last executing test programs: 10.709188288s ago: executing program 2 (id=953): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="00b2985d3a7ab0", 0x7}], 0x1}, 0x4) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x5}}, 0x1c}}, 0x40c1) 10.654961668s ago: executing program 2 (id=954): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001340)=ANY=[@ANYBLOB="5c0100001000010000000000fdfffffffe8800000000000000000000000000010000000000000000000000000000000000000000000004000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000a0000008a000000000000001c0017000000000000000000ffffffff00000000ffffffff0400000048000100736861323536"], 0x15c}}, 0x0) 10.654481172s ago: executing program 2 (id=955): syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008100000282b0000000000000000000000ffffac1414bbfe8000000000000000000000000500aa3a020201"], 0x0) 10.578349802s ago: executing program 2 (id=956): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x4}, [@ldst={0x2, 0x3, 0x3, 0x8, 0xa, 0xfffffffffffffffe, 0x1}]}, &(0x7f00000005c0)='GPL\x00'}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x20, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x18, 0x0, @wg=@data={0x4, 0xc}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x18) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='7', 0x1) listen(r3, 0x2) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11058c2, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000005c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, r5, 0x0, 0x0, 0x0, 0x40002022}) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000002c0)=""/126, &(0x7f0000000440)=0x7e) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x35, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000020000000001002742420300"/49], 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200000, &(0x7f0000000640)={[{@redirect_dir_follow}, {@redirect_dir_follow}, {@redirect_dir_off}], [{@fsuuid={'fsuuid', 0x3d, {[0x31, 0x61, 0x62, 0x65, 0x34, 0x37, 0x62, 0x61], 0x2d, [0x30, 0x61, 0x39, 0x61], 0x2d, [0x64, 0x66, 0x61, 0x35], 0x2d, [0x419f9ed304a5e9ba, 0x63, 0x61, 0x61], 0x2d, [0x31, 0x36, 0x36, 0x63, 0x33, 0x36, 0x37, 0x63]}}}, {@smackfsdef={'smackfsdef', 0x3d, '}]^'}}, {@measure}]}) 10.451264296s ago: executing program 2 (id=957): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f000023c000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000100), 0x12) listen(r1, 0x1) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) setns(0xc9, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) (async) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f000023c000/0x4000)=nil, 0x4000}}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) bind$x25(r1, &(0x7f0000000100), 0x12) (async) listen(r1, 0x1) (async) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) close(0x3) (async) 10.184621251s ago: executing program 2 (id=958): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 10.09837854s ago: executing program 32 (id=958): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 6.337718254s ago: executing program 3 (id=1019): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r0, &(0x7f0000000280)='0', 0x1) r1 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x38000000) 6.273916835s ago: executing program 3 (id=1020): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0x4, 0x8, 0xfe, 0xfffffffe, 0x80000000, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x7, 0x9, 0xffff2d37, 0xff, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xfeffffff, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c70, 0x80000000, 0x242, 0x8, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x6, 0x7, 0x5, 0x3e, 0x8f, 0x8, 0x6, 0x0, 0x7, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x4, 0x4, 0x0, 0xfffffffa], [0x1000, 0x9, 0x8000012f, 0x8004, 0x5, 0x5, 0x129432e7, 0x46, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x0, 0x7, 0xc2bf, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x3d, 0x1000005, 0x5bea93c7, 0xd, 0x4de, 0x0, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x9, 0x389, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c9368d, 0x80, 0x3], [0x4, 0xc08, 0x4, 0x5, 0xfffffffd, 0xd, 0x31b, 0x9, 0x5, 0x7fff, 0x9, 0x6, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xe, 0x5, 0x0, 0x2, 0xda6, 0xc, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x80, 0x7, 0x4, 0x2950bfb1, 0x1000, 0x400000a2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x8, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x9, 0x3, 0x0, 0x10000, 0x104, 0x37f3, 0xffff, 0xa622, 0x1, 0x5, 0x1, 0xffffffff, 0x14f, 0x4, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x4, 0x4, 0x4c7, 0x1, 0xfffff000, 0x7, 0x5, 0x7e, 0x100, 0x3173, 0x40000047, 0xb2, 0x8, 0x6, 0x10, 0x5, 0x5, 0x8, 0x30b1d693, 0x4008a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0x0, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) 4.519863227s ago: executing program 4 (id=1081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008f00540000000020900020073797a310000000008000a"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) 4.445275284s ago: executing program 4 (id=1083): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a000f0076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 4.381703893s ago: executing program 4 (id=1084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a010800000000000000000700ffff0900010073797a300000000040000000030a01040000000000000000050000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240ffffff3864000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000003800048034000180090001006d65746100000000240002800800014000000001080002400000001108"], 0xec}}, 0x0) 4.381457635s ago: executing program 4 (id=1085): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xbffffe, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, 0x0, 0x0, 0x702c71ba5eecaaed}, 0x15) fcntl$getown(r0, 0x9) r2 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0xff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r8 = socket$netlink(0x10, 0x3, 0x0) splice(r7, 0x0, r8, 0x0, 0x10d00, 0xf) ioctl$CDROM_GET_CAPABILITY(r7, 0x5331) r9 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="856b934629faaaaaaaaaaaaa86dd60381f3400142f00fc000000000000000000000000000000ff020000000000000000000000000001042081000030c25817000800000086dd88a888be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.504472227s ago: executing program 4 (id=1094): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000004500), 0xc00, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r4 = dup(r0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x30) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x34000) setns(0xc9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r6, @ANYBLOB="c9472bbd7000fbdbdf2415000000180001801400020073797a6b616c6c6572310000000000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e645f736c6176655f30000000008cfd020073797a6b616c6c657230000000000000140002006e69637666300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="5800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000014000200776c616e300000000000000000000000080003e76693001f08000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0xdc}, 0x1, 0x0, 0x0, 0x4048084}, 0x0) 3.042093472s ago: executing program 3 (id=1105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x3fff, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6fbc}]}}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x104}}, 0x0) 2.820855597s ago: executing program 3 (id=1110): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @broadcast=0xac1414bb, {[@timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x5, [{@local}, {@loopback, 0xe0000000}, {@local}, {@dev, 0xfffffffe}, {@dev}, {@broadcast}]}, @cipso={0x86, 0xa, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}]}}}}}}}, 0x0) 2.820688994s ago: executing program 3 (id=1111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a34000000020a010800000000000000000a0000080900010073797a31000000000c000240000000000000000c080005400200000014000000110001009b45934ef2182b1dcf70c6f0a44e58773374fd0bc8f40ac1c1d52c543b6968fdd59395a32a"], 0x5c}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) 2.767944021s ago: executing program 3 (id=1112): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x2, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close_range(r2, 0xffffffffffffffff, 0x400000000000000) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) (async) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) close(0x3) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f00000000c0)) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f00000000c0)) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) (async) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @multicast}, 0x10) (async) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x20, 0x5, 0x2, @local, @rand_addr=' \x01\x00', 0x1, 0x7, 0x8236, 0x1}}) getpeername$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x27, 0x3, 0x7, 0x81, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x20, 0x20, 0xffff, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newqdisc={0x50, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x50}}, 0x10) syz_clone3(&(0x7f0000000480)={0x3200000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff], 0x1}, 0x58) munlockall() (async) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2.586451426s ago: executing program 4 (id=1114): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0x4, 0x8, 0xfe, 0xfffffffe, 0x80000000, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x7, 0x9, 0xffff2d37, 0xff, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xfeffffff, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c70, 0x80000000, 0x242, 0x8, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x6, 0x7, 0x5, 0x3e, 0x8f, 0x8, 0x6, 0x0, 0x7, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x4, 0x4, 0x0, 0xfffffffa], [0x1000, 0x9, 0x8000012f, 0x8004, 0x5, 0x5, 0x129432e7, 0x46, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x0, 0x7, 0xc2bf, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x3d, 0x1000005, 0x5bea93c7, 0xd, 0x4de, 0x0, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x9, 0x389, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c9368d, 0x80, 0x3], [0x4, 0xc08, 0x4, 0x5, 0xfffffffd, 0xd, 0x31b, 0x9, 0x5, 0x7fff, 0x9, 0x6, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xe, 0x5, 0x0, 0x2, 0xda6, 0xc, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x80, 0x7, 0x4, 0x2950bfb1, 0x1000, 0x400000a2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x8, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x9, 0x3, 0x0, 0x10000, 0x104, 0x37f3, 0xffff, 0xa622, 0x1, 0x5, 0x1, 0xffffffff, 0x14f, 0x4, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x4, 0x4, 0x4c7, 0x1, 0xfffff000, 0x7, 0x5, 0x7e, 0x100, 0x3173, 0x40000047, 0xb2, 0x8, 0x6, 0x10, 0x5, 0x5, 0x8, 0x30b1d693, 0x4008a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0x0, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) 759.063024ms ago: executing program 0 (id=1133): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000007000000040000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0200000001"], 0x48) 758.955338ms ago: executing program 0 (id=1134): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r0, 0x80000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000028c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}}) 684.268394ms ago: executing program 0 (id=1135): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371cfffe0069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 629.940904ms ago: executing program 0 (id=1137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="200000000a0a010100000000000000000a0000090900010073797a3180004000"], 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') close(0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) write$FUSE_NOTIFY_RESEND(r3, &(0x7f00000000c0)={0x14}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc6, &(0x7f0000000180)=""/198, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3}, 0x94) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f00000000c0)=""/62, 0x3e}], 0x2, 0x8, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'syz_tun\x00', 0x2000}) 565.296031ms ago: executing program 0 (id=1138): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000020", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 488.599642ms ago: executing program 0 (id=1140): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) name_to_handle_at(r0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x400) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2000000000d2a0040000000000000000010000030900010073797a30000000002c000000010001010000000000000000010000000900010073797a30000000000900030073797a14000000004c0000fc060a010400000000000000000100000808000b400000000024000480200001800d00010073796e70726f7879000000000c00028008000340000000042b00010073797a30000000001400000011000100000000000800000000000000"], 0xc0}}, 0x4000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2000000000d2a0040000000000000000010000030900010073797a30000000002c000000010001010000000000000000010000000900010073797a30000000000900030073797a14000000004c0000fc060a010400000000000000000100000808000b400000000024000480200001800d00010073796e70726f7879000000000c00028008000340000000042b00010073797a30000000001400000011000100000000000800000000000000"], 0xc0}}, 0x4000) 488.55684ms ago: executing program 1 (id=1141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008f50540000000020900020073797a310000000008000a"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) 404.700511ms ago: executing program 1 (id=1142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00420076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 404.501123ms ago: executing program 1 (id=1143): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="360fc3330f2172f2f775c9f00fb3050fc7b50000b8de000f00d80f48e5660f3a4154520064660ff63ef2b2660fea4e03", 0x30}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) lsm_get_self_attr(0x67, &(0x7f0000000000)={0x0, 0x0, 0x7f, 0x5f, ""/95}, &(0x7f00000000c0)=0x7f, 0x1) (async) lsm_get_self_attr(0x67, &(0x7f0000000000)={0x0, 0x0, 0x7f, 0x5f, ""/95}, &(0x7f00000000c0)=0x7f, 0x1) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) (async) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_nanosleep(0xb, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) (async) clock_nanosleep(0xb, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000900)="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", 0x10d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) 171.069244ms ago: executing program 1 (id=1144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a010800000000000000000700ffff0900010073797a300000000040000000030a01040000000000110000070000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240ffffff3864000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000003800048034000180090001006d65746100000000240002800800014000000001080002400000001108"], 0xec}}, 0x0) 170.789445ms ago: executing program 1 (id=1145): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000000000000000000000015", @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e6400000000140002800500010006000000080002"], 0x44}}, 0x40) 0s ago: executing program 1 (id=1146): r0 = socket$inet(0x2, 0x4, 0x1) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x15, 0x5, 0x9, 0xf, 0x7, 0x5]}, &(0x7f0000000100)=0x78) r1 = syz_open_dev$vim2m(&(0x7f0000000440), 0x2000000f5, 0x2) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r2, 0xc0045103, &(0x7f0000000400)=0x10009) memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)="d3", 0x63}], 0x1) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000500)={0x9, 0xc, 0x0, 0x0, 0xfe}) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000480), 0xa002, 0x0) ioctl$CDROM_SET_OPTIONS(r5, 0x5320, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x701101, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r6, 0x3305) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)='8', 0x1}], 0x1) ioctl$VIDIOC_REQBUFS(r4, 0xc0585609, &(0x7f0000000280)={0x0, 0x3cc4e46c0762fa4b, 0x2}) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) getsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f0000000380), &(0x7f0000000540)=0x4) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000f00)={0xf0f003, 0x5}) gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x1f, 0x2, @thr={&(0x7f0000000580)="e4995c8f12f32ed7d3313b", &(0x7f0000000600)="34bea38afb"}}, &(0x7f0000000140)=0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): 66.669821][ T6801] loop5: detected capacity change from 0 to 7 [ 66.671732][ T6801] Dev loop5: unable to read RDB block 7 [ 66.671748][ T6801] loop5: AHDI p1 [ 66.671758][ T6801] loop5: partition table partially beyond EOD, truncated [ 66.756216][ T58] usb 6-1: device descriptor read/64, error -71 [ 67.023427][ T58] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 67.162398][ T58] usb 6-1: device descriptor read/64, error -71 [ 67.280179][ T58] usb usb6-port1: attempt power cycle [ 67.411289][ T6813] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 67.411316][ T6813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.664819][ T58] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 67.697140][ T58] usb 6-1: device descriptor read/8, error -71 [ 67.953454][ T58] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 67.975048][ T58] usb 6-1: device descriptor read/8, error -71 [ 68.094217][ T58] usb usb6-port1: unable to enumerate USB device [ 68.275572][ T6832] __nla_validate_parse: 5 callbacks suppressed [ 68.275616][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 68.285198][ T6832] 8021q: adding VLAN 0 to HW filter on device bond5 [ 68.335656][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.348'. [ 68.401833][ T6837] netlink: 'syz.2.347': attribute type 4 has an invalid length. [ 68.446556][ T6835] netlink: 'syz.2.347': attribute type 4 has an invalid length. [ 68.446627][ T6837] netlink: 'syz.2.347': attribute type 4 has an invalid length. [ 68.500285][ T6846] xt_hashlimit: size too large, truncated to 1048576 [ 68.560313][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.566535][ T6848] bridge_slave_0 (unregistering): left allmulticast mode [ 68.566557][ T6848] bridge_slave_0 (unregistering): left promiscuous mode [ 68.567466][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.650924][ T6850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.352'. [ 68.682767][ T6850] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6850 comm=syz.2.352 [ 68.759504][ T6855] jffs2: notice: (6855) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 69.033976][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.359'. [ 69.089334][ T6871] netlink: 16 bytes leftover after parsing attributes in process `syz.3.360'. [ 69.254270][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 69.295458][ T6882] jffs2: notice: (6882) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 69.460572][ T6893] openvswitch: netlink: Duplicate or invalid key (type 0). [ 69.812295][ T6910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.374'. [ 69.854646][ T6912] bond1: (slave dummy0): Device is not bonding slave [ 69.854664][ T6912] bond1: option active_slave: invalid value (dummy0) [ 69.856533][ T6912] bond1 (unregistering): Released all slaves [ 69.875637][ T6915] xt_IDLETIMER: timeout value is too big [ 69.895596][ T5734] bridge0: entered promiscuous mode [ 69.908260][ T43] kauditd_printk_skb: 6900 callbacks suppressed [ 69.908273][ T43] audit: type=1400 audit(1789919479.832:7300): avc: denied { mounton } for pid=6914 comm="syz.1.376" path="/pipefs" dev="ramfs" ino=14211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 69.910396][ T6917] ======================================================= [ 69.910396][ T6917] WARNING: The mand mount option has been deprecated and [ 69.910396][ T6917] and is ignored by this kernel. Remove the mand [ 69.910396][ T6917] option from the mount to silence this warning. [ 69.910396][ T6917] ======================================================= [ 69.936169][ T6917] overlay: ./file0 is not a directory [ 69.959735][ T6922] netlink: 'syz.2.379': attribute type 2 has an invalid length. [ 69.978422][ T6924] fuse: Unknown parameter 'fd0x0000000000000004' [ 70.060122][ T6932] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20001 [ 70.064641][ T43] audit: type=1400 audit(1789919479.982:7301): avc: denied { append } for pid=6931 comm="syz.2.384" name="uprobe_events" dev="tracefs" ino=1034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 70.066153][ T43] audit: type=1400 audit(1789919479.982:7302): avc: denied { create } for pid=6931 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.066706][ T43] audit: type=1400 audit(1789919479.982:7303): avc: denied { bind } for pid=6931 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.068263][ T43] audit: type=1400 audit(1789919479.982:7304): avc: denied { listen } for pid=6931 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.142796][ T6935] netlink: 100 bytes leftover after parsing attributes in process `syz.1.385'. [ 70.225485][ T6939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.387'. [ 70.235034][ T6937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.386'. [ 70.238754][ T6937] binder: 6936:6937 ioctl c018620b 0 returned -14 [ 70.299661][ T6947] syzkaller0: entered promiscuous mode [ 70.299674][ T6947] syzkaller0: entered allmulticast mode [ 70.328108][ T43] audit: type=1400 audit(1789919480.225:7305): avc: denied { setopt } for pid=6955 comm="syz.1.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.330887][ T43] audit: type=1400 audit(1789919480.225:7306): avc: denied { accept } for pid=6955 comm="syz.1.392" lport=36528 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.331232][ T43] audit: type=1400 audit(1789919480.225:7307): avc: denied { getopt } for pid=6955 comm="syz.1.392" lport=36528 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 70.331695][ T43] audit: type=1400 audit(1789919480.225:7308): avc: denied { read } for pid=6955 comm="syz.1.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.400063][ T43] audit: type=1400 audit(1789919480.290:7309): avc: denied { write } for pid=6955 comm="syz.1.392" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 70.537729][ T6968] openvswitch: netlink: Duplicate or invalid key (type 0). [ 70.643874][ T6980] 9p: Could not find request transport: virtao [ 70.717666][ T6989] 8021q: adding VLAN 0 to HW filter on device bond4 [ 71.168142][ T7020] input: syz1 as /devices/virtual/input/input9 [ 71.273428][ T7020] overlayfs: statfs failed on './file0' [ 71.403530][ T7037] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 71.472527][ T7037] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 71.472848][ T7037] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 71.472964][ T7037] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 71.473098][ T7037] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 71.473153][ T7037] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 71.473204][ T7037] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 71.473314][ T7037] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 71.473448][ T7037] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 71.473498][ T7037] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 71.525525][ T7041] bond6: entered allmulticast mode [ 71.662860][ T7058] No such timeout policy "syz1" [ 71.680600][ T7058] openvswitch: netlink: Invalid VLAN frame [ 71.868505][ T7080] openvswitch: netlink: Duplicate or invalid key (type 0). [ 71.879774][ T7081] xt_hashlimit: size too large, truncated to 1048576 [ 71.879895][ T7081] xt_hashlimit: max too large, truncated to 1048576 [ 71.879924][ T7081] xt_hashlimit: Unknown mode mask 52C95688, kernel too old? [ 71.898322][ T7083] fuse: Bad value for 'fd' [ 71.898476][ T7083] scsi_strcpy_devinfo: vendor string 'Mꇋ8KH,P}/(a&WCa8(Au6c1كX3UPK5R X7R.]O\kekөopґ 0[{q6?Uq9mߣ7``I3ŵ' is too long [ 71.991313][ T7096] random: crng reseeded on system resumption [ 72.213874][ T7107] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.213893][ T7107] IPv6: NLM_F_CREATE should be set when creating new route [ 72.330133][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.330196][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.336246][ T2124] cfg80211: failed to load regulatory.db [ 72.363415][ T7114] loop5: detected capacity change from 0 to 7 [ 72.365854][ T7114] Dev loop5: unable to read RDB block 7 [ 72.365871][ T7114] loop5: AHDI p1 [ 72.365880][ T7114] loop5: partition table partially beyond EOD, truncated [ 72.437736][ T7119] comedi: valid board names for 8255 driver are: [ 72.437745][ T7119] 8255 [ 72.437749][ T7119] comedi: valid board names for vmk80xx driver are: [ 72.437753][ T7119] vmk80xx [ 72.437757][ T7119] comedi: valid board names for usbduxsigma driver are: [ 72.437761][ T7119] usbduxsigma [ 72.437764][ T7119] comedi: valid board names for usbduxfast driver are: [ 72.437774][ T7119] usbduxfast [ 72.437778][ T7119] comedi: valid board names for usbdux driver are: [ 72.437782][ T7119] usbdux [ 72.437786][ T7119] comedi: valid board names for ni6501 driver are: [ 72.437791][ T7119] ni6501 [ 72.437795][ T7119] comedi: valid board names for dt9812 driver are: [ 72.437799][ T7119] dt9812 [ 72.437803][ T7119] comedi: valid board names for ni_labpc_cs driver are: [ 72.437807][ T7119] ni_labpc_cs [ 72.437812][ T7119] comedi: valid board names for ni_daq_700 driver are: [ 72.437816][ T7119] ni_daq_700 [ 72.437820][ T7119] comedi: valid board names for labpc_pci driver are: [ 72.437824][ T7119] labpc_pci [ 72.437828][ T7119] comedi: valid board names for adl_pci9118 driver are: [ 72.437832][ T7119] pci9118dg [ 72.437836][ T7119] pci9118hg [ 72.437839][ T7119] pci9118hr [ 72.437844][ T7119] comedi: valid board names for 8255_pci driver are: [ 72.437848][ T7119] 8255_pci [ 72.437852][ T7119] comedi: valid board names for s526 driver are: [ 72.437856][ T7119] s526 [ 72.437860][ T7119] comedi: valid board names for multiq3 driver are: [ 72.437864][ T7119] multiq3 [ 72.437868][ T7119] comedi: valid board names for pcmuio driver are: [ 72.437872][ T7119] pcmuio48 [ 72.437876][ T7119] pcmuio96 [ 72.437880][ T7119] comedi: valid board names for pcmmio driver are: [ 72.437884][ T7119] pcmmio [ 72.437888][ T7119] comedi: valid board names for pcmda12 driver are: [ 72.437892][ T7119] pcmda12 [ 72.437896][ T7119] comedi: valid board names for pcmad driver are: [ 72.437900][ T7119] pcmad12 [ 72.437904][ T7119] pcmad16 [ 72.437908][ T7119] comedi: valid board names for ni_labpc driver are: [ 72.437912][ T7119] lab-pc-1200 [ 72.437916][ T7119] lab-pc-1200ai [ 72.437920][ T7119] lab-pc+ [ 72.437924][ T7119] comedi: valid board names for atmio16 driver are: [ 72.437929][ T7119] atmio16 [ 72.437933][ T7119] atmio16d [ 72.437936][ T7119] comedi: valid board names for ni_at_ao driver are: [ 72.437941][ T7119] at-ao-6 [ 72.437945][ T7119] at-ao-10 [ 72.437948][ T7119] comedi: valid board names for ni_at_a2150 driver are: [ 72.437954][ T7119] ni_at_a2150 [ 72.437957][ T7119] comedi: valid board names for adq12b driver are: [ 72.437962][ T7119] adq12b [ 72.437965][ T7119] comedi: valid board names for mpc624 driver are: [ 72.437970][ T7119] mpc624 [ 72.437973][ T7119] comedi: valid board names for c6xdigio driver are: [ 72.437978][ T7119] c6xdigio [ 72.437982][ T7119] comedi: valid board names for aio_iiro_16 driver are: [ 72.437987][ T7119] aio_iiro_16 [ 72.437991][ T7119] comedi: valid board names for aio_aio12_8 driver are: [ 72.437995][ T7119] aio_aio12_8 [ 72.437999][ T7119] aio_ai12_8 [ 72.438003][ T7119] aio_ao12_4 [ 72.438007][ T7119] comedi: valid board names for fl512 driver are: [ 72.438012][ T7119] fl512 [ 72.438015][ T7119] comedi: valid board names for dmm32at driver are: [ 72.438020][ T7119] dmm32at [ 72.438024][ T7119] comedi: valid board names for dt282x driver are: [ 72.438028][ T7119] dt2821 [ 72.438032][ T7119] dt2821-f [ 72.438036][ T7119] dt2821-g [ 72.438039][ T7119] dt2823 [ 72.438042][ T7119] dt2824-pgh [ 72.438046][ T7119] dt2824-pgl [ 72.438049][ T7119] dt2825 [ 72.438052][ T7119] dt2827 [ 72.438056][ T7119] dt2828 [ 72.438059][ T7119] dt2829 [ 72.438062][ T7119] dt21-ez [ 72.438065][ T7119] dt23-ez [ 72.438068][ T7119] dt24-ez [ 72.438071][ T7119] dt24-ez-pgl [ 72.438075][ T7119] comedi: valid board names for dt2817 driver are: [ 72.438079][ T7119] dt2817 [ 72.438082][ T7119] comedi: valid board names for dt2815 driver are: [ 72.438086][ T7119] dt2815 [ 72.438090][ T7119] comedi: valid board names for dt2814 driver are: [ 72.438094][ T7119] dt2814 [ 72.438097][ T7119] comedi: valid board names for dt2811 driver are: [ 72.438101][ T7119] dt2811-pgh [ 72.438104][ T7119] dt2811-pgl [ 72.438108][ T7119] comedi: valid board names for dt2801 driver are: [ 72.438112][ T7119] dt2801 [ 72.438115][ T7119] comedi: valid board names for das6402 driver are: [ 72.438119][ T7119] das6402-12 [ 72.438123][ T7119] das6402-16 [ 72.438126][ T7119] comedi: valid board names for das1800 driver are: [ 72.438130][ T7119] das-1701st [ 72.438133][ T7119] das-1701st-da [ 72.438137][ T7119] das-1702st [ 72.438140][ T7119] das-1702st-da [ 72.438144][ T7119] das-1702hr [ 72.438147][ T7119] das-1702hr-da [ 72.438150][ T7119] das-1701ao [ 72.438153][ T7119] das-1702ao [ 72.438157][ T7119] das-1801st [ 72.438160][ T7119] das-1801st-da [ 72.438163][ T7119] das-1802st [ 72.438167][ T7119] das-1802st-da [ 72.438170][ T7119] das-1802hr [ 72.438173][ T7119] das-1802hr-da [ 72.438177][ T7119] das-1801hc [ 72.438180][ T7119] das-1802hc [ 72.438183][ T7119] das-1801ao [ 72.438186][ T7119] das-1802ao [ 72.438190][ T7119] comedi: valid board names for das800 driver are: [ 72.438194][ T7119] das-800 [ 72.438197][ T7119] cio-das800 [ 72.438201][ T7119] das-801 [ 72.438204][ T7119] cio-das801 [ 72.438207][ T7119] das-802 [ 72.438211][ T7119] cio-das802 [ 72.438214][ T7119] cio-das802/16 [ 72.438217][ T7119] comedi: valid board names for isa-das08 driver are: [ 72.438221][ T7119] isa-das08 [ 72.438225][ T7119] das08-pgm [ 72.438228][ T7119] das08-pgh [ 72.438231][ T7119] das08-pgl [ 72.438234][ T7119] das08-aoh [ 72.438238][ T7119] das08-aol [ 72.438241][ T7119] das08-aom [ 72.438244][ T7119] das08/jr-ao [ 72.438247][ T7119] das08jr-16-ao [ 72.438251][ T7119] pc104-das08 [ 72.438254][ T7119] das08jr/16 [ 72.438258][ T7119] comedi: valid board names for das16m1 driver are: [ 72.438262][ T7119] das16m1 [ 72.438265][ T7119] comedi: valid board names for dac02 driver are: [ 72.438270][ T7119] dac02 [ 72.438275][ T7119] comedi: valid board names for rti802 driver are: [ 72.438279][ T7119] rti802 [ 72.438282][ T7119] comedi: valid board names for rti800 driver are: [ 72.438286][ T7119] rti800 [ 72.438289][ T7119] rti815 [ 72.438293][ T7119] comedi: valid board names for pcm3724 driver are: [ 72.438297][ T7119] pcm3724 [ 72.438300][ T7119] comedi: valid board names for pcl818 driver are: [ 72.438304][ T7119] pcl818l [ 72.438307][ T7119] pcl818h [ 72.438310][ T7119] pcl818hd [ 72.438314][ T7119] pcl818hg [ 72.438317][ T7119] pcl818 [ 72.438320][ T7119] pcl718 [ 72.438323][ T7119] pcm3718 [ 72.438327][ T7119] comedi: valid board names for pcl816 driver are: [ 72.438331][ T7119] pcl816 [ 72.438334][ T7119] pcl814b [ 72.438337][ T7119] comedi: valid board names for pcl812 driver are: [ 72.438341][ T7119] pcl812 [ 72.438345][ T7119] pcl812pg [ 72.438350][ T7119] acl8112pg [ 72.438355][ T7119] acl8112dg [ 72.438360][ T7119] acl8112hg [ 72.438364][ T7119] a821pgl [ 72.438369][ T7119] a821pglnda [ 72.438374][ T7119] a821pgh [ 72.438378][ T7119] a822pgl [ 72.438383][ T7119] a822pgh [ 72.438387][ T7119] a823pgl [ 72.438393][ T7119] a823pgh [ 72.438397][ T7119] pcl813 [ 72.438403][ T7119] pcl813b [ 72.438410][ T7119] acl8113 [ 72.438415][ T7119] iso813 [ 72.438420][ T7119] acl8216 [ 72.438425][ T7119] a826pg [ 72.438432][ T7119] comedi: valid board names for pcl730 driver are: [ 72.438439][ T7119] pcl730 [ 72.438444][ T7119] iso730 [ 72.438451][ T7119] acl7130 [ 72.438456][ T7119] pcm3730 [ 72.438461][ T7119] pcl725 [ 72.438467][ T7119] p8r8dio [ 72.438473][ T7119] acl7225b [ 72.438479][ T7119] p16r16dio [ 72.438484][ T7119] pcl733 [ 72.438488][ T7119] pcl734 [ 72.438493][ T7119] opmm-1616-xt [ 72.438497][ T7119] pearl-mm-p [ 72.438501][ T7119] ir104-pbf [ 72.438504][ T7119] comedi: valid board names for pcl726 driver are: [ 72.438508][ T7119] pcl726 [ 72.438512][ T7119] pcl727 [ 72.438515][ T7119] pcl728 [ 72.438518][ T7119] acl6126 [ 72.438521][ T7119] acl6128 [ 72.438525][ T7119] comedi: valid board names for pcl724 driver are: [ 72.438529][ T7119] pcl724 [ 72.438532][ T7119] pcl722 [ 72.438535][ T7119] pcl731 [ 72.438538][ T7119] acl7122 [ 72.438541][ T7119] acl7124 [ 72.438544][ T7119] pet48dio [ 72.438548][ T7119] pcmio48 [ 72.438551][ T7119] onyx-mm-dio [ 72.438555][ T7119] comedi: valid board names for pcl711 driver are: [ 72.438559][ T7119] pcl711 [ 72.438562][ T7119] pcl711b [ 72.438566][ T7119] acl8112hg [ 72.438569][ T7119] acl8112dg [ 72.438572][ T7119] comedi: valid board names for amplc_pc263 driver are: [ 72.438576][ T7119] pc263 [ 72.438580][ T7119] comedi: valid board names for amplc_pc236 driver are: [ 72.438584][ T7119] pc36at [ 72.438587][ T7119] comedi: valid board names for amplc_dio200 driver are: [ 72.438591][ T7119] pc212e [ 72.438594][ T7119] pc214e [ 72.438597][ T7119] pc215e [ 72.438601][ T7119] pc218e [ 72.438604][ T7119] pc272e [ 72.438607][ T7119] comedi: valid board names for comedi_parport driver are: [ 72.438611][ T7119] comedi_parport [ 72.438615][ T7119] comedi: valid board names for comedi_test driver are: [ 72.438619][ T7119] comedi_test [ 72.438623][ T7119] comedi: valid board names for comedi_bond driver are: [ 72.438627][ T7119] comedi_bond [ 72.875173][ T7144] syzkaller0: entered promiscuous mode [ 72.875197][ T7144] syzkaller0: entered allmulticast mode [ 73.134686][ T7155] netlink: 'syz.1.470': attribute type 1 has an invalid length. [ 73.944427][ T7156] 8021q: adding VLAN 0 to HW filter on device bond4 [ 73.946149][ T7156] bond3: (slave bond4): making interface the new active one [ 73.946650][ T7156] bond3: (slave bond4): Enslaving as an active interface with an up link [ 74.057489][ T7168] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 74.119294][ T7172] FAULT_INJECTION: forcing a failure. [ 74.119294][ T7172] name failslab, interval 1, probability 0, space 0, times 0 [ 74.119314][ T7172] CPU: 1 UID: 0 PID: 7172 Comm: syz.3.475 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.119330][ T7172] Tainted: [L]=SOFTLOCKUP [ 74.119334][ T7172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.119340][ T7172] Call Trace: [ 74.119345][ T7172] [ 74.119349][ T7172] dump_stack_lvl+0x100/0x190 [ 74.119379][ T7172] should_fail_ex.cold+0x5/0xa [ 74.119395][ T7172] should_failslab+0xc2/0x120 [ 74.119413][ T7172] __kvmalloc_node_noprof+0x113/0x9b0 [ 74.119425][ T7172] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 74.119444][ T7172] ? is_bpf_text_address+0x94/0x1a0 [ 74.119459][ T7172] ? traverse.part.0.constprop.0+0x397/0x650 [ 74.119476][ T7172] traverse.part.0.constprop.0+0x397/0x650 [ 74.119493][ T7172] seq_read_iter+0x93f/0x1270 [ 74.119511][ T7172] seq_read+0x344/0x4d0 [ 74.119524][ T7172] ? __pfx_seq_read+0x10/0x10 [ 74.119537][ T7172] ? __lock_acquire+0x5c0/0x1f40 [ 74.119550][ T7172] ? import_ubuf+0x1b6/0x220 [ 74.119562][ T7172] ? selinux_file_permission+0x8f/0x6d0 [ 74.119577][ T7172] ? __pfx_seq_read+0x10/0x10 [ 74.119589][ T7172] proc_reg_read+0x240/0x330 [ 74.119607][ T7172] ? __pfx_proc_reg_read+0x10/0x10 [ 74.119622][ T7172] vfs_readv+0x5d8/0x8d0 [ 74.119643][ T7172] ? __pfx_vfs_readv+0x10/0x10 [ 74.119663][ T7172] ? lock_acquire+0x1d1/0x380 [ 74.119674][ T7172] ? __fget_files+0x34/0x3d0 [ 74.119692][ T7172] ? __fget_files+0x21f/0x3d0 [ 74.119709][ T7172] ? do_preadv+0x1ac/0x270 [ 74.119718][ T7172] do_preadv+0x1ac/0x270 [ 74.119728][ T7172] ? __pfx_do_preadv+0x10/0x10 [ 74.119742][ T7172] do_syscall_64+0x123/0x790 [ 74.119762][ T7172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.119774][ T7172] RIP: 0033:0x7fa1f979e159 [ 74.119783][ T7172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.119794][ T7172] RSP: 002b:00007fa1fa6a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 74.119806][ T7172] RAX: ffffffffffffffda RBX: 00007fa1f9a25fa0 RCX: 00007fa1f979e159 [ 74.119813][ T7172] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000005 [ 74.119820][ T7172] RBP: 00007fa1fa6a4090 R08: 0000000000000000 R09: 0000000000000000 [ 74.119827][ T7172] R10: 0000000000000111 R11: 0000000000000246 R12: 0000000000000001 [ 74.119833][ T7172] R13: 00007fa1f9a26038 R14: 00007fa1f9a25fa0 R15: 00007ffc5020aeb8 [ 74.119847][ T7172] [ 74.191824][ T7179] __nla_validate_parse: 13 callbacks suppressed [ 74.191842][ T7179] netlink: 16 bytes leftover after parsing attributes in process `syz.0.478'. [ 74.224102][ T7177] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 74.320471][ T7184] fuse: Bad value for 'user_id' [ 74.320490][ T7184] fuse: Bad value for 'user_id' [ 74.405208][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'. [ 74.440620][ T7194] openvswitch: netlink: Duplicate or invalid key (type 0). [ 74.690753][ T7211] netlink: 100 bytes leftover after parsing attributes in process `syz.3.491'. [ 74.728759][ T7213] loop5: detected capacity change from 0 to 7 [ 74.731259][ T7213] Dev loop5: unable to read RDB block 7 [ 74.731273][ T7213] loop5: AHDI p1 [ 74.731283][ T7213] loop5: partition table partially beyond EOD, truncated [ 74.833331][ T7219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.495'. [ 75.220586][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.500'. [ 75.339073][ T43] kauditd_printk_skb: 56 callbacks suppressed [ 75.339090][ T43] audit: type=1400 audit(1789919484.922:7366): avc: denied { create } for pid=7240 comm="syz.1.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.341760][ T43] audit: type=1400 audit(1789919484.922:7367): avc: denied { setopt } for pid=7240 comm="syz.1.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.374888][ T43] audit: type=1400 audit(1789919484.950:7368): avc: denied { bind } for pid=7240 comm="syz.1.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.439217][ T7248] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 75.474811][ T7254] binder: 7252:7254 ioctl 4018620d 0 returned -22 [ 75.543739][ T43] audit: type=1400 audit(1789919485.109:7369): avc: denied { write } for pid=7261 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.544005][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'. [ 75.544050][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'. [ 75.629523][ T7268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.514'. [ 75.629559][ T7268] netlink: 'syz.1.514': attribute type 7 has an invalid length. [ 75.629568][ T7268] netlink: 'syz.1.514': attribute type 8 has an invalid length. [ 75.629575][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'. [ 75.643666][ T7270] netlink: 100 bytes leftover after parsing attributes in process `syz.0.515'. [ 75.718906][ T7275] loop5: detected capacity change from 0 to 7 [ 75.719651][ T7275] Dev loop5: unable to read RDB block 7 [ 75.719677][ T7275] loop5: AHDI p1 [ 75.719694][ T7275] loop5: partition table partially beyond EOD, truncated [ 75.776822][ T43] audit: type=1400 audit(1789919485.315:7370): avc: denied { setopt } for pid=7278 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.776870][ T43] audit: type=1400 audit(1789919485.315:7371): avc: denied { create } for pid=7278 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 75.778674][ T43] audit: type=1400 audit(1789919485.324:7372): avc: denied { write } for pid=7278 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 76.055627][ T43] audit: type=1400 audit(1789919485.586:7373): avc: denied { setopt } for pid=7290 comm="syz.1.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.058797][ T43] audit: type=1400 audit(1789919485.586:7374): avc: denied { shutdown } for pid=7306 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.118367][ T43] audit: type=1400 audit(1789919485.642:7375): avc: denied { getopt } for pid=7306 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.322266][ T7332] openvswitch: netlink: Duplicate or invalid key (type 0). [ 76.717194][ T58] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 76.898768][ T58] usb 7-1: Using ep0 maxpacket: 8 [ 76.900391][ T58] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 76.901387][ T58] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 76.901413][ T58] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 76.902253][ T58] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.902275][ T58] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.902311][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.124371][ T58] usb 7-1: GET_CAPABILITIES returned 0 [ 77.124410][ T58] usbtmc 7-1:16.0: can't read capabilities [ 77.341772][ T7338] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -71 [ 79.136718][ T7291] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 79.142060][ T5734] usb 7-1: USB disconnect, device number 3 [ 79.162282][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 79.258369][ T7348] netlink: 'syz.1.542': attribute type 1 has an invalid length. [ 79.258390][ T7348] netlink: 'syz.1.542': attribute type 2 has an invalid length. [ 79.258402][ T7348] netlink: 'syz.1.542': attribute type 3 has an invalid length. [ 79.292206][ T7348] bond0: invalid ARP target specified [ 79.295504][ T7348] jffs2: notice: (7348) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 79.300652][ T7348] capability: warning: `syz.1.542' uses 32-bit capabilities (legacy support in use) [ 79.354995][ T7354] netlink: 'syz.1.544': attribute type 1 has an invalid length. [ 79.398999][ T7354] 8021q: adding VLAN 0 to HW filter on device bond6 [ 79.403136][ T7354] bond5: (slave bond6): making interface the new active one [ 79.406564][ T7354] bond5: (slave bond6): Enslaving as an active interface with an up link [ 79.485374][ T7364] FAULT_INJECTION: forcing a failure. [ 79.485374][ T7364] name failslab, interval 1, probability 0, space 0, times 0 [ 79.485405][ T7364] CPU: 1 UID: 0 PID: 7364 Comm: syz.1.548 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.485427][ T7364] Tainted: [L]=SOFTLOCKUP [ 79.485433][ T7364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.485443][ T7364] Call Trace: [ 79.485450][ T7364] [ 79.485456][ T7364] dump_stack_lvl+0x100/0x190 [ 79.485488][ T7364] should_fail_ex.cold+0x5/0xa [ 79.485512][ T7364] should_failslab+0xc2/0x120 [ 79.485547][ T7364] kmem_cache_alloc_noprof+0x92/0x6a0 [ 79.485566][ T7364] ? anon_vma_clone+0x2b3/0xca0 [ 79.485595][ T7364] anon_vma_clone+0x2b3/0xca0 [ 79.485625][ T7364] __split_vma+0x750/0x1de0 [ 79.485656][ T7364] ? __pfx___split_vma+0x10/0x10 [ 79.485695][ T7364] vma_modify+0x1ef4/0x29b0 [ 79.485735][ T7364] ? __pfx_vma_modify+0x10/0x10 [ 79.485763][ T7364] ? __lock_acquire+0x5c0/0x1f40 [ 79.485793][ T7364] vma_modify_flags_uffd+0x312/0x470 [ 79.485820][ T7364] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 79.485858][ T7364] ? __pfx_vma_can_userfault+0x10/0x10 [ 79.485889][ T7364] ? __pfx___might_resched+0x10/0x10 [ 79.485911][ T7364] userfaultfd_register_range+0x4be/0x770 [ 79.485950][ T7364] ? __pfx_userfaultfd_register_range+0x10/0x10 [ 79.485986][ T7364] ? vma_can_userfault+0x124/0x3f0 [ 79.486013][ T7364] ? __pfx_vma_can_userfault+0x10/0x10 [ 79.486039][ T7364] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.486064][ T7364] userfaultfd_register+0x900/0xe40 [ 79.486103][ T7364] ? __pfx_userfaultfd_register+0x10/0x10 [ 79.486155][ T7364] ? tomoyo_path_number_perm+0x188/0x580 [ 79.486181][ T7364] userfaultfd_ioctl+0x2e6e/0x61d0 [ 79.486206][ T7364] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.486233][ T7364] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 79.486251][ T7364] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 79.486269][ T7364] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 79.486289][ T7364] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 79.486311][ T7364] ? __fget_files+0x34/0x3d0 [ 79.486344][ T7364] ? selinux_file_ioctl+0x13b/0x290 [ 79.486362][ T7364] ? selinux_file_ioctl+0xb6/0x290 [ 79.486382][ T7364] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 79.486401][ T7364] ? __x64_sys_ioctl+0x18e/0x210 [ 79.486418][ T7364] __x64_sys_ioctl+0x18e/0x210 [ 79.486438][ T7364] do_syscall_64+0x123/0x790 [ 79.486467][ T7364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.486488][ T7364] RIP: 0033:0x7fab1d99e159 [ 79.486505][ T7364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.486522][ T7364] RSP: 002b:00007fab1e951028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.486542][ T7364] RAX: ffffffffffffffda RBX: 00007fab1dc25fa0 RCX: 00007fab1d99e159 [ 79.486555][ T7364] RDX: 0000200000000000 RSI: 00000000c020aa00 RDI: 0000000000000007 [ 79.486566][ T7364] RBP: 00007fab1da3503b R08: 0000000000000000 R09: 0000000000000000 [ 79.486577][ T7364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.486588][ T7364] R13: 00007fab1dc26038 R14: 00007fab1dc25fa0 R15: 00007ffe1239a7b8 [ 79.486614][ T7364] [ 79.563778][ T7366] comedi comedi4: bad chanlist[0]=0x0005d100 chan=53504 range length=2 [ 79.644152][ T7372] __nla_validate_parse: 6 callbacks suppressed [ 79.644172][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'. [ 79.713562][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.555'. [ 79.756256][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 79.804306][ T7383] 8021q: adding VLAN 0 to HW filter on device bond7 [ 79.864001][ T7406] netlink: 'syz.1.558': attribute type 2 has an invalid length. [ 81.055958][ C3] vcan0: j1939_tp_rxtimer: 0xffff888026896800: rx timeout, send abort [ 81.058612][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888026896800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 81.062599][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 81.062610][ T43] audit: type=1400 audit(1789919490.265:7383): avc: denied { read } for pid=5123 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 81.062814][ T43] audit: type=1400 audit(1789919490.265:7384): avc: denied { search } for pid=5123 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.063221][ T43] audit: type=1400 audit(1789919490.265:7385): avc: denied { write search } for pid=5123 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.063373][ T43] audit: type=1400 audit(1789919490.265:7386): avc: denied { add_name } for pid=5123 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.063581][ T43] audit: type=1400 audit(1789919490.265:7387): avc: denied { create } for pid=5123 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.065746][ T43] audit: type=1400 audit(1789919490.265:7388): avc: denied { append open } for pid=5123 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.065774][ T43] audit: type=1400 audit(1789919490.265:7389): avc: denied { getattr } for pid=5123 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.185231][ T7633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.561'. [ 81.220485][ T7635] netlink: 100 bytes leftover after parsing attributes in process `syz.3.562'. [ 81.519251][ T7643] netlink: 16 bytes leftover after parsing attributes in process `syz.3.566'. [ 81.573411][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'. [ 81.617425][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 81.662236][ T43] audit: type=1400 audit(1789919490.826:7390): avc: denied { ioctl } for pid=7650 comm="syz.0.570" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 81.699868][ T43] audit: type=1400 audit(1789919490.873:7391): avc: denied { bind } for pid=7659 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.781207][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 81.816499][ T7664] 8021q: adding VLAN 0 to HW filter on device bond5 [ 81.838308][ T7660] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 82.069667][ T7673] netlink: 'syz.2.576': attribute type 2 has an invalid length. [ 82.093214][ T43] audit: type=1326 audit(1789919491.238:7392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.3.575" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1f979e159 code=0x0 [ 82.123166][ T7677] vlan1: entered promiscuous mode [ 82.126818][ T5734] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.286930][ T5734] usb 5-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 82.290113][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 82.290129][ T5734] usb 5-1: Product: syz [ 82.290137][ T5734] usb 5-1: Manufacturer: syz [ 82.410676][ T7687] jffs2: notice: (7687) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 82.891120][ T5734] scsi host6: uas [ 82.898699][ C3] usb 5-1: stat urb: status -75 [ 83.126414][ T7715] netlink: 36 bytes leftover after parsing attributes in process `syz.3.589'. [ 83.166570][ C3] usb 5-1: cmd cmplt err -71 [ 83.167647][ T5838] usb 5-1: USB disconnect, device number 3 [ 83.172609][ T5838] scsi 6:0:0:0: tag#8 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 83.172649][ T5838] scsi 6:0:0:0: tag#8 CDB: Inquiry 12 00 00 00 24 00 [ 83.345724][ T7730] xt_hashlimit: size too large, truncated to 1048576 [ 83.401861][ T7728] ufs: You didn't specify the type of your ufs filesystem [ 83.401861][ T7728] [ 83.401861][ T7728] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 83.401861][ T7728] [ 83.401861][ T7728] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 83.401906][ T7728] ufs: ufstype=old is supported read-only [ 83.402120][ T7728] ufs: ufs_fill_super(): bad magic number [ 83.498950][ T7743] comedi comedi4: bad chanlist[0]=0x0005d100 chan=53504 range length=2 [ 83.704895][ T7755] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.950852][ T7773] 8021q: adding VLAN 0 to HW filter on device bond8 [ 83.960498][ T7773] bond2: (slave veth0_to_bond): Releasing backup interface [ 83.963060][ T7773] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 84.046958][ T7778] comedi comedi4: bad chanlist[0]=0x0005d100 chan=53504 range length=2 [ 84.179999][ T7786] 8021q: adding VLAN 0 to HW filter on device bond9 [ 84.447316][ T7799] comedi comedi4: bad chanlist[0]=0x0005d100 chan=53504 range length=2 [ 85.175018][ T7813] loop5: detected capacity change from 0 to 7 [ 85.184589][ T7813] Dev loop5: unable to read RDB block 7 [ 85.184607][ T7813] loop5: AHDI p1 [ 85.184617][ T7813] loop5: partition table partially beyond EOD, truncated [ 85.448577][ T7803] Process accounting resumed [ 85.571471][ T7827] __nla_validate_parse: 8 callbacks suppressed [ 85.571486][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 86.462759][ T7861] FAULT_INJECTION: forcing a failure. [ 86.462759][ T7861] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 86.462791][ T7861] CPU: 2 UID: 0 PID: 7861 Comm: syz.0.640 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.462814][ T7861] Tainted: [L]=SOFTLOCKUP [ 86.462820][ T7861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.462830][ T7861] Call Trace: [ 86.462836][ T7861] [ 86.462843][ T7861] dump_stack_lvl+0x100/0x190 [ 86.462873][ T7861] should_fail_ex.cold+0x5/0xa [ 86.462894][ T7861] ? prepare_alloc_pages+0x16d/0x5b0 [ 86.462919][ T7861] should_fail_alloc_page+0xeb/0x140 [ 86.462943][ T7861] prepare_alloc_pages+0x1f0/0x5b0 [ 86.462969][ T7861] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 86.462997][ T7861] ? __pfx_get_page_from_freelist+0x10/0x10 [ 86.463024][ T7861] ? prepare_alloc_pages+0x1f0/0x5b0 [ 86.463045][ T7861] ? is_bpf_text_address+0x94/0x1a0 [ 86.463069][ T7861] ? rcu_is_watching+0x13/0xc0 [ 86.463092][ T7861] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 86.463121][ T7861] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 86.463154][ T7861] ? stack_trace_save+0x8e/0xc0 [ 86.463170][ T7861] ? __pfx_stack_trace_save+0x10/0x10 [ 86.463185][ T7861] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 86.463212][ T7861] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 86.463237][ T7861] ? is_bpf_text_address+0x94/0x1a0 [ 86.463284][ T7861] ? kasan_save_track+0x14/0x30 [ 86.463303][ T7861] ? __kasan_slab_alloc+0x89/0x90 [ 86.463323][ T7861] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 86.463340][ T7861] ? alloc_vmap_area+0x640/0x2bb0 [ 86.463359][ T7861] ? __get_vm_area_node+0x1ed/0x350 [ 86.463378][ T7861] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 86.463399][ T7861] ? __vmalloc_node_noprof+0xad/0xf0 [ 86.463419][ T7861] ? __vmalloc_noprof+0xa3/0x120 [ 86.463439][ T7861] ? bpf_check+0x17fb/0xa980 [ 86.463460][ T7861] ? bpf_prog_load+0x1ac3/0x2a80 [ 86.463480][ T7861] ? __sys_bpf+0x1f46/0x4a30 [ 86.463494][ T7861] ? __x64_sys_bpf+0xce/0x140 [ 86.463511][ T7861] ? do_syscall_64+0x123/0x790 [ 86.463533][ T7861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.463557][ T7861] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 