff86fe5e21 RDI=ffff88802ae6d420 RBP=0000000000000001 RSP=ffffc900006a0b88 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000004e20 R14=ffff88802ae6d1b0 R15=0000000000000001 RIP=ffffffff86fe5e68 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ca2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b3290fff8 CR3=0000000034ade000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000400001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff820d87f0 ffffffff820d87f0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff820d87f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd89e1c916 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd89e1c916 00007ffd89e1c91c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14ab835607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14ab835647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14ab8357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14ab835639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d61722f7665642f 3d687461705f6563 697665642031733d 656d616e73736573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312e302e302e3732 313a70693d687461 7020306d61722f76 65642f3d68746170 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14ab9f25f8 00007f14ab9f25c8 00007f14ab9f2600 00007f14ab9f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85aa2cb5 RDI=ffffffff9bc21640 RBP=ffffffff9bc21600 RSP=ffffc90005a86bf8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030303030303052 R12=0000000000000000 R13=0000000000000037 R14=ffffffff9b913237 R15=ffffffff85aa2c50 RIP=ffffffff85aa2cdf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f14ac71b6c0 ffffffff 00c00000 GS =0000 ffff8880d5da2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcfefe01000 CR3=000000003e22e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379735f65676173 752e746363617570 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd89e1c916 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd89e1c916 00007ffd89e1c91c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14ab835607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14ab835647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14ab8357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14ab835639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000f4e31031ab RBX=ffff88806a723d80 RCX=00000000000006e0 RDX=00000000000000f4 RSI=ffffffff81fa9af5 RDI=ffff888030dda580 RBP=0000005dae635b04 RSP=ffffc900006f8d88 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff920000df1bb R13=0000000000000001 R14=0000000000000001 R15=ffff88806a723dc0 RIP=ffffffff81fa9b08 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ea2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000110c3e5dcf CR3=000000003e22e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d336683600 000055d336683600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc448304a0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6461675f62737520 2c6c696166203a74 65676461672d7761 72206373696d205d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3436206f7420676e 6974746573202c32 393532312074656b 63617078616d2064 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 696c61766e692073 6168203238783020 746e696f70646e65 203020676e697474 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6573746c61203333 3120656361667265 746e692030206769 666e6f63203a312d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3620627375205d37 34333154205b5d33 31393038332e3130 3420205b203a6c65 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000