last executing test programs: 5.594919744s ago: executing program 0 (id=778): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 4.946166923s ago: executing program 0 (id=787): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.612102977s ago: executing program 0 (id=791): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240112000a000201020904010000010200000904010101010200000905010910000206000725010c0040000904020001010200000904020101010200000905820900020303100725010c08ff03"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1555563c}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0x400) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xf3c) 3.901487869s ago: executing program 2 (id=797): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000440)=@vmx={0x8, 0x0, 0x2080, {0x41000, 0x50000, {}, 0x0, 0x6}, {"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", "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"}}) 3.751535546s ago: executing program 2 (id=805): syz_open_dev$dri(0x0, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f00000002c0)=[{r2, 0x1200}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 2.908386505s ago: executing program 0 (id=811): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = inotify_init1(0x80000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) inotify_add_watch(r0, &(0x7f0000005780)='./file0\x00', 0x44000001) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000300), 0x8) 2.822808982s ago: executing program 0 (id=812): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x44842, 0x1ef) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect$uac3(0x5, 0x80, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffe82) 2.382835626s ago: executing program 1 (id=814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000c00)={@val={0x0, 0x16}, @void, @eth={@broadcast, @random="8bc6002500", @val={@val, {0x8100, 0x0, 0x0, 0x9}}, {@mpls_mc={0x8848, {[], @llc={@snap={0xaa, 0x1, '3', "342301", 0x80f3}}}}}}}, 0x22) 2.3207049s ago: executing program 2 (id=815): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x1) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfa) 2.262327828s ago: executing program 1 (id=816): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) syz_usb_connect$cdc_ncm(0x6, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a860000102030109025d"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f00000001c0)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}, @initial, @device_b, @broadcast, {0x1, 0x1}}, @a_msdu=[{@device_a, @broadcast}, {@device_a, @broadcast, 0x24, "bc3ba9bf2cdf0bdac11f9b3e28da1882950401ed0e893ab462363595234455eae7a05c2a"}]}, 0x5c) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.732242944s ago: executing program 1 (id=818): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) accept4(r1, 0x0, 0x0, 0x80000) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-neon\x00'}, 0x58) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 943.253641ms ago: executing program 0 (id=820): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x1000) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 862.931134ms ago: executing program 1 (id=821): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x5, 0x5}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x84, 0x2}, {0xb000, 0xeeef0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x6, 0x4, 0xa4, 0x5, 0x5}, {0x1, 0x26000, 0x9, 0x7, 0x5, 0x42, 0x2, 0xff, 0x8, 0x9, 0xe}, {0x8000000, 0x3000, 0xf, 0x3, 0x16, 0x4, 0xa7, 0x8, 0x9, 0x9, 0xf7, 0x3}, {0xeeefa000, 0x1000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x2, 0x2f, 0x1, 0x7}, {0xc000, 0x3000, 0xf, 0x5, 0x2, 0x5, 0x7, 0x3, 0x9d, 0x81, 0x40, 0x70}, {0x8000000, 0x7000, 0x8, 0x5, 0xed, 0x7, 0x1, 0x7, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0xeeee0000, 0x9}, 0x20000019, 0x0, 0x41000, 0x2024, 0xffffffffffffffff, 0x0, 0x100c00, [0x67fffffffffffffc, 0x4, 0x3, 0x8]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0xb5, 0x5, 0x6, 0x0, 0x7fffffff, 0x4, 0xf, 0xc0, 0x40, 0x4, 0x60, 0x6, 0x0, 0x6e8, 0xffffbfc3, 0xf0, 0x4, 0x0, 0x7, '\x00', 0xcb, 0xffffffffffffff59}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0xdddd1000, 0xe41, 0x3, 0x10020f5b, 0x0, [{0x0, 0x9, 0x0, '\x00', 0x3a}, {}, {0x0, 0x0, 0x80}, {0x1, 0x35}, {0x3, 0x3}, {0x0, 0x0, 0x6}, {0x0, 0x5}, {0x2, 0x6}, {0x8}, {0x73, 0x6, 0x2, '\x00', 0x6}, {0x0, 0x0, 0xfe}, {0x4}, {}, {0x0, 0x2, 0x0, '\x00', 0xfe}, {0x7, 0xff, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x91, '\x00', 0xdf}, {0x0, 0x0, 0xfa, '\x00', 0x6}, {0x0, 0xfc, 0x0, '\x00', 0xfe}, {0x0, 0x0, 0x3}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x7, '\x00', 0xfc}, {0x0, 0x5}, {0x0, 0x0, 0x10}]}}) 753.268854ms ago: executing program 1 (id=822): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) pread64(r2, &(0x7f0000002840)=""/4096, 0x1000, 0x4) 739.385518ms ago: executing program 1 (id=823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x0, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 450.670197ms ago: executing program 3 (id=825): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) unshare(0x62000000) 317.937462ms ago: executing program 3 (id=826): prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) 264.012209ms ago: executing program 3 (id=827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 172.501411ms ago: executing program 2 (id=828): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x660c, 0x0) 101.801501ms ago: executing program 2 (id=829): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x80101) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000380)={0x1, 0x7, 0x6a, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xffff7ffffffffff8, 0x10000009, 0xff7ffffb, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 91.544833ms ago: executing program 2 (id=830): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois', 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x15, 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000340)=""/177, &(0x7f0000000400)=0xb1) 87.170703ms ago: executing program 3 (id=831): ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000000)={0x1f, &(0x7f0000000200)}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x198fb580ea88f23a, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b67, &(0x7f0000000000)) 513.042µs ago: executing program 3 (id=832): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/devices\x00', 0x0, 0x0) read(r0, &(0x7f0000000300), 0x1000) fstat(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000940)=""/32, 0x20, 0x6) 0s ago: executing program 3 (id=833): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="01000805000000ff"], 0x11) kernel console output (not intermixed with test programs): USB device number 4 using dummy_hcd [ 61.441104][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 61.532924][ T65] usb 5-1: Using ep0 maxpacket: 16 [ 61.533607][ T65] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 61.536119][ T65] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.536145][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 61.536160][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 61.536171][ T65] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 61.536183][ T65] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.536946][ T65] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 61.536958][ T65] usb 5-1: Manufacturer: syz [ 61.539395][ T65] usb 5-1: config 0 descriptor?? [ 61.802830][ T65] rc_core: IR keymap rc-hauppauge not found [ 61.802879][ T65] Registered IR keymap rc-empty [ 61.802970][ T65] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 61.822455][ T6475] jffs2: notice: (6475) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 11 of xref (0 dead, 7 orphan) found. [ 61.823004][ T65] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 61.856067][ T65] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 61.857489][ T65] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 61.861438][ T65] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 61.882871][ T65] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 61.913128][ T65] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 61.942925][ T65] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 61.948345][ T42] kauditd_printk_skb: 42 callbacks suppressed [ 61.948456][ T42] audit: type=1400 audit(1788709934.415:405): avc: denied { write } for pid=6474 comm="syz.2.244" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.958914][ T42] audit: type=1400 audit(1788709934.425:406): avc: denied { write } for pid=6474 comm="syz.2.244" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.963059][ T65] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 61.983099][ T65] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 62.002929][ T65] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 62.023623][ T65] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 62.042971][ T65] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 62.064398][ T65] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 62.087461][ T65] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 62.087570][ T65] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 62.092738][ T65] usb 5-1: USB disconnect, device number 4 [ 62.301746][ T6500] jffs2: notice: (6500) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 12 of xref (0 dead, 8 orphan) found. [ 62.361625][ T6505] netlink: 48 bytes leftover after parsing attributes in process `syz.3.256'. [ 62.402451][ T42] audit: type=1400 audit(1788709934.865:407): avc: denied { write } for pid=6507 comm="syz.3.257" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 62.417840][ T42] audit: type=1400 audit(1788709934.885:408): avc: denied { read write } for pid=5731 comm="syz-executor" name="loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.417993][ T42] audit: type=1400 audit(1788709934.885:409): avc: denied { open } for pid=5731 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.422034][ T42] audit: type=1400 audit(1788709934.885:410): avc: denied { ioctl } for pid=5731 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.443565][ T42] audit: type=1400 audit(1788709934.915:411): avc: denied { write } for pid=6499 comm="syz.2.254" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.444473][ T42] audit: type=1400 audit(1788709934.915:412): avc: denied { write } for pid=6499 comm="syz.2.254" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.458044][ T42] audit: type=1400 audit(1788709934.925:413): avc: denied { watch } for pid=6509 comm="syz.3.258" path="/91/net_prio.prioidx" dev="tmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.459726][ T42] audit: type=1400 audit(1788709934.925:414): avc: denied { watch_sb } for pid=6509 comm="syz.3.258" path="/91/net_prio.prioidx" dev="tmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.746819][ T6532] ªªªªªª: renamed from vlan0 (while UP) [ 62.922686][ T6556] netlink: 48 bytes leftover after parsing attributes in process `syz.3.280'. [ 63.061869][ T6567] i2c i2c-0: new_device: Missing parameters [ 63.189844][ T6579] netlink: 48 bytes leftover after parsing attributes in process `syz.3.291'. [ 63.313318][ T5871] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 63.316318][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 63.492621][ T6599] batadv_slave_0: Caught tx_queue_len zero misconfig [ 63.493008][ T5871] usb 6-1: Using ep0 maxpacket: 8 [ 63.494242][ T5871] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 63.498609][ T5871] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 63.498626][ T5871] usb 6-1: config 0 has no interface number 0 [ 63.498645][ T5871] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 63.498655][ T5871] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 63.498666][ T5871] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 63.498678][ T5871] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 63.498691][ T5871] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.500383][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.500397][ T5871] usb 6-1: Product: syz [ 63.500404][ T5871] usb 6-1: Manufacturer: syz [ 63.500411][ T5871] usb 6-1: SerialNumber: syz [ 63.502416][ T5871] usb 6-1: config 0 descriptor?? [ 63.577203][ T6605] syzkaller0: entered promiscuous mode [ 63.577282][ T6605] syzkaller0: entered allmulticast mode [ 63.722612][ T5871] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 63.732857][ T6614] jffs2: notice: (6614) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 13 of xref (0 dead, 9 orphan) found. [ 63.739855][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'. [ 63.912956][ T1038] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 63.920125][ T10] usb 6-1: USB disconnect, device number 4 [ 64.073569][ T1038] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 64.078677][ T1038] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.083036][ T1038] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.089347][ T1038] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.092067][ T1038] usb 8-1: Product: syz [ 64.093544][ T1038] usb 8-1: Manufacturer: syz [ 64.095077][ T1038] usb 8-1: SerialNumber: syz [ 64.222981][ T63] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 64.374277][ T63] usb 7-1: Using ep0 maxpacket: 8 [ 64.375164][ T63] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 64.377235][ T63] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 64.377266][ T63] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 64.377279][ T63] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 64.377316][ T63] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 64.377330][ T63] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 64.377353][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.587800][ T63] usb 7-1: GET_CAPABILITIES returned 0 [ 64.587856][ T63] usbtmc 7-1:16.0: can't read capabilities [ 64.974718][ T6650] jffs2: notice: (6650) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 14 of xref (0 dead, 10 orphan) found. [ 65.546083][ T1038] usb 7-1: USB disconnect, device number 5 [ 65.548332][ T1322] usb 8-1: USB disconnect, device number 4 [ 65.882914][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 66.033298][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 66.033810][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 66.034589][ T10] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 66.034607][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 66.034628][ T10] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 66.034641][ T10] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 66.034654][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 66.036206][ T10] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 66.036220][ T10] usb 6-1: Product: syz [ 66.036228][ T10] usb 6-1: Manufacturer: syz [ 66.036237][ T10] usb 6-1: SerialNumber: syz [ 66.038048][ T10] usb 6-1: config 0 descriptor?? [ 66.040310][ T10] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 66.042686][ T10] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 66.098052][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 66.158553][ T6684] syzkaller0: entered promiscuous mode [ 66.160472][ T6684] syzkaller0: entered allmulticast mode [ 66.250227][ T10] usb 6-1: USB disconnect, device number 5 [ 66.250322][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 66.253535][ T10] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 66.270376][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 67.157828][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 67.157931][ T42] audit: type=1400 audit(1788709939.625:432): avc: denied { append } for pid=6730 comm="syz.1.356" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 67.197150][ T42] audit: type=1400 audit(1788709939.665:433): avc: denied { read write } for pid=6733 comm="syz.2.357" name="vhost-net" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 67.197407][ T42] audit: type=1400 audit(1788709939.665:434): avc: denied { open } for pid=6733 comm="syz.2.357" path="/dev/vhost-net" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 67.199306][ T42] audit: type=1400 audit(1788709939.665:435): avc: denied { ioctl } for pid=6733 comm="syz.2.357" path="/dev/vhost-net" dev="devtmpfs" ino=1297 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 67.298347][ T6745] jffs2: notice: (6745) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 15 of xref (0 dead, 11 orphan) found. [ 67.325523][ T42] audit: type=1400 audit(1788709939.795:436): avc: denied { create } for pid=6749 comm="syz.0.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 67.338264][ T42] audit: type=1400 audit(1788709939.805:437): avc: denied { bind } for pid=6749 comm="syz.0.