last executing test programs: 3.501067606s ago: executing program 1 (id=225): r0 = syz_open_dev$dvb_frontend(&(0x7f0000002180), 0x7b0c, 0x40000) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000024c0)={0x9, &(0x7f0000002200)=[{0x20, '\x00', @st={0x4, [{0x4, @svalue=0xe}, {0x1, @uvalue=0x1}, {0x0, @uvalue=0x101}, {0x3, @svalue=0x7}]}}, {0x35, '\x00', @buffer={"37dcf882d301f636bba1aeb8b9ff3b2e8a1433ce9a54973d8fcc7513cfef7ed6", 0x20}, 0x74}, {0x2f, '\x00', @buffer={"d2a578989894cb359754d4257fec71ef2130eb408a22dc3ca5cde817a6656426", 0x20}, 0x4}, {0x3e, '\x00', @st={0x4, [{0x3, @uvalue=0xfffffffffffffffa}, {0x0, @uvalue=0x3a5}, {0x3, @svalue=0xb}, {0x5d1ae71d15d461ec, @svalue=0xc}]}, 0x6}, {0xa31524dd074854eb, '\x00', @buffer={"6286ae8c1979f873ab4c4e4f62f4ee8901a6f20bb586484243639abe77012d1a", 0x20}, 0x6}, {0x11, '\x00', @buffer={"8bf85060e37980b2ca188f430e1a6042d644127f6bdf9e9421b9cb87f1be9fcb", 0x20}, 0x367}, {0x13, '\x00', @buffer={"d34fa264b0b65af381df51d6407942d5adf700e785a2c999105153b3b3eb7232", 0x20}, 0x40001b}, {0x1c, '\x00', @data=0x7fffffff, 0x20000007}, {0x3b, '\x00', @st={0x4, [{0x2, @uvalue=0x3}, {0x0, @svalue=0x3}, {0x0, @svalue=0x80}, {0x1, @svalue=0x3ff}]}, 0x5}]}) ioctl$FE_SET_FRONTEND_TUNE_MODE(r0, 0x6f51, &(0x7f0000000180)) 3.499474097s ago: executing program 1 (id=228): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000030000000800010001002c66"], 0x1c}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3ed, 0x418, 0x70bd2c, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0xc011}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x8004) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r4, &(0x7f0000000180)=ANY=[], 0x34) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x8}]}]}, 0x90}, 0x1, 0xfffff000}, 0x8000) setsockopt$sock_attach_bpf(r3, 0x1, 0x45, &(0x7f0000000640), 0x4) r12 = ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000000714080026bd7000fddbdf25080001000100000008004400", @ANYRES32=r12, @ANYBLOB="6672090002007379020000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000001740)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x800}], 0x18, 0x80}, 0x4000000) 3.183006329s ago: executing program 1 (id=236): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800f0ff5500e50226bd70000100000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r0], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) 3.125662895s ago: executing program 1 (id=237): r0 = syz_open_dev$dvb_frontend(&(0x7f0000002180), 0x7b0c, 0x40000) ioctl$FE_SET_FRONTEND_TUNE_MODE(r0, 0x6f51, &(0x7f0000000180)) 3.12539332s ago: executing program 1 (id=238): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x802) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') (async, rerun: 64) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) close(r3) (async) r4 = socket$kcm(0x10, 0x2, 0x0) getsockopt$sock_int(r4, 0x1, 0x22, 0x0, &(0x7f00000000c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b05, &(0x7f0000000140)={'wlan1\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x22100, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) (async, rerun: 64) close_range(r1, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000040)=0x4) 3.03299788s ago: executing program 1 (id=242): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyACM0\x00', 0xc002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@enum={0xfffffffc}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x4}}, @func={0x3, 0x0, 0x0, 0xc, 0x1}, @float={0x317f, 0x0, 0x0, 0x10, 0x4}]}}, 0x0, 0x56}, 0x28) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000001c0)=0xc) ptrace(0x4207, r1) r2 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'lblc\x00', 0x8, 0x42, 0x6f}, 0x2c) setsockopt(r2, 0xffff, 0xffffdd4d, &(0x7f0000000100)="7230de9448f76428116faa71b6eb43ebaaac9dd5f3fdd100c9cf821f16168a5013dce8480513f129e21626ff1ea0560e21c24105b1bf13e9a6b0549cd312c591b349c01aa56e5d541fe84b2f5cf5e7e23c3b72837ae61bccfabc513595ef1a36eed7bf39557da045c684bc990e0acf47e6877105280046aefb7585fc48b311bf321256b2500c3cc8d434f14aa00f8a4ee8ad121fd46745bd13147431fa54d5f49071e12628f1ebe221b0974adea197f5cd69a3", 0xb3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x0, 0x260, 0x260, 0xfeffffff, 0xffffffff, 0x380, 0x260, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 1.324115683s ago: executing program 3 (id=280): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'batadv_slave_1\x00', {'xfrm0\x00'}, 0x7}) write(r0, &(0x7f0000000280)="0a0000000100012ebd8e883ed6a0f4c157ac3f328a5f329570c891e96033b4a09506bd5f1849abd8abf0c6f3a88f6f32427b19edad9579b842889f302d5a0556cf45b83bc05373a2c849a473a364e3614bdb1ca6081780cf7d02baece972fa9ae0260e28e4f80158d0efd613ca67ed5ef9f7000000000000000976fde9d49a5b26d44b03297b99717e5807bbea34fe86e096574c80c546", 0x97) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x228000) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000001c0)={0x2, 0x32, &(0x7f0000000140)="7eb6519b34afd91b9a07e59b677c30fc591f5c692eb5338458e5f7c32ebc2dbcb400a4dc9a729365fcc2aad70a69ff8c8677"}) socketpair(0x1e, 0x80005, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x79) open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000280)='./file0/file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) stat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r6, 0xffffffff80000901, 0x0, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r7, 0x25, 0x8, @void}, 0x10) 594.486542ms ago: executing program 2 (id=282): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x18, 0x0, &(0x7f0000001540)) 524.448159ms ago: executing program 2 (id=284): r0 = syz_open_dev$dvb_frontend(0x0, 0x7b0c, 0x40000) ioctl$FE_SET_FRONTEND_TUNE_MODE(r0, 0x6f51, &(0x7f0000000180)) 524.21763ms ago: executing program 2 (id=285): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000280)="05031688031c", 0x6, 0x0, &(0x7f0000000140)={0x11, 0x2, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 434.500106ms ago: executing program 2 (id=288): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x18, 0x0, &(0x7f0000001540)) (fail_nth: 1) 434.080577ms ago: executing program 0 (id=289): r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) wait4(0x0, 0x0, 0x2, 0x0) splice(r1, 0x0, r1, 0x0, 0x10001, 0x9) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000140)=0x9) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000040000000000000000000007919b000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x10) mount$overlay(0x0, &(0x7f0000000180)='./file2\x00', &(0x7f0000000000), 0x29080, &(0x7f0000001940)={[], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fowner_lt={'fowner<', 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'defcontext'}}, {@fowner_lt}, {@smackfsdef={'smackfsdef', 0x3d, '\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00S\xc3\xc6\xdf\x811\xac5\x8a\xf1\x06h\x96\x0e{$)\xd3\x01?\xa3\xdan|!9\t\xf1\xa5\xb9\xb0\xcf\xc57\x12|\xda7X\xcch\x102\xa5\x98\xac\x06B\xff{\xc7\xfd\xf3\xff\x15\xa9O\xe3\xe1\']^\x16\x7f\x15\xe9Y\xb5R!l!m\xc9\x11$T\xb1*>\x04\x95L\b;<\x8c\x1eY2M[\xe2B\xd7\xa7\xd2:3\x8bN7\xe4y\xfd\xb6BA0oe\ta\x85\xd0\xc1w\xf2\x81\x04\xe9B9\xc8\xe2\xb3]\xe6\xf2m\x90L\\;\x0e\x91e\xcc3\xae]\x18\x83\"\xed\xc6R\xb2\'tLnz\x97\xc4\xa3\xd0R\xc3Q\xe0\xf5\xab\x1b|F$\x01\x0f\x02\xbcm\n\xbf\xed\xfa\xdf\xa6\x81\x13\xa6\xa1%\xe8\\\xe9\xcf@\xaf\xb3\x85\xe9*\x9d_\xb9\xe2\xbej2\x18*\x13\xde\x80'}}, {@fowner_gt}], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) fcntl$setstatus(r5, 0x4, 0x2000) ftruncate(r5, 0x6000000) copy_file_range(r0, 0x0, r5, &(0x7f00000004c0), 0x9, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r6, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20001880) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r7 = memfd_create(&(0x7f0000000e00)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00S\xc3\xc6\xdf\x811\xac5\x8a\xf1\x06h\x96\x0e{$)\xd3\x01?\xa3\xdan|!9\t\xf1\xa5\xb9\xb0\xcf\xc57\x12|\xda7X\xcch\x102\xa5\x98\xac\x06B\xff{\xc7\xfd\xf3\xff\x15\xa9O\xe3\xe1\']^\x16\x7f\x15\xe9Y\xb5R!l!m\xc9\x11$T\xb1*>\x04\x95L\b;<\x8c\x1eY2M[\xe2B\xd7\xa7\xd2:3\x8bN7\xe4y\xfd\xb6BA0oe\ta\x85\xd0\xc1w\xf2\x81\x04\xe9B9\xc8\xe2\xb3]\xe6\xf2m\x90L\\;\x0e\x91e\xcc3\xae]\x18\x83\"\xed\xc6R\xb2\'tLnz\x97\xc4\xa3\xd0R\xc3Q\xe0\xf5\xab\x1b|F$\x01\x0f\x02\xbcm\n\xbf\xed\xfa\xdf\xa6\x81\x13\xa6\xa1%\xe8\\\xe9\xcf@\xaf\xb3\x85\xe9*\x9d_\xb9\xe2\xbej2\x18*\x13\xde\x80', 0xc) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r7, 0x0) finit_module(r7, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f00000000c0)) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$inet(r1, &(0x7f0000000800)={&(0x7f00000002c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)="9594cd1d3118f1e810d19b9cf27a2ff4c1103856f25e93164a520b41ac9467908ed4b35d566ea7fc01230c36b8b9e39dfb2397026025f70dc442e6a28b156d5182ca8c26dcf9d2f3d44df8e8d9eaf4369228e26946d849920a0c40861001f2b0e9b15384d0e16fb2a5d00fe77669437e4179209774be38d3de92622cc01869654357ffc16f24d5af365d1471fa36e0e47d41aed3398ef60231b8be", 0x9b}, {&(0x7f0000000480)="3a7f5cb1402183a3c4db9c768633b3e550fdd3ea9330c282888381dbef", 0x1d}, {&(0x7f0000000500)="09f01b8ff5892b1ac71c1411d20a5ad6266549870b1c85d2552168ede6474502a677f33db10ede21771cfb6cb3aa3303ea1024829f1c92aeb96934007832cb89a8bceb07fd9f46df4c6908e12bfaa436409af230fa5cb5eed3a6fc3692d8bcbd5a63ff633eb1b07da1af1d817d6cd5cbd323cb67517f495e5a66db2a77cddfeac5cc7af99d59cf4d13e5787a4cae08a6047dea7b8dddef18338bedfb028c7f33107bf392f650932d7f16c973c884060140684f1af1e84011ec70105c13e9fa84d6b4d65d68757852ac5e1f6f", 0xcc}, {&(0x7f0000000600)="78c7effaaf11bf3ce8b6c2d676250077bd05aa0996fe873a69f55eb46fa24a74bdac782c9ae98d17d29ecc554cae1b4558f730b769ed7c562e36953eac9a024c5340696d8ca796a7eb3cda6367d85f542155a9a4f3fff95156c074eebef5ee86136da12aaf8cc18bf2371ec50edb9acb05395d4fa15e774a1e44d029494075553c8ae07671411903dc92a5742d035c004904fbf48396bb8f62d8e09e402000d646ec66e1e4957fc7990551d051c0871797fe47eae7db7d8ee81ba43545b3", 0xbe}], 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="dc00000000000000000000000700000000443cec410a0101020000000600000000ffffffffac1414bb00000002ac14140f0000000200000000ffffffff0000000000000200640101020000000689132cac14143ae000000294040100830f93ac1414bbac1e010164010100864e000000030612c9536a7da7d00f6550cdd3944b418f801b020009a2c6ab1894ea41010833cbf8a7b646070c009f1b8ee58340cd8487060af373a03eb600bd83020f8a046d2c48524fa4ae787fc02e440cfb53ac1e00010000000001890731000000000000"], 0xe0}, 0x91) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) socket$packet(0x11, 0x3, 0x300) 345.152763ms ago: executing program 2 (id=290): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000ac0), 0x22800, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setns(0xc9, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000140)=0x4f4e, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000017000000000000000600000079b2100000000000b9106766dd505b41"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x24}, 0x94) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xc, 0xe, &(0x7f0000000500)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9}, 0x94) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000180)={0x800, 0x2, 0xc13c, 0x8, 0x1, 0xfffffffc, 0xe}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000002c0)={0x8000000000000000, r0, 'id0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000004c0)={r4, &(0x7f00000000c0)='id0\x00', 0x12b00, &(0x7f0000000100)={@_ha_fsid={[0x6744]}, {0x0, 0xa3c, 0x867, 0x34f2}}, 0x10, &(0x7f00000001c0), &(0x7f0000000480)=0xd2de}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r5, &(0x7f0000000d80)=[{&(0x7f00000000c0)=""/48, 0x30}, {&(0x7f0000000dc0)=""/161, 0xa1}, {&(0x7f0000000c80)=""/221, 0xdd}], 0x3, 0x5fac, 0x5) 344.856605ms ago: executing program 3 (id=291): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f00000001c0)=0xfd87, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="63812bbd7000fcdbdf2503000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x20000845) 215.37099ms ago: executing program 0 (id=292): setreuid(0xee01, 0xee01) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x4}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0) r2 = io_uring_setup(0x7272, &(0x7f0000000440)={0x0, 0x4200, 0x4000, 0x1, 0x117, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x113e) socket$packet(0x11, 0x2, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r6], 0x3c}}, 0x0) write(r3, &(0x7f0000000700)="ffffffffffff0011223344554305000f32fde100000100112233445500112233445500ff0000", 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={0x14, 0x0, 0x1, 0x0, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 153.162128ms ago: executing program 0 (id=293): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x53}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1}]}}]}, 0x4c}}, 0x20004055) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000140)=0x5f5, 0x4) 152.848897ms ago: executing program 3 (id=294): r0 = syz_open_dev$dvb_frontend(0x0, 0x7b0c, 0x40000) ioctl$FE_SET_FRONTEND_TUNE_MODE(r0, 0x6f51, &(0x7f0000000180)) 152.74241ms ago: executing program 0 (id=295): mount(0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80010040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40, 0xb}}}}}}, 0x0) 64.310034ms ago: executing program 0 (id=296): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000}, 0x20000004) (async) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000540)) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000018000504010000000000000002180000fe03000100000000080001000a141e00160012000a00fe80000000000000000000000000000100000800040002"], 0x44}}, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'vxcan1\x00', 0x200}) 64.037787ms ago: executing program 3 (id=297): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x1, 0x3}, 0x10) write(r0, &(0x7f0000000340)="580000001400010300000000000000001e000000ffffffff00"/46, 0x2e) 63.359129ms ago: executing program 3 (id=298): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000280)="0503168803", 0x5, 0x0, &(0x7f0000000140)={0x11, 0x2, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 62.792187ms ago: executing program 2 (id=299): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000480)='bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='00:03', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000368000/0x4000)=nil, 0x4000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x101000, 0x1) recvfrom$inet_nvme(r3, &(0x7f0000000040)=""/91, 0x5b, 0x14041, &(0x7f0000000140)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 271.816µs ago: executing program 0 (id=300): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0xf00, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x4}, {0x0, 0x9}, {0x5, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x6}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 0s ago: executing program 3 (id=301): socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcd\v\x00\x00\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0, 0x0}) nanosleep(&(0x7f0000000100)={r2, r3+60000000}, &(0x7f0000000140)) getsockname$packet(r1, 0x0, &(0x7f0000000040)) 0s ago: executing program 0 (id=302): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='mon_addr\x00\x10o\xd0H\xf5\xd3\x0f\xb0\x90\xd8\xf0\xe2\xd1\x05\x19k\x02\xac\xb9\x9f\xfe\x1ai[qx\xb8I\xfa\xb8\x9c\x99\xf2\xbf\xfc^\xa0\x00\xb5\xfc\x172\xa8\xdf7\x85Y\xee\xf3\x1c\x84\xd6\x89\x00\xd0@0\xc2gg\xb9\xf3\x04\x01\xa8\x9b\x83\xfc\xf8\xae\xb6\xcc(\xec\xcajL \xaeXEkl\xe1\x17\xb4\xad\xebY*Vg\xa7\xcaE\xab', &(0x7f0000000240)='127.1.o(&tMPB\xb7\xdd\x8c\x82\x9dv+\xf9\xf0t\x91\x93(@}\xcd\xbf\x84O\xe8\x8c\xab\".