86.463579][ T7861] ? policy_nodemask+0xed/0x4f0 [ 86.463603][ T7861] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 86.463639][ T7861] __kasan_populate_vmalloc+0xf0/0x210 [ 86.463663][ T7861] alloc_vmap_area+0x95d/0x2bb0 [ 86.463689][ T7861] ? kasan_save_track+0x14/0x30 [ 86.463706][ T7861] ? __kasan_kmalloc+0xaa/0xb0 [ 86.463725][ T7861] ? __pfx_alloc_vmap_area+0x10/0x10 [ 86.463746][ T7861] ? __get_vm_area_node+0x124/0x350 [ 86.463769][ T7861] __get_vm_area_node+0x1ed/0x350 [ 86.463794][ T7861] __vmalloc_node_range_noprof+0x268/0x1420 [ 86.463817][ T7861] ? bpf_check+0x17fb/0xa980 [ 86.463846][ T7861] ? bpf_check+0x17fb/0xa980 [ 86.463872][ T7861] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 86.463899][ T7861] ? avc_has_perm_noaudit+0x145/0x3b0 [ 86.463924][ T7861] ? bpf_check+0x17fb/0xa980 [ 86.463944][ T7861] __vmalloc_node_noprof+0xad/0xf0 [ 86.463966][ T7861] ? bpf_check+0x17fb/0xa980 [ 86.463989][ T7861] __vmalloc_noprof+0xa3/0x120 [ 86.464010][ T7861] ? __pfx___vmalloc_noprof+0x10/0x10 [ 86.464036][ T7861] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 86.464060][ T7861] ? security_bpf_prog_load+0x10f/0x2f0 [ 86.464079][ T7861] ? bpf_vlog_init+0x118/0x150 [ 86.464105][ T7861] bpf_check+0x17fb/0xa980 [ 86.464128][ T7861] ? __css_rstat_updated+0x1ce/0x590 [ 86.464148][ T7861] ? __lock_acquire+0x5c0/0x1f40 [ 86.464166][ T7861] ? __pfx___css_rstat_updated+0x10/0x10 [ 86.464192][ T7861] ? __lock_acquire+0x5c0/0x1f40 [ 86.464217][ T7861] ? __pfx_bpf_check+0x10/0x10 [ 86.464238][ T7861] ? lock_acquire+0x1d1/0x380 [ 86.464255][ T7861] ? bpf_prog_load+0x1a09/0x2a80 [ 86.464292][ T7861] ? find_held_lock+0x2b/0x80 [ 86.464314][ T7861] ? bpf_prog_load+0x1a09/0x2a80 [ 86.464340][ T7861] ? __asan_memset+0x23/0x50 [ 86.464361][ T7861] ? bpf_prog_load+0x1ac3/0x2a80 [ 86.464381][ T7861] bpf_prog_load+0x1ac3/0x2a80 [ 86.464408][ T7861] ? __pfx_bpf_prog_load+0x10/0x10 [ 86.464451][ T7861] __sys_bpf+0x1f46/0x4a30 [ 86.464473][ T7861] ? __pfx___sys_bpf+0x10/0x10 [ 86.464488][ T7861] ? find_held_lock+0x2b/0x80 [ 86.464510][ T7861] ? futex_wake+0x4ea/0x5e0 [ 86.464573][ T7861] ? __x64_sys_futex+0x34f/0x4d0 [ 86.464595][ T7861] ? __x64_sys_futex+0x358/0x4d0 [ 86.464621][ T7861] ? __sys_socket+0xac/0x260 [ 86.464638][ T7861] ? xfd_validate_state+0x129/0x190 [ 86.464661][ T7861] ? __x64_sys_bpf+0xce/0x140 [ 86.464677][ T7861] __x64_sys_bpf+0xce/0x140 [ 86.464694][ T7861] ? do_syscall_64+0xae/0x790 [ 86.464721][ T7861] do_syscall_64+0x123/0x790 [ 86.464745][ T7861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.464763][ T7861] RIP: 0033:0x7f3fd119e159 [ 86.464778][ T7861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.464793][ T7861] RSP: 002b:00007f3fd2117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.464810][ T7861] RAX: ffffffffffffffda RBX: 00007f3fd1426090 RCX: 00007f3fd119e159 [ 86.464822][ T7861] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 86.464832][ T7861] RBP: 00007f3fd123503b R08: 0000000000000000 R09: 0000000000000000 [ 86.464843][ T7861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.464853][ T7861] R13: 00007f3fd1426128 R14: 00007f3fd1426090 R15: 00007fff67540878 [ 86.464877][ T7861] [ 86.465275][ T7861] syz.0.640: vmalloc error: size 1088, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 86.465391][ T7861] CPU: 2 UID: 0 PID: 7861 Comm: syz.0.640 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.465414][ T7861] Tainted: [L]=SOFTLOCKUP [ 86.465420][ T7861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.465429][ T7861] Call Trace: [ 86.465435][ T7861] [ 86.465441][ T7861] dump_stack_lvl+0x100/0x190 [ 86.465468][ T7861] warn_alloc.cold+0x9e/0xb2 [ 86.465488][ T7861] ? __pfx_warn_alloc+0x10/0x10 [ 86.465512][ T7861] ? lockdep_hardirqs_on+0x7d/0x110 [ 86.465537][ T7861] ? __get_vm_area_node+0x2f0/0x350 [ 86.465563][ T7861] ? __get_vm_area_node+0x22b/0x350 [ 86.465588][ T7861] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 86.465626][ T7861] ? bpf_check+0x17fb/0xa980 [ 86.465652][ T7861] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 86.465679][ T7861] ? avc_has_perm_noaudit+0x145/0x3b0 [ 86.465705][ T7861] ? bpf_check+0x17fb/0xa980 [ 86.465725][ T7861] __vmalloc_node_noprof+0xad/0xf0 [ 86.465746][ T7861] ? bpf_check+0x17fb/0xa980 [ 86.465770][ T7861] __vmalloc_noprof+0xa3/0x120 [ 86.465791][ T7861] ? __pfx___vmalloc_noprof+0x10/0x10 [ 86.465816][ T7861] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 86.465839][ T7861] ? security_bpf_prog_load+0x10f/0x2f0 [ 86.465856][ T7861] ? bpf_vlog_init+0x118/0x150 [ 86.465881][ T7861] bpf_check+0x17fb/0xa980 [ 86.465902][ T7861] ? __css_rstat_updated+0x1ce/0x590 [ 86.465921][ T7861] ? __lock_acquire+0x5c0/0x1f40 [ 86.465940][ T7861] ? __pfx___css_rstat_updated+0x10/0x10 [ 86.465967][ T7861] ? __lock_acquire+0x5c0/0x1f40 [ 86.465992][ T7861] ? __pfx_bpf_check+0x10/0x10 [ 86.466014][ T7861] ? lock_acquire+0x1d1/0x380 [ 86.466031][ T7861] ? bpf_prog_load+0x1a09/0x2a80 [ 86.466052][ T7861] ? find_held_lock+0x2b/0x80 [ 86.466075][ T7861] ? bpf_prog_load+0x1a09/0x2a80 [ 86.466100][ T7861] ? __asan_memset+0x23/0x50 [ 86.466120][ T7861] ? bpf_prog_load+0x1ac3/0x2a80 [ 86.466140][ T7861] bpf_prog_load+0x1ac3/0x2a80 [ 86.466167][ T7861] ? __pfx_bpf_prog_load+0x10/0x10 [ 86.466211][ T7861] __sys_bpf+0x1f46/0x4a30 [ 86.466234][ T7861] ? __pfx___sys_bpf+0x10/0x10 [ 86.466249][ T7861] ? find_held_lock+0x2b/0x80 [ 86.466270][ T7861] ? futex_wake+0x4ea/0x5e0 [ 86.466331][ T7861] ? __x64_sys_futex+0x34f/0x4d0 [ 86.466353][ T7861] ? __x64_sys_futex+0x358/0x4d0 [ 86.466375][ T7861] ? __sys_socket+0xac/0x260 [ 86.466391][ T7861] ? xfd_validate_state+0x129/0x190 [ 86.466413][ T7861] ? __x64_sys_bpf+0xce/0x140 [ 86.466430][ T7861] __x64_sys_bpf+0xce/0x140 [ 86.466450][ T7861] ? do_syscall_64+0xae/0x790 [ 86.466474][ T7861] do_syscall_64+0x123/0x790 [ 86.466499][ T7861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.466517][ T7861] RIP: 0033:0x7f3fd119e159 [ 86.466532][ T7861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.466565][ T7861] RSP: 002b:00007f3fd2117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.466582][ T7861] RAX: ffffffffffffffda RBX: 00007f3fd1426090 RCX: 00007f3fd119e159 [ 86.466595][ T7861] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 86.466610][ T7861] RBP: 00007f3fd123503b R08: 0000000000000000 R09: 0000000000000000 [ 86.466620][ T7861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.466628][ T7861] R13: 00007f3fd1426128 R14: 00007f3fd1426090 R15: 00007fff67540878 [ 86.466649][ T7861] [ 86.466730][ T7861] Mem-Info: [ 86.466739][ T7861] active_anon:8505 inactive_anon:115 isolated_anon:0 [ 86.466739][ T7861] active_file:789 inactive_file:49222 isolated_file:0 [ 86.466739][ T7861] unevictable:1000 dirty:19 writeback:0 [ 86.466739][ T7861] slab_reclaimable:11785 slab_unreclaimable:64911 [ 86.466739][ T7861] mapped:24999 shmem:1558 pagetables:3567 [ 86.466739][ T7861] sec_pagetables:295 bounce:0 [ 86.466739][ T7861] kernel_misc_reclaimable:0 [ 86.466739][ T7861] free:340165 free_pcp:5479 free_cma:0 [ 86.466782][ T7861] Node 0 active_anon:33720kB inactive_anon:460kB active_file:3156kB inactive_file:193784kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:99932kB dirty:76kB writeback:0kB shmem:4224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13888kB pagetables:4920kB sec_pagetables:1180kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 86.466828][ T7861] Node 1 active_anon:300kB inactive_anon:0kB active_file:0kB inactive_file:3104kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:0kB writeback:0kB shmem:2008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:224kB pagetables:9348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 86.466870][ T7861] Node 0 DMA free:5236kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:16kB inactive_anon:96kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:92kB local_pcp:60kB free_cma:0kB [ 86.466917][ T7861] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 86.466948][ T7861] Node 0 DMA32 free:70172kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:33704kB inactive_anon:364kB active_file:3156kB inactive_file:193784kB unevictable:2000kB writepending:76kB zspages:12kB present:2080628kB managed:1253288kB mlocked:0kB bounce:0kB free_pcp:1656kB local_pcp:828kB free_cma:0kB [ 86.466993][ T7861] lowmem_reserve[]: 0 0 0 0 0 [ 86.467018][ T7861] Node 1 Normal free:1285252kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:300kB inactive_anon:0kB active_file:0kB inactive_file:3104kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:20168kB local_pcp:12080kB free_cma:0kB [ 86.467067][ T7861] lowmem_reserve[]: 0 0 0 0 0 [ 86.467096][ T7861] Node 0 DMA: 7*4kB (UM) 3*8kB (UM) 2*16kB (M) 5*32kB (UM) 2*64kB (UM) 2*128kB (UM) 2*256kB (M) 2*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 5236kB [ 86.467220][ T7861] Node 0 DMA32: 1675*4kB (UME) 579*8kB (UME) 382*16kB (UME) 353*32kB (UME) 106*64kB (UME) 78*128kB (UME) 44*256kB (UME) 22*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 70084kB [ 86.467347][ T7861] Node 1 Normal: 2*4kB (UE) 1*8kB (U) 0*16kB 1*32kB (M) 2*64kB (ME) 2*128kB (E) 2*256kB (UE) 14*512kB (UME) 11*1024kB (UM) 12*2048kB (UME) 303*4096kB (M) = 1285040kB [ 86.467483][ T7861] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 86.467498][ T7861] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 86.467512][ T7861] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 86.467526][ T7861] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 86.467539][ T7861] 51565 total pagecache pages [ 86.467545][ T7861] 0 pages in swap cache [ 86.467551][ T7861] Free swap = 124996kB [ 86.467557][ T7861] Total swap = 124996kB [ 86.467563][ T7861] 1048443 pages RAM [ 86.467569][ T7861] 0 pages HighMem/MovableOnly [ 86.467574][ T7861] 285811 pages reserved [ 86.467580][ T7861] 0 pages cma reserved [ 86.485749][ T5847] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 86.565832][ T7863] 8021q: adding VLAN 0 to HW filter on device bond6 [ 86.574187][ T7863] bond2: (slave veth0_to_bond): Releasing backup interface [ 86.585844][ T7863] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 86.659744][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 86.659756][ T43] audit: type=1400 audit(1789919495.504:7406): avc: denied { append } for pid=7869 comm="syz.0.643" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 86.727693][ T7873] netlink: 20 bytes leftover after parsing attributes in process `syz.0.644'. [ 86.753662][ T5847] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.754801][ T5847] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.754824][ T5847] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.754857][ T5847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.814095][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'. [ 86.980395][ T5847] usb 8-1: usb_control_msg returned -32 [ 86.980485][ T5847] usbtmc 8-1:16.0: can't read capabilities [ 87.016966][ T43] audit: type=1400 audit(1789919495.841:7407): avc: denied { map } for pid=7882 comm="syz.0.649" path="/proc/409/task/412/comm" dev="proc" ino=19020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 87.017132][ T43] audit: type=1400 audit(1789919495.841:7408): avc: denied { execute } for pid=7882 comm="syz.0.649" path="/proc/409/task/412/comm" dev="proc" ino=19020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 87.017651][ T43] audit: type=1400 audit(1789919495.841:7409): avc: denied { create } for pid=7882 comm="syz.0.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 87.230691][ T7895] netlink: 'syz.0.650': attribute type 2 has an invalid length. [ 87.339198][ T7899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.654'. [ 87.342716][ T7899] tipc: Started in network mode [ 87.342731][ T7899] tipc: Node identity aaaaaaaaaa15, cluster identity 4711 [ 87.344034][ T7899] tipc: Enabled bearer , priority 0 [ 87.366465][ T7857] usbtmc 8-1:16.0: usbtmc_ioctl_request failed -32 [ 87.371755][ T5847] usb 8-1: USB disconnect, device number 11 [ 87.378404][ T43] audit: type=1400 audit(1789919496.178:7410): avc: denied { bind } for pid=7898 comm="syz.0.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.378685][ T43] audit: type=1400 audit(1789919496.178:7411): avc: denied { name_bind } for pid=7898 comm="syz.0.654" src=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 87.378928][ T43] audit: type=1400 audit(1789919496.178:7412): avc: denied { node_bind } for pid=7898 comm="syz.0.654" src=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 87.380124][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.656'. [ 87.574207][ T7923] bond7: (slave dummy0): Device is not bonding slave [ 87.574221][ T7923] bond7: option active_slave: invalid value (dummy0) [ 87.575413][ T7923] bond7 (unregistering): Released all slaves [ 87.677869][ T7931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.665'. [ 87.769814][ T7938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65533 sclass=netlink_route_socket pid=7938 comm=syz.2.668 [ 87.778384][ T43] audit: type=1400 audit(1789919496.552:7413): avc: denied { map } for pid=7937 comm="syz.2.668" path="/dev/video3" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 87.801705][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'. [ 87.803647][ T42] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 87.829810][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 87.846078][ T7942] 8021q: adding VLAN 0 to HW filter on device bond7 [ 87.879536][ T7945] netlink: 20 bytes leftover after parsing attributes in process `syz.0.671'. [ 87.951533][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'. [ 87.961575][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 87.962166][ T42] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 87.963168][ T42] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 87.963188][ T42] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 87.963205][ T42] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.963219][ T42] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 87.963254][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 87.963273][ T42] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 87.963304][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.969264][ T42] usb 6-1: config 0 descriptor?? [ 88.072704][ T7959] comedi comedi4: bad chanlist[0]=0x0005d100 chan=53504 range length=2 [ 88.141385][ T7963] loop5: detected capacity change from 0 to 7 [ 88.143031][ T7963] Dev loop5: unable to read RDB block 7 [ 88.143053][ T7963] loop5: AHDI p1 [ 88.143067][ T7963] loop5: partition table partially beyond EOD, truncated [ 88.247792][ T43] audit: type=1400 audit(1789919496.992:7414): avc: denied { write } for pid=7969 comm="syz.2.680" name="subsystems" dev="configfs" ino=3230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.251072][ T43] audit: type=1400 audit(1789919497.001:7415): avc: denied { write } for pid=7969 comm="syz.2.680" name="attr_allow_any_host" dev="configfs" ino=21798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 88.253789][ T7970] nvmet: adding nsid 1 to subsystem testsubsys [ 88.320207][ T7978] netlink: 'syz.0.683': attribute type 2 has an invalid length. [ 88.411515][ T5847] tipc: Node number set to 12561066 [ 88.414630][ T7987] comedi comedi4: bad chanlist[0]=0x0005d100 chan=53504 range length=2 [ 88.509859][ T7996] netlink: 'syz.2.691': attribute type 39 has an invalid length. [ 88.935422][ T8041] xt_hashlimit: size too large, truncated to 1048576 [ 89.054072][ T8049] 8021q: adding VLAN 0 to HW filter on device bond8 [ 89.292609][ T8065] 8021q: adding VLAN 0 to HW filter on device bond9 [ 89.300109][ T8065] bond6: (slave veth0_to_bond): Releasing backup interface [ 89.304783][ T8065] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 89.367199][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 89.367388][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 89.462688][ T8068] ceph: No mds server is up or the cluster is laggy [ 89.586544][ T8080] loop5: detected capacity change from 0 to 7 [ 89.587169][ T8080] Dev loop5: unable to read RDB block 7 [ 89.587183][ T8080] loop5: AHDI p1 [ 89.587192][ T8080] loop5: partition table partially beyond EOD, truncated [ 90.025317][ T8088] netlink: 'syz.2.719': attribute type 2 has an invalid length. [ 90.137253][ T8094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.318899][ T8100] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 90.381172][ T8104] openvswitch: netlink: Duplicate or invalid key (type 0). [ 90.603444][ T8116] netlink: 'syz.3.730': attribute type 7 has an invalid length. [ 90.603467][ T8116] netlink: 'syz.3.730': attribute type 8 has an invalid length. [ 90.615379][ T8116] ip6gretap0: entered promiscuous mode [ 90.616342][ T8116] syz_tun: entered promiscuous mode [ 90.617478][ T8116] gretap0: entered promiscuous mode [ 90.617999][ T8116] debugfs: 'hsr1' already exists in 'hsr' [ 90.618017][ T8116] Cannot create hsr debugfs directory [ 90.672183][ T8119] netlink: 'syz.3.731': attribute type 1 has an invalid length. [ 90.767685][ T5847] usb 6-1: USB disconnect, device number 7 [ 90.981768][ T8134] syz.2.733: attempt to access beyond end of device [ 90.981768][ T8134] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 90.981796][ T8134] gfs2: error -5 reading superblock [ 91.080458][ T8151] FAULT_INJECTION: forcing a failure. [ 91.080458][ T8151] name fail_futex, interval 1, probability 0, space 0, times 1 [ 91.080492][ T8151] CPU: 1 UID: 0 PID: 8151 Comm: syz.3.738 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.080518][ T8151] Tainted: [L]=SOFTLOCKUP [ 91.080526][ T8151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.080537][ T8151] Call Trace: [ 91.080544][ T8151] [ 91.080552][ T8151] dump_stack_lvl+0x100/0x190 [ 91.080598][ T8151] should_fail_ex.cold+0x5/0xa [ 91.080624][ T8151] get_futex_key+0x1d0/0x14f0 [ 91.080658][ T8151] ? __pfx_get_futex_key+0x10/0x10 [ 91.080691][ T8151] futex_wake+0xf4/0x5e0 [ 91.080722][ T8151] ? userfaultfd_ioctl+0xd50/0x61d0 [ 91.080746][ T8151] ? __pfx_futex_wake+0x10/0x10 [ 91.080775][ T8151] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 91.080803][ T8151] do_futex+0x2b2/0x440 [ 91.080828][ T8151] ? __pfx_do_futex+0x10/0x10 [ 91.080853][ T8151] ? __fget_files+0x34/0x3d0 [ 91.080879][ T8151] __x64_sys_futex+0x34f/0x4d0 [ 91.080907][ T8151] ? __pfx___x64_sys_futex+0x10/0x10 [ 91.080931][ T8151] ? selinux_file_ioctl+0xb6/0x290 [ 91.080950][ T8151] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 91.081003][ T8151] do_syscall_64+0x123/0x790 [ 91.081038][ T8151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.081059][ T8151] RIP: 0033:0x7fa1f979e159 [ 91.081075][ T8151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.081095][ T8151] RSP: 002b:00007fa1fa6a40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 91.081131][ T8151] RAX: ffffffffffffffda RBX: 00007fa1f9a25fa8 RCX: 00007fa1f979e159 [ 91.081144][ T8151] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa1f9a25fac [ 91.081156][ T8151] RBP: 00007fa1f9a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 91.081167][ T8151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.081178][ T8151] R13: 00007fa1f9a26038 R14: 00007ffc5020add0 R15: 00007ffc5020aeb8 [ 91.081203][ T8151] [ 91.403654][ T8163] __nla_validate_parse: 18 callbacks suppressed [ 91.403669][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 91.413933][ T8163] 8021q: adding VLAN 0 to HW filter on device bond10 [ 91.444002][ T8167] comedi comedi4: bad chanlist[0]=0x0005d100 chan=53504 range length=2 [ 91.476295][ T8169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.744'. [ 91.715466][ T8188] comedi comedi4: bad chanlist[0]=0x0005d100 chan=53504 range length=2 [ 91.810823][ T8204] openvswitch: netlink: Duplicate or invalid key (type 0). [ 91.898394][ T8215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.764'. [ 91.898434][ T8215] netlink: 'syz.2.764': attribute type 7 has an invalid length. [ 91.898446][ T8215] netlink: 'syz.2.764': attribute type 8 has an invalid length. [ 91.898458][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'. [ 91.936483][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'. [ 91.936506][ T8216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'. [ 92.039712][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 92.039724][ T43] audit: type=1400 audit(1789919500.538:7433): avc: denied { bind } for pid=8212 comm="syz.1.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.040482][ T43] audit: type=1400 audit(1789919500.538:7434): avc: denied { listen } for pid=8212 comm="syz.1.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.275651][ T8232] netlink: 36 bytes leftover after parsing attributes in process `syz.2.768'. [ 92.328466][ T43] audit: type=1400 audit(1789919500.809:7435): avc: denied { read } for pid=8233 comm="syz.2.769" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 92.328569][ T43] audit: type=1400 audit(1789919500.809:7436): avc: denied { open } for pid=8233 comm="syz.2.769" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 92.546126][ T43] audit: type=1400 audit(1789919501.015:7437): avc: denied { read } for pid=8244 comm="syz.2.774" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 92.589883][ T8245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.589908][ T8245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.594013][ T8245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.594036][ T8245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.893389][ T43] audit: type=1400 audit(1789919501.343:7438): avc: denied { unlink } for pid=8258 comm="syz.2.778" name="#7" dev="tmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 92.934077][ T8266] bond11: (slave dummy0): Device is not bonding slave [ 92.934097][ T8266] bond11: option active_slave: invalid value (dummy0) [ 92.939634][ T8266] bond11 (unregistering): Released all slaves [ 92.958489][ T43] audit: type=1400 audit(1789919501.399:7439): avc: denied { connect } for pid=8248 comm="syz.0.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.031543][ T8249] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input13 [ 93.134977][ T8250] cgroup: fork rejected by pids controller in /syz0 [ 93.170879][ T65] Bluetooth: hci4: sending frame failed (-49) [ 93.173000][ T5742] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 93.744927][ T8328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.782'. [ 93.788428][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.783'. [ 93.816067][ T8332] netlink: 'syz.1.784': attribute type 1 has an invalid length. [ 93.838255][ T8332] 8021q: adding VLAN 0 to HW filter on device bond12 [ 93.841824][ T8332] bond11: (slave bond12): making interface the new active one [ 93.842155][ T8332] bond11: (slave bond12): Enslaving as an active interface with an up link [ 93.881356][ T43] audit: type=1400 audit(1789919502.260:7440): avc: denied { kexec_image_load } for pid=8335 comm="syz.1.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 93.942757][ T8338] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 94.052440][ T43] audit: type=1400 audit(1789919502.428:7441): avc: denied { read write } for pid=8340 comm="syz.2.787" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 94.052688][ T43] audit: type=1400 audit(1789919502.428:7442): avc: denied { open } for pid=8340 comm="syz.2.787" path="/182/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 94.111633][ T8346] netlink: 'syz.0.788': attribute type 2 has an invalid length. [ 94.154236][ T8348] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 94.161883][ T8348] tipc: Started in network mode [ 94.161899][ T8348] tipc: Node identity aaaaaaaaaa15, cluster identity 4711 [ 94.161965][ T8348] tipc: Enabled bearer , priority 0 [ 94.273657][ T8362] netlink: 100 bytes leftover after parsing attributes in process `syz.0.795'. [ 94.503899][ T8373] xt_hashlimit: size too large, truncated to 1048576 [ 94.640201][ T5837] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.671342][ T8377] nvme nvme0: failed to connect socket: -101 [ 94.705817][ T8381] bond2 (unregistering): Released all slaves [ 94.821971][ T5837] usb 5-1: Using ep0 maxpacket: 32 [ 94.822992][ T5837] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 94.823996][ T5837] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 94.824016][ T5837] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 94.824033][ T5837] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.824048][ T5837] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 94.824084][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 94.824102][ T5837] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 94.824121][ T5837] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 94.824153][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.830829][ T5837] usb 5-1: config 0 descriptor?? [ 94.868502][ T8384] loop5: detected capacity change from 0 to 7 [ 94.869334][ T8384] Dev loop5: unable to read RDB block 7 [ 94.869349][ T8384] loop5: AHDI p1 [ 94.869358][ T8384] loop5: partition table partially beyond EOD, truncated [ 94.957926][ T8388] Falling back ldisc for ttyS3. [ 95.002887][ T8392] bridge: RTM_NEWNEIGH with invalid ether address [ 95.003075][ T8392] bridge: RTM_NEWNEIGH with invalid ether address [ 95.240041][ T5838] tipc: Node number set to 12561066 [ 95.290214][ T8401] netlink: 'syz.3.809': attribute type 5 has an invalid length. [ 95.459656][ T8336] kexec: Could not allocate control_code_buffer [ 95.565331][ T8416] netlink: 'syz.2.814': attribute type 1 has an invalid length. [ 95.622689][ T8421] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 95.652008][ T8422] 8021q: adding VLAN 0 to HW filter on device bond8 [ 95.653993][ T8422] bond7: (slave bond8): making interface the new active one [ 95.654483][ T8422] bond7: (slave bond8): Enslaving as an active interface with an up link [ 95.667460][ T8427] netlink: 'syz.1.820': attribute type 2 has an invalid length. [ 96.054785][ T8450] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.144714][ T8458] 8021q: adding VLAN 0 to HW filter on device bond3 [ 96.153839][ T8458] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 96.191818][ T8463] binder: 8462:8463 ioctl c0306201 200000000040 returned -14 [ 96.192170][ T8463] binder: 8462:8463 unknown command 0 [ 96.192185][ T8463] binder: 8462:8463 ioctl c0306201 200000000640 returned -22 [ 96.198648][ T8463] EXT4-fs (loop2): unable to read superblock [ 96.206930][ T8465] xt_hashlimit: size too large, truncated to 1048576 [ 96.389026][ T8473] FAULT_INJECTION: forcing a failure. [ 96.389026][ T8473] name failslab, interval 1, probability 0, space 0, times 0 [ 96.389061][ T8473] CPU: 0 UID: 0 PID: 8473 Comm: syz.3.839 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.389085][ T8473] Tainted: [L]=SOFTLOCKUP [ 96.389092][ T8473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.389102][ T8473] Call Trace: [ 96.389109][ T8473] [ 96.389117][ T8473] dump_stack_lvl+0x100/0x190 [ 96.389180][ T8473] should_fail_ex.cold+0x5/0xa [ 96.389207][ T8473] should_failslab+0xc2/0x120 [ 96.389237][ T8473] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 96.389260][ T8473] ? __alloc_skb+0x140/0x710 [ 96.389292][ T8473] __alloc_skb+0x140/0x710 [ 96.389310][ T8473] ? __alloc_skb+0x5b7/0x710 [ 96.389329][ T8473] ? __pfx___alloc_skb+0x10/0x10 [ 96.389351][ T8473] ? idr_get_next+0xec/0x150 [ 96.389381][ T8473] ? __pfx_idr_get_next+0x10/0x10 [ 96.389409][ T8473] ctrl_build_family_msg+0x36/0xa0 [ 96.389436][ T8473] ctrl_getfamily+0x361/0x550 [ 96.389461][ T8473] ? __pfx_ctrl_getfamily+0x10/0x10 [ 96.389484][ T8473] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 96.389514][ T8473] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 96.389543][ T8473] genl_family_rcv_msg_doit+0x214/0x300 [ 96.389569][ T8473] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 96.389591][ T8473] ? genl_get_cmd+0x3e7/0x760 [ 96.389620][ T8473] ? __dev_queue_xmit+0xa33/0x4970 [ 96.389638][ T8473] ? __radix_tree_lookup+0x217/0x2b0 [ 96.389665][ T8473] genl_rcv_msg+0x560/0x800 [ 96.389691][ T8473] ? __pfx_genl_rcv_msg+0x10/0x10 [ 96.389713][ T8473] ? __lock_acquire+0x5c0/0x1f40 [ 96.389732][ T8473] ? __pfx_ctrl_getfamily+0x10/0x10 [ 96.389765][ T8473] netlink_rcv_skb+0x159/0x420 [ 96.389785][ T8473] ? __pfx_genl_rcv_msg+0x10/0x10 [ 96.389809][ T8473] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 96.389840][ T8473] ? netlink_deliver_tap+0x1ae/0xcc0 [ 96.389863][ T8473] genl_rcv+0x28/0x40 [ 96.389883][ T8473] netlink_unicast+0x585/0x850 [ 96.389907][ T8473] ? __pfx_netlink_unicast+0x10/0x10 [ 96.389935][ T8473] netlink_sendmsg+0x8b0/0xda0 [ 96.389959][ T8473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.389983][ T8473] ? selinux_socket_sendmsg+0x198/0x2f0 [ 96.390007][ T8473] __sys_sendto+0x48b/0x4e0 [ 96.390026][ T8473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.390047][ T8473] ? __pfx___sys_sendto+0x10/0x10 [ 96.390073][ T8473] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 96.390113][ T8473] __x64_sys_sendto+0xe0/0x1c0 [ 96.390132][ T8473] ? do_syscall_64+0xae/0x790 [ 96.390156][ T8473] ? lockdep_hardirqs_on+0x7d/0x110 [ 96.390180][ T8473] do_syscall_64+0x123/0x790 [ 96.390207][ T8473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.390226][ T8473] RIP: 0033:0x7fa1f975e98e [ 96.390242][ T8473] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.390260][ T8473] RSP: 002b:00007fa1fa6a2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 96.390280][ T8473] RAX: ffffffffffffffda RBX: 00007fa1fa6a46c0 RCX: 00007fa1f975e98e [ 96.390292][ T8473] RDX: 0000000000000020 RSI: 00007fa1fa6a3000 RDI: 0000000000000008 [ 96.390303][ T8473] RBP: 0000000000000000 R08: 00007fa1fa6a2f04 R09: 000000000000000c [ 96.390314][ T8473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 96.390325][ T8473] R13: 00007fa1fa6a2f58 R14: 00007fa1fa6a3000 R15: 0000000000000000 [ 96.390351][ T8473] [ 96.516605][ T8484] netlink: 'syz.2.842': attribute type 11 has an invalid length. [ 96.516704][ T8485] netlink: 'syz.2.842': attribute type 11 has an invalid length. [ 96.601804][ T8489] bond4 (unregistering): Released all slaves [ 96.701882][ T8498] loop5: detected capacity change from 0 to 7 [ 96.702591][ T8498] Dev loop5: unable to read RDB block 7 [ 96.702605][ T8498] loop5: AHDI p1 [ 96.702614][ T8498] loop5: partition table partially beyond EOD, truncated [ 96.776306][ T8504] openvswitch: netlink: Duplicate or invalid key (type 0). [ 96.833683][ T8512] __nla_validate_parse: 7 callbacks suppressed [ 96.833702][ T8512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.852'. [ 96.847639][ T8508] netlink: 'syz.1.851': attribute type 1 has an invalid length. [ 96.847652][ T8508] netlink: 'syz.1.851': attribute type 5 has an invalid length. [ 96.948701][ T8525] netlink: 36 bytes leftover after parsing attributes in process `syz.2.858'. [ 96.998334][ T8529] netlink: 116 bytes leftover after parsing attributes in process `syz.3.860'. [ 97.030978][ T8531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.861'. [ 97.067905][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'. [ 97.111377][ T8537] netlink: 24 bytes leftover after parsing attributes in process `syz.3.864'. [ 97.214756][ T8542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.866'. [ 97.230142][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.866'. [ 97.241089][ T8544] FAULT_INJECTION: forcing a failure. [ 97.241089][ T8544] name failslab, interval 1, probability 0, space 0, times 0 [ 97.241125][ T8544] CPU: 2 UID: 0 PID: 8544 Comm: syz.3.867 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.241152][ T8544] Tainted: [L]=SOFTLOCKUP [ 97.241158][ T8544] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.241169][ T8544] Call Trace: [ 97.241176][ T8544] [ 97.241192][ T8544] dump_stack_lvl+0x100/0x190 [ 97.241227][ T8544] should_fail_ex.cold+0x5/0xa [ 97.241256][ T8544] should_failslab+0xc2/0x120 [ 97.241282][ T8544] kmem_cache_alloc_noprof+0x92/0x6a0 [ 97.241301][ T8544] ? d_instantiate+0x8a/0xb0 [ 97.241330][ T8544] ? alloc_empty_file+0x5b/0x1c0 [ 97.241359][ T8544] alloc_empty_file+0x5b/0x1c0 [ 97.241385][ T8544] alloc_file_pseudo+0x183/0x290 [ 97.241413][ T8544] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 97.241437][ T8544] ? alloc_fd+0x471/0x7a0 [ 97.241463][ T8544] ? do_raw_spin_unlock+0x145/0x1e0 [ 97.241492][ T8544] __anon_inode_getfile+0xe8/0x280 [ 97.241516][ T8544] anon_inode_getfile_fmode+0x37/0xa0 [ 97.241538][ T8544] __do_sys_timerfd_create+0x2d6/0x3f0 [ 97.241559][ T8544] ? do_syscall_64+0xae/0x790 [ 97.241596][ T8544] do_syscall_64+0x123/0x790 [ 97.241625][ T8544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.241647][ T8544] RIP: 0033:0x7fa1f979e159 [ 97.241663][ T8544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.241681][ T8544] RSP: 002b:00007fa1fa6a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 97.241699][ T8544] RAX: ffffffffffffffda RBX: 00007fa1f9a25fa0 RCX: 00007fa1f979e159 [ 97.241711][ T8544] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000007 [ 97.241722][ T8544] RBP: 00007fa1f983503b R08: 0000000000000000 R09: 0000000000000000 [ 97.241733][ T8544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.241744][ T8544] R13: 00007fa1f9a26038 R14: 00007fa1f9a25fa0 R15: 00007ffc5020aeb8 [ 97.241769][ T8544] [ 97.418320][ T8552] 8021q: adding VLAN 0 to HW filter on device bond4 [ 97.431939][ T8552] bond3: (slave veth0_to_bond): Releasing backup interface [ 97.438746][ T8552] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 97.447809][ T8559] netlink: 100 bytes leftover after parsing attributes in process `syz.2.874'. [ 97.556066][ T8573] loop5: detected capacity change from 0 to 7 [ 97.556735][ T8569] bond9: (slave dummy0): Device is not bonding slave [ 97.556754][ T8569] bond9: option active_slave: invalid value (dummy0) [ 97.560749][ T8569] bond9 (unregistering): Released all slaves [ 97.562477][ T8573] Dev loop5: unable to read RDB block 7 [ 97.562499][ T8573] loop5: AHDI p1 [ 97.562516][ T8573] loop5: partition table partially beyond EOD, truncated [ 97.601818][ T5847] usb 5-1: USB disconnect, device number 4 [ 97.659316][ T8579] openvswitch: netlink: Duplicate or invalid key (type 0). [ 97.711462][ T8586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.886'. [ 97.732551][ T5742] Bluetooth: hci2: Malformed Event: 0x02 [ 97.746658][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 97.746677][ T43] audit: type=1400 audit(1789919505.881:7455): avc: denied { bind } for pid=8589 comm="syz.1.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.747969][ T43] audit: type=1400 audit(1789919505.881:7456): avc: denied { setopt } for pid=8589 comm="syz.1.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.748162][ T43] audit: type=1400 audit(1789919505.881:7457): avc: denied { connect } for pid=8589 comm="syz.1.