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 67.346152][ T42] audit: type=1400 audit(1788709939.805:438): avc: denied { write } for pid=6749 comm="syz.0.364" path="socket:[14932]" dev="sockfs" ino=14932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 67.411101][ T42] audit: type=1400 audit(1788709939.875:439): avc: denied { write } for pid=6744 comm="syz.1.362" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.420513][ T42] audit: type=1400 audit(1788709939.875:440): avc: denied { write } for pid=6744 comm="syz.1.362" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.541473][ T42] audit: type=1400 audit(1788709940.005:441): avc: denied { ioctl } for pid=6760 comm="syz.1.368" path="socket:[13223]" dev="sockfs" ino=13223 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.592904][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 67.702904][ T63] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 67.763658][ T10] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 67.765315][ T10] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 67.765362][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.766554][ T10] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 67.766579][ T10] usb 7-1: Manufacturer: syz [ 67.769104][ T10] usb 7-1: config 0 descriptor?? [ 67.822893][ T10] rc_core: IR keymap rc-hauppauge not found [ 67.822945][ T10] Registered IR keymap rc-empty [ 67.823765][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 67.824789][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input8 [ 67.883812][ T63] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 67.888602][ T63] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.888684][ T63] usb 8-1: Product: syz [ 67.888719][ T63] usb 8-1: Manufacturer: syz [ 67.888751][ T63] usb 8-1: SerialNumber: syz [ 67.983084][ T6752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.984646][ T6752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.992444][ T852] usb 7-1: USB disconnect, device number 6 [ 68.126265][ T63] rtl8150 8-1:1.0: couldn't reset the device [ 68.127156][ T63] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 68.131291][ T63] usb 8-1: USB disconnect, device number 5 [ 68.429604][ T6778] netlink: 'syz.0.373': attribute type 29 has an invalid length. [ 68.495418][ T6784] FAULT_INJECTION: forcing a failure. [ 68.495418][ T6784] name failslab, interval 1, probability 0, space 0, times 1 [ 68.495493][ T6784] CPU: 0 UID: 0 PID: 6784 Comm: syz.0.376 Not tainted syzkaller #0 PREEMPT(full) [ 68.495516][ T6784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.495524][ T6784] Call Trace: [ 68.495529][ T6784] [ 68.495534][ T6784] dump_stack_lvl+0x100/0x190 [ 68.495570][ T6784] should_fail_ex.cold+0x5/0xa [ 68.495589][ T6784] should_failslab+0xc2/0x120 [ 68.495607][ T6784] __kmalloc_cache_noprof+0x91/0x6d0 [ 68.495626][ T6784] ? __do_sys_fanotify_init+0x505/0xe30 [ 68.495643][ T6784] __do_sys_fanotify_init+0x505/0xe30 [ 68.495658][ T6784] do_syscall_64+0x123/0x790 [ 68.495677][ T6784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.495689][ T6784] RIP: 0033:0x7fef3179e159 [ 68.495699][ T6784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.495709][ T6784] RSP: 002b:00007fef32727028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 68.495721][ T6784] RAX: ffffffffffffffda RBX: 00007fef31a25fa0 RCX: 00007fef3179e159 [ 68.495727][ T6784] RDX: 0000000000000000 RSI: 0000000000101000 RDI: 0000000000000040 [ 68.495734][ T6784] RBP: 00007fef31835024 R08: 0000000000000000 R09: 0000000000000000 [ 68.495741][ T6784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.495748][ T6784] R13: 00007fef31a26038 R14: 00007fef31a25fa0 R15: 00007ffcb45c1098 [ 68.495762][ T6784] [ 68.556196][ T6791] netlink: 56 bytes leftover after parsing attributes in process `syz.2.378'. [ 68.634338][ T6797] loop6: detected capacity change from 0 to 2640 [ 68.640974][ T5876] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.641570][ T5876] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.641954][ T5876] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.642326][ T5876] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.642882][ T5876] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.769331][ T6807] syzkaller1: entered promiscuous mode [ 68.769392][ T6807] syzkaller1: entered allmulticast mode [ 68.793381][ T852] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 68.809550][ T6809] syzkaller0: entered promiscuous mode [ 68.809611][ T6809] syzkaller0: entered allmulticast mode [ 68.921280][ T6813] jffs2: notice: (6813) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 16 of xref (0 dead, 12 orphan) found. [ 68.953862][ T852] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.954810][ T852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.954827][ T852] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.954851][ T852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.957436][ T852] usb 5-1: config 0 descriptor?? [ 68.961622][ T852] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 69.408611][ T6834] FAULT_INJECTION: forcing a failure. [ 69.408611][ T6834] name failslab, interval 1, probability 0, space 0, times 0 [ 69.408682][ T6834] CPU: 3 UID: 0 PID: 6834 Comm: syz.2.396 Not tainted syzkaller #0 PREEMPT(full) [ 69.408709][ T6834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.408718][ T6834] Call Trace: [ 69.408722][ T6834] [ 69.408728][ T6834] dump_stack_lvl+0x100/0x190 [ 69.408750][ T6834] should_fail_ex.cold+0x5/0xa [ 69.408771][ T6834] should_failslab+0xc2/0x120 [ 69.408788][ T6834] __kmalloc_noprof+0xfc/0x840 [ 69.408802][ T6834] ? tomoyo_encode2+0xfb/0x3c0 [ 69.408818][ T6834] tomoyo_encode2+0xfb/0x3c0 [ 69.408832][ T6834] tomoyo_encode+0x29/0x50 [ 69.408844][ T6834] tomoyo_realpath_from_path+0x18c/0x690 [ 69.408860][ T6834] tomoyo_mount_acl+0x1b6/0x8b0 [ 69.408871][ T6834] ? is_bpf_text_address+0x8a/0x1a0 [ 69.408886][ T6834] ? is_bpf_text_address+0x8a/0x1a0 [ 69.408902][ T6834] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 69.408922][ T6834] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 69.408933][ T6834] ? kernel_text_address+0x8d/0x100 [ 69.408953][ T6834] ? unwind_get_return_address+0x59/0xa0 [ 69.408972][ T6834] ? arch_stack_walk+0xa6/0xf0 [ 69.408989][ T6834] ? __lock_acquire+0x4c5/0x1ec0 [ 69.409009][ T6834] ? tomoyo_mount_permission+0x1f6/0x460 [ 69.409022][ T6834] ? tomoyo_domain+0xb2/0x150 [ 69.409037][ T6834] ? tomoyo_profile+0x47/0x60 [ 69.409054][ T6834] tomoyo_mount_permission+0x214/0x460 [ 69.409065][ T6834] ? tomoyo_mount_permission+0x1f6/0x460 [ 69.409077][ T6834] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 69.409110][ T6834] security_sb_mount+0xdd/0x270 [ 69.409131][ T6834] path_mount+0x158/0x24c0 [ 69.409154][ T6834] ? __pfx_path_mount+0x10/0x10 [ 69.409172][ T6834] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.409190][ T6834] ? putname+0xb1/0x110 [ 69.409205][ T6834] ? kmem_cache_free+0x127/0x6c0 [ 69.409227][ T6834] ? __x64_sys_mount+0x293/0x310 [ 69.409243][ T6834] __x64_sys_mount+0x293/0x310 [ 69.409260][ T6834] ? __pfx___x64_sys_mount+0x10/0x10 [ 69.409281][ T6834] do_syscall_64+0x123/0x790 [ 69.409298][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.409311][ T6834] RIP: 0033:0x7fd171d9e159 [ 69.409323][ T6834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.409334][ T6834] RSP: 002b:00007fd172beb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 69.409347][ T6834] RAX: ffffffffffffffda RBX: 00007fd172025fa0 RCX: 00007fd171d9e159 [ 69.409355][ T6834] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 69.409362][ T6834] RBP: 00007fd171e35024 R08: 0000000000000000 R09: 0000000000000000 [ 69.409369][ T6834] R10: 000000000002cc31 R11: 0000000000000246 R12: 0000000000000000 [ 69.409375][ T6834] R13: 00007fd172026038 R14: 00007fd172025fa0 R15: 00007ffcd25cf588 [ 69.409391][ T6834] [ 69.409443][ T6834] ERROR: Out of memory at tomoyo_realpath_from_path. [ 69.453446][ T6836] syzkaller0: entered promiscuous mode [ 69.453469][ T6836] syzkaller0: entered allmulticast mode [ 69.719031][ T6848] jffs2: notice: (6848) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 16 of xref (0 dead, 13 orphan) found. [ 69.754659][ T6852] netlink: 56 bytes leftover after parsing attributes in process `syz.3.401'. [ 70.032923][ T65] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 70.185908][ T65] usb 8-1: not running at top speed; connect to a high speed hub [ 70.185965][ T65] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 70.186988][ T65] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.187015][ T65] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 70.187027][ T65] usb 8-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 70.187046][ T65] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.190258][ T65] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 70.203860][ T65] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 70.204928][ T65] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 70.205013][ T65] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 70.212685][ T65] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 70.308836][ T6868] Cannot find set identified by id 0 to match [ 70.523606][ T852] usb 8-1: USB disconnect, device number 6 [ 70.530060][ T852] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 70.535909][ T852] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 70.540081][ T852] keyspan 8-1:1.0: device disconnected [ 70.626538][ T35] input: syz0 as /devices/virtual/misc/uhid/0005:0009:0306.0002/input/input9 [ 70.657060][ T35] hid-generic 0005:0009:0306.0002: input,hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 70.690636][ T6880] kvm: MONITOR instruction emulated as NOP! [ 71.043370][ T3382] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 71.123462][ T6890] process 'syz.3.415' launched '/dev/fd/5' with NULL argv: empty string added [ 71.213855][ T3382] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 71.215106][ T3382] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.215132][ T3382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.221342][ T3382] as10x_usb: device has been detected [ 71.221655][ T3382] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 71.228818][ T3382] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 71.253172][ T3382] as10x_usb: error during firmware upload part1 [ 71.253476][ T3382] Registered device Abilis Systems DVB-Titan [ 71.550484][ T852] usb 5-1: USB disconnect, device number 5 [ 71.644995][ T6916] netlink: 'syz.0.427': attribute type 2 has an invalid length. [ 71.706878][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.706944][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.981239][ T35] usb 6-1: USB disconnect, device number 6 [ 71.994679][ T35] Unregistered device Abilis Systems DVB-Titan [ 71.996396][ T35] as10x_usb: device has been disconnected [ 72.539340][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 72.539438][ T42] audit: type=1400 audit(1788709945.005:465): avc: denied { create } for pid=6941 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.547952][ T42] audit: type=1400 audit(1788709945.015:466): avc: denied { connect } for pid=6941 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.550070][ T42] audit: type=1400 audit(1788709945.015:467): avc: denied { getopt } for pid=6941 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.566649][ T50] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 72.582734][ T6947] No source specified [ 72.620718][ T42] audit: type=1400 audit(1788709945.085:468): avc: denied { create } for pid=6948 comm="syz.0.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.624845][ T42] audit: type=1400 audit(1788709945.095:469): avc: denied { setopt } for pid=6948 comm="syz.0.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.654046][ T6954] jffs2: notice: (6954) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 16 of xref (0 dead, 13 orphan) found. [ 72.654587][ T42] audit: type=1400 audit(1788709945.125:470): avc: denied { write } for pid=6953 comm="syz.0.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.655532][ T42] audit: type=1400 audit(1788709945.125:471): avc: denied { nlmsg_write } for pid=6953 comm="syz.0.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.725264][ T50] usb 8-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 72.730681][ T50] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.735789][ T50] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.742615][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 72.745769][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.751579][ T50] usb 8-1: config 0 descriptor?? [ 72.851741][ T42] audit: type=1400 audit(1788709945.315:472): avc: denied { unmount } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.899030][ T6965] netlink: 'syz.2.446': attribute type 2 has an invalid length. [ 72.972559][ T50] usbhid 8-1:0.0: can't add hid device: -71 [ 72.972678][ T50] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 72.980324][ T50] usb 8-1: USB disconnect, device number 7 [ 73.021025][ T42] audit: type=1400 audit(1788709945.485:473): avc: denied { bind } for pid=6973 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 73.021519][ T42] audit: type=1400 audit(1788709945.485:474): avc: denied { setopt } for pid=6973 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 73.131038][ T6984] syzkaller0: entered promiscuous mode [ 73.131095][ T6984] syzkaller0: entered allmulticast mode [ 73.314493][ T6992] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 73.682883][ T1322] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 73.843444][ T1322] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.844949][ T1322] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.844974][ T1322] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.845006][ T1322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.052134][ T1322] usb 5-1: GET_CAPABILITIES returned 0 [ 74.052201][ T1322] usbtmc 5-1:16.0: can't read capabilities [ 74.255137][ T1322] usb 5-1: USB disconnect, device number 6 [ 74.648171][ T7041] syzkaller0: entered promiscuous mode [ 74.648239][ T7041] syzkaller0: entered allmulticast mode [ 74.840279][ T7051] lo: Caught tx_queue_len zero misconfig [ 74.840523][ T7051] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 74.861962][ T7052] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 74.862016][ T7052] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 74.864199][ T7052] vhci_hcd vhci_hcd.0: Device attached [ 74.969022][ T7063] FAULT_INJECTION: forcing a failure. [ 74.969022][ T7063] name failslab, interval 1, probability 0, space 0, times 0 [ 74.969103][ T7063] CPU: 3 UID: 0 PID: 7063 Comm: syz.2.483 Not tainted syzkaller #0 PREEMPT(full) [ 74.969134][ T7063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.969144][ T7063] Call Trace: [ 74.969150][ T7063] [ 74.969155][ T7063] dump_stack_lvl+0x100/0x190 [ 74.969191][ T7063] should_fail_ex.cold+0x5/0xa [ 74.969212][ T7063] should_failslab+0xc2/0x120 [ 74.969233][ T7063] __kmalloc_cache_noprof+0x91/0x6d0 [ 74.969253][ T7063] ? __kasan_kmalloc+0xaa/0xb0 [ 74.969268][ T7063] ? ntfs_init_fs_context+0x31c/0x620 [ 74.969287][ T7063] ntfs_init_fs_context+0x31c/0x620 [ 74.969301][ T7063] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.969318][ T7063] alloc_fs_context+0x60c/0xf40 [ 74.969340][ T7063] __x64_sys_fsopen+0xed/0x220 [ 74.969354][ T7063] do_syscall_64+0x123/0x790 [ 74.969375][ T7063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.969389][ T7063] RIP: 0033:0x7fd171d9e159 [ 74.969401][ T7063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.969413][ T7063] RSP: 002b:00007fd172beb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 74.969426][ T7063] RAX: ffffffffffffffda RBX: 00007fd172025fa0 RCX: 00007fd171d9e159 [ 74.969434][ T7063] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000140 [ 74.969442][ T7063] RBP: 00007fd171e35024 R08: 0000000000000000 R09: 0000000000000000 [ 74.969450][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.969457][ T7063] R13: 00007fd172026038 R14: 00007fd172025fa0 R15: 00007ffcd25cf588 [ 74.969473][ T7063] [ 75.053305][ T5871] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 75.113423][ T5871] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 75.114785][ T1038] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 75.189301][ T5740] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 75.266852][ T7083] syzkaller0: entered promiscuous mode [ 75.266924][ T7083] syzkaller0: entered allmulticast mode [ 75.285260][ T1038] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 75.288527][ T1038] usb 8-1: config 0 has no interfaces? [ 75.288573][ T1038] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.294234][ T1038] usb 8-1: config 0 descriptor?? [ 75.389551][ T7091] FAULT_INJECTION: forcing a failure. [ 75.389551][ T7091] name failslab, interval 1, probability 0, space 0, times 0 [ 75.395853][ T7091] CPU: 0 UID: 0 PID: 7091 Comm: syz.1.496 Not tainted syzkaller #0 PREEMPT(full) [ 75.395882][ T7091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.395913][ T7091] Call Trace: [ 75.395918][ T7091] [ 75.395925][ T7091] dump_stack_lvl+0x100/0x190 [ 75.395949][ T7091] should_fail_ex.cold+0x5/0xa [ 75.395969][ T7091] should_failslab+0xc2/0x120 [ 75.395984][ T7091] __kmalloc_noprof+0xfc/0x840 [ 75.395996][ T7091] ? __kasan_kmalloc+0xaa/0xb0 [ 75.396007][ T7091] ? lsm_blob_alloc+0x68/0x90 [ 75.396024][ T7091] lsm_blob_alloc+0x68/0x90 [ 75.396037][ T7091] security_shm_alloc+0x22/0x240 [ 75.396062][ T7091] newseg+0x33f/0xed0 [ 75.396081][ T7091] ? __pfx_newseg+0x10/0x10 [ 75.396093][ T7091] ? down_write+0x146/0x1f0 [ 75.396110][ T7091] ? ksys_write+0x190/0x250 [ 75.396124][ T7091] ipcget+0xee/0xf50 [ 75.396137][ T7091] ? __pfx_do_futex+0x10/0x10 [ 75.396158][ T7091] ? __pfx_ipcget+0x10/0x10 [ 75.396171][ T7091] ? __x64_sys_futex+0x34f/0x4d0 [ 75.396185][ T7091] ? __x64_sys_futex+0x358/0x4d0 [ 75.396201][ T7091] __x64_sys_shmget+0x13b/0x1b0 [ 75.396213][ T7091] ? __pfx___x64_sys_shmget+0x10/0x10 [ 75.396228][ T7091] do_syscall_64+0x123/0x790 [ 75.396243][ T7091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.396255][ T7091] RIP: 0033:0x7fac66f9e159 [ 75.396267][ T7091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.396276][ T7091] RSP: 002b:00007fac67ee5028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 75.396288][ T7091] RAX: ffffffffffffffda RBX: 00007fac67225fa0 RCX: 00007fac66f9e159 [ 75.396295][ T7091] RDX: 0000000054003f00 RSI: 0000000000800000 RDI: 0000000000000000 [ 75.396301][ T7091] RBP: 00007fac67035024 R08: 0000000000000000 R09: 0000000000000000 [ 75.396308][ T7091] R10: 0000200000800000 R11: 0000000000000246 R12: 0000000000000000 [ 75.396314][ T7091] R13: 00007fac67226038 R14: 00007fac67225fa0 R15: 00007ffdbfb1e028 [ 75.396327][ T7091] [ 75.490990][ T7101] FAULT_INJECTION: forcing a failure. [ 75.490990][ T7101] name failslab, interval 1, probability 0, space 0, times 0 [ 75.495962][ T7101] CPU: 0 UID: 0 PID: 7101 Comm: syz.2.500 Not tainted syzkaller #0 PREEMPT(full) [ 75.495994][ T7101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.496004][ T7101] Call Trace: [ 75.496010][ T7101] [ 75.496017][ T7101] dump_stack_lvl+0x100/0x190 [ 75.496043][ T7101] should_fail_ex.cold+0x5/0xa [ 75.496064][ T7101] should_failslab+0xc2/0x120 [ 75.496081][ T7101] __kmalloc_noprof+0xfc/0x840 [ 75.496102][ T7101] ? __memcg_list_lru_alloc+0x418/0x680 [ 75.496124][ T7101] __memcg_list_lru_alloc+0x418/0x680 [ 75.496143][ T7101] ? xa_load+0x149/0x2c0 [ 75.496163][ T7101] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 75.496183][ T7101] ? rcu_read_unlock+0x17/0x60 [ 75.496208][ T7101] memcg_list_lru_alloc+0xd3/0x100 [ 75.496229][ T7101] __memcg_slab_post_alloc_hook+0x27b/0x1270 [ 75.496258][ T7101] ? kasan_save_track+0x14/0x30 [ 75.496273][ T7101] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 75.496288][ T7101] ? alloc_inode+0x183/0x250 [ 75.496310][ T7101] alloc_inode+0x183/0x250 [ 75.496328][ T7101] new_inode+0x22/0x1c0 [ 75.496348][ T7101] devpts_pty_new+0xca/0x770 [ 75.496364][ T7101] ? __pfx_devpts_pty_new+0x10/0x10 [ 75.496377][ T7101] ? ptmx_open+0x1ad/0x360 [ 75.496399][ T7101] ptmx_open+0x1d9/0x360 [ 75.496416][ T7101] ? __pfx_ptmx_open+0x10/0x10 [ 75.496433][ T7101] chrdev_open+0x234/0x6a0 [ 75.496448][ T7101] ? __pfx_chrdev_open+0x10/0x10 [ 75.496463][ T7101] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 75.496484][ T7101] do_dentry_open+0x6ab/0x14d0 [ 75.496497][ T7101] ? __pfx_chrdev_open+0x10/0x10 [ 75.496516][ T7101] vfs_open+0x82/0x3f0 [ 75.496536][ T7101] path_openat+0x19fa/0x2440 [ 75.496561][ T7101] ? __pfx_path_openat+0x10/0x10 [ 75.496583][ T7101] do_file_open+0x20e/0x430 [ 75.496600][ T7101] ? __pfx_do_file_open+0x10/0x10 [ 75.496628][ T7101] ? _raw_spin_unlock+0x28/0x50 [ 75.496642][ T7101] ? alloc_fd+0x471/0x7a0 [ 75.496667][ T7101] do_sys_openat2+0x10f/0x1e0 [ 75.496685][ T7101] ? __pfx_do_sys_openat2+0x10/0x10 [ 75.496705][ T7101] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 75.496728][ T7101] __x64_sys_openat+0x12d/0x210 [ 75.496745][ T7101] ? __pfx___x64_sys_openat+0x10/0x10 [ 75.496767][ T7101] do_syscall_64+0x123/0x790 [ 75.496783][ T7101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.496797][ T7101] RIP: 0033:0x7fd171d9e159 [ 75.496810][ T7101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.496821][ T7101] RSP: 002b:00007fd172beb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 75.496835][ T7101] RAX: ffffffffffffffda RBX: 00007fd172025fa0 RCX: 00007fd171d9e159 [ 75.496866][ T7101] RDX: 0000000001123102 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 75.496875][ T7101] RBP: 00007fd171e35024 R08: 0000000000000000 R09: 0000000000000000 [ 75.496884][ T7101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.496893][ T7101] R13: 00007fd172026038 R14: 00007fd172025fa0 R15: 00007ffcd25cf588 [ 75.496910][ T7101] [ 75.533131][ T7053] usbip_core: unknown command [ 75.533140][ T7053] vhci_hcd: unknown pdu 0 [ 75.533146][ T7053] usbip_core: unknown command [ 75.538331][ T13] vhci_hcd vhci_hcd.3: stop threads [ 75.539125][ T13] vhci_hcd vhci_hcd.3: release socket [ 75.547355][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 75.555868][ T1038] usb 8-1: USB disconnect, device number 8 [ 75.603124][ T5871] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 75.607890][ T7106] netlink: 48 bytes leftover after parsing attributes in process `syz.2.502'. [ 75.784856][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 76.260265][ T7123] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 76.260304][ T7123] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.260473][ T7123] vhci_hcd vhci_hcd.0: Device attached [ 76.264396][ T7124] vhci_hcd: connection closed [ 76.265455][ T12] vhci_hcd vhci_hcd.0: stop threads [ 76.265479][ T12] vhci_hcd vhci_hcd.0: release socket [ 76.265496][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 76.510207][ T7139] macvlan0: Caught tx_queue_len zero misconfig [ 76.511329][ T7139] netlink: 148 bytes leftover after parsing attributes in process `syz.2.513'. [ 76.681070][ T7145] kvm [7144]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 76.681723][ T7145] kvm [7144]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 76.784320][ T65] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 76.839552][ T1044] cfg80211: failed to load regulatory.db [ 76.863724][ T7155] FAULT_INJECTION: forcing a failure. [ 76.863724][ T7155] name failslab, interval 1, probability 0, space 0, times 0 [ 76.863784][ T7155] CPU: 0 UID: 0 PID: 7155 Comm: syz.2.520 Not tainted syzkaller #0 PREEMPT(full) [ 76.863808][ T7155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.863815][ T7155] Call Trace: [ 76.863820][ T7155] [ 76.863825][ T7155] dump_stack_lvl+0x100/0x190 [ 76.863847][ T7155] should_fail_ex.cold+0x5/0xa [ 76.863865][ T7155] should_failslab+0xc2/0x120 [ 76.863880][ T7155] __kvmalloc_node_noprof+0x113/0x9b0 [ 76.863923][ T7155] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 76.863941][ T7155] ? udmabuf_create+0x2e5/0x1110 [ 76.863958][ T7155] udmabuf_create+0x2e5/0x1110 [ 76.863977][ T7155] ? lock_acquire+0x1d1/0x380 [ 76.863989][ T7155] ? __pfx_udmabuf_create+0x10/0x10 [ 76.864002][ T7155] ? find_held_lock+0x2b/0x80 [ 76.864016][ T7155] ? __might_fault+0xc5/0x140 [ 76.864031][ T7155] ? __might_fault+0xc5/0x140 [ 76.864051][ T7155] udmabuf_ioctl+0x18f/0x300 [ 76.864065][ T7155] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 76.864084][ T7155] ? selinux_file_ioctl+0x13b/0x290 [ 76.864095][ T7155] ? selinux_file_ioctl+0xb6/0x290 [ 76.864107][ T7155] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 76.864121][ T7155] __x64_sys_ioctl+0x18e/0x210 [ 76.864133][ T7155] do_syscall_64+0x123/0x790 [ 76.864148][ T7155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.864160][ T7155] RIP: 0033:0x7fd171d9e159 [ 76.864171][ T7155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.864183][ T7155] RSP: 002b:00007fd172beb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.864194][ T7155] RAX: ffffffffffffffda RBX: 00007fd172025fa0 RCX: 00007fd171d9e159 [ 76.864201][ T7155] RDX: 0000200000000040 RSI: 0000000040187542 RDI: 0000000000000003 [ 76.864207][ T7155] RBP: 00007fd171e35024 R08: 0000000000000000 R09: 0000000000000000 [ 76.864213][ T7155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.864219][ T7155] R13: 00007fd172026038 R14: 00007fd172025fa0 R15: 00007ffcd25cf588 [ 76.864233][ T7155] [ 76.963355][ T65] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.967194][ T65] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.970898][ T65] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.974481][ T65] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.974512][ T65] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.983248][ T65] usb 8-1: config 0 descriptor?? [ 77.202318][ T7183] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 77.240610][ T7188] jffs2: notice: (7188) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 16 of xref (0 dead, 13 orphan) found. [ 77.263144][ T1044] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 77.399967][ T65] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 77.418167][ T65] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 77.434272][ T1044] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 77.437390][ T1044] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.437419][ T1044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.452581][ T1044] as10x_usb: device has been detected [ 77.453251][ T1044] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 77.465088][ T35] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 77.473077][ T1044] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 77.480309][ T1044] as10x_usb: error during firmware upload part1 [ 77.480759][ T1044] Registered device Abilis Systems DVB-Titan [ 77.619558][ T7186] xt_hashlimit: size too large, truncated to 1048576 [ 77.675112][ T63] usb 8-1: USB disconnect, device number 9 [ 77.736064][ T35] usb 5-1: unable to get BOS descriptor or descriptor too short [ 77.738173][ T35] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 77.738932][ T35] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 77.738959][ T35] usb 5-1: can't read configurations, error -71 [ 78.236087][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 78.236171][ T42] audit: type=1400 audit(1788709950.705:512): avc: denied { shutdown } for pid=7201 comm="syz.3.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.266587][ T7204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.541'. [ 78.523039][ T63] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 78.683299][ T63] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.684146][ T63] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.684163][ T63] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.684175][ T63] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.684195][ T63] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.685659][ T63] usb 8-1: config 0 descriptor?? [ 79.093849][ T63] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 79.093918][ T63] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 79.093955][ T63] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 79.093968][ T63] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 79.093980][ T63] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 79.093992][ T63] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 79.094004][ T63] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 79.094015][ T63] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 79.094027][ T63] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 79.104907][ T63] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 79.137646][ T42] audit: type=1400 audit(1788709951.605:513): avc: denied { bind } for pid=7218 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.138740][ T42] audit: type=1400 audit(1788709951.605:514): avc: denied { map } for pid=7218 comm="syz.0.545" path="socket:[15821]" dev="sockfs" ino=15821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.138985][ T42] audit: type=1400 audit(1788709951.605:515): avc: denied { read } for pid=7218 comm="syz.0.545" path="socket:[15821]" dev="sockfs" ino=15821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.186191][ T7221] loop0: detected capacity change from 0 to 1 [ 79.264745][ T7221] ldm_validate_privheads(): Disk read failed. [ 79.264814][ T7221] loop0: [ 79.264845][ T7221] loop0: partition table partially beyond EOD, truncated [ 79.269253][ T852] usb 6-1: USB disconnect, device number 7 [ 79.308386][ T852] Unregistered device Abilis Systems DVB-Titan [ 79.343683][ T852] as10x_usb: device has been disconnected [ 79.346625][ T63] usb 8-1: USB disconnect, device number 10 [ 79.591804][ T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 79.708652][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'. [ 79.724375][ T7253] ovs-system: entered promiscuous mode [ 79.781397][ T42] audit: type=1400 audit(1788709952.245:516): avc: denied { write } for pid=7257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.824916][ T42] audit: type=1400 audit(1788709952.295:517): avc: denied { write } for pid=7260 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.946824][ T42] audit: type=1400 audit(1788709952.415:518): avc: denied { write } for pid=7271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.990434][ T42] audit: type=1400 audit(1788709952.455:519): avc: denied { write } for pid=7275 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.063014][ T65] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 80.223403][ T65] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 80.227305][ T65] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 80.229906][ T65] usb 6-1: config 1 has no interface number 0 [ 80.232006][ T65] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 80.238391][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.241064][ T65] usb 6-1: Product: syz [ 80.242505][ T65] usb 6-1: Manufacturer: syz [ 80.244122][ T65] usb 6-1: SerialNumber: syz [ 80.246062][ T7263] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.249535][ T65] usb 6-1: Error in usbnet_get_endpoints (-22) [ 80.286843][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'. [ 80.296097][ T7279] bond1: Invalid ad_actor_system MAC address. [ 80.296138][ T7279] bond1: option ad_actor_system: invalid value (65541) [ 80.299496][ T7279] bond1 (unregistering): Released all slaves [ 80.414325][ T42] audit: type=1400 audit(1788709952.885:520): avc: denied { create } for pid=7281 comm="syz.2.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.419057][ T42] audit: type=1400 audit(1788709952.885:521): avc: denied { write } for pid=7281 comm="syz.2.