\xc1g]\xe3\xb3\xc8\xc1\xa38\xc8\xd9\xc8\xaf\xc5b/T6\xbb\x88>0R\xaaT\xbe~\xd6@\x12\xden!il[\nI\x94\xd0J\x8f\xa3\xcf\x91\xa1\xbe\x02\xda\xea\xe0\xe5\xf8s\r\x1fw\xe6=~Y\xd8\xd3\xaf\xd8\xdf\xdal\x02YP\xd8\x89Y4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 28.983158][ T43] audit: type=1400 audit(1791367225.832:115): avc: denied { siginh } for pid=5631 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:53971' (ED25519) to the list of known hosts. [ 30.932020][ T43] audit: type=1400 audit(1791367227.782:116): avc: denied { name_bind } for pid=5638 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.128550][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 32.128562][ T43] audit: type=1400 audit(1791367228.972:119): avc: denied { write } for pid=5640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.164297][ T43] audit: type=1400 audit(1791367229.012:120): avc: denied { write } for pid=5643 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.357843][ T43] audit: type=1400 audit(1791367229.202:121): avc: denied { write } for pid=5646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.406340][ T43] audit: type=1400 audit(1791367229.252:122): avc: denied { write } for pid=5649 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.555993][ T43] audit: type=1400 audit(1791367229.402:123): avc: denied { write } for pid=5652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.595682][ T43] audit: type=1400 audit(1791367229.442:124): avc: denied { write } for pid=5655 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.703545][ T43] audit: type=1400 audit(1791367229.552:125): avc: denied { write } for pid=5658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.774003][ T43] audit: type=1400 audit(1791367229.622:126): avc: denied { write } for pid=5661 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.861752][ T43] audit: type=1400 audit(1791367229.702:127): avc: denied { write } for pid=5664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.899879][ T43] audit: type=1400 audit(1791367229.742:128): avc: denied { write } for pid=5667 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.356170][ T5639] cgroup: Unknown subsys name 'net' [ 33.486061][ T5639] cgroup: Unknown subsys name 'cpuset' [ 33.489854][ T5639] cgroup: Unknown subsys name 'rlimit' [ 33.717330][ T5702] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.402815][ T5639] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.405252][ T43] kauditd_printk_skb: 32 callbacks suppressed [ 38.405270][ T43] audit: type=1400 audit(1791367235.252:161): avc: denied { execmem } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.565168][ T43] audit: type=1400 audit(1791367235.412:162): avc: denied { create } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.565664][ T43] audit: type=1400 audit(1791367235.412:163): avc: denied { read write } for pid=5723 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.566071][ T43] audit: type=1400 audit(1791367235.412:164): avc: denied { open } for pid=5724 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.574601][ T43] audit: type=1400 audit(1791367235.422:165): avc: denied { ioctl } for pid=5723 comm="syz-executor" path="socket:[3911]" dev="sockfs" ino=3911 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.604050][ T5737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.605150][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.606194][ T5738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.608698][ T5741] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.610723][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.610944][ T5741] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.611191][ T5741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.612127][ T5738] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.612593][ T5739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.612625][ T5741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.613407][ T5739] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.613504][ T5739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.614697][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.616126][ T5737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.616383][ T5739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.616816][ T5739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.617096][ T5737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.618353][ T65] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.618450][ T65] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.621937][ T43] audit: type=1400 audit(1791367235.462:166): avc: denied { read } for pid=5724 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.621974][ T43] audit: type=1400 audit(1791367235.462:167): avc: denied { open } for pid=5724 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.622916][ T43] audit: type=1400 audit(1791367235.472:168): avc: denied { mounton } for pid=5724 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 38.627032][ T43] audit: type=1400 audit(1791367235.472:169): avc: denied { module_request } for pid=5724 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 38.627251][ T43] audit: type=1400 audit(1791367235.472:170): avc: denied { module_request } for pid=5723 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 38.631843][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 39.175177][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.175686][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.175802][ T5725] bridge_slave_0: entered allmulticast mode [ 39.176623][ T5725] bridge_slave_0: entered promiscuous mode [ 39.195303][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.195391][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.195498][ T5725] bridge_slave_1: entered allmulticast mode [ 39.196878][ T5725] bridge_slave_1: entered promiscuous mode [ 39.280589][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.306781][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.306955][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.307050][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.307141][ T5724] bridge_slave_0: entered allmulticast mode [ 39.308224][ T5724] bridge_slave_0: entered promiscuous mode [ 39.332540][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.332605][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.332684][ T5724] bridge_slave_1: entered allmulticast mode [ 39.333842][ T5724] bridge_slave_1: entered promiscuous mode [ 39.371025][ T5725] team0: Port device team_slave_0 added [ 39.371105][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.371184][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.371470][ T5727] bridge_slave_0: entered allmulticast mode [ 39.373122][ T5727] bridge_slave_0: entered promiscuous mode [ 39.375864][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.376011][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.376080][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.376170][ T5727] bridge_slave_1: entered allmulticast mode [ 39.377438][ T5727] bridge_slave_1: entered promiscuous mode [ 39.383672][ T5725] team0: Port device team_slave_1 added [ 39.389931][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.443904][ T5724] team0: Port device team_slave_0 added [ 39.446526][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.448919][ T5724] team0: Port device team_slave_1 added [ 39.449838][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.449849][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.449876][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.474697][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.481224][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.481235][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.481247][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.493933][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.493950][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.493969][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.516402][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.516413][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.516425][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.523538][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.523611][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.524404][ T5723] bridge_slave_0: entered allmulticast mode [ 39.525501][ T5723] bridge_slave_0: entered promiscuous mode [ 39.536372][ T5725] hsr_slave_0: entered promiscuous mode [ 39.536818][ T5725] hsr_slave_1: entered promiscuous mode [ 39.543444][ T5727] team0: Port device team_slave_0 added [ 39.545570][ T5727] team0: Port device team_slave_1 added [ 39.546220][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.546261][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.546411][ T5723] bridge_slave_1: entered allmulticast mode [ 39.547246][ T5723] bridge_slave_1: entered promiscuous mode [ 39.598890][ T5724] hsr_slave_0: entered promiscuous mode [ 39.599552][ T5724] hsr_slave_1: entered promiscuous mode [ 39.599993][ T5724] debugfs: 'hsr0' already exists in 'hsr' [ 39.600059][ T5724] Cannot create hsr debugfs directory [ 39.600927][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.600937][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.600953][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.609811][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.610363][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.610375][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.610395][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.612602][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.670912][ T5723] team0: Port device team_slave_0 added [ 39.695622][ T5723] team0: Port device team_slave_1 added [ 39.700096][ T5727] hsr_slave_0: entered promiscuous mode [ 39.700785][ T5727] hsr_slave_1: entered promiscuous mode [ 39.701248][ T5727] debugfs: 'hsr0' already exists in 'hsr' [ 39.701264][ T5727] Cannot create hsr debugfs directory [ 39.741426][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.741438][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.741450][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.761690][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.761706][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.761724][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.915136][ T5723] hsr_slave_0: entered promiscuous mode [ 39.915621][ T5723] hsr_slave_1: entered promiscuous mode [ 39.915927][ T5723] debugfs: 'hsr0' already exists in 'hsr' [ 39.915938][ T5723] Cannot create hsr debugfs directory [ 39.997680][ T5725] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.005082][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.018658][ T5725] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.021244][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.039081][ T5725] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.041062][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.048194][ T5725] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.050049][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.138382][ T5724] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.142005][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.142409][ T5724] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.146037][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.147653][ T5724] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.150752][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.156322][ T5724] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.160197][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.201266][ T5727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.204216][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.209211][ T5727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.211066][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.211546][ T5727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.216146][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.223169][ T5727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.227446][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.287080][ T5723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.289967][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.290955][ T5723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.293266][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.297315][ T5723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.301128][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.303033][ T5723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.307172][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.332179][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.356624][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.374446][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.385223][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.395808][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.395935][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.397062][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.397103][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.409468][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.409514][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.423242][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.426218][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.426289][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.475263][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.505217][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.509495][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.509582][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.523000][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.523044][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.537874][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.543535][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.543619][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.556414][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.556463][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.656003][ T5735] Bluetooth: hci1: command tx timeout [ 40.656009][ T5737] Bluetooth: hci0: command tx timeout [ 40.656017][ T5085] Bluetooth: hci2: command tx timeout [ 40.657605][ T5726] Bluetooth: hci3: command tx timeout [ 40.818779][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.831137][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.865581][ T5724] veth0_vlan: entered promiscuous mode [ 40.873978][ T5724] veth1_vlan: entered promiscuous mode [ 40.888187][ T5725] veth0_vlan: entered promiscuous mode [ 40.894830][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.899314][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.912548][ T5724] veth0_macvtap: entered promiscuous mode [ 40.918750][ T5725] veth1_vlan: entered promiscuous mode [ 40.921347][ T5724] veth1_macvtap: entered promiscuous mode [ 40.940064][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.951820][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.972515][ T5727] veth0_vlan: entered promiscuous mode [ 40.977110][ T5725] veth0_macvtap: entered promiscuous mode [ 40.996242][ T5723] veth0_vlan: entered promiscuous mode [ 40.998381][ T5725] veth1_macvtap: entered promiscuous mode [ 41.001101][ T5727] veth1_vlan: entered promiscuous mode [ 41.009498][ T5723] veth1_vlan: entered promiscuous mode [ 41.050796][ T5727] veth0_macvtap: entered promiscuous mode [ 41.060837][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.063131][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.064459][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.064476][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.075959][ T5727] veth1_macvtap: entered promiscuous mode [ 41.097289][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.097308][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.117197][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.120572][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.133468][ T5723] veth0_macvtap: entered promiscuous mode [ 41.150334][ T5723] veth1_macvtap: entered promiscuous mode [ 41.168614][ T5724] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.189980][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.189994][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.192549][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.213008][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.232713][ T5804] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.232860][ T5804] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.232890][ T5804] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.232917][ T5804] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.232944][ T5804] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.246047][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.246065][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.251789][ T5804] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.251839][ T5804] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.251876][ T5804] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.251907][ T5804] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.251937][ T5804] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.251967][ T5804] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.251996][ T5804] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.252026][ T5804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.252057][ T5804] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.252085][ T5804] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.252115][ T5804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.300382][ T5877] FAULT_INJECTION: forcing a failure. [ 41.300382][ T5877] name failslab, interval 1, probability 0, space 0, times 1 [ 41.302111][ T5877] CPU: 2 UID: 0 PID: 5877 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 41.302136][ T5877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.302147][ T5877] Call Trace: [ 41.302152][ T5877] [ 41.302158][ T5877] dump_stack_lvl+0x100/0x190 [ 41.302179][ T5877] should_fail_ex.cold+0x5/0xa [ 41.302195][ T5877] should_failslab+0xc2/0x120 [ 41.302212][ T5877] __kmalloc_cache_noprof+0x91/0x6d0 [ 41.302225][ T5877] ? do_raw_spin_lock+0x128/0x260 [ 41.302242][ T5877] ? alloc_fdtable+0xbd/0x2d0 [ 41.302265][ T5877] alloc_fdtable+0xbd/0x2d0 [ 41.302289][ T5877] dup_fd+0x995/0xd10 [ 41.302321][ T5877] copy_process+0x2d11/0x8380 [ 41.302341][ T5877] ? __pfx_copy_process+0x10/0x10 [ 41.302354][ T5877] ? futex_wake+0x4ea/0x5e0 [ 41.302370][ T5877] kernel_clone+0x176/0x9d0 [ 41.302383][ T5877] ? __pfx_kernel_clone+0x10/0x10 [ 41.302398][ T5877] ? ksys_write+0x190/0x250 [ 41.302417][ T5877] __do_sys_clone+0xd9/0x120 [ 41.302437][ T5877] ? __pfx___do_sys_clone+0x10/0x10 [ 41.302463][ T5877] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 41.302504][ T5877] do_syscall_64+0x123/0x790 [ 41.302527][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.302540][ T5877] RIP: 0033:0x7f892079e199 [ 41.302550][ T5877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.302560][ T5877] RSP: 002b:00007f8921741fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 41.302571][ T5877] RAX: ffffffffffffffda RBX: 00007f8920a25fa0 RCX: 00007f892079e199 [ 41.302578][ T5877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020100000 [ 41.302584][ T5877] RBP: 00007f89208358e0 R08: 0000000000000000 R09: 0000000000000000 [ 41.302591][ T5877] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 41.302597][ T5877] R13: 00007f8920a26038 R14: 00007f8920a25fa0 R15: 00007ffe07e3f4d8 [ 41.302610][ T5877] [ 41.325262][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.325276][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.348636][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.348648][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.366409][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.366421][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.392864][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.392877][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.425902][ T1159] IPVS: starting estimator thread 0... [ 41.511774][ T5882] IPVS: using max 44 ests per chain, 105600 per kthread [ 41.522451][ T5889] FAULT_INJECTION: forcing a failure. [ 41.522451][ T5889] name failslab, interval 1, probability 0, space 0, times 0 [ 41.522469][ T5889] CPU: 0 UID: 0 PID: 5889 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 41.522481][ T5889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.522487][ T5889] Call Trace: [ 41.522491][ T5889] [ 41.522495][ T5889] dump_stack_lvl+0x100/0x190 [ 41.522515][ T5889] should_fail_ex.cold+0x5/0xa [ 41.522533][ T5889] should_failslab+0xc2/0x120 [ 41.522550][ T5889] __kmalloc_noprof+0xfc/0x840 [ 41.522565][ T5889] ? rcu_is_watching+0x13/0xc0 [ 41.522581][ T5889] ? tomoyo_realpath_from_path+0xb6/0x690 [ 41.522599][ T5889] tomoyo_realpath_from_path+0xb6/0x690 [ 41.522622][ T5889] tomoyo_check_open_permission+0x2af/0x3c0 [ 41.522641][ T5889] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 41.522658][ T5889] ? avc_has_perm_noaudit+0x11e/0x470 [ 41.522680][ T5889] ? hook_file_open+0x248/0x8e0 [ 41.522710][ T5889] ? path_get+0x61/0x80 [ 41.522737][ T5889] tomoyo_file_open+0x6b/0x90 [ 41.522754][ T5889] security_file_open+0xb5/0x1e0 [ 41.522776][ T5889] do_dentry_open+0x588/0x14d0 [ 41.522801][ T5889] vfs_open+0x82/0x3f0 [ 41.522827][ T5889] path_openat+0x19fa/0x2440 [ 41.522853][ T5889] ? __pfx_path_openat+0x10/0x10 [ 41.522881][ T5889] do_file_open+0x20e/0x430 [ 41.522906][ T5889] ? __pfx_do_file_open+0x10/0x10 [ 41.522943][ T5889] ? _raw_spin_unlock+0x28/0x50 [ 41.522957][ T5889] ? alloc_fd+0x471/0x7a0 [ 41.522986][ T5889] do_sys_openat2+0x10f/0x1e0 [ 41.523009][ T5889] ? __pfx_do_sys_openat2+0x10/0x10 [ 41.523041][ T5889] __x64_sys_openat+0x12d/0x210 [ 41.523067][ T5889] ? __pfx___x64_sys_openat+0x10/0x10 [ 41.523099][ T5889] do_syscall_64+0x123/0x790 [ 41.523120][ T5889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.523137][ T5889] RIP: 0033:0x7f4ee759e199 [ 41.523151][ T5889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.523165][ T5889] RSP: 002b:00007f4ee84db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 41.523181][ T5889] RAX: ffffffffffffffda RBX: 00007f4ee7825fa0 RCX: 00007f4ee759e199 [ 41.523192][ T5889] RDX: 0000000000000140 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 41.523202][ T5889] RBP: 00007f4ee76358e0 R08: 0000000000000000 R09: 0000000000000000 [ 41.523243][ T5889] R10: 00000000000001a0 R11: 0000000000000246 R12: 0000000000000000 [ 41.523255][ T5889] R13: 00007f4ee7826038 R14: 00007f4ee7825fa0 R15: 00007ffdf71b3018 [ 41.523278][ T5889] [ 41.523286][ T5889] ERROR: Out of memory at tomoyo_realpath_from_path. [ 41.530171][ T5890] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 41.537859][ T5890] IPv6: NLM_F_REPLACE set, but no existing node found! [ 41.945818][ T5910] Bluetooth: MGMT ver 1.23 [ 41.946701][ T5910] FAULT_INJECTION: forcing a failure. [ 41.946701][ T5910] name failslab, interval 1, probability 0, space 0, times 0 [ 41.946721][ T5910] CPU: 2 UID: 0 PID: 5910 Comm: syz.0.13 Not tainted syzkaller #0 PREEMPT(full) [ 41.946733][ T5910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.946739][ T5910] Call Trace: [ 41.946744][ T5910] [ 41.946749][ T5910] dump_stack_lvl+0x100/0x190 [ 41.946769][ T5910] should_fail_ex.cold+0x5/0xa [ 41.946786][ T5910] should_failslab+0xc2/0x120 [ 41.946802][ T5910] __kmalloc_cache_noprof+0x91/0x6d0 [ 41.946814][ T5910] ? mgmt_pending_new+0x5b/0x240 [ 41.946834][ T5910] mgmt_pending_new+0x5b/0x240 [ 41.946852][ T5910] disconnect+0x219/0x3c0 [ 41.946863][ T5910] ? __pfx_disconnect+0x10/0x10 [ 41.946874][ T5910] ? timer_init_key+0x150/0x310 [ 41.946889][ T5910] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 41.946900][ T5910] hci_sock_sendmsg+0x1574/0x26a0 [ 41.946921][ T5910] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 41.946939][ T5910] ? selinux_socket_sendmsg+0x198/0x2f0 [ 41.946958][ T5910] sock_write_iter+0x53a/0x5b0 [ 41.946970][ T5910] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 41.946988][ T5910] ? __pfx_sock_write_iter+0x10/0x10 [ 41.947003][ T5910] ? bpf_lsm_file_permission+0x9/0x10 [ 41.947019][ T5910] ? security_file_permission+0x76/0x210 [ 41.947035][ T5910] ? rw_verify_area+0xce/0x6d0 [ 41.947047][ T5910] vfs_write+0x6af/0x1050 [ 41.947060][ T5910] ? __pfx_sock_write_iter+0x10/0x10 [ 41.947073][ T5910] ? __pfx_vfs_write+0x10/0x10 [ 41.947085][ T5910] ? find_held_lock+0x2b/0x80 [ 41.947110][ T5910] ksys_write+0x1f8/0x250 [ 41.947123][ T5910] ? __pfx_ksys_write+0x10/0x10 [ 41.947140][ T5910] do_syscall_64+0x123/0x790 [ 41.947154][ T5910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.947166][ T5910] RIP: 0033:0x7f4ee759e199 [ 41.947175][ T5910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.947185][ T5910] RSP: 002b:00007f4ee84db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.947196][ T5910] RAX: ffffffffffffffda RBX: 00007f4ee7825fa0 RCX: 00007f4ee759e199 [ 41.947202][ T5910] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000007 [ 41.947235][ T5910] RBP: 00007f4ee84db090 R08: 0000000000000000 R09: 0000000000000000 [ 41.947241][ T5910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.947247][ T5910] R13: 00007f4ee7826038 R14: 00007f4ee7825fa0 R15: 00007ffdf71b3018 [ 41.947261][ T5910] [ 41.971706][ T5912] netlink: 128 bytes leftover after parsing attributes in process `syz.0.14'. [ 42.087428][ T5922] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 42.088140][ T5919] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 42.089038][ T5918] Zero length message leads to an empty skb [ 42.295393][ T5931] netlink: 96 bytes leftover after parsing attributes in process `syz.1.21'. [ 42.395152][ T5939] netlink: 'syz.0.25': attribute type 21 has an invalid length. [ 42.397748][ T5939] i2c i2c-1: dtv_property_process_set: SET cmd 0x25ffdbfc undefined [ 42.413474][ T5941] i2c i2c-1: dtv_property_process_set: SET cmd 0x84270060 undefined [ 42.490772][ T25] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 42.500142][ T25] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 42.629390][ T5959] netlink: 'syz.0.31': attribute type 29 has an invalid length. [ 42.634831][ T5959] netlink: 'syz.0.31': attribute type 29 has an invalid length. [ 42.732671][ T5726] Bluetooth: hci3: command tx timeout [ 42.732702][ T5726] Bluetooth: hci2: command tx timeout [ 42.741776][ T5085] Bluetooth: hci1: command tx timeout [ 42.754350][ T25] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 42.871275][ T5965] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.871473][ T5965] SELinux: failed to load policy [ 42.928361][ T5967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 43.103024][ T5973] overlayfs: failed to resolve './file1': -2 [ 43.263000][ T25] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 43.275306][ T5946] ceph: No mds server is up or the cluster is laggy [ 43.337980][ T5986] ip_tables: iptables: counters copy to user failed while replacing table [ 43.406086][ T5993] FAULT_INJECTION: forcing a failure. [ 43.406086][ T5993] name failslab, interval 1, probability 0, space 0, times 0 [ 43.406111][ T5993] CPU: 1 UID: 0 PID: 5993 Comm: syz.1.47 Tainted: G L syzkaller #0 PREEMPT(full) [ 43.406129][ T5993] Tainted: [L]=SOFTLOCKUP [ 43.406133][ T5993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.406139][ T5993] Call Trace: [ 43.406144][ T5993] [ 43.406149][ T5993] dump_stack_lvl+0x100/0x190 [ 43.406170][ T5993] should_fail_ex.cold+0x5/0xa [ 43.406187][ T5993] should_failslab+0xc2/0x120 [ 43.406205][ T5993] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 43.406220][ T5993] ? __pfx_proc_create_net_data+0x10/0x10 [ 43.406234][ T5993] ? __ip_vs_lblc_init+0x77/0x340 [ 43.406251][ T5993] ? __pfx___ip_vs_lblc_init+0x10/0x10 [ 43.406265][ T5993] kmemdup_noprof+0x29/0x60 [ 43.406277][ T5993] __ip_vs_lblc_init+0x77/0x340 [ 43.406292][ T5993] ? __pfx___ip_vs_lblc_init+0x10/0x10 [ 43.406307][ T5993] ops_init+0x1e2/0x5f0 [ 43.406326][ T5993] setup_net+0x118/0x3a0 [ 43.406344][ T5993] ? __pfx_setup_net+0x10/0x10 [ 43.406365][ T5993] copy_net_ns+0x345/0x7a0 [ 43.406377][ T5993] create_new_namespaces+0x3ea/0xac0 [ 43.406393][ T5993] unshare_nsproxy_namespaces+0xf2/0x220 [ 43.406407][ T5993] ksys_unshare+0x4a2/0xa70 [ 43.406422][ T5993] ? __pfx_ksys_unshare+0x10/0x10 [ 43.406439][ T5993] __x64_sys_unshare+0x31/0x40 [ 43.406452][ T5993] do_syscall_64+0x123/0x790 [ 43.406466][ T5993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.406480][ T5993] RIP: 0033:0x7f487c79e199 [ 43.406490][ T5993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.406500][ T5993] RSP: 002b:00007f487d5e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 43.406511][ T5993] RAX: ffffffffffffffda RBX: 00007f487ca25fa0 RCX: 00007f487c79e199 [ 43.406518][ T5993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 43.406525][ T5993] RBP: 00007f487c8358e0 R08: 0000000000000000 R09: 0000000000000000 [ 43.406531][ T5993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.406537][ T5993] R13: 00007f487ca26038 R14: 00007f487ca25fa0 R15: 00007fffb1d46828 [ 43.406550][ T5993] [ 43.439566][ T5995] input: syz0 as /devices/virtual/input/input5 [ 43.512588][ T5998] tmpfs: Bad value for 'mpol' [ 43.512617][ T43] kauditd_printk_skb: 114 callbacks suppressed [ 43.512632][ T43] audit: type=1400 audit(1791367240.362:285): avc: denied { mounton } for pid=5997 comm="syz.0.49" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 43.537189][ T43] audit: type=1400 audit(1791367240.382:286): avc: denied { write } for pid=5997 comm="syz.0.49" name="/" dev="9p" ino=71827697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.537217][ T43] audit: type=1400 audit(1791367240.382:287): avc: denied { add_name } for pid=5997 comm="syz.0.49" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.537355][ T43] audit: type=1400 audit(1791367240.382:288): avc: denied { create } for pid=5997 comm="syz.0.49" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.538370][ T43] audit: type=1400 audit(1791367240.382:289): avc: denied { associate } for pid=5997 comm="syz.0.49" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 43.543092][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.50'. [ 43.551681][ T43] audit: type=1400 audit(1791367240.392:290): avc: denied { read append open } for pid=5997 comm="syz.0.49" path="/21/file0/cpuset.effective_cpus" dev="9p" ino=71827923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.577721][ T43] audit: type=1400 audit(1791367240.422:291): avc: denied { ioctl } for pid=6001 comm="syz.1.51" path="socket:[9506]" dev="sockfs" ino=9506 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.602241][ T6004] capability: warning: `syz.2.53' uses deprecated v2 capabilities in a way that may be insecure [ 43.603240][ T43] audit: type=1400 audit(1791367240.452:292): avc: denied { create } for pid=6003 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.609376][ T43] audit: type=1400 audit(1791367240.452:293): avc: denied { read write } for pid=6005 comm="syz.3.52" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 43.609717][ T43] audit: type=1400 audit(1791367240.452:294): avc: denied { open } for