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.752993][ T43] audit: type=1400 audit(1789919505.890:7458): avc: denied { mount } for pid=8589 comm="syz.1.885" name="/" dev="hugetlbfs" ino=25958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 97.796664][ T8590] netlink: 'syz.1.885': attribute type 2 has an invalid length. [ 97.809727][ T43] audit: type=1326 audit(1789919505.937:7459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.2.893" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4d759e159 code=0x0 [ 97.830828][ T43] audit: type=1400 audit(1789919505.956:7460): avc: denied { unmount } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 97.867228][ T8606] geneve2: entered promiscuous mode [ 97.867242][ T8606] geneve2: entered allmulticast mode [ 98.064213][ T43] audit: type=1400 audit(1789919506.180:7461): avc: denied { read } for pid=8616 comm="syz.3.899" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 98.064261][ T43] audit: type=1400 audit(1789919506.180:7462): avc: denied { open } for pid=8616 comm="syz.3.899" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 98.135202][ T43] audit: type=1400 audit(1789919506.236:7463): avc: denied { execheap } for pid=8616 comm="syz.3.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 98.156396][ T5847] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 98.338122][ T5847] usb 5-1: Using ep0 maxpacket: 32 [ 98.338699][ T5847] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 98.341090][ T5847] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 98.341112][ T5847] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 98.341129][ T5847] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.341145][ T5847] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 98.341180][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 98.341199][ T5847] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 98.341218][ T5847] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 98.341251][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.343618][ T5847] usb 5-1: config 0 descriptor?? [ 98.398268][ T8632] 8021q: adding VLAN 0 to HW filter on device bond13 [ 98.603709][ T8639] xt_hashlimit: size too large, truncated to 1048576 [ 98.836869][ T8653] 8021q: adding VLAN 0 to HW filter on device bond9 [ 98.860772][ T8653] bond4: (slave veth0_to_bond): Releasing backup interface [ 98.864030][ T8653] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 98.969283][ T8671] openvswitch: netlink: Duplicate or invalid key (type 0). [ 98.978827][ T8668] bond14: (slave dummy0): Device is not bonding slave [ 98.978849][ T8668] bond14: option active_slave: invalid value (dummy0) [ 98.992152][ T8668] bond14 (unregistering): Released all slaves [ 99.030736][ T8674] IPv6: Can't replace route, no match found [ 99.033493][ T43] audit: type=1400 audit(1789919507.078:7464): avc: denied { read } for pid=8672 comm="syz.3.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.270203][ T8696] validate_nla: 4 callbacks suppressed [ 99.270220][ T8696] netlink: 'syz.1.929': attribute type 7 has an invalid length. [ 99.270227][ T8696] netlink: 'syz.1.929': attribute type 8 has an invalid length. [ 99.617586][ T8711] comedi comedi4: bad chanlist[0]=0x0005d100 chan=53504 range length=2 [ 99.645689][ T8713] FAULT_INJECTION: forcing a failure. [ 99.645689][ T8713] name failslab, interval 1, probability 0, space 0, times 0 [ 99.645711][ T8713] CPU: 0 UID: 0 PID: 8713 Comm: syz.1.935 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.645747][ T8713] Tainted: [L]=SOFTLOCKUP [ 99.645751][ T8713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.645757][ T8713] Call Trace: [ 99.645761][ T8713] [ 99.645766][ T8713] dump_stack_lvl+0x100/0x190 [ 99.645786][ T8713] should_fail_ex.cold+0x5/0xa [ 99.645803][ T8713] should_failslab+0xc2/0x120 [ 99.645818][ T8713] __kmalloc_noprof+0xfc/0x840 [ 99.645829][ T8713] ? rcu_is_watching+0x13/0xc0 [ 99.645844][ T8713] ? tomoyo_realpath_from_path+0xb6/0x690 [ 99.645861][ T8713] tomoyo_realpath_from_path+0xb6/0x690 [ 99.645877][ T8713] tomoyo_path_number_perm+0x23c/0x580 [ 99.645888][ T8713] ? tomoyo_path_number_perm+0x22e/0x580 [ 99.645900][ T8713] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 99.645916][ T8713] ? __lock_acquire+0x5c0/0x1f40 [ 99.645934][ T8713] ? __fget_files+0x34/0x3d0 [ 99.645948][ T8713] ? find_held_lock+0x2b/0x80 [ 99.645963][ T8713] ? hook_file_ioctl_common+0x140/0x440 [ 99.645981][ T8713] ? __fget_files+0x21f/0x3d0 [ 99.645997][ T8713] security_file_ioctl+0xd3/0x230 [ 99.646009][ T8713] __x64_sys_ioctl+0xb7/0x210 [ 99.646022][ T8713] do_syscall_64+0x123/0x790 [ 99.646043][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.646055][ T8713] RIP: 0033:0x7fab1d99e159 [ 99.646064][ T8713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.646075][ T8713] RSP: 002b:00007fab1e951028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.646086][ T8713] RAX: ffffffffffffffda RBX: 00007fab1dc25fa0 RCX: 00007fab1d99e159 [ 99.646094][ T8713] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 99.646100][ T8713] RBP: 00007fab1e951090 R08: 0000000000000000 R09: 0000000000000000 [ 99.646107][ T8713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.646113][ T8713] R13: 00007fab1dc26038 R14: 00007fab1dc25fa0 R15: 00007ffe1239a7b8 [ 99.646127][ T8713] [ 99.646156][ T8713] ERROR: Out of memory at tomoyo_realpath_from_path. [ 99.646227][ T8713] comedi comedi4: bad chanlist[0]=0x0005d100 chan=53504 range length=2 [ 99.733695][ T8717] ipvlan0: left allmulticast mode [ 99.745902][ T8717] netlink: 'syz.1.938': attribute type 4 has an invalid length. [ 100.262499][ T8755] xt_hashlimit: size too large, truncated to 1048576 [ 100.549068][ T8765] FAULT_INJECTION: forcing a failure. [ 100.549068][ T8765] name failslab, interval 1, probability 0, space 0, times 0 [ 100.549101][ T8765] CPU: 0 UID: 0 PID: 8765 Comm: syz.2.956 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.549124][ T8765] Tainted: [L]=SOFTLOCKUP [ 100.549131][ T8765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.549140][ T8765] Call Trace: [ 100.549147][ T8765] [ 100.549154][ T8765] dump_stack_lvl+0x100/0x190 [ 100.549184][ T8765] should_fail_ex.cold+0x5/0xa [ 100.549213][ T8765] should_failslab+0xc2/0x120 [ 100.549238][ T8765] __kmalloc_cache_noprof+0x91/0x6d0 [ 100.549269][ T8765] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 100.549297][ T8765] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 100.549321][ T8765] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 100.549346][ T8765] selinux_socket_post_create+0x368/0x7e0 [ 100.549399][ T8765] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 100.549434][ T8765] ? tcp_v4_init_sock+0x15/0xb0 [ 100.549459][ T8765] ? __pfx_tcp_v4_init_sock+0x10/0x10 [ 100.549483][ T8765] ? inet_create+0x962/0x1060 [ 100.549514][ T8765] security_socket_post_create+0xaf/0x270 [ 100.549547][ T8765] __sock_create+0x70b/0x860 [ 100.549581][ T8765] mptcp_subflow_create_socket+0xec/0xa30 [ 100.549606][ T8765] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 100.549631][ T8765] ? lock_acquire+0x1d1/0x380 [ 100.549663][ T8765] __mptcp_nmpc_sk+0x17f/0x880 [ 100.549687][ T8765] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 100.549712][ T8765] ? __local_bh_enable_ip+0xa5/0x120 [ 100.549738][ T8765] mptcp_listen+0x135/0x4e0 [ 100.549763][ T8765] ? __pfx_mptcp_listen+0x10/0x10 [ 100.549793][ T8765] __sys_listen_socket+0x108/0x150 [ 100.549813][ T8765] __sys_listen+0xa7/0x130 [ 100.549832][ T8765] __x64_sys_listen+0x53/0x80 [ 100.549851][ T8765] do_syscall_64+0x123/0x790 [ 100.549879][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.549899][ T8765] RIP: 0033:0x7fc4d759e159 [ 100.549915][ T8765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.549933][ T8765] RSP: 002b:00007fc4d84aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 100.549952][ T8765] RAX: ffffffffffffffda RBX: 00007fc4d7825fa0 RCX: 00007fc4d759e159 [ 100.549964][ T8765] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000005 [ 100.549976][ T8765] RBP: 00007fc4d763503b R08: 0000000000000000 R09: 0000000000000000 [ 100.549989][ T8765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.550001][ T8765] R13: 00007fc4d7826038 R14: 00007fc4d7825fa0 R15: 00007fffae411818 [ 100.550028][ T8765] [ 100.650855][ T8765] overlay: Unknown parameter 'fsuuid' [ 100.726500][ T5730] tipc: Resetting bearer [ 100.746766][ T5730] tipc: Disabling bearer [ 100.747790][ T5730] syz_tun (unregistering): left promiscuous mode [ 100.951392][ T5809] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.951413][ T5809] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.016455][ T5847] usb 5-1: USB disconnect, device number 5 [ 101.075970][ T5809] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.075992][ T5809] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.132395][ T8775] openvswitch: netlink: Duplicate or invalid key (type 0). [ 101.168004][ T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.170025][ T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.177226][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.178520][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.179036][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.180031][ T5809] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.180050][ T5809] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.232774][ T8781] bond14: (slave dummy0): Device is not bonding slave [ 101.232796][ T8781] bond14: option active_slave: invalid value (dummy0) [ 101.236942][ T8781] bond14 (unregistering): Released all slaves [ 101.272237][ T5809] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.272271][ T5809] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.478577][ T5809] bridge_slave_1: left allmulticast mode [ 101.480046][ T5809] bridge_slave_1: left promiscuous mode [ 101.483278][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.502461][ T5809] bridge_slave_0: left allmulticast mode [ 101.502479][ T5809] bridge_slave_0: left promiscuous mode [ 101.502624][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.585207][ T5809] ip6gretap0 (unregistering): left promiscuous mode [ 101.627141][ T5809] gretap0 (unregistering): left promiscuous mode [ 101.630381][ T5734] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 101.693023][ T5809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.708595][ T5809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.710694][ T5809] bond0 (unregistering): Released all slaves [ 101.718527][ T5809] bond1 (unregistering): Released all slaves [ 101.727552][ T5809] bond2 (unregistering): (slave bond3): Releasing backup interface [ 101.728301][ T5809] bond2 (unregistering): Released all slaves [ 101.741730][ T5809] bond3 (unregistering): Released all slaves [ 101.751652][ T5809] bond4 (unregistering): Released all slaves [ 101.778127][ T5809] bond5 (unregistering): Released all slaves [ 101.803247][ T5734] usb 5-1: Using ep0 maxpacket: 32 [ 101.807854][ T5734] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 101.808838][ T5734] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 101.808853][ T5734] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 101.808864][ T5734] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.808875][ T5734] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 101.808896][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 101.808908][ T5734] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 101.808939][ T5734] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 101.808961][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.810848][ T5809] bond6 (unregistering): Released all slaves [ 101.812079][ T8819] netlink: 'syz.3.972': attribute type 7 has an invalid length. [ 101.812096][ T8819] netlink: 'syz.3.972': attribute type 8 has an invalid length. [ 101.830839][ T5809] bond7 (unregistering): (slave bond8): Releasing backup interface [ 101.838980][ T5809] bond7 (unregistering): Released all slaves [ 101.846138][ T5809] bond8 (unregistering): Released all slaves [ 101.854908][ T5734] usb 5-1: config 0 descriptor?? [ 101.857599][ T5809] bond9 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 101.862526][ T5809] bond9 (unregistering): Released all slaves [ 101.932327][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.001040][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 102.019165][ T5809] tipc: Left network mode [ 102.070317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.275811][ T8834] __nla_validate_parse: 37 callbacks suppressed [ 102.275830][ T8834] netlink: 100 bytes leftover after parsing attributes in process `syz.1.975'. [ 102.375137][ T5809] hsr_slave_0: left promiscuous mode [ 102.375977][ T5809] hsr_slave_1: left promiscuous mode [ 102.387352][ T5809] veth1_macvtap: left promiscuous mode [ 102.387400][ T5809] veth0_macvtap: left promiscuous mode [ 102.387482][ T5809] veth1_vlan: left promiscuous mode [ 102.593782][ T5809] team0 (unregistering): Port device team_slave_1 removed [ 102.602733][ T5809] team0 (unregistering): Port device team_slave_0 removed [ 102.672127][ T5443] 8021q: adding VLAN 0 to HW filter on device eth3 [ 102.737506][ T8777] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.737638][ T8777] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.737728][ T8777] bridge_slave_0: entered allmulticast mode [ 102.738940][ T8777] bridge_slave_0: entered promiscuous mode [ 102.754061][ T8777] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.754134][ T8777] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.754190][ T8777] bridge_slave_1: entered allmulticast mode [ 102.754925][ T8777] bridge_slave_1: entered promiscuous mode [ 102.778295][ T8777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.779849][ T8777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.792175][ T8777] team0: Port device team_slave_0 added [ 102.793500][ T8777] team0: Port device team_slave_1 added [ 102.806324][ T8777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.806335][ T8777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.806348][ T8777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.807126][ T8777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.807133][ T8777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.807146][ T8777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.826073][ T8777] hsr_slave_0: entered promiscuous mode [ 102.826506][ T8777] hsr_slave_1: entered promiscuous mode [ 102.827198][ T8777] debugfs: 'hsr0' already exists in 'hsr' [ 102.827210][ T8777] Cannot create hsr debugfs directory [ 102.872130][ T5443] 8021q: adding VLAN 0 to HW filter on device eth4 [ 103.012190][ T8777] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.017594][ T8777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.018537][ T8777] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.021539][ T8777] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.025058][ T8777] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.038456][ T8777] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.038942][ T8777] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.041606][ T8777] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.076049][ T8777] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.076139][ T8777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.076441][ T8777] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.076520][ T8777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.118038][ T5443] 8021q: adding VLAN 0 to HW filter on device eth5 [ 103.134290][ T8874] bond0: option slaves: invalid value (-dummy0) [ 103.153890][ T8777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.172395][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.186837][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.200130][ T8777] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.206855][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.206900][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.210912][ T8878] db_root: cannot open: /dev/net/tun [ 103.210921][ T8878] db_root: not a directory: /dev/net/tun [ 103.211262][ T8880] loop5: detected capacity change from 0 to 7 [ 103.213001][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 103.213011][ T43] audit: type=1400 audit(1789919510.999:7483): avc: denied { getopt } for pid=8877 comm="syz.3.