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.452741][ T1322] usb 6-1: USB disconnect, device number 8 [ 80.495294][ T7286] xt_hashlimit: size too large, truncated to 1048576 [ 80.611610][ T7292] device-mapper: ioctl: Unable to rename non-existent device, to j [ 80.645461][ T7296] netlink: 'syz.0.567': attribute type 16 has an invalid length. [ 80.663915][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 80.689833][ T7298] netlink: 'syz.0.568': attribute type 2 has an invalid length. [ 80.926074][ T7313] can0: slcan on ttynull. [ 81.163214][ T50] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 81.177544][ T7331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.577'. [ 81.198734][ T7333] FAULT_INJECTION: forcing a failure. [ 81.198734][ T7333] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 81.198802][ T7333] CPU: 1 UID: 0 PID: 7333 Comm: syz.2.578 Not tainted syzkaller #0 PREEMPT(full) [ 81.198829][ T7333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.198839][ T7333] Call Trace: [ 81.198844][ T7333] [ 81.198850][ T7333] dump_stack_lvl+0x100/0x190 [ 81.198884][ T7333] should_fail_ex.cold+0x5/0xa [ 81.198900][ T7333] ? prepare_alloc_pages+0x16d/0x5b0 [ 81.198919][ T7333] should_fail_alloc_page+0xeb/0x140 [ 81.198935][ T7333] prepare_alloc_pages+0x1f0/0x5b0 [ 81.198951][ T7333] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 81.198976][ T7333] ? __lock_acquire+0x4c5/0x1ec0 [ 81.198990][ T7333] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 81.199010][ T7333] ? __css_rstat_updated+0x1ce/0x590 [ 81.199027][ T7333] ? lock_acquire+0x1d1/0x380 [ 81.199038][ T7333] ? do_raw_spin_lock+0x128/0x260 [ 81.199052][ T7333] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 81.199065][ T7333] ? find_held_lock+0x2b/0x80 [ 81.199084][ T7333] ? __lock_acquire+0x4c5/0x1ec0 [ 81.199095][ T7333] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.199108][ T7333] ? policy_nodemask+0xed/0x4f0 [ 81.199123][ T7333] alloc_pages_mpol+0x201/0x550 [ 81.199137][ T7333] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 81.199151][ T7333] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 81.199169][ T7333] folio_alloc_mpol_noprof+0x36/0x260 [ 81.199186][ T7333] shmem_alloc_folio+0x135/0x160 [ 81.199199][ T7333] shmem_alloc_and_add_folio+0x371/0xd40 [ 81.199218][ T7333] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 81.199237][ T7333] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 81.199256][ T7333] shmem_get_folio_gfp+0x75b/0x1980 [ 81.199274][ T7333] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 81.199294][ T7333] shmem_write_begin+0x1a4/0x420 [ 81.199322][ T7333] ? __pfx_shmem_write_begin+0x10/0x10 [ 81.199341][ T7333] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 81.199361][ T7333] generic_perform_write+0x292/0xa40 [ 81.199378][ T7333] ? __pfx_generic_perform_write+0x10/0x10 [ 81.199392][ T7333] ? file_update_time_flags+0x38c/0x520 [ 81.199411][ T7333] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 81.199424][ T7333] shmem_file_write_iter+0x10e/0x140 [ 81.199437][ T7333] __kernel_write_iter+0x2ac/0x930 [ 81.199455][ T7333] ? __pfx___kernel_write_iter+0x10/0x10 [ 81.199467][ T7333] ? lock_acquire+0x1d1/0x380 [ 81.199484][ T7333] kernel_write+0x1f4/0x680 [ 81.199497][ T7333] ? __pfx_kernel_write+0x10/0x10 [ 81.199509][ T7333] ? __shmem_file_setup+0x296/0x460 [ 81.199525][ T7333] ? big_key_preparse+0x2b7/0x5a0 [ 81.199543][ T7333] big_key_preparse+0x390/0x5a0 [ 81.199557][ T7333] ? __pfx_big_key_preparse+0x10/0x10 [ 81.199569][ T7333] ? __pfx_down_read+0x10/0x10 [ 81.199590][ T7333] ? __pfx_big_key_preparse+0x10/0x10 [ 81.199604][ T7333] __key_create_or_update+0x463/0xe30 [ 81.199618][ T7333] ? __pfx___key_create_or_update+0x10/0x10 [ 81.199631][ T7333] ? lookup_user_key+0x3f3/0x1300 [ 81.199651][ T7333] ? lockdep_hardirqs_on+0x7d/0x110 [ 81.199664][ T7333] ? irqentry_exit+0x24d/0xa10 [ 81.199680][ T7333] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 81.199702][ T7333] key_create_or_update+0x42/0x60 [ 81.199716][ T7333] __do_sys_add_key+0x2e8/0x460 [ 81.199734][ T7333] ? __pfx___do_sys_add_key+0x10/0x10 [ 81.199753][ T7333] do_syscall_64+0x123/0x790 [ 81.199767][ T7333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.199779][ T7333] RIP: 0033:0x7fd171d9e159 [ 81.199789][ T7333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.199799][ T7333] RSP: 002b:00007fd172beb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 81.199810][ T7333] RAX: ffffffffffffffda RBX: 00007fd172025fa0 RCX: 00007fd171d9e159 [ 81.199817][ T7333] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000000 [ 81.199823][ T7333] RBP: 00007fd171e35024 R08: fffffffffffffffe R09: 0000000000000000 [ 81.199830][ T7333] R10: 000000000000fe3a R11: 0000000000000246 R12: 0000000000000000 [ 81.199836][ T7333] R13: 00007fd172026038 R14: 00007fd172025fa0 R15: 00007ffcd25cf588 [ 81.199850][ T7333] [ 81.313328][ T50] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 81.313894][ T50] usb 8-1: config 0 has no interfaces? [ 81.314680][ T50] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 81.314693][ T50] usb 8-1: Manufacturer: syz [ 81.317946][ T50] usb 8-1: config 0 descriptor?? [ 81.382502][ T7347] random: crng reseeded on system resumption [ 81.386166][ T7347] FAULT_INJECTION: forcing a failure. [ 81.386166][ T7347] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 81.388662][ T7347] CPU: 0 UID: 0 PID: 7347 Comm: syz.2.584 Not tainted syzkaller #0 PREEMPT(full) [ 81.388680][ T7347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.388688][ T7347] Call Trace: [ 81.388693][ T7347] [ 81.388698][ T7347] dump_stack_lvl+0x100/0x190 [ 81.388719][ T7347] should_fail_ex.cold+0x5/0xa [ 81.388735][ T7347] ? prepare_alloc_pages+0x16d/0x5b0 [ 81.388752][ T7347] should_fail_alloc_page+0xeb/0x140 [ 81.388767][ T7347] prepare_alloc_pages+0x1f0/0x5b0 [ 81.388780][ T7347] ? unwind_get_return_address+0x59/0xa0 [ 81.388798][ T7347] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 81.388818][ T7347] ? stack_trace_save+0x8e/0xc0 [ 81.388835][ T7347] ? __pfx_stack_trace_save+0x10/0x10 [ 81.388851][ T7347] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 81.388865][ T7347] ? stack_depot_save_flags+0x27/0x9f0 [ 81.388880][ T7347] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 81.388897][ T7347] ? kasan_save_stack+0x3f/0x50 [ 81.388909][ T7347] ? kasan_save_track+0x14/0x30 [ 81.388919][ T7347] ? __kasan_kmalloc+0xaa/0xb0 [ 81.388930][ T7347] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 81.388944][ T7347] ? memory_bm_create+0x12c/0xcf0 [ 81.388958][ T7347] ? create_basic_memory_bitmaps+0xbd/0x350 [ 81.388974][ T7347] ? snapshot_open+0x23b/0x2b0 [ 81.388991][ T7347] ? misc_open+0x26d/0x450 [ 81.389006][ T7347] ? chrdev_open+0x234/0x6a0 [ 81.389018][ T7347] ? do_dentry_open+0x6ab/0x14d0 [ 81.389029][ T7347] ? vfs_open+0x82/0x3f0 [ 81.389041][ T7347] ? path_openat+0x19fa/0x2440 [ 81.389053][ T7347] ? do_file_open+0x20e/0x430 [ 81.389064][ T7347] ? do_sys_openat2+0x10f/0x1e0 [ 81.389077][ T7347] ? __x64_sys_openat+0x12d/0x210 [ 81.389091][ T7347] ? do_syscall_64+0x123/0x790 [ 81.389103][ T7347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.389128][ T7347] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.389143][ T7347] ? policy_nodemask+0xed/0x4f0 [ 81.389161][ T7347] alloc_pages_mpol+0x201/0x550 [ 81.389176][ T7347] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 81.389192][ T7347] ? kasan_save_track+0x14/0x30 [ 81.389205][ T7347] ? __kasan_kmalloc+0xaa/0xb0 [ 81.389219][ T7347] alloc_pages_noprof+0x1a/0x160 [ 81.389237][ T7347] get_zeroed_page_noprof+0x18/0xb0 [ 81.389251][ T7347] get_image_page+0x18/0x1a0 [ 81.389267][ T7347] memory_bm_create+0x66a/0xcf0 [ 81.389288][ T7347] create_basic_memory_bitmaps+0xbd/0x350 [ 81.389306][ T7347] snapshot_open+0x23b/0x2b0 [ 81.389322][ T7347] ? __pfx_snapshot_open+0x10/0x10 [ 81.389339][ T7347] misc_open+0x26d/0x450 [ 81.389354][ T7347] ? __pfx_misc_open+0x10/0x10 [ 81.389369][ T7347] chrdev_open+0x234/0x6a0 [ 81.389382][ T7347] ? __pfx_chrdev_open+0x10/0x10 [ 81.389395][ T7347] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 81.389414][ T7347] do_dentry_open+0x6ab/0x14d0 [ 81.389424][ T7347] ? __pfx_chrdev_open+0x10/0x10 [ 81.389440][ T7347] vfs_open+0x82/0x3f0 [ 81.389455][ T7347] path_openat+0x19fa/0x2440 [ 81.389470][ T7347] ? __pfx_path_openat+0x10/0x10 [ 81.389486][ T7347] do_file_open+0x20e/0x430 [ 81.389500][ T7347] ? __pfx_do_file_open+0x10/0x10 [ 81.389522][ T7347] ? _raw_spin_unlock+0x28/0x50 [ 81.389533][ T7347] ? alloc_fd+0x471/0x7a0 [ 81.389550][ T7347] do_sys_openat2+0x10f/0x1e0 [ 81.389564][ T7347] ? __pfx_do_sys_openat2+0x10/0x10 [ 81.389579][ T7347] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 81.389596][ T7347] __x64_sys_openat+0x12d/0x210 [ 81.389611][ T7347] ? __pfx___x64_sys_openat+0x10/0x10 [ 81.389630][ T7347] do_syscall_64+0x123/0x790 [ 81.389644][ T7347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.389656][ T7347] RIP: 0033:0x7fd171d9e159 [ 81.389667][ T7347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.389677][ T7347] RSP: 002b:00007fd172beb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 81.389689][ T7347] RAX: ffffffffffffffda RBX: 00007fd172025fa0 RCX: 00007fd171d9e159 [ 81.389697][ T7347] RDX: 0000000000042801 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 81.389704][ T7347] RBP: 00007fd171e35024 R08: 0000000000000000 R09: 0000000000000000 [ 81.389711][ T7347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.389720][ T7347] R13: 00007fd172026038 R14: 00007fd172025fa0 R15: 00007ffcd25cf588 [ 81.389734][ T7347] [ 81.541708][ T852] usb 8-1: USB disconnect, device number 11 [ 81.603106][ T7363] ======================================================= [ 81.603106][ T7363] WARNING: The mand mount option has been deprecated and [ 81.603106][ T7363] and is ignored by this kernel. Remove the mand [ 81.603106][ T7363] option from the mount to silence this warning. [ 81.603106][ T7363] ======================================================= [ 81.627659][ T7312] can0 (unregistered): slcan off ttynull. [ 81.918795][ T7385] netlink: 'syz.1.596': attribute type 2 has an invalid length. [ 81.936429][ T7388] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 81.936468][ T7388] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 81.936596][ T7388] vhci_hcd vhci_hcd.0: Device attached [ 81.938815][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 81.946912][ T7389] vhci_hcd: connection closed [ 81.948080][ T13] vhci_hcd vhci_hcd.0: stop threads [ 81.948790][ T13] vhci_hcd vhci_hcd.0: release socket [ 81.948809][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 83.001073][ T7466] netlink: 'syz.1.628': attribute type 2 has an invalid length. [ 83.092983][ T1038] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 83.202983][ T65] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 83.253300][ T1038] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 83.254140][ T1038] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 83.254155][ T1038] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 83.254164][ T1038] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 83.254192][ T1038] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 83.254205][ T1038] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 83.255354][ T1038] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 83.255366][ T1038] usb 7-1: Product: syz [ 83.255373][ T1038] usb 7-1: Manufacturer: syz [ 83.260758][ T1038] cdc_wdm 7-1:1.0: skipping garbage [ 83.260769][ T1038] cdc_wdm 7-1:1.0: skipping garbage [ 83.262036][ T1038] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 83.262046][ T1038] cdc_wdm 7-1:1.0: Unknown control protocol [ 83.363040][ T65] usb 5-1: Using ep0 maxpacket: 8 [ 83.363549][ T65] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 83.364434][ T65] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 83.364449][ T65] usb 5-1: config 179 has no interface number 0 [ 83.364471][ T65] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 83.364484][ T65] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 83.364497][ T65] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 83.364509][ T65] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 83.364522][ T65] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 83.364541][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.366326][ T7464] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 83.461131][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 83.461267][ T42] audit: type=1400 audit(1788709955.925:553): avc: denied { read write } for pid=7451 comm="syz.2.621" name="cdc-wdm0" dev="devtmpfs" ino=3018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 83.461296][ T42] audit: type=1400 audit(1788709955.925:554): avc: denied { open } for pid=7451 comm="syz.2.621" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 83.519551][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 83.519631][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 83.520651][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 83.520663][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 83.520904][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 83.520913][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 83.521606][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 83.521618][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 83.521808][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 83.521817][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 83.521825][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 83.521838][ T1038] usb 7-1: USB disconnect, device number 8 [ 83.584054][ T65] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input13 [ 83.771930][ T63] usb 5-1: USB disconnect, device number 9 [ 83.772011][ C2] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 83.772045][ C2] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 83.851166][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 84.257025][ T42] audit: type=1400 audit(1788709956.725:555): avc: denied { map } for pid=7488 comm="syz.2.635" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 84.466303][ T7504] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 84.516853][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.643'. [ 84.554117][ T7512] netlink: 'syz.0.644': attribute type 13 has an invalid length. [ 84.564430][ T1038] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 84.605103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.713706][ T1038] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 84.714571][ T1038] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 84.714587][ T1038] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.714599][ T1038] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 84.714621][ T1038] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.716031][ T1038] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 84.716044][ T1038] usb 7-1: Product: syz [ 84.716052][ T1038] usb 7-1: Manufacturer: syz [ 84.720902][ T1038] cdc_wdm 7-1:1.0: skipping garbage [ 84.720915][ T1038] cdc_wdm 7-1:1.0: skipping garbage [ 84.724368][ T1038] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 84.724385][ T1038] cdc_wdm 7-1:1.0: Unknown control protocol [ 84.803069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 85.156595][ T42] audit: type=1326 audit(1788709957.625:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.3.649" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cc6f9e159 code=0x0 [ 85.181299][ T65] usb 7-1: USB disconnect, device number 9 [ 85.649506][ T7533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.651'. [ 85.649838][ T7533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.651'. [ 85.807028][ T7544] kvm [7542]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 85.807899][ T7544] kvm [7542]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 85.995154][ T65] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 86.013208][ T42] audit: type=1400 audit(1788709958.485:557): avc: denied { execute } for pid=7554 comm="syz.2.658" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.022548][ T7555] loop6: detected capacity change from 0 to 2640 [ 86.034644][ T5876] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.034947][ T5876] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.036867][ T5876] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.037085][ T5876] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.037321][ T5876] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.173598][ T65] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 86.174506][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.174524][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.174542][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.178647][ T65] usb 5-1: config 0 descriptor?? [ 86.191237][ T7560] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 86.191237][ T7560] The task syz.2.660 (7560) triggered the difference, watch for misbehavior. [ 86.586652][ T65] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 86.586708][ T65] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 86.586753][ T65] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 86.586767][ T65] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 86.586778][ T65] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 86.589235][ T65] hid-steam 0003:28DE:1142.0005: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 usb_generic_handle_packet: ctrl buffer too small (8192 > 4096) [ 87.693747][ T7573] syz.2.665 (7573): drop_caches: 2 [ 87.879649][ T7582] syzkaller1: entered promiscuous mode [ 87.879701][ T7582] syzkaller1: entered allmulticast mode [ 88.023790][ T7584] evm: overlay not supported [ 88.302953][ T30] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 88.462932][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 88.463739][ T30] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 88.464704][ T30] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 88.464744][ T30] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.464762][ T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.464781][ T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.464800][ T30] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.464831][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.672685][ T30] usb 7-1: usb_control_msg returned -32 [ 88.672749][ T30] usbtmc 7-1:16.0: can't read