pid=6005 comm="syz.3.52" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 43.618463][ T6007] loop6: detected capacity change from 0 to 2640 [ 43.622385][ T6007] Buffer I/O error on dev loop6, logical block 0, async page read [ 43.622423][ T6007] Buffer I/O error on dev loop6, logical block 0, async page read [ 43.622448][ T6007] Buffer I/O error on dev loop6, logical block 0, async page read [ 43.622471][ T6007] Buffer I/O error on dev loop6, logical block 0, async page read [ 43.622495][ T6007] Buffer I/O error on dev loop6, logical block 0, async page read [ 43.622532][ T6007] Buffer I/O error on dev loop6, logical block 0, async page read [ 43.622566][ T6007] Buffer I/O error on dev loop6, logical block 0, async page read [ 43.622590][ T6007] Buffer I/O error on dev loop6, logical block 0, async page read [ 43.622603][ T6007] ldm_validate_partition_table(): Disk read failed. [ 43.622624][ T6007] Buffer I/O error on dev loop6, logical block 0, async page read [ 43.622647][ T6007] Buffer I/O error on dev loop6, logical block 0, async page read [ 43.622684][ T6007] Dev loop6: unable to read RDB block 0 [ 43.622851][ T6007] loop6: unable to read partition table [ 43.623011][ T6007] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 43.643519][ T6009] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 43.643533][ T6009] CIFS mount error: No usable UNC path provided in device string! [ 43.643533][ T6009] [ 43.643611][ T6009] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 43.811140][ T6032] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 43.855635][ T6037] 9pnet_virtio: no channels available for device syz [ 43.859984][ T6045] 9pnet_virtio: no channels available for device syz [ 43.889202][ T6032] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 43.908333][ T6047] SELinux: ebitmap start bit (704643584) is beyond the end of the bitmap (1088) [ 43.908385][ T6047] SELinux: invalid class [ 43.912569][ T6047] SELinux: failed to load policy [ 43.960613][ T6052] 9pnet_virtio: no channels available for device syz [ 44.017737][ T6050] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 44.040238][ T6054] evm: overlay not supported [ 44.047296][ T6054] overlay: filesystem on ./file0 not supported as upperdir [ 44.163366][ T6064] FAULT_INJECTION: forcing a failure. [ 44.163366][ T6064] name failslab, interval 1, probability 0, space 0, times 0 [ 44.163399][ T6064] CPU: 0 UID: 0 PID: 6064 Comm: syz.2.72 Tainted: G L syzkaller #0 PREEMPT(full) [ 44.163423][ T6064] Tainted: [L]=SOFTLOCKUP [ 44.163429][ T6064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 44.163440][ T6064] Call Trace: [ 44.163446][ T6064] [ 44.163453][ T6064] dump_stack_lvl+0x100/0x190 [ 44.163484][ T6064] should_fail_ex.cold+0x5/0xa [ 44.163510][ T6064] should_failslab+0xc2/0x120 [ 44.163535][ T6064] kmem_cache_alloc_noprof+0x92/0x6a0 [ 44.163556][ T6064] ? __pfx_map_id_range_down+0x10/0x10 [ 44.163578][ T6064] ? rcu_is_watching+0x13/0xc0 [ 44.163603][ T6064] ? security_inode_alloc+0x3b/0x2c0 [ 44.163629][ T6064] security_inode_alloc+0x3b/0x2c0 [ 44.163651][ T6064] inode_init_always_gfp+0xc6f/0xfb0 [ 44.163681][ T6064] alloc_inode+0x8e/0x250 [ 44.163701][ T6064] sock_alloc+0x44/0x280 [ 44.163732][ T6064] do_accept+0xf9/0x530 [ 44.163753][ T6064] ? do_raw_spin_lock+0x128/0x260 [ 44.163779][ T6064] ? __pfx_do_accept+0x10/0x10 [ 44.163819][ T6064] __sys_accept4+0x108/0x200 [ 44.163859][ T6064] ? __pfx___sys_accept4+0x10/0x10 [ 44.163883][ T6064] ? __pfx_ksys_write+0x10/0x10 [ 44.163909][ T6064] __x64_sys_accept4+0x96/0x100 [ 44.163931][ T6064] ? lockdep_hardirqs_on+0x7d/0x110 [ 44.163952][ T6064] do_syscall_64+0x123/0x790 [ 44.163975][ T6064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.163994][ T6064] RIP: 0033:0x7fc0f999e199 [ 44.164009][ T6064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.164026][ T6064] RSP: 002b:00007fc0fa8de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 44.164043][ T6064] RAX: ffffffffffffffda RBX: 00007fc0f9c25fa0 RCX: 00007fc0f999e199 [ 44.164055][ T6064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 44.164065][ T6064] RBP: 00007fc0fa8de090 R08: 0000000000000000 R09: 0000000000000000 [ 44.164075][ T6064] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 44.164086][ T6064] R13: 00007fc0f9c26038 R14: 00007fc0f9c25fa0 R15: 00007fff50c6dba8 [ 44.164110][ T6064] [ 44.277688][ T5832] bridge0: entered promiscuous mode [ 44.774181][ T6082] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 44.822072][ T5085] Bluetooth: hci1: command tx timeout [ 44.822098][ T5085] Bluetooth: hci2: command tx timeout [ 44.822111][ T5085] Bluetooth: hci3: command tx timeout [ 45.521765][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 45.524304][ T6112] process 'syz.2.86' launched './file0' with NULL argv: empty string added [ 46.252537][ T5726] Bluetooth: hci0: command tx timeout [ 46.901739][ T5726] Bluetooth: hci2: command tx timeout [ 46.901773][ T5726] Bluetooth: hci3: command tx timeout [ 46.901793][ T5726] Bluetooth: hci1: command tx timeout [ 48.331813][ T5085] Bluetooth: hci0: command tx timeout [ 54.552309][ T6138] FAULT_INJECTION: forcing a failure. [ 54.552309][ T6138] name failslab, interval 1, probability 0, space 0, times 0 [ 54.552337][ T6138] CPU: 3 UID: 0 PID: 6138 Comm: syz.1.91 Tainted: G L syzkaller #0 PREEMPT(full) [ 54.552352][ T6138] Tainted: [L]=SOFTLOCKUP [ 54.552356][ T6138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.552362][ T6138] Call Trace: [ 54.552366][ T6138] [ 54.552370][ T6138] dump_stack_lvl+0x100/0x190 [ 54.552391][ T6138] should_fail_ex.cold+0x5/0xa [ 54.552407][ T6138] should_failslab+0xc2/0x120 [ 54.552422][ T6138] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 54.552438][ T6138] ? mgmt_pending_new+0xcc/0x240 [ 54.552460][ T6138] kmemdup_noprof+0x29/0x60 [ 54.552472][ T6138] mgmt_pending_new+0xcc/0x240 [ 54.552491][ T6138] disconnect+0x219/0x3c0 [ 54.552502][ T6138] ? __pfx_disconnect+0x10/0x10 [ 54.552513][ T6138] ? do_raw_read_unlock+0x3f/0x70 [ 54.552528][ T6138] ? _raw_read_unlock+0x28/0x50 [ 54.552540][ T6138] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 54.552551][ T6138] hci_sock_sendmsg+0x1574/0x26a0 [ 54.552571][ T6138] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 54.552589][ T6138] ? selinux_socket_sendmsg+0x198/0x2f0 [ 54.552606][ T6138] sock_write_iter+0x53a/0x5b0 [ 54.552618][ T6138] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 54.552635][ T6138] ? __pfx_sock_write_iter+0x10/0x10 [ 54.552651][ T6138] ? bpf_lsm_file_permission+0x9/0x10 [ 54.552667][ T6138] ? security_file_permission+0x76/0x210 [ 54.552684][ T6138] ? rw_verify_area+0xce/0x6d0 [ 54.552696][ T6138] vfs_write+0x6af/0x1050 [ 54.552709][ T6138] ? __pfx_sock_write_iter+0x10/0x10 [ 54.552722][ T6138] ? __pfx_vfs_write+0x10/0x10 [ 54.552734][ T6138] ? find_held_lock+0x2b/0x80 [ 54.552760][ T6138] ksys_write+0x1f8/0x250 [ 54.552773][ T6138] ? __pfx_ksys_write+0x10/0x10 [ 54.552790][ T6138] do_syscall_64+0x123/0x790 [ 54.552804][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.552815][ T6138] RIP: 0033:0x7f487c79e199 [ 54.552825][ T6138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.552835][ T6138] RSP: 002b:00007f487d5e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 54.552846][ T6138] RAX: ffffffffffffffda RBX: 00007f487ca25fa0 RCX: 00007f487c79e199 [ 54.552853][ T6138] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000007 [ 54.552859][ T6138] RBP: 00007f487d5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.552865][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.552871][ T6138] R13: 00007f487ca26038 R14: 00007f487ca25fa0 R15: 00007fffb1d46828 [ 54.552885][ T6138] [ 54.574419][ T6141] FAULT_INJECTION: forcing a failure. [ 54.574419][ T6141] name failslab, interval 1, probability 0, space 0, times 0 [ 54.574441][ T6141] CPU: 0 UID: 0 PID: 6141 Comm: syz.1.92 Tainted: G L syzkaller #0 PREEMPT(full) [ 54.574469][ T6141] Tainted: [L]=SOFTLOCKUP [ 54.574473][ T6141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.574479][ T6141] Call Trace: [ 54.574483][ T6141] [ 54.574487][ T6141] dump_stack_lvl+0x100/0x190 [ 54.574508][ T6141] should_fail_ex.cold+0x5/0xa [ 54.574522][ T6141] ? __pfx___skb_flow_dissect+0x10/0x10 [ 54.574536][ T6141] should_failslab+0xc2/0x120 [ 54.574552][ T6141] kmem_cache_alloc_noprof+0x92/0x6a0 [ 54.574565][ T6141] ? dev_queue_xmit_nit+0x38/0xa60 [ 54.574580][ T6141] ? skb_clone+0x190/0x400 [ 54.574599][ T6141] skb_clone+0x190/0x400 [ 54.574615][ T6141] dev_queue_xmit_nit+0x255/0xa60 [ 54.574635][ T6141] dev_hard_start_xmit+0x2f5/0x760 [ 54.574651][ T6141] __dev_queue_xmit+0x1c25/0x4a40 [ 54.574667][ T6141] ? find_held_lock+0x2b/0x80 [ 54.574683][ T6141] ? __might_fault+0xc5/0x140 [ 54.574695][ T6141] ? __pfx___dev_queue_xmit+0x10/0x10 [ 54.574710][ T6141] ? _copy_from_iter+0x270/0x1690 [ 54.574727][ T6141] ? __pfx__copy_from_iter+0x10/0x10 [ 54.574741][ T6141] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 54.574761][ T6141] ? packet_parse_headers+0x5bb/0x830 [ 54.574787][ T6141] ? packet_parse_headers+0x5c7/0x830 [ 54.574802][ T6141] ? packet_parse_headers+0x2bd/0x830 [ 54.574818][ T6141] ? __pfx_packet_parse_headers+0x10/0x10 [ 54.574835][ T6141] packet_xmit+0x243/0x310 [ 54.574851][ T6141] packet_sendmsg+0x325e/0x4f90 [ 54.574874][ T6141] ? sock_has_perm+0x25a/0x2f0 [ 54.574886][ T6141] ? __pfx_sock_has_perm+0x10/0x10 [ 54.574902][ T6141] ? __pfx_packet_sendmsg+0x10/0x10 [ 54.574917][ T6141] ? __might_fault+0xc5/0x140 [ 54.574930][ T6141] ? selinux_socket_sendmsg+0x198/0x2f0 [ 54.574946][ T6141] __sys_sendto+0x48b/0x4e0 [ 54.574959][ T6141] ? __pfx_packet_sendmsg+0x10/0x10 [ 54.574975][ T6141] ? __pfx___sys_sendto+0x10/0x10 [ 54.574994][ T6141] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 54.575012][ T6141] ? ksys_write+0x1ac/0x250 [ 54.575025][ T6141] ? __pfx_ksys_write+0x10/0x10 [ 54.575039][ T6141] __x64_sys_sendto+0xe0/0x1c0 [ 54.575054][ T6141] ? do_syscall_64+0xae/0x790 [ 54.575065][ T6141] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.575077][ T6141] do_syscall_64+0x123/0x790 [ 54.575090][ T6141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.575101][ T6141] RIP: 0033:0x7f487c79e199 [ 54.575111][ T6141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.575120][ T6141] RSP: 002b:00007f487d5e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 54.575131][ T6141] RAX: ffffffffffffffda RBX: 00007f487ca25fa0 RCX: 00007f487c79e199 [ 54.575138][ T6141] RDX: 00000000000005c8 RSI: 0000200000000100 RDI: 0000000000000003 [ 54.575144][ T6141] RBP: 00007f487d5e7090 R08: 0000200000000080 R09: 0000000000000014 [ 54.575177][ T6141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.575186][ T6141] R13: 00007f487ca26038 R14: 00007f487ca25fa0 R15: 00007fffb1d46828 [ 54.575205][ T6141] [ 54.580336][ T43] kauditd_printk_skb: 32 callbacks suppressed [ 54.580353][ T43] audit: type=1400 audit(1791367251.422:327): avc: denied { mounton } for pid=6134 comm="syz.0.90" path="/28/file0" dev="tmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.004072][ T43] audit: type=1400 audit(1791367251.852:328): avc: denied { mount } for pid=6162 comm="syz.2.97" name="/" dev="ramfs" ino=11372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 55.005821][ T43] audit: type=1400 audit(1791367251.852:329): avc: denied { create } for pid=6162 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.009075][ T43] audit: type=1400 audit(1791367251.852:330): avc: denied { read } for pid=6162 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.009561][ T43] audit: type=1400 audit(1791367251.852:331): avc: denied { bind } for pid=6162 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.009913][ T43] audit: type=1400 audit(1791367251.852:332): avc: denied { connect } for pid=6162 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.010702][ T43] audit: type=1400 audit(1791367251.852:333): avc: denied { write } for pid=6162 comm="syz.2.97" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.010864][ T43] audit: type=1400 audit(1791367251.852:334): avc: denied { open } for pid=6162 comm="syz.2.97" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.011450][ T43] audit: type=1400 audit(1791367251.852:335): avc: denied { ioctl } for pid=6162 comm="syz.2.97" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.015475][ T43] audit: type=1804 audit(1791367251.862:336): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.97" name="bus" dev="ramfs" ino=12469 res=1 errno=0 [ 55.280222][ T6173] netlink: 'syz.3.99': attribute type 2 has an invalid length. [ 55.280247][ T6173] netlink: 'syz.3.99': attribute type 2 has an invalid length. [ 55.280257][ T6173] netlink: 'syz.3.99': attribute type 1 has an invalid length. [ 56.050394][ T6193] cifs: Unknown parameter 'soft' [ 56.074983][ T6195] FAULT_INJECTION: forcing a failure. [ 56.074983][ T6195] name failslab, interval 1, probability 0, space 0, times 0 [ 56.075008][ T6195] CPU: 3 UID: 0 PID: 6195 Comm: syz.0.107 Tainted: G L syzkaller #0 PREEMPT(full) [ 56.075023][ T6195] Tainted: [L]=SOFTLOCKUP [ 56.075027][ T6195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.075033][ T6195] Call Trace: [ 56.075037][ T6195] [ 56.075041][ T6195] dump_stack_lvl+0x100/0x190 [ 56.075061][ T6195] should_fail_ex.cold+0x5/0xa [ 56.075077][ T6195] should_failslab+0xc2/0x120 [ 56.075094][ T6195] __kmalloc_noprof+0xfc/0x840 [ 56.075107][ T6195] ? tomoyo_encode2+0xfb/0x3c0 [ 56.075126][ T6195] tomoyo_encode2+0xfb/0x3c0 [ 56.075168][ T6195] tomoyo_encode+0x29/0x50 [ 56.075188][ T6195] tomoyo_realpath_from_path+0x18c/0x690 [ 56.075207][ T6195] tomoyo_path_number_perm+0x23c/0x580 [ 56.075220][ T6195] ? tomoyo_path_number_perm+0x22e/0x580 [ 56.075235][ T6195] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 56.075253][ T6195] ? __lock_acquire+0x5c0/0x1f40 [ 56.075272][ T6195] ? __fget_files+0x34/0x3d0 [ 56.075287][ T6195] ? find_held_lock+0x2b/0x80 [ 56.075303][ T6195] ? hook_file_ioctl_common+0x140/0x440 [ 56.075324][ T6195] ? __fget_files+0x21f/0x3d0 [ 56.075341][ T6195] security_file_ioctl+0xd3/0x230 [ 56.075356][ T6195] __x64_sys_ioctl+0xb7/0x210 [ 56.075370][ T6195] do_syscall_64+0x123/0x790 [ 56.075388][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.075404][ T6195] RIP: 0033:0x7f4ee759e199 [ 56.075417][ T6195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.075431][ T6195] RSP: 002b:00007f4ee84db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.075450][ T6195] RAX: ffffffffffffffda RBX: 00007f4ee7825fa0 RCX: 00007f4ee759e199 [ 56.075461][ T6195] RDX: 0000200000000480 RSI: 0000000000005393 RDI: 0000000000000004 [ 56.075471][ T6195] RBP: 00007f4ee84db090 R08: 0000000000000000 R09: 0000000000000000 [ 56.075483][ T6195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.075492][ T6195] R13: 00007f4ee7826038 R14: 00007f4ee7825fa0 R15: 00007ffdf71b3018 [ 56.075516][ T6195] [ 56.075531][ T6195] ERROR: Out of memory at tomoyo_realpath_from_path. [ 56.284737][ T6204] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 56.756132][ T6211] ip_tables: iptables: counters copy to user failed while replacing table [ 56.947464][ T6218] binder: 6216:6218 ioctl c0306201 200000000080 returned -14 [ 56.947498][ T6219] netlink: 48 bytes leftover after parsing attributes in process `syz.0.116'. [ 56.947543][ T6218] binder: 6216:6218 ioctl c0306201 200000000080 returned -14 [ 56.947626][ T6218] binder: 6216:6218 ioctl c0306201 200000000080 returned -14 [ 56.947681][ T6218] binder: 6216:6218 ioctl c0306201 200000000080 returned -14 [ 