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.214557][ T8880] Dev loop5: unable to read RDB block 7 [ 103.214572][ T8880] loop5: AHDI p1 [ 103.214582][ T8880] loop5: partition table partially beyond EOD, truncated [ 103.215114][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.215203][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.265443][ T8885] comedi comedi4: bad chanlist[0]=0x0005d100 chan=53504 range length=2 [ 103.350641][ T5742] Bluetooth: hci1: command tx timeout [ 103.453459][ T8903] FAULT_INJECTION: forcing a failure. [ 103.453459][ T8903] name failslab, interval 1, probability 0, space 0, times 0 [ 103.453492][ T8903] CPU: 1 UID: 0 PID: 8903 Comm: syz.3.987 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.453516][ T8903] Tainted: [L]=SOFTLOCKUP [ 103.453523][ T8903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.453533][ T8903] Call Trace: [ 103.453540][ T8903] [ 103.453548][ T8903] dump_stack_lvl+0x100/0x190 [ 103.453580][ T8903] should_fail_ex.cold+0x5/0xa [ 103.453606][ T8903] should_failslab+0xc2/0x120 [ 103.453630][ T8903] __kmalloc_noprof+0xfc/0x840 [ 103.453649][ T8903] ? tomoyo_encode2+0xfb/0x3c0 [ 103.453675][ T8903] tomoyo_encode2+0xfb/0x3c0 [ 103.453700][ T8903] tomoyo_encode+0x29/0x50 [ 103.453720][ T8903] tomoyo_realpath_from_path+0x18c/0x690 [ 103.453747][ T8903] tomoyo_path_number_perm+0x23c/0x580 [ 103.453765][ T8903] ? tomoyo_path_number_perm+0x22e/0x580 [ 103.453785][ T8903] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 103.453815][ T8903] ? __lock_acquire+0x5c0/0x1f40 [ 103.453846][ T8903] ? __fget_files+0x34/0x3d0 [ 103.453869][ T8903] ? find_held_lock+0x2b/0x80 [ 103.453894][ T8903] ? hook_file_ioctl_common+0x140/0x440 [ 103.453924][ T8903] ? __fget_files+0x21f/0x3d0 [ 103.453950][ T8903] security_file_ioctl+0xd3/0x230 [ 103.453973][ T8903] __x64_sys_ioctl+0xb7/0x210 [ 103.453993][ T8903] do_syscall_64+0x123/0x790 [ 103.454019][ T8903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.454038][ T8903] RIP: 0033:0x7fa1f979e159 [ 103.454053][ T8903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.454069][ T8903] RSP: 002b:00007fa1fa6a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.454086][ T8903] RAX: ffffffffffffffda RBX: 00007fa1f9a25fa0 RCX: 00007fa1f979e159 [ 103.454098][ T8903] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 103.454109][ T8903] RBP: 00007fa1fa6a4090 R08: 0000000000000000 R09: 0000000000000000 [ 103.454120][ T8903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.454130][ T8903] R13: 00007fa1f9a26038 R14: 00007fa1f9a25fa0 R15: 00007ffc5020aeb8 [ 103.454162][ T8903] [ 103.454179][ T8903] ERROR: Out of memory at tomoyo_realpath_from_path. [ 103.454271][ T8903] comedi comedi4: bad chanlist[0]=0x0005d100 chan=53504 range length=2 [ 103.552379][ T43] audit: type=1400 audit(1789919511.308:7484): avc: denied { write } for pid=8907 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.641185][ T8918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.990'. [ 103.652266][ T43] audit: type=1400 audit(1789919511.401:7485): avc: denied { write } for pid=8916 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.692244][ T8777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.823385][ T43] audit: type=1400 audit(1789919511.570:7486): avc: denied { write } for pid=8926 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.874829][ T8939] comedi comedi4: bad chanlist[0]=0x0005d100 chan=53504 range length=2 [ 103.899291][ T43] audit: type=1400 audit(1789919511.635:7487): avc: denied { write } for pid=8940 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.919334][ T8945] netlink: 'syz.1.996': attribute type 2 has an invalid length. [ 103.934310][ T8777] veth0_vlan: entered promiscuous mode [ 103.943842][ T8777] veth1_vlan: entered promiscuous mode [ 103.958922][ T8777] veth0_macvtap: entered promiscuous mode [ 103.961388][ T8777] veth1_macvtap: entered promiscuous mode [ 103.967728][ T8777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.975376][ T8777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.980664][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.998'. [ 103.990709][ T8949] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 104.009684][ T43] audit: type=1400 audit(1789919511.738:7488): avc: denied { write } for pid=8946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.036017][ T43] audit: type=1400 audit(1789919511.757:7489): avc: denied { read write } for pid=8954 comm="syz.3.1000" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 104.036047][ T43] audit: type=1400 audit(1789919511.757:7490): avc: denied { open } for pid=8954 comm="syz.3.1000" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 104.040287][ T43] audit: type=1400 audit(1789919511.766:7491): avc: denied { ioctl } for pid=8954 comm="syz.3.1000" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 104.046028][ T5599] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.046193][ T5599] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.046320][ T5599] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.046496][ T5599] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.108934][ T43] audit: type=1400 audit(1789919511.832:7492): avc: denied { write } for pid=8957 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.122669][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.122683][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.128599][ T8955] ip_tables: iptables: counters copy to user failed while replacing table [ 104.168756][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.168776][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.308698][ T8978] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1004'. [ 104.465319][ T8996] CIFS: Invalid mount helper version specified [ 104.567275][ T5847] usb 5-1: USB disconnect, device number 6 [ 104.579406][ T9007] xt_hashlimit: size too large, truncated to 1048576 [ 104.603177][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1011'. [ 104.662536][ T9014] lapbether: lapb_data_request error - 4 [ 104.679863][ T9018] openvswitch: netlink: Message has 8 unknown bytes. [ 104.751617][ T9021] 8021q: adding VLAN 0 to HW filter on device bond5 [ 104.760020][ T9021] bond4: (slave veth0_to_bond): Releasing backup interface [ 104.771735][ T9021] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 104.877513][ T9033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.925726][ T9022] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1015'. [ 105.040005][ T9036] openvswitch: netlink: Duplicate or invalid key (type 0). [ 105.092809][ T42] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 105.111202][ T9041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1023'. [ 105.166970][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1024'. [ 105.202629][ T9047] bond11: (slave dummy0): Device is not bonding slave [ 105.202643][ T9047] bond11: option active_slave: invalid value (dummy0) [ 105.209346][ T9047] bond11 (unregistering): Released all slaves [ 105.264090][ T42] usb 8-1: Using ep0 maxpacket: 32 [ 105.267727][ T42] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 105.268751][ T42] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 105.268771][ T42] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 105.268789][ T42] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 105.268823][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.268842][ T42] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 105.268861][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 105.268878][ T42] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 105.268935][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.273422][ T42] usb 8-1: config 0 descriptor?? [ 105.314124][ T9056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1030'. [ 105.314146][ T9056] netlink: 'syz.0.1030': attribute type 7 has an invalid length. [ 105.314153][ T9056] netlink: 'syz.0.1030': attribute type 8 has an invalid length. [ 105.314160][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1030'. [ 105.471412][ T9064] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9064 comm=syz.0.1034 [ 105.573652][ T5742] Bluetooth: hci1: command tx timeout [ 105.602359][ T9075] loop5: detected capacity change from 0 to 7 [ 105.603494][ T9075] Dev loop5: unable to read RDB block 7 [ 105.603510][ T9075] loop5: AHDI p1 [ 105.603524][ T9075] loop5: partition table partially beyond EOD, truncated [ 105.640943][ T9077] CacheFiles: No cache directory specified [ 105.651061][ T9079] comedi comedi4: bad chanlist[0]=0x0005d100 chan=53504 range length=2 [ 105.736402][ T9089] FAULT_INJECTION: forcing a failure. [ 105.736402][ T9089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.736425][ T9089] CPU: 0 UID: 0 PID: 9089 Comm: syz.1.1045 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.736441][ T9089] Tainted: [L]=SOFTLOCKUP [ 105.736446][ T9089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.736453][ T9089] Call Trace: [ 105.736457][ T9089] [ 105.736461][ T9089] dump_stack_lvl+0x100/0x190 [ 105.736494][ T9089] should_fail_ex.cold+0x5/0xa [ 105.736511][ T9089] _copy_from_user+0x2e/0xd0 [ 105.736528][ T9089] comedi_unlocked_ioctl+0xf3f/0x3310 [ 105.736547][ T9089] ? tomoyo_path_number_perm+0x188/0x580 [ 105.736561][ T9089] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 105.736586][ T9089] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 105.736601][ T9089] ? do_vfs_ioctl+0x226/0x13e0 [ 105.736613][ T9089] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 105.736623][ T9089] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 105.736639][ T9089] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 105.736654][ T9089] ? __fget_files+0x34/0x3d0 [ 105.736674][ T9089] ? selinux_file_ioctl+0x13b/0x290 [ 105.736685][ T9089] ? selinux_file_ioctl+0xb6/0x290 [ 105.736699][ T9089] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 105.736714][ T9089] __x64_sys_ioctl+0x18e/0x210 [ 105.736726][ T9089] do_syscall_64+0x123/0x790 [ 105.736747][ T9089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.736760][ T9089] RIP: 0033:0x7fab1d99e159 [ 105.736770][ T9089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.736781][ T9089] RSP: 002b:00007fab1e951028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.736794][ T9089] RAX: ffffffffffffffda RBX: 00007fab1dc25fa0 RCX: 00007fab1d99e159 [ 105.736801][ T9089] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 105.736808][ T9089] RBP: 00007fab1e951090 R08: 0000000000000000 R09: 0000000000000000 [ 105.736814][ T9089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.736821][ T9089] R13: 00007fab1dc26038 R14: 00007fab1dc25fa0 R15: 00007ffe1239a7b8 [ 105.736835][ T9089] [ 105.740235][ T9091] sg_write: data in/out 262108/8 bytes for SCSI command 0xd0-- guessing data in; [ 105.740235][ T9091] program syz.4.1046 not setting count and/or reply_len properly [ 105.943827][ T9108] netlink: 'syz.1.1053': attribute type 4 has an invalid length. [ 105.949571][ T9108] comedi comedi4: bad chanlist[0]=0x0005d100 chan=53504 range length=2 [ 105.979113][ T9112] netlink: 'syz.4.1054': attribute type 2 has an invalid length. [ 106.063661][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.063797][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.063902][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.064043][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.064151][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.064254][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.064358][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.064478][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.064580][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.065580][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.065692][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.065796][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.065899][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.066008][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.066112][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.066216][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.066318][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.066421][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.067862][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.067977][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.068078][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.068176][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.068278][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.068379][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.068476][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.068576][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.068676][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.068779][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.068885][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.069017][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.069116][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.069218][ T9118] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 106.471233][ T9160] xt_hashlimit: size too large, truncated to 1048576 [ 106.568010][ T9173] 8021q: adding VLAN 0 to HW filter on device bond14 [ 106.572463][ T9173] bond8: (slave veth0_to_bond): Releasing backup interface [ 106.577635][ T9173] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 106.621012][ T9180] openvswitch: netlink: Duplicate or invalid key (type 0). [ 106.767115][ T9197] syzkaller0: entered promiscuous mode [ 106.767134][ T9197] syzkaller0: entered allmulticast mode [ 107.158264][ T9220] bond12: (slave dummy0): Device is not bonding slave [ 107.158284][ T9220] bond12: option active_slave: invalid value (dummy0) [ 107.159771][ T9220] bond12 (unregistering): Released all slaves [ 107.344854][ T9237] netlink: 'syz.0.1089': attribute type 7 has an invalid length. [ 107.344869][ T9237] netlink: 'syz.0.1089': attribute type 8 has an invalid length. [ 107.694106][ T9257] __nla_validate_parse: 14 callbacks suppressed [ 107.694126][ T9257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1097'. [ 107.738092][ T9253] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1094'. [ 107.773033][ T9259] loop5: detected capacity change from 0 to 7 [ 107.773535][ T9259] Dev loop5: unable to read RDB block 7 [ 107.773552][ T9259] loop5: AHDI p1 [ 107.773562][ T9259] loop5: partition table partially beyond EOD, truncated [ 107.813266][ T9261] comedi comedi4: bad chanlist[0]=0x0005d100 chan=53504 range length=2 [ 107.882978][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'. [ 107.992397][ T9267] FAULT_INJECTION: forcing a failure. [ 107.992397][ T9267] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 107.992461][ T9267] CPU: 0 UID: 0 PID: 9267 Comm: syz.0.1102 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.992486][ T9267] Tainted: [L]=SOFTLOCKUP [ 107.992493][ T9267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.992503][ T9267] Call Trace: [ 107.992509][ T9267] [ 107.992517][ T9267] dump_stack_lvl+0x100/0x190 [ 107.992563][ T9267] should_fail_ex.cold+0x5/0xa [ 107.992584][ T9267] ? prepare_alloc_pages+0x16d/0x5b0 [ 107.992614][ T9267] should_fail_alloc_page+0xeb/0x140 [ 107.992639][ T9267] prepare_alloc_pages+0x1f0/0x5b0 [ 107.992665][ T9267] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 107.992695][ T9267] ? is_bpf_text_address+0x8a/0x1a0 [ 107.992719][ T9267] ? bpf_ksym_find+0x128/0x1c0 [ 107.992746][ T9267] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 107.992776][ T9267] ? is_bpf_text_address+0x94/0x1a0 [ 107.992799][ T9267] ? kernel_text_address+0x8d/0x100 [ 107.992826][ T9267] ? __kernel_text_address+0xd/0x30 [ 107.992852][ T9267] ? unwind_get_return_address+0x59/0xa0 [ 107.992877][ T9267] ? arch_stack_walk+0xa6/0xf0 [ 107.992930][ T9267] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 107.992966][ T9267] ? tomoyo_path_number_perm+0x46d/0x580 [ 107.992987][ T9267] ? stack_trace_save+0x8e/0xc0 [ 107.993007][ T9267] ? __lock_acquire+0x5c0/0x1f40 [ 107.993029][ T9267] ? __lock_acquire+0x5c0/0x1f40 [ 107.993049][ T9267] ? __kasan_slab_free+0x5f/0x80 [ 107.993073][ T9267] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.993096][ T9267] ? policy_nodemask+0xed/0x4f0 [ 107.993122][ T9267] alloc_pages_mpol+0x201/0x550 [ 107.993149][ T9267] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 107.993172][ T9267] ? comedi_unlocked_ioctl+0x180/0x3310 [ 107.993207][ T9267] ___kmalloc_large_node+0xe8/0x130 [ 107.993230][ T9267] __kmalloc_large_node_noprof+0x1c/0x70 [ 107.993257][ T9267] __kmalloc_noprof+0x5a8/0x840 [ 107.993278][ T9267] ? do_insn_ioctl+0xda/0x4e0 [ 107.993303][ T9267] do_insn_ioctl+0xda/0x4e0 [ 107.993327][ T9267] comedi_unlocked_ioctl+0xf68/0x3310 [ 107.993350][ T9267] ? tomoyo_path_number_perm+0x188/0x580 [ 107.993374][ T9267] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 107.993403][ T9267] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.993430][ T9267] ? do_vfs_ioctl+0x226/0x13e0 [ 107.993450][ T9267] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 107.993467][ T9267] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 107.993492][ T9267] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 107.993516][ T9267] ? __fget_files+0x34/0x3d0 [ 107.993550][ T9267] ? selinux_file_ioctl+0x13b/0x290 [ 107.993569][ T9267] ? selinux_file_ioctl+0xb6/0x290 [ 107.993591][ T9267] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 107.993616][ T9267] __x64_sys_ioctl+0x18e/0x210 [ 107.993637][ T9267] do_syscall_64+0x123/0x790 [ 107.993669][ T9267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.993689][ T9267] RIP: 0033:0x7f3fd119e159 [ 107.993704][ T9267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.993721][ T9267] RSP: 002b:00007f3fd2138028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.993740][ T9267] RAX: ffffffffffffffda RBX: 00007f3fd1425fa0 RCX: 00007f3fd119e159 [ 107.993752][ T9267] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 107.993763][ T9267] RBP: 00007f3fd2138090 R08: 0000000000000000 R09: 0000000000000000 [ 107.993774][ T9267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.993784][ T9267] R13: 00007f3fd1426038 R14: 00007f3fd1425fa0 R15: 00007fff67540878 [ 107.993810][ T9267] [ 108.072238][ T8802] usb 8-1: USB disconnect, device number 12 [ 108.132971][ T9274] netlink: 'syz.0.1106': attribute type 3 has an invalid length. [ 108.134051][ T9274] 9pnet_fd: Insufficient options for proto=fd [ 108.189929][ T9279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1107'. [ 108.308200][ T9288] netlink: 'syz.3.1111': attribute type 2 has an invalid length. [ 108.368175][ T9291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.370696][ T9291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.377234][ T9291] batadv_slave_1: entered promiscuous mode [ 108.516783][ T9299] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 108.570313][ T43] kauditd_printk_skb: 23 callbacks suppressed [ 108.570327][ T43] audit: type=1400 audit(1789919516.005:7516): avc: denied { map } for pid=9297 comm="syz.0.1113" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.570406][ T43] audit: type=1400 audit(1789919516.005:7517): avc: denied { execute } for pid=9297 comm="syz.0.1113" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.582013][ T9299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1113'. [ 108.619574][ T8802] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 108.758520][ T8802] usb 8-1: device descriptor read/64, error -71 [ 108.790589][ T1714] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 108.833536][ T5742] Bluetooth: hci1: command tx timeout [ 108.961580][ T1714] usb 9-1: Using ep0 maxpacket: 32 [ 108.963431][ T1714] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 108.964560][ T1714] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 108.964580][ T1714] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 108.964596][ T1714] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 108.964631][ T1714] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 108.964648][ T1714] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 108.964666][ T1714] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.964683][ T1714] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 108.964714][ T1714] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.971347][ T1714] usb 9-1: config 0 descriptor?? [ 109.015031][ T8802] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 109.043394][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'. [ 109.154139][ T8802] usb 8-1: device descriptor read/64, error -71 [ 109.194733][ T9312] netlink: 'syz.1.1117': attribute type 39 has an invalid length. [ 109.205980][ T9312] syz_tun (unregistering): left promiscuous mode [ 109.271905][ T8802] usb usb8-port1: attempt power cycle [ 109.464378][ T5742] Bluetooth: hci0: link tx timeout [ 109.464502][ T5742] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.495005][ T9326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1123'. [ 109.562663][ T9334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9334 comm=syz.1.1125 [ 109.565456][ T9335] CIFS: Attempting to mount //127.0.0.1/test [ 109.634926][ T8802] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 109.656739][ T8802] usb 8-1: device descriptor read/8, error -71 [ 109.912839][ T8802] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 109.936140][ T8802] usb 8-1: device descriptor read/8, error -71 [ 110.052209][ T8802] usb usb8-port1: unable to enumerate USB device [ 110.117760][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1127'. [ 110.141162][ T9344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1128'. [ 110.143650][ T9344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1128'. [ 110.280931][ T43] audit: type=1400 audit(1789919517.605:7518): avc: denied { ioctl } for pid=9354 comm="syz.0.1131" path="socket:[30051]" dev="sockfs" ino=30051 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.420789][ T9364] xt_hashlimit: size too large, truncated to 1048576 [ 110.453934][ T9335] CIFS: VFS: cifs_mount failed w/return code = -112 [ 110.580952][ T9371] 8021q: adding VLAN 0 to HW filter on device bond12 [ 110.584759][ T9371] bond9: (slave veth0_to_bond): Releasing backup interface [ 110.587889][ T9371] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 110.620142][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.630627][ T9378] openvswitch: netlink: Duplicate or invalid key (type 0). [ 111.005343][ T9393] bond15: (slave dummy0): Device is not bonding slave [ 111.005366][ T9393] bond15: option active_slave: invalid value (dummy0) [ 111.006938][ T9393] bond15 (unregistering): Released all slaves [ 111.177101][ T9396] ================================================================== [ 111.177115][ T9396] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4c/0xd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 111.177150][ T9396] Write of size 4 at addr ffff88802e4d9300 by task syz.1.1146/9396 [ 111.177166][ T9396] [ 111.177177][ T9396] CPU: 0 UID: 0 PID: 9396 Comm: syz.1.1146 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.177204][ T9396] Tainted: [L]=SOFTLOCKUP [ 111.177211][ T9396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.177220][ T9396] Call Trace: [ 111.177228][ T9396] [ 111.177236][ T9396] dump_stack_lvl+0x100/0x190 [ 111.177263][ T9396] print_report+0x13d/0x4b0 [ 111.177288][ T9396] ? __virt_addr_valid+0x239/0x430 [ 111.177309][ T9396] ? try_module_get+0x4c/0xd0 [ 111.177333][ T9396] kasan_report+0xdf/0x1c0 [ 111.177354][ T9396] ? try_module_get+0x4c/0xd0 [ 111.177381][ T9396] kasan_check_range+0x10f/0x1e0 [ 111.177407][ T9396] try_module_get+0x4c/0xd0 [ 111.177435][ T9396] dvb_device_open+0x124/0x3b0 [ 111.177463][ T9396] ? __pfx_dvb_device_open+0x10/0x10 [ 111.177498][ T9396] chrdev_open+0x234/0x6a0 [ 111.177521][ T9396] ? __pfx_chrdev_open+0x10/0x10 [ 111.177545][ T9396] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 111.177578][ T9396] do_dentry_open+0x6ab/0x14d0 [ 111.177599][ T9396] ? __pfx_chrdev_open+0x10/0x10 [ 111.177624][ T9396] vfs_open+0x82/0x3f0 [ 111.177651][ T9396] path_openat+0x19fa/0x2440 [ 111.177677][ T9396] ? __pfx_path_openat+0x10/0x10 [ 111.177705][ T9396] do_file_open+0x20e/0x430 [ 111.177730][ T9396] ? __pfx_do_file_open+0x10/0x10 [ 111.177757][ T9396] ? _raw_spin_unlock+0x28/0x50 [ 111.177779][ T9396] ? alloc_fd+0x471/0x7a0 [ 111.177802][ T9396] do_sys_openat2+0x10f/0x1e0 [ 111.177823][ T9396] ? __pfx_do_sys_openat2+0x10/0x10 [ 111.177852][ T9396] __x64_sys_openat+0x12d/0x210 [ 111.177877][ T9396] ? __pfx___x64_sys_openat+0x10/0x10 [ 111.177903][ T9396] do_syscall_64+0x123/0x790 [ 111.177929][ T9396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.177949][ T9396] RIP: 0033:0x7fab1d95e98e [ 111.177961][ T9396] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.177980][ T9396] RSP: 002b:00007fab1e950b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 111.178002][ T9396] RAX: ffffffffffffffda RBX: 00007fab1e9516c0 RCX: 00007fab1d95e98e [ 111.178015][ T9396] RDX: 0000000000000002 RSI: 00007fab1e950c00 RDI: ffffffffffffff9c [ 111.178026][ T9396] RBP: 00007fab1e950c00 R08: 0000000000000000 R09: 0000000000000000 [ 111.178039][ T9396] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 111.178051][ T9396] R13: 00007fab1dc26038 R14: 00007fab1dc25fa0 R15: 00007ffe1239a7b8 [ 111.178070][ T9396] [ 111.178077][ T9396] [ 111.178081][ T9396] Allocated by task 1: [ 111.178090][ T9396] kasan_save_stack+0x30/0x50 [ 111.178110][ T9396] kasan_save_track+0x14/0x30 [ 111.178129][ T9396] __kasan_kmalloc+0xaa/0xb0 [ 111.178146][ T9396] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 111.178175][ T9396] bus_add_driver+0x92/0x5b0 [ 111.178193][ T9396] driver_register+0x1e2/0x360 [ 111.178216][ T9396] i2c_register_driver+0xd9/0x1f0 [ 111.178240][ T9396] do_one_initcall+0x11c/0x6f0 [ 111.178259][ T9396] kernel_init_freeable+0x6ea/0x7b0 [ 111.178283][ T9396] kernel_init+0x21/0x1e0 [ 111.178296][ T9396] ret_from_fork+0x730/0xd60 [ 111.178314][ T9396] ret_from_fork_asm+0x1a/0x30 [ 111.178331][ T9396] [ 111.178335][ T9396] The buggy address belongs to the object at ffff88802e4d9200 [ 111.178335][ T9396] which belongs to the cache kmalloc-256 of size 256 [ 111.178351][ T9396] The buggy address is located 48 bytes to the right of [ 111.178351][ T9396] allocated 208-byte region [ffff88802e4d9200, ffff88802e4d92d0) [ 111.178370][ T9396] [ 111.178375][ T9396] The buggy address belongs to the physical page: [ 111.178383][ T9396] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e4d8 [ 111.178399][ T9396] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 111.178412][ T9396] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 111.178426][ T9396] page_type: f5(slab) [ 111.178441][ T9396] raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 111.178457][ T9396] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 111.178474][ T9396] head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 111.178496][ T9396] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 111.178514][ T9396] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 111.178550][ T9396] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 111.178559][ T9396] page dumped because: kasan: bad access detected [ 111.178570][ T9396] page_owner tracks the page as allocated [ 111.178576][ T9396] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8188898404 [ 111.178605][ T9396] post_alloc_hook+0xfd/0x120 [ 111.178631][ T9396] get_page_from_freelist+0x110d/0x35d0 [ 111.178657][ T9396] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 111.178684][ T9396] new_slab+0xa9/0x6e0 [ 111.178708][ T9396] refill_objects+0xe3/0x410 [ 111.178733][ T9396] __pcs_replace_empty_main+0x35e/0x650 [ 111.178758][ T9396] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 111.178784][ T9396] bus_add_driver+0x92/0x5b0 [ 111.178800][ T9396] driver_register+0x1e2/0x360 [ 111.178819][ T9396] usb_register_driver+0x21c/0x3e0 [ 111.178842][ T9396] do_one_initcall+0x11c/0x6f0 [ 111.178858][ T9396] kernel_init_freeable+0x6ea/0x7b0 [ 111.178880][ T9396] kernel_init+0x21/0x1e0 [ 111.178895][ T9396] ret_from_fork+0x730/0xd60 [ 111.178911][ T9396] ret_from_fork_asm+0x1a/0x30 [ 111.178928][ T9396] page_owner free stack trace missing [ 111.178934][ T9396] [ 111.178938][ T9396] Memory state around the buggy address: [ 111.178945][ T9396] ffff88802e4d9200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 111.178958][ T9396] ffff88802e4d9280: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 111.178970][ T9396] >ffff88802e4d9300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 111.178979][ T9396] ^ [ 111.178987][ T9396] ffff88802e4d9380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 111.179000][ T9396] ffff88802e4d9400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 111.179010][ T9396] ================================================================== [ 111.179049][ T9396] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 111.437584][ T9396] CPU: 0 UID: 0 PID: 9396 Comm: syz.1.1146 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.440885][ T9396] Tainted: [L]=SOFTLOCKUP [ 111.442216][ T9396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.445254][ T9396] Call Trace: [ 111.446286][ T9396] [ 111.447154][ T9396] dump_stack_lvl+0x100/0x190 [ 111.448477][ T9396] vpanic+0x553/0x970 [ 111.449666][ T9396] ? __pfx_vpanic+0x10/0x10 [ 111.451069][ T9396] ? mark_held_locks+0x40/0x70 [ 111.452595][ T9396] ? irqentry_exit+0x24d/0xa10 [ 111.454123][ T9396] ? try_module_get+0x4c/0xd0 [ 111.455510][ T9396] panic+0xd1/0xe0 [ 111.456568][ T9396] ? __pfx_panic+0x10/0x10 [ 111.457914][ T9396] check_panic_on_warn.cold+0x19/0x34 [ 111.459541][ T9396] end_report.part.0+0x3a/0x90 [ 111.461072][ T9396] kasan_report.cold+0xe/0x18 [ 111.462556][ T9396] ? try_module_get+0x4c/0xd0 [ 111.464200][ T9396] kasan_check_range+0x10f/0x1e0 [ 111.465774][ T9396] try_module_get+0x4c/0xd0 [ 111.467207][ T9396] dvb_device_open+0x124/0x3b0 [ 111.468714][ T9396] ? __pfx_dvb_device_open+0x10/0x10 [ 111.470460][ T9396] chrdev_open+0x234/0x6a0 [ 111.471876][ T9396] ? __pfx_chrdev_open+0x10/0x10 [ 111.473452][ T9396] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 111.475438][ T9396] do_dentry_open+0x6ab/0x14d0 [ 111.476929][ T9396] ? __pfx_chrdev_open+0x10/0x10 [ 111.478430][ T9396] vfs_open+0x82/0x3f0 [ 111.479694][ T9396] path_openat+0x19fa/0x2440 [ 111.481097][ T9396] ? __pfx_path_openat+0x10/0x10 [ 111.482568][ T9396] do_file_open+0x20e/0x430 [ 111.484015][ T9396] ? __pfx_do_file_open+0x10/0x10 [ 111.485611][ T9396] ? _raw_spin_unlock+0x28/0x50 [ 111.487138][ T9396] ? alloc_fd+0x471/0x7a0 [ 111.488503][ T9396] do_sys_openat2+0x10f/0x1e0 [ 111.489992][ T9396] ? __pfx_do_sys_openat2+0x10/0x10 [ 111.491629][ T9396] __x64_sys_openat+0x12d/0x210 [ 111.493175][ T9396] ? __pfx___x64_sys_openat+0x10/0x10 [ 111.494884][ T9396] do_syscall_64+0x123/0x790 [ 111.496335][ T9396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.498148][ T9396] RIP: 0033:0x7fab1d95e98e [ 111.499517][ T9396] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.505305][ T9396] RSP: 002b:00007fab1e950b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 111.507862][ T9396] RAX: ffffffffffffffda RBX: 00007fab1e9516c0 RCX: 00007fab1d95e98e [ 111.510258][ T9396] RDX: 0000000000000002 RSI: 00007fab1e950c00 RDI: ffffffffffffff9c [ 111.512723][ T9396] RBP: 00007fab1e950c00 R08: 0000000000000000 R09: 0000000000000000 [ 111.515210][ T9396] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 111.518403][ T9396] R13: 00007fab1dc26038 R14: 00007fab1dc25fa0 R15: 00007ffe1239a7b8 [ 111.520892][ T9396] [ 111.522491][ T9396] Kernel Offset: disabled [ 111.523857][ T9396] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:13:54 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b0cfd5 RDI=ffffffff9bc6bca0 RBP=ffffffff9bc6bc60 RSP=ffffc900036af0b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3038383866666666 R12=0000000000000000 R13=0000000000000032 R14=0000000000000007 R15=ffffc900036af3c8 RIP=ffffffff85b0cfff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fab1e9516c0 ffffffff 00c00000 GS =0000 ffff8880d5b59000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000002c0 CR3=0000000045481000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1239aca6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1239aca6 00007ffe1239acac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab1da3561e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab1da3565e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab1da357c2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab1da35650 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab1dbf25f8 00007fab1dbf25c8 00007fab1dbf2600 00007fab1dbf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff91f58410 RDX=ffffc90004717048 RSI=ffffc90004717738 RDI=ffffc90004717048 RBP=ffffc90004717090 RSP=ffffc90004716fb8 R8 =ffffffff91f58414 R9 =0000000000000007 R10=0000000000000200 R11=000000000001670c R12=0000000000000008 R13=ffffc90004717048 R14=ffffc90004717740 R15=ffffc9000471707c RIP=ffffffff81b99fc5 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c59000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f321a757e20 CR3=000000003e1c4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdde894230 00007ffdde894230 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3219bf2823 00007f3219bf2823 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3219bf2e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3219bf2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555559b8e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0580040f80040010 0006017a98fb8aa3 be340a0818800318 80040fb0033b31d3 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73762d74736f6876 2f7665642f01ffff ffffffffffffdd08 0380030805801005 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100001800401 0800060144b80030 656c69662f2e01ff ffffffffffffffef ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080180030fffffff ffffff040a800400 1000000000100806 08017ab20010000a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b0030010000aa003 0010000a90030ef3 acd08010000a8003 0004000408000380 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0401c7100008014f 84006b636f73762d 74736f68762f7665 642f01ffffffffff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000bcfcb RBX=ffff88801f69a580 RCX=ffffffff8bd0e185 RDX=0000000000000001 RSI=ffffffff8e38ba2e RDI=ffffffff8c622d80 RBP=ffffed1003ed34b0 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4c67bd R10=ffff88806a633deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bd0c6bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d59000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fab1e950ff8 CR3=000000004547e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3fd1f5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff67540d66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff67540d66 00007fff67540d6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3fd123561e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3fd123565e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3fd12357c2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3fd1235650 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3fd13f2600 00007f3fd13f25e0 00007f3fd13f25e8 00007f3fd13f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3fd13f25f8 00007f3fd13f25c8 00007f3fd13f2600 00007f3fd13f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000010011 0000001400000000 307a79730001002b ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0400000040030008 8002000c00000000 79786f72706e7973 0001000d80010020 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8004002400000000 400b000808000001 0000000000000000 04010a06fc00004c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000147a7973 0003000900000000 307a797300010009 0000000100000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000ad127 RBX=ffff88801f698000 RCX=ffffffff8bd0e185 RDX=0000000000000001 RSI=ffffffff8e38ba2e RDI=ffffffff8c622d80 RBP=ffffed1003ed3000 RSP=ffffc900001a7e00 R8 =0000000000000001 R9 =ffffed100d4e67bd R10=ffff88806a733deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000034fc4 R15=dffffc0000000000 RIP=ffffffff8bd0c6bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e59000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fab1d959270 CR3=0000000025be2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6563 69767265735f6f69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff67540d66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff67540d66 00007fff67540d6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3fd123561e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3fd123565e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3fd12357c2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3fd1235650 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000004c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 000000000000004c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000