capabilities [ 88.748856][ T3382] usb 5-1: USB disconnect, device number 10 [ 88.823899][ T7547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 89.143091][ T1038] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 89.314303][ T1038] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 89.316235][ T1038] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 95 [ 89.318237][ T1038] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.318254][ T1038] usb 6-1: Product: syz [ 89.318263][ T1038] usb 6-1: Manufacturer: syz [ 89.318272][ T1038] usb 6-1: SerialNumber: syz [ 89.320824][ T7597] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 89.321681][ T1038] usb 6-1: NFC: intf ffff88805846a000 id ffffffff8fe8de80 [ 89.341843][ T1038] nfcmrvl 6-1:1.0: NFC: registered with nci successfully [ 89.397284][ T7616] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 89.431471][ T42] audit: type=1400 audit(1788709961.895:558): avc: denied { connect } for pid=7617 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 89.531892][ T13] nfcmrvl 6-1:1.0: NFC: send entry, len 4 [ 89.532166][ C2] nfcmrvl 6-1:1.0: NFC: urb ffff88802cf8ca00 status -71 count 0 [ 89.595769][ T3382] usb 7-1: USB disconnect, device number 10 [ 89.742897][ T35] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 89.892909][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 89.893495][ T35] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 89.894467][ T35] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 89.894482][ T35] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 89.894493][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 89.894518][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 89.894530][ T35] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 89.894542][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 89.894565][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.922115][ T35] usb 5-1: config 0 descriptor?? [ 90.143385][ T35] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 90.150506][ T35] usb 5-1: USB disconnect, device number 11 [ 90.155944][ T42] audit: type=1400 audit(1788709962.625:559): avc: denied { write } for pid=7624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.166400][ T35] usblp0: removed [ 90.210673][ T42] audit: type=1400 audit(1788709962.675:560): avc: denied { write } for pid=7631 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.277904][ T7636] FAULT_INJECTION: forcing a failure. [ 90.277904][ T7636] name failslab, interval 1, probability 0, space 0, times 0 [ 90.277969][ T7636] CPU: 0 UID: 0 PID: 7636 Comm: syz.3.684 Not tainted syzkaller #0 PREEMPT(full) [ 90.278003][ T7636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.278013][ T7636] Call Trace: [ 90.278018][ T7636] [ 90.278024][ T7636] dump_stack_lvl+0x100/0x190 [ 90.278063][ T7636] should_fail_ex.cold+0x5/0xa [ 90.278085][ T7636] should_failslab+0xc2/0x120 [ 90.278109][ T7636] __kvmalloc_node_noprof+0x113/0x9b0 [ 90.278125][ T7636] ? vmemdup_user+0x2a/0xe0 [ 90.278164][ T7636] vmemdup_user+0x2a/0xe0 [ 90.278188][ T7636] __sys_bpf+0x3195/0x4a30 [ 90.278205][ T7636] ? __pfx___sys_bpf+0x10/0x10 [ 90.278216][ T7636] ? find_held_lock+0x2b/0x80 [ 90.278233][ T7636] ? futex_wake+0x4ea/0x5e0 [ 90.278264][ T7636] ? rcu_read_lock_any_held+0x6a/0x90 [ 90.278285][ T7636] ? find_held_lock+0x2b/0x80 [ 90.278304][ T7636] ? ksys_write+0x190/0x250 [ 90.278316][ T7636] ? ksys_write+0x190/0x250 [ 90.278337][ T7636] ? __x64_sys_futex+0x34f/0x4d0 [ 90.278353][ T7636] ? __x64_sys_futex+0x358/0x4d0 [ 90.278375][ T7636] ? xfd_validate_state+0x129/0x190 [ 90.278392][ T7636] ? __x64_sys_bpf+0xce/0x140 [ 90.278403][ T7636] __x64_sys_bpf+0xce/0x140 [ 90.278416][ T7636] ? do_syscall_64+0xae/0x790 [ 90.278438][ T7636] do_syscall_64+0x123/0x790 [ 90.278455][ T7636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.278468][ T7636] RIP: 0033:0x7f5cc6f9e159 [ 90.278480][ T7636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.278494][ T7636] RSP: 002b:00007f5cc7edb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.278508][ T7636] RAX: ffffffffffffffda RBX: 00007f5cc7225fa0 RCX: 00007f5cc6f9e159 [ 90.278518][ T7636] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000004 [ 90.278527][ T7636] RBP: 00007f5cc7035024 R08: 0000000000000000 R09: 0000000000000000 [ 90.278537][ T7636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.278546][ T7636] R13: 00007f5cc7226038 R14: 00007f5cc7225fa0 R15: 00007ffd6385e548 [ 90.278564][ T7636] [ 90.327400][ T42] audit: type=1400 audit(1788709962.795:561): avc: denied { read } for pid=7637 comm="syz.3.685" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 90.327669][ T42] audit: type=1400 audit(1788709962.795:562): avc: denied { open } for pid=7637 comm="syz.3.685" path="/180/proc/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 90.541989][ T42] audit: type=1400 audit(1788709963.005:563): avc: denied { write } for pid=7647 comm="syz.2.690" name="/" dev="9p" ino=72634955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.542098][ T42] audit: type=1400 audit(1788709963.005:564): avc: denied { associate } for pid=7647 comm="syz.2.690" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 90.682908][ T35] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 90.833997][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 90.836530][ T35] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 90.838382][ T35] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 90.838405][ T35] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 90.838420][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 90.838452][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 90.838469][ T35] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 90.838487][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 90.838517][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.844152][ T35] usb 5-1: config 0 descriptor?? [ 90.978478][ T7660] X25: diagnostic #0 - 00 00 00 [ 91.052064][ T35] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 91.185813][ T42] audit: type=1400 audit(1788709963.655:565): avc: denied { write } for pid=7670 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.235611][ T42] audit: type=1400 audit(1788709963.705:566): avc: denied { write } for pid=7674 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.301290][ T7678] netlink: 'syz.3.699': attribute type 2 has an invalid length. [ 91.404419][ T7680] usblp0:failed reading printer status (-32) [ 91.404498][ T42] audit: type=1400 audit(1788709963.875:567): avc: denied { ioctl } for pid=7621 comm="syz.0.681" path="/dev/usb/lp0" dev="devtmpfs" ino=3054 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 91.405314][ T1038] usb 5-1: USB disconnect, device number 12 [ 91.410095][ T1038] usblp0: removed [ 91.890368][ T7597] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.903061][ T35] usb 6-1: USB disconnect, device number 9 [ 91.910823][ T35] usb 6-1: NFC: intf ffff88805846a000 [ 92.130389][ T7700] FAULT_INJECTION: forcing a failure. [ 92.130389][ T7700] name failslab, interval 1, probability 0, space 0, times 0 [ 92.135250][ T7700] CPU: 3 UID: 0 PID: 7700 Comm: syz.0.707 Not tainted syzkaller #0 PREEMPT(full) [ 92.135280][ T7700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.135288][ T7700] Call Trace: [ 92.135294][ T7700] [ 92.135300][ T7700] dump_stack_lvl+0x100/0x190 [ 92.135334][ T7700] should_fail_ex.cold+0x5/0xa [ 92.135352][ T7700] should_failslab+0xc2/0x120 [ 92.135369][ T7700] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 92.135382][ T7700] ? kvm_gmem_alloc_inode+0x26/0xe0 [ 92.135395][ T7700] ? __pfx_kvm_gmem_alloc_inode+0x10/0x10 [ 92.135407][ T7700] kvm_gmem_alloc_inode+0x26/0xe0 [ 92.135421][ T7700] ? __pfx_kvm_gmem_alloc_inode+0x10/0x10 [ 92.135433][ T7700] alloc_inode+0x68/0x250 [ 92.135451][ T7700] alloc_anon_inode+0x2a/0x3e0 [ 92.135467][ T7700] anon_inode_make_secure_inode+0x2f/0x140 [ 92.135486][ T7700] kvm_gmem_create+0x1cd/0x7a0 [ 92.135499][ T7700] kvm_vm_ioctl+0x1212/0x42d0 [ 92.135519][ T7700] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 92.135541][ T7700] ? kasan_quarantine_put+0x104/0x240 [ 92.135552][ T7700] ? lockdep_hardirqs_on+0x7d/0x110 [ 92.135574][ T7700] ? find_held_lock+0x2b/0x80 [ 92.135590][ T7700] ? tomoyo_path_number_perm+0x28f/0x580 [ 92.135611][ T7700] ? tomoyo_path_number_perm+0x28f/0x580 [ 92.135634][ T7700] ? __pfx_futex_wait+0x10/0x10 [ 92.135653][ T7700] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 92.135666][ T7700] ? do_vfs_ioctl+0x226/0x13e0 [ 92.135684][ T7700] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 92.135699][ T7700] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 92.135712][ T7700] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 92.135725][ T7700] ? __fget_files+0x34/0x3d0 [ 92.135743][ T7700] ? selinux_file_ioctl+0x13b/0x290 [ 92.135753][ T7700] ? selinux_file_ioctl+0xb6/0x290 [ 92.135764][ T7700] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 92.135777][ T7700] __x64_sys_ioctl+0x18e/0x210 [ 92.135789][ T7700] do_syscall_64+0x123/0x790 [ 92.135803][ T7700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.135837][ T7700] RIP: 0033:0x7fef3179e159 [ 92.135850][ T7700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.135861][ T7700] RSP: 002b:00007fef32727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.135875][ T7700] RAX: ffffffffffffffda RBX: 00007fef31a25fa0 RCX: 00007fef3179e159 [ 92.135882][ T7700] RDX: 00002000000001c0 RSI: 00000000c040aed4 RDI: 0000000000000004 [ 92.135890][ T7700] RBP: 00007fef31835024 R08: 0000000000000000 R09: 0000000000000000 [ 92.135897][ T7700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.135903][ T7700] R13: 00007fef31a26038 R14: 00007fef31a25fa0 R15: 00007ffcb45c1098 [ 92.135917][ T7700] [ 92.185116][ T7704] FAULT_INJECTION: forcing a failure. [ 92.185116][ T7704] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 92.185142][ T7704] CPU: 0 UID: 0 PID: 7704 Comm: syz.3.709 Not tainted syzkaller #0 PREEMPT(full) [ 92.185157][ T7704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.185165][ T7704] Call Trace: [ 92.185170][ T7704] [ 92.185176][ T7704] dump_stack_lvl+0x100/0x190 [ 92.185199][ T7704] should_fail_ex.cold+0x5/0xa [ 92.185216][ T7704] ? prepare_alloc_pages+0x16d/0x5b0 [ 92.185235][ T7704] should_fail_alloc_page+0xeb/0x140 [ 92.185252][ T7704] prepare_alloc_pages+0x1f0/0x5b0 [ 92.185269][ T7704] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 92.185290][ T7704] ? prepare_alloc_pages+0x191/0x5b0 [ 92.185304][ T7704] ? is_bpf_text_address+0x94/0x1a0 [ 92.185321][ T7704] ? rcu_is_watching+0x13/0xc0 [ 92.185337][ T7704] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 92.185358][ T7704] ? do_raw_spin_lock+0x128/0x260 [ 92.185373][ T7704] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 92.185394][ T7704] ? mark_held_locks+0x40/0x70 [ 92.185406][ T7704] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 92.185419][ T7704] ? lockdep_hardirqs_on+0x7d/0x110 [ 92.185433][ T7704] ? __bfs+0x150/0x2a0 [ 92.185449][ T7704] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 92.185471][ T7704] ? __bfs+0x150/0x2a0 [ 92.185487][ T7704] ? alloc_vmap_area+0x1814/0x2bb0 [ 92.185507][ T7704] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 92.185526][ T7704] ? check_prev_add+0xfe/0xe60 [ 92.185539][ T7704] ? policy_nodemask+0xed/0x4f0 [ 92.185555][ T7704] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 92.185585][ T7704] __kasan_populate_vmalloc+0xf0/0x210 [ 92.185601][ T7704] alloc_vmap_area+0x95d/0x2bb0 [ 92.185620][ T7704] ? kasan_save_track+0x14/0x30 [ 92.185633][ T7704] ? __kasan_kmalloc+0xaa/0xb0 [ 92.185645][ T7704] ? __pfx_alloc_vmap_area+0x10/0x10 [ 92.185659][ T7704] ? __get_vm_area_node+0x124/0x350 [ 92.185674][ T7704] __get_vm_area_node+0x1ed/0x350 [ 92.185691][ T7704] __vmalloc_node_range_noprof+0x268/0x1420 [ 92.185705][ T7704] ? security_read_policy+0x105/0x2e0 [ 92.185722][ T7704] ? lock_acquire+0x1d1/0x380 [ 92.185732][ T7704] ? sel_open_policy+0x181/0x380 [ 92.185750][ T7704] ? security_read_policy+0x105/0x2e0 [ 92.185789][ T7704] ? __mutex_lock+0x26c/0x1bd0 [ 92.185804][ T7704] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 92.185822][ T7704] ? __pfx___mutex_lock+0x10/0x10 [ 92.185840][ T7704] ? security_read_policy+0x105/0x2e0 [ 92.185859][ T7704] vmalloc_user_noprof+0x9e/0xe0 [ 92.185872][ T7704] ? security_read_policy+0x105/0x2e0 [ 92.185886][ T7704] security_read_policy+0x105/0x2e0 [ 92.185900][ T7704] ? __pfx_security_read_policy+0x10/0x10 [ 92.185916][ T7704] ? sel_open_policy+0x15e/0x380 [ 92.185935][ T7704] sel_open_policy+0x18c/0x380 [ 92.185953][ T7704] do_dentry_open+0x6ab/0x14d0 [ 92.185965][ T7704] ? __pfx_sel_open_policy+0x10/0x10 [ 92.185983][ T7704] vfs_open+0x82/0x3f0 [ 92.185999][ T7704] path_openat+0x19fa/0x2440 [ 92.186014][ T7704] ? __pfx_path_openat+0x10/0x10 [ 92.186031][ T7704] do_file_open+0x20e/0x430 [ 92.186045][ T7704] ? __pfx_do_file_open+0x10/0x10 [ 92.186067][ T7704] ? _raw_spin_unlock+0x28/0x50 [ 92.186078][ T7704] ? alloc_fd+0x471/0x7a0 [ 92.186095][ T7704] do_sys_openat2+0x10f/0x1e0 [ 92.186110][ T7704] ? __pfx_do_sys_openat2+0x10/0x10 [ 92.186129][ T7704] __x64_sys_openat+0x12d/0x210 [ 92.186144][ T7704] ? __pfx___x64_sys_openat+0x10/0x10 [ 92.186164][ T7704] do_syscall_64+0x123/0x790 [ 92.186178][ T7704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.186190][ T7704] RIP: 0033:0x7f5cc6f9e159 [ 92.186201][ T7704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.186212][ T7704] RSP: 002b:00007f5cc7edb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 92.186224][ T7704] RAX: ffffffffffffffda RBX: 00007f5cc7225fa0 RCX: 00007f5cc6f9e159 [ 92.186232][ T7704] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 92.186238][ T7704] RBP: 00007f5cc7035024 R08: 0000000000000000 R09: 0000000000000000 [ 92.186245][ T7704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.186251][ T7704] R13: 00007f5cc7226038 R14: 00007f5cc7225fa0 R15: 00007ffd6385e548 [ 92.186267][ T7704] [ 92.187984][ T7704] syz.3.709: vmalloc error: size 280859, align 0x1000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 92.188039][ T7704] CPU: 0 UID: 0 PID: 7704 Comm: syz.3.709 Not tainted syzkaller #0 PREEMPT(full) [ 92.188054][ T7704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.188061][ T7704] Call Trace: [ 92.188065][ T7704] [ 92.188070][ T7704] dump_stack_lvl+0x100/0x190 [ 92.188089][ T7704] warn_alloc.cold+0x9e/0xb2 [ 92.188102][ T7704] ? __pfx_warn_alloc+0x10/0x10 [ 92.188119][ T7704] ? lockdep_hardirqs_on+0x7d/0x110 [ 92.188134][ T7704] ? __get_vm_area_node+0x2f0/0x350 [ 92.188149][ T7704] ? __get_vm_area_node+0x22b/0x350 [ 92.188165][ T7704] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 92.188180][ T7704] ? lock_acquire+0x1d1/0x380 [ 92.188192][ T7704] ? sel_open_policy+0x181/0x380 [ 92.188211][ T7704] ? security_read_policy+0x105/0x2e0 [ 92.188228][ T7704] ? __mutex_lock+0x26c/0x1bd0 [ 92.188241][ T7704] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 92.188259][ T7704] ? __pfx___mutex_lock+0x10/0x10 [ 92.188272][ T7704] ? security_read_policy+0x105/0x2e0 [ 92.188287][ T7704] vmalloc_user_noprof+0x9e/0xe0 [ 92.188300][ T7704] ? security_read_policy+0x105/0x2e0 [ 92.188314][ T7704] security_read_policy+0x105/0x2e0 [ 92.188328][ T7704] ? __pfx_security_read_policy+0x10/0x10 [ 92.188342][ T7704] ? sel_open_policy+0x15e/0x380 [ 92.188363][ T7704] sel_open_policy+0x18c/0x380 [ 92.188380][ T7704] do_dentry_open+0x6ab/0x14d0 [ 92.188392][ T7704] ? __pfx_sel_open_policy+0x10/0x10 [ 92.188410][ T7704] vfs_open+0x82/0x3f0 [ 92.188425][ T7704] path_openat+0x19fa/0x2440 [ 92.188440][ T7704] ? __pfx_path_openat+0x10/0x10 [ 92.188457][ T7704] do_file_open+0x20e/0x430 [ 92.188471][ T7704] ? __pfx_do_file_open+0x10/0x10 [ 92.188493][ T7704] ? _raw_spin_unlock+0x28/0x50 [ 92.188503][ T7704] ? alloc_fd+0x471/0x7a0 [ 92.188520][ T7704] do_sys_openat2+0x10f/0x1e0 [ 92.188534][ T7704] ? __pfx_do_sys_openat2+0x10/0x10 [ 92.188554][ T7704] __x64_sys_openat+0x12d/0x210 [ 92.188569][ T7704] ? __pfx___x64_sys_openat+0x10/0x10 [ 92.188589][ T7704] do_syscall_64+0x123/0x790 [ 92.188603][ T7704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.188615][ T7704] RIP: 0033:0x7f5cc6f9e159 [ 92.188625][ T7704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.188635][ T7704] RSP: 002b:00007f5cc7edb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 92.188645][ T7704] RAX: ffffffffffffffda RBX: 00007f5cc7225fa0 RCX: 00007f5cc6f9e159 [ 92.188653][ T7704] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 92.188659][ T7704] RBP: 00007f5cc7035024 R08: 0000000000000000 R09: 0000000000000000 [ 92.188666][ T7704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.188672][ T7704] R13: 00007f5cc7226038 R14: 00007f5cc7225fa0 R15: 