56.948091][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.948098][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.948152][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.948157][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.948199][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.948204][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.948242][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.948246][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.948258][ T6218] binder: 6216:6218 ioctl c0306201 200000000080 returned -14 [ 56.948283][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.948288][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.948330][ T6218] binder: 6216:6218 ioctl c0306201 200000000080 returned -14 [ 56.948337][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.948343][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.948379][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.948384][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.948407][ T6218] binder: 6216:6218 ioctl c0306201 200000000080 returned -14 [ 56.948421][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.948426][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.948463][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.948464][ T6218] binder: 6216:6218 ioctl c0306201 200000000080 returned -14 [ 56.948468][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.948517][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.948522][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.948559][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.948564][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.948601][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.948606][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.948653][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.948658][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.948729][ T6218] binder: 6216:6218 ioctl c0306201 200000000080 returned -14 [ 56.948790][ T6218] binder: 6216:6218 ioctl c0306201 200000000080 returned -14 [ 56.948850][ T6218] binder: 6216:6218 ioctl c0306201 200000000080 returned -14 [ 56.948909][ T6218] binder: 6216:6218 ioctl c0306201 200000000080 returned -14 [ 56.948975][ T6218] binder: 6216:6218 ioctl c0306201 200000000080 returned -14 [ 56.949041][ T6218] binder: 6216:6218 ioctl c0306201 200000000080 returned -14 [ 56.949076][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.949083][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.949109][ T6218] binder: 6216:6218 ioctl c0306201 200000000080 returned -14 [ 56.949135][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.949139][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.949176][ T6218] binder: 6216:6218 ioctl c0306201 200000000080 returned -14 [ 56.949181][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.949185][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.949224][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.949227][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.949266][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.949270][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.949309][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.949312][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.949350][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.949354][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.949391][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.949395][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.949435][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.949439][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.949476][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.949480][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.949517][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.949521][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.949558][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.949562][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.949600][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.949604][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.949642][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.949645][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.949688][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.949692][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.949729][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.949733][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.949816][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.949821][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.949863][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.949867][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.949905][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.949908][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.949945][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.949949][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.949987][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.949991][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.950029][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.950032][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.950069][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.950073][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.950111][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.950115][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.950153][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.950157][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.950195][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.950198][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.950236][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.950240][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.950277][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.950281][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.950319][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.950322][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.950359][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.950363][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.950401][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.950405][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.950441][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.950445][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.950497][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.950501][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.950537][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.950541][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.950579][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.950582][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.950619][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.950623][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.950672][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.950676][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.950718][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.950722][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.950777][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.950782][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.950840][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.950846][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.950918][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.950922][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.950960][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.950964][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.951001][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.951005][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.951042][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.951046][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.951095][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.951098][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.951135][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.951160][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.951204][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.951208][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.951246][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.951249][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.951299][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.951303][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.951339][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.951343][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 56.951381][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 56.951384][ T6221] binder: 6216:6221 ioctl 4018620d 200000004a80 returned -16 [ 57.962306][ T6165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 57.966576][ T6167] tipc: Started in network mode [ 57.966593][ T6167] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 57.967373][ T6157] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 57.968343][ T6167] tipc: Enabled bearer , priority 0 [ 58.018589][ T6252] overlayfs: missing 'workdir' [ 58.025319][ T6254] bond1: entered promiscuous mode [ 58.093347][ T6260] xt_hashlimit: size too large, truncated to 1048576 [ 58.096637][ T6262] ip_tables: iptables: counters copy to user failed while replacing table [ 58.422273][ T50] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 58.422608][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.471666][ T37] Bluetooth: hci4: Frame reassembly failed (-84) [ 58.472532][ T37] Bluetooth: hci4: Frame reassembly failed (-84) [ 58.561668][ T50] usb 7-1: device descriptor read/64, error -71 [ 58.585665][ T25] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 58.587782][ T25] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 58.588591][ T25] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 58.590143][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.590156][ T25] usb 5-1: Product: syz [ 58.590163][ T25] usb 5-1: Manufacturer: syz [ 58.590170][ T25] usb 5-1: SerialNumber: syz [ 58.600125][ T25] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 58.606410][ T25] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 58.612426][ T25] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 58.801730][ T50] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 58.931686][ T50] usb 7-1: device descriptor read/64, error -71 [ 59.042960][ T50] usb usb7-port1: attempt power cycle [ 59.093084][ T5832] tipc: Node number set to 43690 [ 59.381700][ T50] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 59.402305][ T50] usb 7-1: device descriptor read/8, error -71 [ 59.643918][ T50] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 59.662943][ T50] usb 7-1: device descriptor read/8, error -71 [ 59.773119][ T50] usb usb7-port1: unable to enumerate USB device [ 59.816738][ T6283] FAULT_INJECTION: forcing a failure. [ 59.816738][ T6283] name failslab, interval 1, probability 0, space 0, times 0 [ 59.816761][ T6283] CPU: 2 UID: 0 PID: 6283 Comm: syz.3.138 Tainted: G L syzkaller #0 PREEMPT(full) [ 59.816776][ T6283] Tainted: [L]=SOFTLOCKUP [ 59.816780][ T6283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.816786][ T6283] Call Trace: [ 59.816791][ T6283] [ 59.816795][ T6283] dump_stack_lvl+0x100/0x190 [ 59.816816][ T6283] should_fail_ex.cold+0x5/0xa [ 59.816832][ T6283] ? __pfx_disconnect_sync+0x10/0x10 [ 59.816843][ T6283] should_failslab+0xc2/0x120 [ 59.816871][ T6283] ? __pfx_disconnect_sync+0x10/0x10 [ 59.816882][ T6283] __kmalloc_cache_noprof+0x91/0x6d0 [ 59.816893][ T6283] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 59.816908][ T6283] ? hci_cmd_sync_submit+0xbc/0x330 [ 59.816921][ T6283] ? __pfx_disconnect_complete+0x10/0x10 [ 59.816938][ T6283] ? __pfx_disconnect_sync+0x10/0x10 [ 59.816948][ T6283] hci_cmd_sync_submit+0xbc/0x330 [ 59.816961][ T6283] ? __pfx_disconnect_sync+0x10/0x10 [ 59.816971][ T6283] ? __pfx_disconnect_complete+0x10/0x10 [ 59.816987][ T6283] hci_cmd_sync_queue+0x79/0xa0 [ 59.817001][ T6283] disconnect+0x266/0x3c0 [ 59.817012][ T6283] ? __pfx_disconnect+0x10/0x10 [ 59.817022][ T6283] ? do_raw_read_unlock+0x3f/0x70 [ 59.817038][ T6283] ? _raw_read_unlock+0x28/0x50 [ 59.817049][ T6283] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 59.817060][ T6283] hci_sock_sendmsg+0x1574/0x26a0 [ 59.817081][ T6283] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 59.817098][ T6283] ? selinux_socket_sendmsg+0x198/0x2f0 [ 59.817115][ T6283] sock_write_iter+0x53a/0x5b0 [ 59.817127][ T6283] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 59.817145][ T6283] ? __pfx_sock_write_iter+0x10/0x10 [ 59.817160][ T6283] ? bpf_lsm_file_permission+0x9/0x10 [ 59.817176][ T6283] ? security_file_permission+0x76/0x210 [ 59.817196][ T6283] ? rw_verify_area+0xce/0x6d0 [ 59.817209][ T6283] vfs_write+0x6af/0x1050 [ 59.817222][ T6283] ? __pfx_sock_write_iter+0x10/0x10 [ 59.817235][ T6283] ? __pfx_vfs_write+0x10/0x10 [ 59.817247][ T6283] ? find_held_lock+0x2b/0x80 [ 59.817272][ T6283] ksys_write+0x1f8/0x250 [ 59.817285][ T6283] ? __pfx_ksys_write+0x10/0x10 [ 59.817302][ T6283] do_syscall_64+0x123/0x790 [ 59.817316][ T6283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.817327][ T6283] RIP: 0033:0x7f892079e199 [ 59.817337][ T6283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.817347][ T6283] RSP: 002b:00007f8921742028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 59.817358][ T6283] RAX: ffffffffffffffda RBX: 00007f8920a25fa0 RCX: 00007f892079e199 [ 59.817364][ T6283] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000007 [ 59.817371][ T6283] RBP: 00007f8921742090 R08: 0000000000000000 R09: 0000000000000000 [ 59.817377][ T6283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.817383][ T6283] R13: 00007f8920a26038 R14: 00007f8920a25fa0 R15: 00007ffe07e3f4d8 [ 59.817397][ T6283] [ 60.492434][ T5726] Bluetooth: hci4: command 0x1003 tx timeout [ 60.492506][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 60.492745][ T6260] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 60.500048][ T25] usb 5-1: USB disconnect, device number 2 [ 60.516048][ T25] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 60.535918][ T25] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 60.536379][ T25] ti_usb_3410_5052 5-1:2.0: device disconnected [ 60.603427][ T6289] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 60.603467][ T6289] SELinux: failed to load policy [ 60.634903][ T6291] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 60.723357][ T6298] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 60.846977][ T6307] FAULT_INJECTION: forcing a failure. [ 60.846977][ T6307] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 60.847843][ T6307] CPU: 0 UID: 0 PID: 6307 Comm: syz.3.149 Tainted: G L syzkaller #0 PREEMPT(full) [ 60.847861][ T6307] Tainted: [L]=SOFTLOCKUP [ 60.847865][ T6307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.847871][ T6307] Call Trace: [ 60.847875][ T6307] [ 60.847881][ T6307] dump_stack_lvl+0x100/0x190 [ 60.847900][ T6307] should_fail_ex.cold+0x5/0xa [ 60.847917][ T6307] _copy_to_user+0x32/0xd0 [ 60.847932][ T6307] simple_read_from_buffer+0xcb/0x170 [ 60.847949][ T6307] proc_fail_nth_read+0x1af/0x230 [ 60.847966][ T6307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.847982][ T6307] ? rw_verify_area+0xce/0x6d0 [ 60.847994][ T6307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.848009][ T6307] vfs_read+0x1e4/0xb40 [ 60.848022][ T6307] ? lock_acquire+0x1d1/0x380 [ 60.848035][ T6307] ? __fget_files+0x34/0x3d0 [ 60.848049][ T6307] ? __pfx_vfs_read+0x10/0x10 [ 60.848061][ T6307] ? find_held_lock+0x2b/0x80 [ 60.848077][ T6307] ? __fget_files+0x215/0x3d0 [ 60.848094][ T6307] ? __fget_files+0x21f/0x3d0 [ 60.848113][ T6307] ksys_read+0x12a/0x250 [ 60.848125][ T6307] ? __pfx_ksys_read+0x10/0x10 [ 60.848142][ T6307] do_syscall_64+0x123/0x790 [ 60.848156][ T6307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.848168][ T6307] RIP: 0033:0x7f892075e9ce [ 60.848178][ T6307] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.848188][ T6307] RSP: 002b:00007f8921741fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.848199][ T6307] RAX: ffffffffffffffda RBX: 00007f89217426c0 RCX: 00007f892075e9ce [ 60.848206][ T6307] RDX: 000000000000000f RSI: 00007f89217420a0 RDI: 0000000000000004 [ 60.848212][ T6307] RBP: 00007f8921742090 R08: 0000000000000000 R09: 0000000000000000 [ 60.848218][ T6307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.848224][ T6307] R13: 00007f8920a26038 R14: 00007f8920a25fa0 R15: 00007ffe07e3f4d8 [ 60.848238][ T6307] [ 60.971161][ T5728] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 61.166102][ T43] kauditd_printk_skb: 29 callbacks suppressed [ 61.166116][ T43] audit: type=1400 audit(1791367258.012:366): avc: denied { write } for pid=6321 comm="syz.0.154" name="/" dev="9p" ino=71827697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.172642][ T43] audit: type=1400 audit(1791367258.022:367): avc: denied { write } for pid=6321 comm="syz.0.154" name="cgroup.controllers" dev="9p" ino=71827931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.193666][ T43] audit: type=1400 audit(1791367258.042:368): avc: denied { mounton } for pid=6321 comm="syz.0.154" path="/51/file0/file0" dev="9p" ino=71827723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.193729][ T6323] 9pnet_virtio: no channels available for device syz [ 61.222698][ T5728] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 61.491008][ T6337] netlink: 'syz.0.157': attribute type 1 has an invalid length. [ 61.491023][ T6337] netlink: 228 bytes leftover after parsing attributes in process `syz.0.157'. [ 61.568698][ T6338] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 61.689347][ T43] audit: type=1400 audit(1791367258.532:369): avc: denied { read } for pid=6344 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.734671][ T43] audit: type=1400 audit(1791367258.582:370): avc: denied { write } for pid=6347 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 61.743403][ T50] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 61.798571][ T6316] ceph: No mds server is up or the cluster is laggy [ 61.799378][ T6353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.812360][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 61.865454][ T6357] FAULT_INJECTION: forcing a failure. [ 61.865454][ T6357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.865476][ T6357] CPU: 0 UID: 0 PID: 6357 Comm: syz.1.165 Tainted: G L syzkaller #0 PREEMPT(full) [ 61.865490][ T6357] Tainted: [L]=SOFTLOCKUP [ 61.865494][ T6357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.865500][ T6357] Call Trace: [ 61.865504][ T6357] [ 61.865508][ T6357] dump_stack_lvl+0x100/0x190 [ 61.865528][ T6357] should_fail_ex.cold+0x5/0xa [ 61.865544][ T6357] _copy_from_iter+0x1f4/0x1690 [ 61.865559][ T6357] ? __asan_memset+0x23/0x50 [ 61.865572][ T6357] ? __pfx__copy_from_iter+0x10/0x10 [ 61.865586][ T6357] ? __pfx___alloc_skb+0x10/0x10 [ 61.865607][ T6357] netlink_sendmsg+0x808/0xda0 [ 61.865628][ T6357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.865644][ T6357] ? selinux_socket_sendmsg+0x198/0x2f0 [ 61.865660][ T6357] ____sys_sendmsg+0xa4d/0xbe0 [ 61.865671][ T6357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.865687][ T6357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 61.865702][ T6357] ? lock_acquire+0x1d1/0x380 [ 61.865715][ T6357] ? get_pid_task+0x2a/0x250 [ 61.865731][ T6357] ___sys_sendmsg+0x190/0x1e0 [ 61.865745][ T6357] ? __pfx____sys_sendmsg+0x10/0x10 [ 61.865757][ T6357] ? get_pid_task+0x106/0x250 [ 61.865776][ T6357] ? find_held_lock+0x2b/0x80 [ 61.865801][ T6357] __sys_sendmsg+0x160/0x210 [ 61.865817][ T6357] ? __pfx___sys_sendmsg+0x10/0x10 [ 61.865851][ T6357] do_syscall_64+0x123/0x790 [ 61.865865][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.865877][ T6357] RIP: 0033:0x7f487c79e199 [ 61.865886][ T6357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.865896][ T6357] RSP: 002b:00007f487d5e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.865907][ T6357] RAX: ffffffffffffffda RBX: 00007f487ca25fa0 RCX: 00007f487c79e199 [ 61.865913][ T6357] RDX: 0000000000040010 RSI: 00002000000005c0 RDI: 0000000000000003 [ 61.865920][ T6357] RBP: 00007f487d5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.865926][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.865932][ T6357] R13: 00007f487ca26038 R14: 00007f487ca25fa0 R15: 00007fffb1d46828 [ 61.865946][ T6357] [ 61.961818][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 61.963092][ T25] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 61.963958][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.963970][ T25] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 61.965468][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.965479][ T25] usb 5-1: Product: syz [ 61.965486][ T25] usb 5-1: Manufacturer: syz [ 61.965494][ T25] usb 5-1: SerialNumber: syz [ 61.967705][ T25] usb 5-1: config 0 descriptor?? [ 62.036253][ T43] audit: type=1400 audit(1791367258.882:371): avc: denied { write } for pid=6358 comm="syz.1.166" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.061724][ T5078] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 62.115209][ T43] audit: type=1400 audit(1791367258.962:372): avc: denied { ioctl } for pid=6361 comm="syz.1.167" path="socket:[12826]" dev="sockfs" ino=12826 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.115896][ T43] audit: type=1400 audit(1791367258.962:373): avc: denied { getopt } for pid=6361 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.201797][ T5078] usb 8-1: device descriptor read/64, error -71 [ 62.214733][ T43] audit: type=1400 audit(1791367259.062:374): avc: denied { create } for pid=6367 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 62.217521][ T43] audit: type=1400 audit(1791367259.062:375): avc: denied { bind } for pid=6367 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 62.227224][ T5834] usb 5-1: USB disconnect, device number 3 [ 62.387934][ T6377] FAULT_INJECTION: forcing a failure. [ 62.387934][ T6377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.387967][ T6377] CPU: 1 UID: 0 PID: 6377 Comm: syz.2.172 Tainted: G L syzkaller #0 PREEMPT(full) [ 62.387990][ T6377] Tainted: [L]=SOFTLOCKUP [ 62.387997][ T6377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.388007][ T6377] Call Trace: [ 62.388013][ T6377] [ 62.388020][ T6377] dump_stack_lvl+0x100/0x190 [ 62.388051][ T6377] should_fail_ex.cold+0x5/0xa [ 62.388077][ T6377] _copy_from_user+0x2e/0xd0 [ 62.388100][ T6377] scsi_cdrom_send_packet+0x17d/0x620 [ 62.388128][ T6377] ? __pfx_scsi_cdrom_send_packet+0x10/0x10 [ 62.388160][ T6377] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 62.388190][ T6377] ? lock_acquire+0x1d1/0x380 [ 62.388222][ T6377] scsi_ioctl+0x4b5/0x1870 [ 62.388245][ T6377] ? __pfx___might_resched+0x10/0x10 [ 62.388266][ T6377] ? __pfx_scsi_ioctl+0x10/0x10 [ 62.388293][ T6377] ? __pfx_scsi_block_when_processing_errors+0x10/0x10 [ 62.388322][ T6377] ? rcu_is_watching+0x13/0xc0 [ 62.388347][ T6377] ? cap_capable+0x107/0x430 [ 62.388364][ T6377] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 62.388398][ T6377] sd_ioctl+0x1ac/0x2b0 [ 62.388423][ T6377] ? __pfx_sd_ioctl+0x10/0x10 [ 62.388446][ T6377] blkdev_ioctl+0x5ad/0x6f0 [ 62.388470][ T6377] ? __pfx_blkdev_ioctl+0x10/0x10 [ 62.388493][ T6377] ? selinux_file_ioctl+0x13b/0x290 [ 62.388515][ T6377] ? selinux_file_ioctl+0xb6/0x290 [ 62.388539][ T6377] ? __pfx_blkdev_ioctl+0x10/0x10 [ 62.388564][ T6377] __x64_sys_ioctl+0x18e/0x210 [ 62.388586][ T6377] do_syscall_64+0x123/0x790 [ 62.388609][ T6377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.388627][ T6377] RIP: 0033:0x7fc0f999e199 [ 62.388642][ T6377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.388658][ T6377] RSP: 002b:00007fc0fa8de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.388676][ T6377] RAX: ffffffffffffffda RBX: 00007fc0f9c25fa0 RCX: 00007fc0f999e199 [ 62.388687][ T6377] RDX: 0000200000000480 RSI: 0000000000005393 RDI: 0000000000000004 [ 62.388697][ T6377] RBP: 00007fc0fa8de090 R08: 0000000000000000 R09: 0000000000000000 [ 62.388708][ T6377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.388718][ T6377] R13: 00007fc0f9c26038 R14: 00007fc0f9c25fa0 R15: 00007fff50c6dba8 [ 62.388742][ T6377] [ 62.451827][ T5078] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 62.473317][ T6381] exFAT-fs (nbd2): unable to read boot sector [ 62.473331][ T6381] exFAT-fs (nbd2): failed to read boot sector [ 62.473339][ T6381] exFAT-fs (nbd2): failed to recognize exfat type [ 62.557729][ T6381] ip_tables: iptables: counters copy to user failed while replacing table [ 62.591738][ T5078] usb 8-1: device descriptor read/64, error -71 [ 62.701932][ T5078] usb usb8-port1: attempt power cycle [ 63.003463][ T6408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'. [ 63.039401][ T6413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6413 comm=syz.1.183 [ 63.046671][ T6410] netlink: 68 bytes leftover after parsing attributes in process `syz.0.185'. [ 63.051885][ T5078] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 63.065458][ T6415] netlink: 'syz.2.187': attribute type 2 has an invalid length. [ 63.065478][ T6415] netlink: 'syz.2.187': attribute type 2 has an invalid length. [ 63.065488][ T6415] netlink: 'syz.2.187': attribute type 1 has an invalid length. [ 63.073367][ T5078] usb 8-1: device descriptor read/8, error -71 [ 63.114776][ T6419] netlink: 'syz.0.189': attribute type 29 has an invalid length. [ 63.311783][ T5078] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 63.342630][ T5078] usb 8-1: device descriptor read/8, error -71 [ 63.452247][ T5078] usb usb8-port1: unable to enumerate USB device [ 63.501666][ T5728] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 63.516342][ T25] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 63.574656][ T6442] kAFS: unable to lookup cell 'syz1' [ 63.662569][ T5728] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 63.663710][ T5728] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 63.663734][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 63.663754][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 63.665694][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.665710][ T5728] usb 5-1: Product: syz [ 63.665720][ T5728] usb 5-1: Manufacturer: syz [ 63.665730][ T5728] usb 5-1: SerialNumber: syz [ 63.668045][ T5728] usb 5-1: config 0 descriptor?? [ 63.668632][ T6434] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.733355][ T5728] rc_core: IR keymap rc-streamzap not found [ 63.733373][ T5728] Registered IR keymap rc-empty [ 63.737156][ T5728] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 63.746378][ T5728] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 63.773478][ T25] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 63.866560][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 63.866575][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 63.875462][ T6434] ip_tables: iptables: counters copy to user failed while replacing table [ 63.903157][ T5728] usb 5-1: USB disconnect, device number 4 [ 64.282791][ T2401] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 64.331676][ T6438] ceph: No mds server is up or the cluster is laggy [ 64.439101][ T6458] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 64.440944][ T6456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6456 comm=syz.2.199 [ 64.462222][ T6455] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 64.489857][ T6460] overlayfs: regular lower layers cannot follow data lower layers [ 64.533074][ T6460] Bluetooth: hci0: load_link_keys: too big key_count value 22785 [ 64.534170][ T6460] netlink: 180 bytes leftover after parsing attributes in process `syz.0.201'. [ 64.586600][ T6464] overlayfs: regular lower layers cannot follow data lower layers [ 64.587833][ T6469] Bluetooth: hci0: load_link_keys: too big key_count value 22785 [ 64.624389][ T6467] netlink: 180 bytes leftover after parsing attributes in process `syz.0.201'. [ 65.109035][ T6482] /dev/sr0: Can't open blockdev [ 71.146631][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.146647][ T42] cfg80211: failed to load regulatory.db [ 71.146671][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 75.551344][ T43] kauditd_printk_skb: 36 callbacks suppressed [ 75.551356][ T43] audit: type=1400 audit(1791367272.392:412): avc: denied { watch } for pid=6496 comm="syz.1.210" path="pipe:[11228]" dev="pipefs" ino=11228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 75.581163][ T6503] Bluetooth: MGMT ver 1.23 [ 75.628785][ T43] audit: type=1400 audit(1791367272.472:413): avc: denied { write } for pid=6505 comm="syz.0.213" name="/" dev="9p" ino=71827697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.639657][ T6511] netlink: 132 bytes leftover after parsing attributes in process `syz.3.215'. [ 75.640828][ T43] audit: type=1400 audit(1791367272.482:414): avc: denied { create } for pid=6505 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 75.641525][ T43] audit: type=1400 audit(1791367272.482:415): avc: denied { write } for pid=6505 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 75.641922][ T6506] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.642568][ T43] audit: type=1400 audit(1791367272.492:416): avc: denied { write } for pid=6505 comm="syz.0.213" name="/" dev="9p" ino=71827697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.658825][ T6508] 9pnet_virtio: no channels available for device syz [ 75.689699][ T43] audit: type=1400 audit(1791367272.532:417): avc: denied { ioctl } for pid=6505 comm="syz.0.213" path="/64/file0/memory.events" dev="9p" ino=71827929 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.732287][ T43] audit: type=1400 audit(1791367272.582:418): avc: denied { map } for pid=6512 comm="syz.1.216" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 75.789882][ T6514] FAULT_INJECTION: forcing a failure. [ 75.789882][ T6514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.789904][ T6514] CPU: 0 UID: 0 PID: 6514 Comm: syz.1.216 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.789918][ T6514] Tainted: [L]=SOFTLOCKUP [ 75.789922][ T6514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.789928][ T6514] Call Trace: [ 75.789932][ T6514] [ 75.789936][ T6514] dump_stack_lvl+0x100/0x190 [ 75.789956][ T6514] should_fail_ex.cold+0x5/0xa [ 75.789972][ T6514] _copy_from_user+0x2e/0xd0 [ 75.789987][ T6514] memdup_user_nul+0x6c/0x120 [ 75.790000][ T6514] proc_simple_write+0xc1/0x1a0 [ 75.790014][ T6514] ? __pfx_proc_simple_write+0x10/0x10 [ 75.790030][ T6514] proc_reg_write+0x240/0x330 [ 75.790043][ T6514] vfs_write+0x2aa/0x1050 [ 75.790058][ T6514] ? __pfx_proc_reg_write+0x10/0x10 [ 75.790069][ T6514] ? lock_acquire+0x1d1/0x380 [ 75.790081][ T6514] ? __fget_files+0x34/0x3d0 [ 75.790095][ T6514] ? __pfx_vfs_write+0x10/0x10 [ 75.790107][ T6514] ? find_held_lock+0x2b/0x80 [ 75.790123][ T6514] ? __fget_files+0x215/0x3d0 [ 75.790140][ T6514] ? __fget_files+0x21f/0x3d0 [ 75.790158][ T6514] ksys_write+0x12a/0x250 [ 75.790177][ T6514] ? __pfx_ksys_write+0x10/0x10 [ 75.790194][ T6514] do_syscall_64+0x123/0x790 [ 75.790209][ T6514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.790222][ T6514] RIP: 0033:0x7f487c79e199 [ 75.790232][ T6514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.790242][ T6514] RSP: 002b:00007f487d5c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.790254][ T6514] RAX: ffffffffffffffda RBX: 00007f487ca26090 RCX: 00007f487c79e199 [ 75.790261][ T6514] RDX: 0000000000000002 RSI: 0000200000000070 RDI: 000000000000000a [ 75.790267][ T6514] RBP: 00007f487c8358e0 R08: 0000000000000000 R09: 0000000000000000 [ 75.790273][ T6514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.790279][ T6514] R13: 00007f487ca26128 R14: 00007f487ca26090 R15: 00007fffb1d46828 [ 75.790311][ T6514] [ 75.904931][ T6517] bond0: entered promiscuous mode [ 75.904947][ T6517] bond_slave_0: entered promiscuous mode [ 75.905062][ T6517] bond_slave_1: entered promiscuous mode [ 75.966557][ T6523] warning: `syz.2.221' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.985106][ T6525] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 75.985151][ T6525] SELinux: failed to load policy [ 76.009052][ T43] audit: type=1400 audit(1791367272.852:419): avc: denied { setopt } for pid=6526 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.013840][ T43] audit: type=1400 audit(1791367272.862:420): avc: denied { prog_load } for pid=6526 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 76.015280][ T43] audit: type=1400 audit(1791367272.862:421): avc: denied { map_create } for pid=6526 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 76.072175][ T6537] FAULT_INJECTION: forcing a failure. [ 76.072175][ T6537] name failslab, interval 1, probability 0, space 0, times 0 [ 76.072205][ T6537] CPU: 3 UID: 0 PID: 6537 Comm: syz.3.227 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.072227][ T6537] Tainted: [L]=SOFTLOCKUP [ 76.072233][ T6537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.072338][ T6537] Call Trace: [ 76.072347][ T6537] [ 76.072354][ T6537] dump_stack_lvl+0x100/0x190 [ 76.072387][ T6537] should_fail_ex.cold+0x5/0xa [ 76.072411][ T6537] should_failslab+0xc2/0x120 [ 76.072433][ T6537] kmem_cache_alloc_noprof+0x92/0x6a0 [ 76.072452][ T6537] ? dst_alloc+0x99/0x1a0 [ 76.072477][ T6537] dst_alloc+0x99/0x1a0 [ 76.072499][ T6537] rt_dst_alloc+0x35/0x3a0 [ 76.072517][ T6537] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 76.072543][ T6537] ip_route_output_key_hash+0x118/0x2b0 [ 76.072564][ T6537] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 76.072584][ T6537] ? lock_acquire+0x1d1/0x380 [ 76.072607][ T6537] ? selinux_xfrm_decode_session+0x35/0x90 [ 76.072631][ T6537] icmp_route_lookup.constprop.0+0x3e5/0x15b0 [ 76.072654][ T6537] ? __lock_acquire+0x5c0/0x1f40 [ 76.072672][ T6537] ? __pfx_icmp_route_lookup.constprop.0+0x10/0x10 [ 76.072697][ T6537] ? __ip_options_echo+0x6fd/0x1170 [ 76.072731][ T6537] ? __pfx___ip_options_echo+0x10/0x10 [ 76.072760][ T6537] __icmp_send+0xade/0x2be0 [ 76.072786][ T6537] ? __pfx___icmp_send+0x10/0x10 [ 76.072805][ T6537] ? lock_acquire+0x1d1/0x380 [ 76.072823][ T6537] ? do_raw_spin_lock+0x128/0x260 [ 76.072845][ T6537] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 76.072864][ T6537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.072887][ T6537] ? __lock_acquire+0x5c0/0x1f40 [ 76.072908][ T6537] ? __ip_options_compile+0x604/0x16a0 [ 76.072940][ T6537] ? ipv4_link_failure+0x749/0xbc0 [ 76.072957][ T6537] ? ipv4_link_failure+0x749/0xbc0 [ 76.072978][ T6537] ipv4_link_failure+0x441/0xbc0 [ 76.072999][ T6537] ? __pfx_ipv4_link_failure+0x10/0x10 [ 76.073024][ T6537] ? __pfx_ipv4_link_failure+0x10/0x10 [ 76.073042][ T6537] vti_tunnel_xmit+0x60c/0x1da0 [ 76.073064][ T6537] ? find_held_lock+0x2b/0x80 [ 76.073087][ T6537] ? __pfx_vti_tunnel_xmit+0x10/0x10 [ 76.073132][ T6537] ? dev_queue_xmit_nit+0x72c/0xa60 [ 76.073169][ T6537] dev_hard_start_xmit+0x121/0x760 [ 76.073195][ T6537] __dev_queue_xmit+0x1c25/0x4a40 [ 76.073219][ T6537] ? find_held_lock+0x2b/0x80 [ 76.073241][ T6537] ? __might_fault+0xc5/0x140 [ 76.073260][ T6537] ? __pfx___dev_queue_xmit+0x10/0x10 [ 76.073282][ T6537] ? _copy_from_iter+0x270/0x1690 [ 76.073307][ T6537] ? __pfx__copy_from_iter+0x10/0x10 [ 76.073326][ T6537] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 76.073354][ T6537] ? packet_parse_headers+0x5bb/0x830 [ 76.073376][ T6537] ? packet_parse_headers+0x5c7/0x830 [ 76.073397][ T6537] ? packet_parse_headers+0x2bd/0x830 [ 76.073420][ T6537] ? __pfx_packet_parse_headers+0x10/0x10 [ 76.073444][ T6537] packet_xmit+0x243/0x310 [ 76.073468][ T6537] packet_sendmsg+0x325e/0x4f90 [ 76.073501][ T6537] ? sock_has_perm+0x25a/0x2f0 [ 76.073520][ T6537] ? __pfx_sock_has_perm+0x10/0x10 [ 76.073543][ T6537] ? __pfx_packet_sendmsg+0x10/0x10 [ 76.073565][ T6537] ? __might_fault+0xc5/0x140 [ 76.073586][ T6537] ? selinux_socket_sendmsg+0x198/0x2f0 [ 76.073610][ T6537] __sys_sendto+0x48b/0x4e0 [ 76.073630][ T6537] ? __pfx_packet_sendmsg+0x10/0x10 [ 76.073653][ T6537] ? __pfx___sys_sendto+0x10/0x10 [ 76.073680][ T6537] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 76.073714][ T6537] ? ksys_write+0x1ac/0x250 [ 76.073733][ T6537] ? __pfx_ksys_write+0x10/0x10 [ 76.073754][ T6537] __x64_sys_sendto+0xe0/0x1c0 [ 76.073775][ T6537] ? do_syscall_64+0xae/0x790 [ 76.073792][ T6537] ? lockdep_hardirqs_on+0x7d/0x110 [ 76.073810][ T6537] do_syscall_64+0x123/0x790 [ 76.073829][ T6537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.073846][ T6537] RIP: 0033:0x7f892079e199 [ 76.073860][ T6537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.073874][ T6537] RSP: 002b:00007f8921742028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 76.073890][ T6537] RAX: ffffffffffffffda RBX: 00007f8920a25fa0 RCX: 00007f892079e199 [ 76.073900][ T6537] RDX: 00000000000005c8 RSI: 0000200000000100 RDI: 0000000000000003 [ 76.073910][ T6537] RBP: 00007f8921742090 R08: 0000200000000080 R09: 0000000000000014 [ 76.073920][ T6537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.073930][ T6537] R13: 00007f8920a26038 R14: 00007f8920a25fa0 R15: 00007ffe07e3f4d8 [ 76.073952][ T6537] [ 76.107359][ T6541] netlink: 'syz.0.229': attribute type 34 has an invalid length. [ 76.107372][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 76.319820][ T6550] netlink: 132 bytes leftover after parsing attributes in process `syz.3.232'. [ 76.362842][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'. [ 76.396833][ T6562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.396850][ T6562] IPv6: NLM_F_CREATE should be set when creating new route [ 76.603537][ T6590] FAULT_INJECTION: forcing a failure. [ 76.603537][ T6590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.603568][ T6590] CPU: 0 UID: 0 PID: 6590 Comm: syz.3.246 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.603592][ T6590] Tainted: [L]=SOFTLOCKUP [ 76.603598][ T6590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.603609][ T6590] Call Trace: [ 76.603615][ T6590] [ 76.603622][ T6590] dump_stack_lvl+0x100/0x190 [ 76.603653][ T6590] should_fail_ex.cold+0x5/0xa [ 76.603678][ T6590] _copy_to_user+0x32/0xd0 [ 76.603703][ T6590] simple_read_from_buffer+0xcb/0x170 [ 76.603731][ T6590] proc_fail_nth_read+0x1af/0x230 [ 76.603756][ T6590] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.603783][ T6590] ? rw_verify_area+0xce/0x6d0 [ 76.603801][ T6590] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.603825][ T6590] vfs_read+0x1e4/0xb40 [ 76.603844][ T6590] ? lock_acquire+0x1d1/0x380 [ 76.603864][ T6590] ? __fget_files+0x34/0x3d0 [ 76.603887][ T6590] ? __pfx_vfs_read+0x10/0x10 [ 76.603905][ T6590] ? find_held_lock+0x2b/0x80 [ 76.603931][ T6590] ? __fget_files+0x215/0x3d0 [ 76.603960][ T6590] ? __fget_files+0x21f/0x3d0 [ 76.603990][ T6590] ksys_read+0x12a/0x250 [ 76.604009][ T6590] ? __pfx_ksys_read+0x10/0x10 [ 76.604028][ T6590] ? trace_hardirqs_off+0x70/0x170 [ 76.604060][ T6590] do_syscall_64+0x123/0x790 [ 76.604083][ T6590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.604102][ T6590] RIP: 0033:0x7f892075e9ce [ 76.604115][ T6590] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 76.604129][ T6590] RSP: 002b:00007f8921741fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.604145][ T6590] RAX: ffffffffffffffda RBX: 00007f89217426c0 RCX: 00007f892075e9ce [ 76.604155][ T6590] RDX: 000000000000000f RSI: 00007f89217420a0 RDI: 0000000000000003 [ 76.604163][ T6590] RBP: 00007f8921742090 R08: 0000000000000000 R09: 0000000000000000 [ 76.604172][ T6590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.604180][ T6590] R13: 00007f8920a26038 R14: 00007f8920a25fa0 R15: 00007ffe07e3f4d8 [ 76.604200][ T6590] [ 76.683890][ T6594] ip6t_rt: unknown flags D [ 76.685799][ T6597] ip6t_rt: unknown flags D [ 76.761693][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 76.823322][ T6607] netlink: 'syz.0.253': attribute type 2 has an invalid length. [ 76.823336][ T6607] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 76.823342][ T6607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.253'. [ 76.823349][ T6607] netlink: 'syz.0.253': attribute type 2 has an invalid length. [ 76.823355][ T6607] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 76.823361][ T6607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.253'. [ 76.823367][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.823519][ T6607] netlink: 'syz.0.253': attribute type 2 has an invalid length. [ 76.823527][ T6607] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 76.823533][ T6607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.253'. [ 76.823540][ T6607] netlink: 'syz.0.253': attribute type 2 has an invalid length. [ 76.823546][ T6607] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 76.823551][ T6607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.253'. [ 76.823557][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.823602][ T6607] netlink: 'syz.0.253': attribute type 2 has an invalid length. [ 76.823609][ T6607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.253'. [ 76.823617][ T6607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.253'. [ 76.823622][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.823668][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.823718][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.823769][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.824534][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.824598][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.824647][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.824715][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.824765][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.824814][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.824862][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.824910][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.824957][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.825005][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.825051][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.825099][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.825146][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.825714][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.825772][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.825825][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.825878][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.825932][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.825979][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.826027][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.826075][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.826122][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.826169][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.826223][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.826270][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.826318][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.826364][ T6607] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 76.830013][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.839690][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.850127][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.862662][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.872695][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.884637][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.888751][ T6619] 9pnet_virtio: no channels available for device syz [ 76.890641][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.891532][ T6619] FAULT_INJECTION: forcing a failure. [ 76.891532][ T6619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.894904][ T6619] CPU: 1 UID: 0 PID: 6619 Comm: syz.2.257 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.894922][ T6619] Tainted: [L]=SOFTLOCKUP [ 76.894927][ T6619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.894933][ T6619] Call Trace: [ 76.894938][ T6619] [ 76.894943][ T6619] dump_stack_lvl+0x100/0x190 [ 76.894966][ T6619] should_fail_ex.cold+0x5/0xa [ 76.894984][ T6619] _copy_from_user+0x2e/0xd0 [ 76.895001][ T6619] kstrtouint_from_user+0xd6/0x1d0 [ 76.895020][ T6619] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 76.895041][ T6619] ? lock_acquire+0x1d1/0x380 [ 76.895085][ T6619] proc_fail_nth_write+0x83/0x220 [ 76.895105][ T6619] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 76.895138][ T6619] vfs_write+0x2aa/0x1050 [ 76.895155][ T6619] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 76.895171][ T6619] ? lock_acquire+0x1d1/0x380 [ 76.895184][ T6619] ? __fget_files+0x34/0x3d0 [ 76.895206][ T6619] ? __pfx_vfs_write+0x10/0x10 [ 76.895218][ T6619] ? find_held_lock+0x2b/0x80 [ 76.895236][ T6619] ? __fget_files+0x215/0x3d0 [ 76.895254][ T6619] ? __fget_files+0x21f/0x3d0 [ 76.895274][ T6619] ksys_write+0x12a/0x250 [ 76.895287][ T6619] ? __pfx_ksys_write+0x10/0x10 [ 76.895306][ T6619] do_syscall_64+0x123/0x790 [ 76.895321][ T6619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.895333][ T6619] RIP: 0033:0x7fc0f995e9ce [ 76.895344][ T6619] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 76.895355][ T6619] RSP: 002b:00007fc0fa8ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.895370][ T6619] RAX: ffffffffffffffda RBX: 00007fc0fa8de6c0 RCX: 00007fc0f995e9ce [ 76.895378][ T6619] RDX: 0000000000000001 RSI: 00007fc0fa8de0a0 RDI: 0000000000000005 [ 76.895384][ T6619] RBP: 00007fc0fa8de090 R08: 0000000000000000 R09: 0000000000000000 [ 76.895391][ T6619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.895398][ T6619] R13: 00007fc0f9c26038 R14: 00007fc0f9c25fa0 R15: 00007fff50c6dba8 [ 76.895413][ T6619] [ 76.914656][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.918778][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.931907][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.941209][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.944487][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.947194][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.955165][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.971089][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.982504][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.993678][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.001419][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.008548][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.012209][ T25] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 77.015156][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.019409][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.023227][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.026317][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.030496][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.034250][ T6622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.038259][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.047607][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.056568][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.060971][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.065822][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.068913][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.080469][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.084661][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.086435][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.089334][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.327360][ T25] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 77.371737][ T5726] Bluetooth: hci3: command 0x0406 tx timeout [ 77.569464][ T6640] cifs: Unknown parameter 'soft' [ 77.985023][ T6668] ======================================================= [ 77.985023][ T6668] WARNING: The mand mount option has been deprecated and [ 77.985023][ T6668] and is ignored by this kernel. Remove the mand [ 77.985023][ T6668] option from the mount to silence this warning. [ 77.985023][ T6668] ======================================================= [ 77.997254][ T6668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6668 comm=syz.3.275 [ 78.000963][ T6668] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 78.220484][ T6678] FAULT_INJECTION: forcing a failure. [ 78.220484][ T6678] name fail_futex, interval 1, probability 0, space 0, times 1 [ 78.220506][ T6678] CPU: 1 UID: 0 PID: 6678 Comm: syz.3.279 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.220521][ T6678] Tainted: [L]=SOFTLOCKUP [ 78.220525][ T6678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.220532][ T6678] Call Trace: [ 78.220543][ T6678] [ 78.220548][ T6678] dump_stack_lvl+0x100/0x190 [ 78.220583][ T6678] should_fail_ex.cold+0x5/0xa [ 78.220625][ T6678] get_futex_key+0x1d0/0x14f0 [ 78.220657][ T6678] ? __pfx_get_futex_key+0x10/0x10 [ 78.220684][ T6678] ? lockdep_hardirqs_on+0x7d/0x110 [ 78.220712][ T6678] ? irqentry_exit+0x24d/0xa10 [ 78.220734][ T6678] futex_wait_setup+0x91/0x540 [ 78.220757][ T6678] __futex_wait+0x19f/0x300 [ 78.220771][ T6678] ? __pfx___futex_wait+0x10/0x10 [ 78.220782][ T6678] ? __pfx_try_to_wake_up+0x10/0x10 [ 78.220795][ T6678] ? futex_hash+0x311/0x400 [ 78.220812][ T6678] ? __pfx_futex_wake_mark+0x10/0x10 [ 78.220825][ T6678] ? find_held_lock+0x2b/0x80 [ 78.220842][ T6678] ? futex_wake+0x4ea/0x5e0 [ 78.220857][ T6678] futex_wait+0xe6/0x370 [ 78.220870][ T6678] ? __pfx_futex_wait+0x10/0x10 [ 78.220885][ T6678] ? rcu_read_lock_any_held+0x6a/0x90 [ 78.220903][ T6678] ? find_held_lock+0x2b/0x80 [ 78.220919][ T6678] ? ksys_write+0x190/0x250 [ 78.220937][ T6678] ? ksys_write+0x190/0x250 [ 78.220952][ T6678] do_futex+0x265/0x440 [ 78.220970][ T6678] ? __pfx_do_futex+0x10/0x10 [ 78.220990][ T6678] __x64_sys_futex+0x34f/0x4d0 [ 78.221009][ T6678] ? __pfx___x64_sys_futex+0x10/0x10 [ 78.221031][ T6678] do_syscall_64+0x123/0x790 [ 78.221047][ T6678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.221060][ T6678] RIP: 0033:0x7f892079e199 [ 78.221071][ T6678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.221082][ T6678] RSP: 002b:00007f89217420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 78.221098][ T6678] RAX: ffffffffffffffda RBX: 00007f8920a25fa8 RCX: 00007f892079e199 [ 78.221105][ T6678] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8920a25fa8 [ 78.221112][ T6678] RBP: 00007f8920a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 78.221119][ T6678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.221126][ T6678] R13: 00007f8920a26038 R14: 00007ffe07e3f3f0 R15: 00007ffe07e3f4d8 [ 78.221141][ T6678] [ 79.114211][ T6702] FAULT_INJECTION: forcing a failure. [ 79.114211][ T6702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.114240][ T6702] CPU: 3 UID: 0 PID: 6702 Comm: syz.2.288 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.114260][ T6702] Tainted: [L]=SOFTLOCKUP [ 79.114266][ T6702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.114274][ T6702] Call Trace: [ 79.114279][ T6702] [ 79.114284][ T6702] dump_stack_lvl+0x100/0x190 [ 79.114346][ T6702] should_fail_ex.cold+0x5/0xa [ 79.114369][ T6702] _copy_from_user+0x2e/0xd0 [ 79.114398][ T6702] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 79.114423][ T6702] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 79.114448][ T6702] do_sock_getsockopt+0x530/0x6e0 [ 79.114470][ T6702] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 79.114491][ T6702] ? __fget_files+0x34/0x3d0 [ 79.114516][ T6702] ? find_held_lock+0x2b/0x80 [ 79.114549][ T6702] ? __fget_files+0x21f/0x3d0 [ 79.114576][ T6702] __sys_getsockopt+0x148/0x260 [ 79.114605][ T6702] ? __x64_sys_getsockopt+0xbd/0x160 [ 79.114628][ T6702] __x64_sys_getsockopt+0xbd/0x160 [ 79.114650][ T6702] ? do_syscall_64+0xae/0x790 [ 79.114676][ T6702] ? lockdep_hardirqs_on+0x7d/0x110 [ 79.114695][ T6702] do_syscall_64+0x123/0x790 [ 79.114715][ T6702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.114733][ T6702] RIP: 0033:0x7fc0f999e199 [ 79.114748][ T6702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.114766][ T6702] RSP: 002b:00007fc0fa8de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 79.114783][ T6702] RAX: ffffffffffffffda RBX: 00007fc0f9c25fa0 RCX: 00007fc0f999e199 [ 79.114795][ T6702] RDX: 0000000000000018 RSI: 0000000000000107 RDI: 0000000000000003 [ 79.114806][ T6702] RBP: 00007fc0fa8de090 R08: 0000200000001540 R09: 0000000000000000 [ 79.114815][ T6702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.114827][ T6702] R13: 00007fc0f9c26038 R14: 00007fc0f9c25fa0 R15: 00007fff50c6dba8 [ 79.114850][ T6702] [ 79.168223][ T6704] Invalid ELF header magic: != ELF [ 79.455293][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 79.483968][ T6724] vxcan1: entered allmulticast mode [ 79.626143][ T6739] libceph: resolve '127.1.o(&tMPB݌v+t(@}ͿO茫". ** replaying previous printk message ** [ 79.626143][ T6739] libceph: resolve '127.1.o(&tMPB݌v+t(@}ͿO茫".g]8ȯb' (ret=-3): failed [ 79.634446][ T6739] ------------[ cut here ]------------ [ 79.634455][ T6739] kernel BUG at net/ceph/mon_client.c:211! [ 79.634470][ T6739] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 79.646614][ T6739] CPU: 3 UID: 0 PID: 6739 Comm: syz.0.302 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.652519][ T6739] Tainted: [L]=SOFTLOCKUP [ 79.654226][ T6739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.658205][ T6739] RIP: 0010:__open_session+0x60f/0x740 [ 79.660331][ T6739] Code: f6 44 89 e7 e8 42 1f 26 fa 89 c5 e9 2b fb ff ff e8 66 29 7c f6 c7 83 b4 09 00 00 0a 00 00 00 e9 22 fc ff ff e8 52 29 7c f6 90 <0f> 0b e8 ea a6 ef f6 e9 7b fa ff ff 4c 89 f7 e8 dd a6 ef f6 e9 16 [ 79.666679][ T6739] RSP: 0018:ffffc90006267be0 EFLAGS: 00010283 [ 79.668722][ T6739] RAX: 0000000000005b61 RBX: ffff888057cfc290 RCX: ffffc90005e21000 [ 79.671517][ T6739] RDX: 0000000000080000 RSI: ffffffff8b9020fe RDI: ffff8880276f4b00 [ 79.674005][ T6739] RBP: ffff888026c5f700 R08: 0000000000000005 R09: 0000000000000000 [ 79.676392][ T6739] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 79.678817][ T6739] R13: 00000000ffffffff R14: ffff888057cfc400 R15: ffff888057cfc298 [ 79.681280][ T6739] FS: 00007f4ee84db6c0(0000) GS:ffff8880d5e4e000(0000) knlGS:0000000000000000 [ 79.683985][ T6739] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.686326][ T6739] CR2: 00007f4ee84daff8 CR3: 0000000064418000 CR4: 0000000000352ef0 [ 79.688867][ T6739] Call Trace: [ 79.689936][ T6739] [ 79.690876][ T6739] ? __ceph_monc_want_map+0x189/0x360 [ 79.692883][ T6739] ceph_monc_open_session+0x46/0x60 [ 79.694802][ T6739] __ceph_open_session+0x135/0x590 [ 79.696533][ T6739] ? __pfx___mutex_lock+0x10/0x10 [ 79.698093][ T6739] ? super_setup_bdi_name+0x1a3/0x250 [ 79.699792][ T6739] ? __pfx___ceph_open_session+0x10/0x10 [ 79.701760][ T6739] ? __pfx_woken_wake_function+0x10/0x10 [ 79.703537][ T6739] ceph_get_tree+0xd98/0x1fd0 [ 79.705075][ T6739] ? security_capable+0x80/0x260 [ 79.706633][ T6739] vfs_get_tree+0x92/0x320 [ 79.708046][ T6739] vfs_cmd_create+0xd7/0x2a0 [ 79.709484][ T6739] __do_sys_fsconfig+0x55a/0xcb0 [ 79.711363][ T6739] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 79.713758][ T6739] do_syscall_64+0x123/0x790 [ 79.715295][ T6739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.717195][ T6739] RIP: 0033:0x7f4ee759e199 [ 79.718595][ T6739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.724277][ T6739] RSP: 002b:00007f4ee84db028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 79.726761][ T6739] RAX: ffffffffffffffda RBX: 00007f4ee7825fa0 RCX: 00007f4ee759e199 [ 79.729167][ T6739] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 79.732468][ T6739] RBP: 00007f4ee76358e0 R08: 0000000000000000 R09: 0000000000000000 [ 79.735633][ T6739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.738609][ T6739] R13: 00007f4ee7826038 R14: 00007f4ee7825fa0 R15: 00007ffdf71b3018 [ 79.741631][ T6739] [ 79.742611][ T6739] Modules linked in: [ 79.744135][ T6739] ---[ end trace 0000000000000000 ]--- [ 79.747532][ T6739] RIP: 0010:__open_session+0x60f/0x740 [ 79.747553][ T6739] Code: f6 44 89 e7 e8 42 1f 26 fa 89 c5 e9 2b fb ff ff e8 66 29 7c f6 c7 83 b4 09 00 00 0a 00 00 00 e9 22 fc ff ff e8 52 29 7c f6 90 <0f> 0b e8 ea a6 ef f6 e9 7b fa ff ff 4c 89 f7 e8 dd a6 ef f6 e9 16 [ 79.747565][ T6739] RSP: 0018:ffffc90006267be0 EFLAGS: 00010283 [ 79.747575][ T6739] RAX: 0000000000005b61 RBX: ffff888057cfc290 RCX: ffffc90005e21000 [ 79.747583][ T6739] RDX: 0000000000080000 RSI: ffffffff8b9020fe RDI: ffff8880276f4b00 [ 79.747590][ T6739] RBP: ffff888026c5f700 R08: 0000000000000005 R09: 0000000000000000 [ 79.747597][ T6739] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 79.747603][ T6739] R13: 00000000ffffffff R14: ffff888057cfc400 R15: ffff888057cfc298 [ 79.747611][ T6739] FS: 00007f4ee84db6c0(0000) GS:ffff8880d5e4e000(0000) knlGS:0000000000000000 [ 79.747636][ T6739] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.747645][ T6739] CR2: 00007f4ee84daff8 CR3: 0000000064418000 CR4: 0000000000352ef0 [ 79.747653][ T6739] Kernel panic - not syncing: Fatal exception [ 79.785731][ T6739] Kernel Offset: disabled [ 79.787493][ T6739] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:01:16 Registers: info registers vcpu 0 CPU#0 RAX=8000000000000001 RBX=0000000000000000 RCX=0000000000000001 RDX=ffff88801f280000 RSI=ffffffff81ea6ce3 RDI=ffff88801f280000 RBP=ffffc90000137da8 RSP=ffffc90000137958 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=3a6870656362696c R12=ffffffff8fbd9360 R13=ffffc90000137da8 R14=0000000000000000 R15=ffffc90000137db4 RIP=ffffffff820c4a90 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b32723ffc CR3=000000004adaa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 337a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe07e3f9c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe07e3f9c6 00007ffe07e3f9cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8920835ec3 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8920835f03 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8920836067 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8920835ef5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffc900038979d8 RCX=ffffffff91ecbd8a RDX=1ffff92000712f3b RSI=ffffc90003897d60 RDI=ffffc900038979d8 RBP=ffffc90003897d60 RSP=ffffc90003897938 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc900038979d8 R11=000000000000f103 R12=0000000000000008 R13=ffffc900038979d8 R14=ffffc90003897d90 R15=ffffc90003897a0c RIP=ffffffff81b9afe4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558a02d500 ffffffff 00c00000 GS =0000 ffff8880d5c4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c43c96a CR3=000000005346b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff50c6ac40 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 327a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff50c6e096 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff50c6e096 00007fff50c6e09c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc0f9a35ec3 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc0f9a35f03 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc0f9a36067 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc0f9a35ef5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88801f280000 RCX=0000000000000000 RDX=1ffff1100d4877e0 RSI=ffff8880349880c8 RDI=ffff88806a43bfe8 RBP=00000000000023e2 RSP=ffffc9000628f5f0 R8 =000000045c0c4274 R9 =0000000000200b20 R10=0000000000200b20 R11=0000000000000315 R12=0000000000000000 R13=ffff88801f280080 R14=0000000000000000 R15=ffff88806a43bf00 RIP=ffffffff81eff730 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555e219500 ffffffff 00c00000 GS =0000 ffff8880d5d4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f89207eb880 CR3=000000005d424000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f892155d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe07e3f9c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe07e3f9c6 00007ffe07e3f9cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8920835ec3 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8920835f03 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8920836067 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8920835ef5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b0ae1efc83901d17 f17e04fa7b3b8422 994c23c57d8f292e ecd63541684035e5 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3576f3a66bd613e4 cae77e5b12bef17b f25e12039000000b 64dc9746d76d6c84 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b2c744bd65e4ea87 5735839fce0d5abe be613cdd4b02a1d0 c018f9e2e1660c9c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0baa83cd47a87ce 2ec9463576f3a66b d613e4cae77e5b12 bef17bf25e120390 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000b64dc9746d7 6d6c84679f5aff63 6bee68a462847ff8 9d20e0736bb7714d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c5faab6a13cab7d3 bb282fb0ae1efc83 901d17f17e04fa7b 3b8422994c23c57d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85b1ccc0 RDI=ffffffff9bc76fe0 RBP=ffffffff9bc76fa0 RSP=ffffc90006267300 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7a7973203a6d6d43 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff378ee51 R15=dffffc0000000000 RIP=ffffffff85b1cce7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4ee84db6c0 ffffffff 00c00000 GS =0000 ffff8880d5e4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4ee84daff8 CR3=0000000064418000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1651045b 00007ffd1651045b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd16510960 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd16510960 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030203a38305220 3039306564386166 3063663730303030 203a504252205d00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030203032305220 3033306564326166 3063663730303030 2030504252205700 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c12e22ab8ce84f84 bfcd7d4028939174 f0f92b769d828cdd b742504d7426286f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3834203130203938 2034362038642037 6620666620666620 6666203865203163 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2037632038342033 6320313020333720 6666206666203066 203130206433203e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38343c2035302066 3020383020343220 6334206238206334 2038632039382064 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3420326320393820 6434206163203938 2038342036642039 3820383420376620 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6f63732030323d 6f6e692022736670 6d74766564223d76 6564202231797474 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000