00007ffd6385e548 [ 92.188686][ T7704] [ 92.188690][ T7704] Mem-Info: [ 92.188696][ T7704] active_anon:26608 inactive_anon:9 isolated_anon:0 [ 92.188696][ T7704] active_file:2049 inactive_file:59183 isolated_file:0 [ 92.188696][ T7704] unevictable:1000 dirty:127 writeback:0 [ 92.188696][ T7704] slab_reclaimable:8470 slab_unreclaimable:65983 [ 92.188696][ T7704] mapped:25171 shmem:18499 pagetables:1246 [ 92.188696][ T7704] sec_pagetables:295 bounce:0 [ 92.188696][ T7704] kernel_misc_reclaimable:0 [ 92.188696][ T7704] free:435668 free_pcp:16371 free_cma:0 [ 92.188721][ T7704] Node 0 active_anon:106432kB inactive_anon:36kB active_file:8196kB inactive_file:236528kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:100684kB dirty:508kB writeback:0kB shmem:71996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13376kB pagetables:4784kB sec_pagetables:1180kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 92.188749][ T7704] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 92.188775][ T7704] Node 0 DMA free:15360kB boost:0kB min:352kB low:440kB high:528kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 92.188803][ T7704] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 92.188823][ T7704] Node 0 DMA32 free:80196kB boost:0kB min:29008kB low:36260kB high:43512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:106432kB inactive_anon:36kB active_file:8196kB inactive_file:236528kB unevictable:2000kB writepending:508kB zspages:580kB present:2080628kB managed:1252972kB mlocked:0kB bounce:0kB free_pcp:65484kB local_pcp:18568kB free_cma:0kB [ 92.188863][ T7704] lowmem_reserve[]: 0 0 0 0 0 [ 92.188884][ T7704] Node 1 Normal free:1516044kB boost:0kB min:38216kB low:47768kB high:57320kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB writepending:0kB zspages:0kB present:1966080kB managed:1650808kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 92.188917][ T7704] lowmem_reserve[]: 0 0 0 1024 1024 [ 92.188939][ T7704] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 92.189011][ T7704] Node 0 DMA32: 469*4kB (UM) 152*8kB (UM) 6*16kB (UME) 171*32kB (UM) 59*64kB (UM) 36*128kB (UME) 24*256kB (UME) 5*512kB (UM) 3*1024kB (UE) 3*2048kB (UME) 11*4096kB (UM) = 80020kB [ 92.189107][ T7704] Node 1 Normal: 3*4kB (U) 8*8kB (UM) 18*16kB (UM) 13*32kB (UM) 14*64kB (UM) 9*128kB (UM) 5*256kB (U) 7*512kB (UM) 3*1024kB (U) 3*2048kB (UM) 366*4096kB (M) = 1516044kB [ 92.189203][ T7704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.189211][ T7704] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 92.189220][ T7704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.189228][ T7704] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 92.189237][ T7704] 79739 total pagecache pages [ 92.189241][ T7704] 12 pages in swap cache [ 92.189245][ T7704] Free swap = 124700kB [ 92.189249][ T7704] Total swap = 124996kB [ 92.189253][ T7704] 1048443 pages RAM [ 92.189256][ T7704] 0 pages HighMem/MovableOnly [ 92.189260][ T7704] 285890 pages reserved [ 92.189263][ T7704] 0 pages cma reserved [ 92.222533][ T50] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 92.402887][ T35] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 92.478524][ T7720] syzkaller1: entered promiscuous mode [ 92.478540][ T7720] syzkaller1: entered allmulticast mode [ 92.492942][ T50] usb 7-1: Using ep0 maxpacket: 8 [ 92.493476][ T50] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 92.494308][ T50] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 92.494335][ T50] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.494349][ T50] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.494363][ T50] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.494376][ T50] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.494398][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.573656][ T35] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 92.574865][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.705558][ T50] usb 7-1: usb_control_msg returned -32 [ 92.705623][ T50] usbtmc 7-1:16.0: can't read capabilities [ 92.757309][ T7723] netlink: 'syz.3.717': attribute type 2 has an invalid length. [ 92.785185][ T35] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 93.241543][ T63] usb 6-1: USB disconnect, device number 10 [ 93.463972][ T7738] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 93.666491][ T63] usb 7-1: USB disconnect, device number 11 [ 93.672942][ T30] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 93.823349][ T30] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.827138][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.831072][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.834393][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.834428][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.842082][ T30] usb 5-1: config 0 descriptor?? [ 93.954512][ T5823] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 93.977563][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'. [ 94.026093][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'. [ 94.134234][ T5823] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 94.135658][ T5823] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 94.135673][ T5823] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 94.135684][ T5823] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.137430][ T5823] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.137444][ T5823] usb 8-1: Product: syz [ 94.137452][ T5823] usb 8-1: Manufacturer: syz [ 94.137460][ T5823] usb 8-1: SerialNumber: syz [ 94.143063][ T5823] hub 8-1:1.0: bad descriptor, ignoring hub [ 94.143077][ T5823] hub 8-1:1.0: probe with driver hub failed with error -5 [ 94.248397][ T30] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 94.250914][ T30] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 94.252133][ T30] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 94.252149][ T30] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 94.252160][ T30] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 94.252172][ T30] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 94.252184][ T30] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 94.252195][ T30] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 94.252207][ T30] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 94.252218][ T30] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 94.258294][ T30] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 94.307408][ T7753] sctp: [Deprecated]: syz.1.727 (pid 7753) Use of struct sctp_assoc_value in delayed_ack socket option. [ 94.307408][ T7753] Use struct sctp_sack_info instead [ 94.354364][ T5823] usblp 8-1:1.0: usblp1: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 94.513965][ T30] usb 5-1: USB disconnect, device number 13 [ 94.573636][ T50] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 94.723693][ T50] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 94.724560][ T50] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.724577][ T50] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 94.724591][ T50] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 94.724604][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 94.726156][ T50] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 94.726169][ T50] usb 6-1: Product: syz [ 94.726177][ T50] usb 6-1: Manufacturer: syz [ 94.726185][ T50] usb 6-1: SerialNumber: syz [ 94.727729][ T50] usb 6-1: config 0 descriptor?? [ 94.728231][ T7755] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 94.735692][ T50] usb 6-1: selecting invalid altsetting 0 [ 94.853595][ T35] usb 8-1: reset high-speed USB device number 12 using dummy_hcd [ 94.856122][ T35] usb 8-1: device reset changed ep0 maxpacket size! [ 94.858965][ T35] usb 8-1: USB disconnect, device number 12 [ 94.860799][ T35] usblp1: removed [ 95.076594][ T7759] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 95.193112][ T35] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 95.265637][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 95.265705][ T42] audit: type=1400 audit(1788709967.735:571): avc: denied { write } for pid=7764 comm="syz.2.733" name="functions" dev="configfs" ino=9973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.268457][ T42] audit: type=1400 audit(1788709967.735:572): avc: denied { write } for pid=7764 comm="syz.2.733" name="mjpeg" dev="configfs" ino=19933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.303338][ T1038] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 95.326554][ T50] usb 6-1: USB disconnect, device number 11 [ 95.353261][ T35] usb 8-1: Using ep0 maxpacket: 16 [ 95.356122][ T35] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 95.359929][ T35] usb 8-1: config 0 has no interfaces? [ 95.363661][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.367053][ T35] usb 8-1: Product: syz [ 95.368661][ T35] usb 8-1: Manufacturer: syz [ 95.370270][ T35] usb 8-1: SerialNumber: syz [ 95.381544][ T35] usb 8-1: config 0 descriptor?? [ 95.463236][ T1038] usb 5-1: Using ep0 maxpacket: 8 [ 95.464022][ T1038] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 95.466159][ T1038] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 95.466191][ T1038] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.466203][ T1038] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.466215][ T1038] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.466229][ T1038] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.466250][ T1038] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.589395][ T35] usb 8-1: USB disconnect, device number 13 [ 95.672240][ T1038] usb 5-1: usb_control_msg returned -32 [ 95.672391][ T1038] usbtmc 5-1:16.0: can't read capabilities [ 96.026801][ T7790] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 96.029317][ T63] usb 5-1: USB disconnect, device number 14 [ 96.107508][ T42] audit: type=1400 audit(1788709968.575:573): avc: denied { mounton } for pid=7793 comm="syz.2.745" path="" dev="cgroup2" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.108578][ T7794] jffs2: notice: (7794) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 16 of xref (0 dead, 13 orphan) found. [ 96.220338][ T7807] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 96.503473][ T42] audit: type=1400 audit(1788709968.975:574): avc: denied { write } for pid=7817 comm="syz.2.756" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.603060][ T63] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 96.774991][ T63] usb 6-1: Using ep0 maxpacket: 8 [ 96.775904][ T63] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 96.778006][ T63] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 96.778056][ T63] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.778078][ T63] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.778096][ T63] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.778111][ T63] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.778137][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.812351][ T7839] syzkaller1: entered promiscuous mode [ 96.812468][ T7839] syzkaller1: entered allmulticast mode [ 96.918428][ T7841] misc userio: Can't change port proto on an already running userio instance [ 96.995666][ T63] usb 6-1: usb_control_msg returned -32 [ 96.995727][ T63] usbtmc 6-1:16.0: can't read capabilities [ 97.201250][ T63] usb 6-1: USB disconnect, device number 12 [ 97.498607][ T42] audit: type=1400 audit(1788709969.965:575): avc: denied { write } for pid=7849 comm="syz.2.768" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.505615][ T42] audit: type=1400 audit(1788709969.965:576): avc: denied { write } for pid=7849 comm="syz.2.768" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.637656][ T7859] ip_tables: iptables: counters copy to user failed while replacing table [ 97.684362][ T7863] FAULT_INJECTION: forcing a failure. [ 97.684362][ T7863] name failslab, interval 1, probability 0, space 0, times 0 [ 97.684430][ T7863] CPU: 0 UID: 0 PID: 7863 Comm: syz.3.773 Not tainted syzkaller #0 PREEMPT(full) [ 97.684456][ T7863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.684465][ T7863] Call Trace: [ 97.684470][ T7863] [ 97.684475][ T7863] dump_stack_lvl+0x100/0x190 [ 97.684506][ T7863] should_fail_ex.cold+0x5/0xa [ 97.684525][ T7863] should_failslab+0xc2/0x120 [ 97.684544][ T7863] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 97.684560][ T7863] ? kstrdup_const+0x63/0x80 [ 97.684580][ T7863] kstrdup+0x51/0xe0 [ 97.684596][ T7863] kstrdup_const+0x63/0x80 [ 97.684614][ T7863] kvasprintf_const+0x10f/0x1a0 [ 97.684628][ T7863] kobject_set_name_vargs+0x5a/0x140 [ 97.684651][ T7863] dev_set_name+0xc7/0x100 [ 97.684667][ T7863] ? __pfx_dev_set_name+0x10/0x10 [ 97.684682][ T7863] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.684696][ T7863] ? lockdep_init_map_type+0x5c/0x250 [ 97.684715][ T7863] ? __init_waitqueue_head+0xca/0x150 [ 97.684733][ T7863] netdev_register_kobject+0xc5/0x410 [ 97.684755][ T7863] register_netdevice+0x15b6/0x25a0 [ 97.684771][ T7863] ? __pfx_register_netdevice+0x10/0x10 [ 97.684783][ T7863] ? net_generic+0xea/0x2a0 [ 97.684797][ T7863] ppp_dev_configure+0x8e2/0xbd0 [ 97.684812][ T7863] ppp_ioctl+0x9ef/0x27b0 [ 97.684824][ T7863] ? __fget_files+0x34/0x3d0 [ 97.684840][ T7863] ? __pfx_ppp_ioctl+0x10/0x10 [ 97.684857][ T7863] ? selinux_file_ioctl+0xb6/0x290 [ 97.684870][ T7863] ? __pfx_ppp_ioctl+0x10/0x10 [ 97.684883][ T7863] __x64_sys_ioctl+0x18e/0x210 [ 97.684910][ T7863] do_syscall_64+0x123/0x790 [ 97.684929][ T7863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.684942][ T7863] RIP: 0033:0x7f5cc6f9e159 [ 97.684954][ T7863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.684966][ T7863] RSP: 002b:00007f5cc7edb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.684979][ T7863] RAX: ffffffffffffffda RBX: 00007f5cc7225fa0 RCX: 00007f5cc6f9e159 [ 97.684987][ T7863] RDX: 0000200000000140 RSI: 00000000c004743e RDI: 0000000000000004 [ 97.684994][ T7863] RBP: 00007f5cc7035024 R08: 0000000000000000 R09: 0000000000000000 [ 97.685002][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.685009][ T7863] R13: 00007f5cc7226038 R14: 00007f5cc7225fa0 R15: 00007ffd6385e548 [ 97.685025][ T7863] [ 97.813869][ T7867] kvm: emulating exchange as write [ 97.989479][ T7875] gadgetfs: bound to dummy_udc driver [ 98.010425][ T7875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.011080][ T7875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.086312][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.779'. [ 98.090500][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.779'. [ 98.450490][ T7891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.784'. [ 98.450812][ T7891] FAULT_INJECTION: forcing a failure. [ 98.450812][ T7891] name failslab, interval 1, probability 0, space 0, times 0 [ 98.450855][ T7891] CPU: 0 UID: 0 PID: 7891 Comm: syz.2.784 Not tainted syzkaller #0 PREEMPT(full) [ 98.450875][ T7891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.450887][ T7891] Call Trace: [ 98.450901][ T7891] [ 98.450909][ T7891] dump_stack_lvl+0x100/0x190 [ 98.450944][ T7891] should_fail_ex.cold+0x5/0xa [ 98.450963][ T7891] should_failslab+0xc2/0x120 [ 98.450985][ T7891] __kvmalloc_node_noprof+0x113/0x9b0 [ 98.451003][ T7891] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 98.451027][ T7891] ? alloc_netdev_mqs+0xf5f/0x15c0 [ 98.451057][ T7891] alloc_netdev_mqs+0xf5f/0x15c0 [ 98.451081][ T7891] rtnl_create_link+0xc13/0xf80 [ 98.451105][ T7891] rtnl_newlink+0x15bc/0x2620 [ 98.451134][ T7891] ? __pfx_rtnl_newlink+0x10/0x10 [ 98.451154][ T7891] ? avc_has_perm_noaudit+0x56/0x3b0 [ 98.451180][ T7891] ? find_held_lock+0x2b/0x80 [ 98.451195][ T7891] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 98.451214][ T7891] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 98.451260][ T7891] ? lock_acquire+0x1d1/0x380 [ 98.451278][ T7891] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 98.451297][ T7891] ? find_held_lock+0x2b/0x80 [ 98.451335][ T7891] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 98.451355][ T7891] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 98.451370][ T7891] ? __pfx_rtnl_newlink+0x10/0x10 [ 98.451384][ T7891] rtnetlink_rcv_msg+0x95e/0xe90 [ 98.451400][ T7891] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 98.451421][ T7891] ? ref_tracker_free+0x37e/0x6c0 [ 98.451439][ T7891] netlink_rcv_skb+0x159/0x420 [ 98.451456][ T7891] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 98.451470][ T7891] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 98.451497][ T7891] ? netlink_deliver_tap+0x1ae/0xcc0 [ 98.451528][ T7891] netlink_unicast+0x585/0x850 [ 98.451558][ T7891] ? __pfx_netlink_unicast+0x10/0x10 [ 98.451581][ T7891] netlink_sendmsg+0x8b0/0xda0 [ 98.451600][ T7891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.451618][ T7891] ? selinux_socket_sendmsg+0x198/0x2f0 [ 98.451637][ T7891] ____sys_sendmsg+0xa4d/0xbe0 [ 98.451655][ T7891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.451681][ T7891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.451714][ T7891] ___sys_sendmsg+0x190/0x1e0 [ 98.451740][ T7891] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.451762][ T7891] ? futex_wait+0x11e/0x370 [ 98.451784][ T7891] ? find_held_lock+0x2b/0x80 [ 98.451845][ T7891] __sys_sendmsg+0x160/0x210 [ 98.451861][ T7891] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.451883][ T7891] do_syscall_64+0x123/0x790 [ 98.451904][ T7891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.451918][ T7891] RIP: 0033:0x7fd171d9e159 [ 98.451930][ T7891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.451942][ T7891] RSP: 002b:00007fd172beb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.451959][ T7891] RAX: ffffffffffffffda RBX: 00007fd172025fa0 RCX: 00007fd171d9e159 [ 98.451967][ T7891] RDX: 0000000000040080 RSI: 0000200000000000 RDI: 0000000000000004 [ 98.451975][ T7891] RBP: 00007fd171e35024 R08: 0000000000000000 R09: 0000000000000000 [ 98.451981][ T7891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.451988][ T7891] R13: 00007fd172026038 R14: 00007fd172025fa0 R15: 00007ffcd25cf588 [ 98.452002][ T7891] [ 98.604416][ T42] audit: type=1400 audit(1788709971.075:577): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 98.677936][ T42] audit: type=1400 audit(1788709971.145:578): avc: denied { listen } for pid=7900 comm="syz.2.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 98.678897][ T42] audit: type=1400 audit(1788709971.145:579): avc: denied { accept } for pid=7900 comm="syz.2.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 98.833142][ T7904] pci_bus 0000:01: busn_res: [bus 01] is released [ 98.842617][ T7907] netlink: 'syz.1.790': attribute type 2 has an invalid length. [ 98.877879][ T7905] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 98.881873][ T7905] pci 0000:00:04.0: PCI bridge to [bus 01] [ 98.882143][ T7905] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 98.882289][ T7905] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 98.884210][ T7905] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 98.884747][ T7905] pci 0000:00:04.0: enabling Extended Tags [ 98.910064][ T7905] pci 0000:00:04.0: Adding to iommu group 4 [ 98.932670][ T7905] pci 0000:00:04.0: PCI bridge to [bus 01] [ 98.936014][ T7905] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 98.936050][ T7905] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 98.936122][ T7905] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 98.936139][ T7905] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref]: assigned [ 98.936155][ T7905] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 98.936217][ T7905] pci 0000:00:04.0: PCI bridge to [bus 01] [ 98.936278][ T7905] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 98.938273][ T7905] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 98.939528][ T7905] pci 0000:00:04.0: bridge window [mem 0x380000000000-0x3800001fffff 64bit pref] [ 98.997110][ T7905] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 99.007048][ T7905] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 99.154827][ T30] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 99.195091][ T42] audit: type=1400 audit(1788709971.665:580): avc: denied { write } for pid=7917 comm="syz.3.793" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.305012][ T30] usb 5-1: unable to get BOS descriptor or descriptor too short [ 99.305082][ T30] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 99.306984][ T30] usb 5-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 99.309939][ T30] usb 5-1: string descriptor 0 read error: -22 [ 99.310030][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.698741][ T7937] FAULT_INJECTION: forcing a failure. [ 99.698741][ T7937] name failslab, interval 1, probability 0, space 0, times 0 [ 99.698815][ T7937] CPU: 2 UID: 0 PID: 7937 Comm: syz.1.800 Not tainted syzkaller #0 PREEMPT(full) [ 99.698840][ T7937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.698849][ T7937] Call Trace: [ 99.698853][ T7937] [ 99.698859][ T7937] dump_stack_lvl+0x100/0x190 [ 99.698891][ T7937] should_fail_ex.cold+0x5/0xa [ 99.698909][ T7937] should_failslab+0xc2/0x120 [ 99.698927][ T7937] kmem_cache_alloc_noprof+0x92/0x6a0 [ 99.698939][ T7937] ? anon_vma_clone+0x2b3/0xca0 [ 99.698957][ T7937] anon_vma_clone+0x2b3/0xca0 [ 99.698975][ T7937] anon_vma_fork+0x1bb/0x6a0 [ 99.698992][ T7937] dup_mmap+0x10e6/0x2370 [ 99.699018][ T7937] ? __pfx_dup_mmap+0x10/0x10 [ 99.699031][ T7937] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 99.699051][ T7937] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 99.699066][ T7937] ? __lock_acquire+0x4c5/0x1ec0 [ 99.699085][ T7937] ? lock_acquire+0x1d1/0x380 [ 99.699096][ T7937] ? copy_process+0x4806/0x8370 [ 99.699114][ T7937] copy_process+0x4811/0x8370 [ 99.699136][ T7937] ? __pfx_copy_process+0x10/0x10 [ 99.699151][ T7937] ? futex_wake+0x4ea/0x5e0 [ 99.699176][ T7937] kernel_clone+0x176/0x9d0 [ 99.699192][ T7937] ? __pfx_kernel_clone+0x10/0x10 [ 99.699208][ T7937] ? ksys_write+0x190/0x250 [ 99.699223][ T7937] __do_sys_clone+0xd9/0x120 [ 99.699236][ T7937] ? __pfx___do_sys_clone+0x10/0x10 [ 99.699248][ T7937] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 99.699268][ T7937] ? ksys_write+0x1ac/0x250 [ 99.699278][ T7937] ? __pfx_ksys_write+0x10/0x10 [ 99.699293][ T7937] do_syscall_64+0x123/0x790 [ 99.699307][ T7937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.699319][ T7937] RIP: 0033:0x7fac66f9e159 [ 99.699330][ T7937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.699341][ T7937] RSP: 002b:00007fac67ee4fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 99.699354][ T7937] RAX: ffffffffffffffda RBX: 00007fac67225fa0 RCX: 00007fac66f9e159 [ 99.699361][ T7937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 99.699368][ T7937] RBP: 00007fac67035024 R08: 0000000000000000 R09: 0000000000000000 [ 99.699374][ T7937] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 99.699381][ T7937] R13: 00007fac67226038 R14: 00007fac67225fa0 R15: 00007ffdbfb1e028 [ 99.699396][ T7937] [ 99.966681][ T7960] netlink: 'syz.3.808': attribute type 2 has an invalid length. [ 100.063083][ T63] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 100.130438][ T30] usb 5-1: USB disconnect, device number 15 [ 100.213646][ T63] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 100.217748][ T63] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.221466][ T63] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 100.221487][ T63] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.234199][ T63] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 100.237289][ T63] usb 7-1: Product: syz [ 100.237311][ T63] usb 7-1: Manufacturer: syz [ 100.237323][ T63] usb 7-1: SerialNumber: syz [ 100.454855][ T63] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 100.672707][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 100.672856][ T42] audit: type=1400 audit(1788709973.135:587): avc: denied { watch watch_reads } for pid=7973 comm="syz.0.811" path="/169/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 100.705822][ T30] usb 7-1: USB disconnect, device number 12 [ 100.717681][ T7948] usblp0: removed [ 100.726196][ T42] audit: type=1400 audit(1788709973.195:588): avc: denied { write } for pid=7975 comm="syz.0.812" name="/" dev="9p" ino=72634955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.737908][ T42] audit: type=1400 audit(1788709973.205:589): avc: denied { write } for pid=7975 comm="syz.0.812" name="file1" dev="9p" ino=72635485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.743974][ T42] audit: type=1800 audit(1788709973.205:590): pid=7976 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.812" name="file1" dev="9p" ino=72635485 res=0 errno=0 [ 100.846434][ T7979] netlink: 'syz.3.813': attribute type 2 has an invalid length. [ 101.265507][ T7989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.687618][ T8003] kvm: Disabled LAPIC found during irq injection [ 102.913912][ T42] audit: type=1400 audit(1788709975.385:591): avc: denied { create } for pid=8011 comm="syz.3.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.950289][ T42] audit: type=1400 audit(1788709975.415:592): avc: denied { bind } for pid=8011 comm="syz.3.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.952371][ T42] audit: type=1400 audit(1788709975.415:593): avc: denied { listen } for pid=8011 comm="syz.3.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.952667][ T42] audit: type=1400 audit(1788709975.415:594): avc: denied { accept } for pid=8011 comm="syz.3.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.963129][ T30] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 103.114261][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 103.116575][ T30] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 103.121164][ T30] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 103.121209][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 103.121264][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.121293][ T30] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.121331][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.129260][ T8016] FAULT_INJECTION: forcing a failure. [ 103.129260][ T8016] name failslab, interval 1, probability 0, space 0, times 0 [ 103.129292][ T8016] CPU: 0 UID: 0 PID: 8016 Comm: syz.3.825 Not tainted syzkaller #0 PREEMPT(full) [ 103.129315][ T8016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.129327][ T8016] Call Trace: [ 103.129334][ T8016] [ 103.129342][ T8016] dump_stack_lvl+0x100/0x190 [ 103.129387][ T8016] should_fail_ex.cold+0x5/0xa [ 103.129415][ T8016] should_failslab+0xc2/0x120 [ 103.129445][ T8016] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 103.129468][ T8016] ? debugfs_create_symlink+0x29/0x1f0 [ 103.129500][ T8016] kstrdup+0x51/0xe0 [ 103.129529][ T8016] debugfs_create_symlink+0x29/0x1f0 [ 103.129555][ T8016] ref_tracker_dir_symlink+0x257/0x3b0 [ 103.129579][ T8016] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 103.129624][ T8016] ? rcu_is_watching+0x13/0xc0 [ 103.129649][ T8016] ? ida_alloc_range+0x70d/0x830 [ 103.129678][ T8016] ? kfree+0x1e5/0x6d0 [ 103.129706][ T8016] ? xas_nomem+0x189/0x2c0 [ 103.129733][ T8016] ? __pfx_net_ns_net_init+0x10/0x10 [ 103.129760][ T8016] net_ns_net_init+0xd2/0x120 [ 103.129782][ T8016] ops_init+0x1e2/0x5f0 [ 103.129806][ T8016] setup_net+0x118/0x3a0 [ 103.129858][ T8016] ? __pfx_setup_net+0x10/0x10 [ 103.129889][ T8016] copy_net_ns+0x345/0x7a0 [ 103.129916][ T8016] create_new_namespaces+0x3ea/0xac0 [ 103.129943][ T8016] unshare_nsproxy_namespaces+0xf2/0x220 [ 103.129965][ T8016] ksys_unshare+0x4a2/0xa70 [ 103.129988][ T8016] ? __pfx_ksys_unshare+0x10/0x10 [ 103.130010][ T8016] ? ksys_write+0x1ac/0x250 [ 103.130036][ T8016] __x64_sys_unshare+0x31/0x40 [ 103.130057][ T8016] do_syscall_64+0x123/0x790 [ 103.130082][ T8016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.130102][ T8016] RIP: 0033:0x7f5cc6f9e159 [ 103.130120][ T8016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.130137][ T8016] RSP: 002b:00007f5cc7edb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 103.130157][ T8016] RAX: ffffffffffffffda RBX: 00007f5cc7225fa0 RCX: 00007f5cc6f9e159 [ 103.130170][ T8016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062000000 [ 103.130181][ T8016] RBP: 00007f5cc7035024 R08: 0000000000000000 R09: 0000000000000000 [ 103.130191][ T8016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.130202][ T8016] R13: 00007f5cc7226038 R14: 00007f5cc7225fa0 R15: 00007ffd6385e548 [ 103.130227][ T8016] [ 103.267304][ T42] audit: type=1400 audit(1788709975.735:595): avc: denied { mount } for pid=8018 comm="syz.3.826" name="/" dev="autofs" ino=26349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 103.292238][ T42] audit: type=1400 audit(1788709975.755:596): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 103.303054][ T5735] Bluetooth: hci4: command 0x1003 tx timeout [ 103.305108][ T5740] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 103.369202][ T8021] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 103.373547][ T30] usb 5-1: GET_CAPABILITIES returned 0 [ 103.373570][ T30] usbtmc 5-1:16.0: can't read capabilities [ 103.577391][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 103.577648][ C0] ================================================================== [ 103.577660][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23a/0x260 [ 103.577692][ C0] Read of size 4 at addr ffff888059d44884 by task udevd/5143 [ 103.577706][ C0] [ 103.577715][ C0] CPU: 0 UID: 0 PID: 5143 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 103.577732][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.577743][ C0] Call Trace: [ 103.577750][ C0] [ 103.577758][ C0] dump_stack_lvl+0x100/0x190 [ 103.577786][ C0] print_report+0x13d/0x4b0 [ 103.577815][ C0] ? __virt_addr_valid+0x239/0x430 [ 103.577835][ C0] ? do_raw_spin_lock+0x23a/0x260 [ 103.577858][ C0] kasan_report+0xdf/0x1c0 [ 103.577882][ C0] ? do_raw_spin_lock+0x23a/0x260 [ 103.577914][ C0] do_raw_spin_lock+0x23a/0x260 [ 103.577935][ C0] ? __wake_up+0x1c/0x60 [ 103.577959][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 103.577983][ C0] ? kcov_remote_stop+0x27d/0x560 [ 103.578005][ C0] ? kcov_remote_stop+0x27d/0x560 [ 103.578026][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 103.578045][ C0] ? __wake_up+0x1c/0x60 [ 103.578071][ C0] __wake_up+0x1c/0x60 [ 103.578099][ C0] usb_anchor_resume_wakeups+0xc7/0xf0 [ 103.578119][ C0] __usb_hcd_giveback_urb+0x3d8/0x610 [ 103.578147][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 103.578175][ C0] dummy_timer+0xdb2/0x3700 [ 103.578202][ C0] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 103.578235][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.578256][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 103.578280][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 103.578308][ C0] ? mark_held_locks+0x40/0x70 [ 103.578328][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.578349][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 103.578376][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 103.578406][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 103.578434][ C0] handle_softirqs+0x1e6/0x9d0 [ 103.578457][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 103.578482][ C0] ? _raw_spin_unlock+0x28/0x50 [ 103.578501][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 103.578529][ C0] __irq_exit_rcu+0x194/0x210 [ 103.578549][ C0] irq_exit_rcu+0x9/0x30 [ 103.578567][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 103.578589][ C0] [ 103.578596][ C0] [ 103.578604][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 103.578626][ C0] RIP: 0010:do_raw_spin_lock+0x139/0x260 [ 103.578651][ C0] Code: 28 00 00 00 00 e8 77 9d 97 00 be 04 00 00 00 48 8d 7c 24 28 e8 68 9d 97 00 8b 44 24 28 ba 01 00 00 00 89 44 24 04 f0 0f b1 13 <0f> 85 93 00 00 00 48 89 ea 65 44 8b 35 7e 84 a4 12 48 b8 00 00 00 [ 103.578671][ C0] RSP: 0018:ffffc900042f76c8 EFLAGS: 00000246 [ 103.578689][ C0] RAX: 0000000000000000 RBX: ffff888039e0a0b8 RCX: ffffffff81e78b98 [ 103.578702][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc900042f76f0 [ 103.578715][ C0] RBP: ffff888039e0a0c0 R08: 0000000000000001 R09: fffff5200085eede [ 103.578728][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 1ffff9200085eeda [ 103.578741][ C0] R13: ffff888039e0a0c8 R14: ffff8880396ced88 R15: 0000000000000000 [ 103.578756][ C0] ? do_raw_spin_lock+0x128/0x260 [ 103.578782][ C0] ? do_raw_spin_lock+0x128/0x260 [ 103.578805][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 103.578828][ C0] ? __pfx___might_resched+0x10/0x10 [ 103.578850][ C0] dentry_kill+0x329/0xc20 [ 103.578879][ C0] shrink_dentry_list+0x1e8/0x310 [ 103.578916][ C0] ? __pfx_select_collect+0x10/0x10 [ 103.578941][ C0] shrink_dcache_tree+0x20e/0x410 [ 103.578969][ C0] ? __pfx_shrink_dcache_tree+0x10/0x10 [ 103.579003][ C0] ? d_invalidate+0xfd/0x290 [ 103.579023][ C0] d_invalidate+0x13a/0x290 [ 103.579040][ C0] ? __pfx_d_invalidate+0x10/0x10 [ 103.579061][ C0] lookup_fast+0x3f4/0x600 [ 103.579079][ C0] ? inode_permission+0x374/0x620 [ 103.579108][ C0] link_path_walk+0x7d4/0x1cc0 [ 103.579131][ C0] path_openat+0x1ac/0x2440 [ 103.579156][ C0] ? __pfx_path_openat+0x10/0x10 [ 103.579181][ C0] do_file_open+0x20e/0x430 [ 103.579205][ C0] ? __pfx_do_file_open+0x10/0x10 [ 103.579257][ C0] ? _raw_spin_unlock+0x28/0x50 [ 103.579278][ C0] ? alloc_fd+0x471/0x7a0 [ 103.579303][ C0] do_sys_openat2+0x10f/0x1e0 [ 103.579327][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 103.579351][ C0] ? ktime_get_ts64+0x306/0x420 [ 103.579377][ T63] usb 5-1: USB disconnect, device number 16 [ 103.579374][ C0] ? __x64_sys_recvmsg+0x1b9/0x260 [ 103.579395][ C0] __x64_sys_openat+0x12d/0x210 [ 103.579421][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 103.579448][ C0] do_syscall_64+0x123/0x790 [ 103.579470][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.579490][ C0] RIP: 0033:0x7fcf784a7407 [ 103.579505][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 103.579522][ C0] RSP: 002b:00007ffd27980940 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 103.579543][ C0] RAX: ffffffffffffffda RBX: 00007fcf78c3b880 RCX: 00007fcf784a7407 [ 103.579556][ C0] RDX: 0000000000080000 RSI: 00007ffd27980ac0 RDI: ffffffffffffff9c [ 103.579570][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 103.579583][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00005626baa597f5 [ 103.579596][ C0] R13: 00005626baa597f5 R14: 0000000000000001 R15: 0000000000000000 [ 103.579615][ C0] [ 103.579623][ C0] [ 103.579627][ C0] Allocated by task 8005: [ 103.579637][ C0] kasan_save_stack+0x30/0x50 [ 103.579656][ C0] kasan_save_track+0x14/0x30 [ 103.579674][ C0] __kasan_kmalloc+0xaa/0xb0 [ 103.579692][ C0] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 103.579717][ C0] usbtmc_open+0xa9/0x8f0 [ 103.579739][ C0] usb_open+0x189/0x220 [ 103.579786][ C0] chrdev_open+0x234/0x6a0 [ 103.579806][ C0] do_dentry_open+0x6ab/0x14d0 [ 103.579824][ C0] vfs_open+0x82/0x3f0 [ 103.579843][ C0] path_openat+0x19fa/0x2440 [ 103.579864][ C0] do_file_open+0x20e/0x430 [ 103.579883][ C0] do_sys_openat2+0x10f/0x1e0 [ 103.579910][ C0] __x64_sys_openat+0x12d/0x210 [ 103.579933][ C0] do_syscall_64+0x123/0x790 [ 103.579953][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.579971][ C0] [ 103.579976][ C0] Freed by task 8004: [ 103.579985][ C0] kasan_save_stack+0x30/0x50 [ 103.580003][ C0] kasan_save_track+0x14/0x30 [ 103.580020][ C0] kasan_save_free_info+0x3b/0x70 [ 103.580046][ C0] __kasan_slab_free+0x5f/0x80 [ 103.580064][ C0] kfree+0x22b/0x6d0 [ 103.580087][ C0] usbtmc_release+0x2a6/0x3d0 [ 103.580108][ C0] __fput+0x3ff/0xb50 [ 103.580128][ C0] task_work_run+0x150/0x240 [ 103.580154][ C0] exit_to_user_mode_loop+0x1d8/0x700 [ 103.580175][ C0] do_syscall_64+0x661/0x790 [ 103.580195][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.580215][ C0] [ 103.580220][ C0] The buggy address belongs to the object at ffff888059d44800 [ 103.580220][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 103.580236][ C0] The buggy address is located 132 bytes inside of [ 103.580236][ C0] freed 1024-byte region [ffff888059d44800, ffff888059d44c00) [ 103.580255][ C0] [ 103.580260][ C0] The buggy address belongs to the physical page: [ 103.580269][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59d40 [ 103.580288][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 103.580305][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 103.580322][ C0] page_type: f5(slab) [ 103.580341][ C0] raw: 00fff00000000040 ffff88801c042dc0 dead000000000100 dead000000000122 [ 103.580360][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 103.580379][ C0] head: 00fff00000000040 ffff88801c042dc0 dead000000000100 dead000000000122 [ 103.580397][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 103.580414][ C0] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 103.580432][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 103.580443][ C0] page dumped because: kasan: bad access detected [ 103.580452][ C0] page_owner tracks the page as allocated [ 103.580459][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13, tgid 13 (kworker/u32:1), ts 49470143037 [ 103.580491][ C0] post_alloc_hook+0xfd/0x120 [ 103.580516][ C0] get_page_from_freelist+0x110d/0x35d0 [ 103.580543][ C0] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 103.580572][ C0] new_slab+0xa9/0x6e0 [ 103.580597][ C0] refill_objects+0xe3/0x410 [ 103.580622][ C0] __pcs_replace_empty_main+0x35e/0x650 [ 103.580647][ C0] __kmalloc_noprof+0x67c/0x840 [ 103.580665][ C0] ___neigh_create+0x1532/0x2940 [ 103.580689][ C0] ip6_finish_output2+0x1052/0x1d50 [ 103.580709][ C0] __ip6_finish_output+0x357/0xdf0 [ 103.580727][ C0] ip6_output+0x2aa/0xa60 [ 103.580743][ C0] ndisc_send_skb+0xa85/0x1bf0 [ 103.580764][ C0] ndisc_send_ns+0xc6/0x140 [ 103.580784][ C0] addrconf_dad_work+0xca1/0x1360 [ 103.580805][ C0] process_one_work+0xac7/0x1b10 [ 103.580832][ C0] worker_thread+0x5ef/0xe50 [ 103.580858][ C0] page_owner free stack trace missing [ 103.580864][ C0] [ 103.580869][ C0] Memory state around the buggy address: [ 103.580879][ C0] ffff888059d44780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.580898][ C0] ffff888059d44800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.580912][ C0] >ffff888059d44880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.580923][ C0] ^ [ 103.580932][ C0] ffff888059d44900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.580946][ C0] ffff888059d44980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.580956][ C0] ================================================================== [ 103.580967][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 103.950189][ C0] CPU: 0 UID: 0 PID: 5143 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 103.952903][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.956121][ C0] Call Trace: [ 103.957452][ C0] [ 103.958569][ C0] dump_stack_lvl+0x100/0x190 [ 103.960561][ C0] vpanic+0x553/0x970 [ 103.961963][ C0] ? __pfx_vpanic+0x10/0x10 [ 103.963429][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 103.965033][ C0] ? do_raw_spin_lock+0x23a/0x260 [ 103.966622][ C0] panic+0xd1/0xe0 [ 103.967783][ C0] ? __pfx_panic+0x10/0x10 [ 103.969188][ C0] ? end_report.part.0+0x23/0x90 [ 103.970756][ C0] ? rcu_is_watching+0x13/0xc0 [ 103.972363][ C0] ? end_report.part.0+0x23/0x90 [ 103.974200][ C0] check_panic_on_warn.cold+0x19/0x34 [ 103.976214][ C0] end_report.part.0+0x3a/0x90 [ 103.978044][ C0] kasan_report.cold+0xe/0x18 [ 103.979634][ C0] ? do_raw_spin_lock+0x23a/0x260 [ 103.981222][ C0] do_raw_spin_lock+0x23a/0x260 [ 103.982754][ C0] ? __wake_up+0x1c/0x60 [ 103.984083][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 103.985713][ C0] ? kcov_remote_stop+0x27d/0x560 [ 103.987252][ C0] ? kcov_remote_stop+0x27d/0x560 [ 103.988826][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 103.990463][ C0] ? __wake_up+0x1c/0x60 [ 103.991934][ C0] __wake_up+0x1c/0x60 [ 103.993311][ C0] usb_anchor_resume_wakeups+0xc7/0xf0 [ 103.995245][ C0] __usb_hcd_giveback_urb+0x3d8/0x610 [ 103.997189][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 103.998974][ C0] dummy_timer+0xdb2/0x3700 [ 104.000603][ C0] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 104.002758][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 104.004817][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 104.006736][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 104.008289][ C0] ? mark_held_locks+0x40/0x70 [ 104.009759][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 104.011603][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 104.013167][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 104.014900][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 104.016772][ C0] handle_softirqs+0x1e6/0x9d0 [ 104.018659][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 104.020544][ C0] ? _raw_spin_unlock+0x28/0x50 [ 104.022154][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 104.023839][ C0] __irq_exit_rcu+0x194/0x210 [ 104.025255][ C0] irq_exit_rcu+0x9/0x30 [ 104.026572][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 104.028268][ C0] [ 104.029191][ C0] [ 104.030112][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 104.032051][ C0] RIP: 0010:do_raw_spin_lock+0x139/0x260 [ 104.033976][ C0] Code: 28 00 00 00 00 e8 77 9d 97 00 be 04 00 00 00 48 8d 7c 24 28 e8 68 9d 97 00 8b 44 24 28 ba 01 00 00 00 89 44 24 04 f0 0f b1 13 <0f> 85 93 00 00 00 48 89 ea 65 44 8b 35 7e 84 a4 12 48 b8 00 00 00 [ 104.040366][ C0] RSP: 0018:ffffc900042f76c8 EFLAGS: 00000246 [ 104.042221][ C0] RAX: 0000000000000000 RBX: ffff888039e0a0b8 RCX: ffffffff81e78b98 [ 104.044635][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc900042f76f0 [ 104.047216][ C0] RBP: ffff888039e0a0c0 R08: 0000000000000001 R09: fffff5200085eede [ 104.049785][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 1ffff9200085eeda [ 104.052527][ C0] R13: ffff888039e0a0c8 R14: ffff8880396ced88 R15: 0000000000000000 [ 104.055242][ C0] ? do_raw_spin_lock+0x128/0x260 [ 104.056815][ C0] ? do_raw_spin_lock+0x128/0x260 [ 104.058298][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 104.059928][ C0] ? __pfx___might_resched+0x10/0x10 [ 104.061544][ C0] dentry_kill+0x329/0xc20 [ 104.062973][ C0] shrink_dentry_list+0x1e8/0x310 [ 104.064604][ C0] ? __pfx_select_collect+0x10/0x10 [ 104.066303][ C0] shrink_dcache_tree+0x20e/0x410 [ 104.068145][ C0] ? __pfx_shrink_dcache_tree+0x10/0x10 [ 104.069934][ C0] ? d_invalidate+0xfd/0x290 [ 104.071462][ C0] d_invalidate+0x13a/0x290 [ 104.072928][ C0] ? __pfx_d_invalidate+0x10/0x10 [ 104.074514][ C0] lookup_fast+0x3f4/0x600 [ 104.075936][ C0] ? inode_permission+0x374/0x620 [ 104.077505][ C0] link_path_walk+0x7d4/0x1cc0 [ 104.079000][ C0] path_openat+0x1ac/0x2440 [ 104.080491][ C0] ? __pfx_path_openat+0x10/0x10 [ 104.082095][ C0] do_file_open+0x20e/0x430 [ 104.083576][ C0] ? __pfx_do_file_open+0x10/0x10 [ 104.085208][ C0] ? _raw_spin_unlock+0x28/0x50 [ 104.086718][ C0] ? alloc_fd+0x471/0x7a0 [ 104.088104][ C0] do_sys_openat2+0x10f/0x1e0 [ 104.089690][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 104.091409][ C0] ? ktime_get_ts64+0x306/0x420 [ 104.093036][ C0] ? __x64_sys_recvmsg+0x1b9/0x260 [ 104.094795][ C0] __x64_sys_openat+0x12d/0x210 [ 104.096442][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 104.098271][ C0] do_syscall_64+0x123/0x790 [ 104.099821][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.101714][ C0] RIP: 0033:0x7fcf784a7407 [ 104.103129][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 104.109007][ C0] RSP: 002b:00007ffd27980940 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 104.111793][ C0] RAX: ffffffffffffffda RBX: 00007fcf78c3b880 RCX: 00007fcf784a7407 [ 104.114942][ C0] RDX: 0000000000080000 RSI: 00007ffd27980ac0 RDI: ffffffffffffff9c [ 104.117679][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 104.120040][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00005626baa597f5 [ 104.122361][ C0] R13: 00005626baa597f5 R14: 0000000000000001 R15: 0000000000000000 [ 104.124696][ C0] [ 104.126585][ C0] Kernel Offset: disabled [ 104.127942][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:52:55 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b01965 RDI=ffffffff9bc65ca0 RBP=ffffffff9bc65c60 RSP=ffffc90000007280 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000064 R14=000000000000000b R15=ffffc90000007598 RIP=ffffffff85b0198f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fcf78c3b880 ffffffff 00c00000 GS =0000 ffff8880d5b5f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=0000000036849000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020100001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef32726be0 0000003000000010 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb45c1586 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcb45c1586 00007ffcb45c158c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef31835607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef31835647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef318357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef31835639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a732520656c6261 7462650064656c69 61662029736e7465 6e28736e74657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f56000540494744 514740004140494c 4443050c564b5140 4b0d564b51405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef319f25f8 00007fef319f25c8 00007fef319f2600 00007fef319f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 000000000000019c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=ffff888024e50000 RSI=ffffffff81ff68e7 RDI=ffff888024e50000 RBP=ffffc9000580fba8 RSP=ffffc9000580faa0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffc9000580fb20 R13=0000000000000003 R14=fffff52000b01f65 R15=0000000000000001 RIP=ffffffff81ff68ed RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555580cbe500 ffffffff 00c00000 GS =0000 ffff8880d5c5f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055eaf4c69000 CR3=000000003db80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000348 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65776f6c2f2e01ff ffffffffffffffef 0800030e00000171 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0808800307fe1000 03800401c7080006 0144b400746e6d2f 2e01ffffffffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffff30803800307 fe100002800401c7 0800060144b4006b 726f772f2e01ffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffffff108 02800307fe100001 800401c708000601 44b4007265707075 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e01ffffffffff ffffffef08018003 07fe1000000401c7 0800060144b40072 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffbf08098003 0008004080821000 0410000600749e0c c080988010000201 ZMM25=67602d8367602d83 67602d8367602d83 67602d8367602d83 67602d8367602d83 67602d8367602d83 67602d8367602d83 67602d8367602d83 67602d8367602d83 ZMM26=aec558ddaec558dd aec558ddaec558dd aec558ddaec558dd aec558ddaec558dd aec558ddaec558dd aec558ddaec558dd aec558ddaec558dd aec558ddaec558dd ZMM27=d4313dbfd4313dbf d4313dbfd4313dbf d4313dbfd4313dbf d4313dbfd4313dbf d4313dbfd4313dbf d4313dbfd4313dbf d4313dbfd4313dbf d4313dbfd4313dbf ZMM28=000001300000012f 0000012e0000012d 0000012c0000012b 0000012a00000129 0000012800000127 0000012600000125 0000012400000123 0000012200000121 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5909000059090000 5909000059090000 5909000059090000 5909000059090000 5909000059090000 5909000059090000 5909000059090000 5909000059090000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff88801f69b158 RCX=0000000000000000 RDX=0000000000000000 RSI=ffff88801f69b130 RDI=ffff88806a63bf60 RBP=0000000000000040 RSP=ffffc90000658b98 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000001 R12=ffff88801f69a580 R13=0000000000000000 R14=0000000000000000 R15=ffff88806a63bf60 RIP=ffffffff81e71554 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d5f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b3330fff8 CR3=0000000027d9e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd172b5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd25cfa76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd25cfa76 00007ffcd25cfa7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd171e35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd171e35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd171e357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd171e35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd171ff2600 00007fd171ff25e0 00007fd171ff25e8 00007fd171ff2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd171ff25f8 00007fd171ff25c8 00007fd171ff2600 00007fd171ff25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff981c0058 RBX=0000000000000296 RCX=000000000000029b RDX=ffffffff96917918 RSI=000000000000029b RDI=ffffffff9815dcd8 RBP=0000000000000030 RSP=ffffc90000b0f078 R8 =ffffffff96917948 R9 =0000000000000006 R10=ffffc90000b0f208 R11=0000000000000001 R12=ffffffff81e6aa20 R13=ffffc90000b0f120 R14=ffffffff81e6b3d0 R15=ffffffff9815dcd8 RIP=ffffffff81e6be97 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e5f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b33015ff8 CR3=00000000246e9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000fefffffb Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdce430acb 00007ffdce430acb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdce430fd0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdce430fd0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4e5f5046475f5f 7c4e5241574f4e5f 5046475f5f7c4349 4d4f54415f504647 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3733303334313037 343934207374202c 29313a3233752f72 656b726f776b2820 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3331206469677420 2c33312064697020 2c29434f4c4c414d 454d4f4e5f504647 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f5f7c504d4f435f 5046475f5f7c5952 5445524f4e5f5046 475f5f7c4e524157 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4e5f5046475f5f 7c43494d4f54415f 5046472830323832 647830206b73616d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6920226573756622 3d76656420223065 6c69662f3936312f 223d687461702022 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000