last executing test programs: 2.568857098s ago: executing program 0 (id=84): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) r1 = syz_open_dev$sg(&(0x7f0000005980), 0x0, 0x80201) write(r1, &(0x7f00000002c0)="19718f3d24000000a50c0000ed4a46b1ca9534b61f6aff497b583a578124db953db7a8c61275ff93e0ed", 0x2a) write(r0, &(0x7f0000000300)='p:test/event1 ./file0:0x0 arg2=%bx', 0x22) 2.510820715s ago: executing program 0 (id=87): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x428}}, 0x40088) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c0100000000090400"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/95) 2.459358819s ago: executing program 2 (id=88): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000080)={'dt2817\x00', [0x3c8, 0x5, 0x2, 0x8, 0x14000000, 0x0, 0x3, 0xa, 0x0, 0x7ffe, 0x9, 0x13, 0x400, 0x2, 0x13, 0xbd55, 0xffffffa9, 0x3c, 0x34d, 0x1, 0x400, 0x9, 0x200, 0x860, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x3]}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000000c0)=""/148) 1.989655874s ago: executing program 3 (id=91): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000200)="0011e8682113ab701a0faabb080024451300004000000000", 0x18, 0x0, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x2}, 0x14) timer_settime(0x0, 0x1, &(0x7f0000000680)={{}, {0x0, 0x9}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) memfd_create(&(0x7f0000000100)='\x91\x7f\x00$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95\xceSc(\xa0\v\xde\x1b\xc4\xda\xb8q\xa2\xff\x15\xa59\x0e\xdf\xed\x00l\xba\x18\x13\x833_\xb8\xc9\xf3C\x88u5\x94\x95\x00yh\x9cE\xd0$)\x8eT\x8e\xe5\x00H\xab\x0e\x01!\x19^\xd8Z\t\x00\xef\xea:\x8c\x19\x833\x15\xc0\xcd\xa8', 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000640)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r4, &(0x7f0000000780)}, 0x20) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000580)={0x0, 0x2000, 0x1, 'queue0\x00', 0x4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f00000004c0)={0x7f, 0x6, 0xfff, {0x12af, 0x4}, 0x40, 0x7}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x6, 0x7f, 0x7, 0x6, 0xc, 0x3, 0x8, 0x9a, 0x1, 0x8, 0x7, 0x3, 0x7, 0x9, 0x81, 0x28}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x3, 0x2, 0x7, 0x3, 0x1}, 0x8}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008002b00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) socket(0x18, 0x6, 0x9) 1.770971189s ago: executing program 3 (id=92): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x6, 0xfffffff9, 0x41595556, 0x7, 0xb, [{0x2}, {0x4, 0x9}, {0x2, 0x21}, {0x8, 0x3}, {0x8, 0xecbd}, {0x9, 0x3}, {0xc0, 0x8}, {0x10001, 0x7}], 0x2, 0x4, 0x7, 0x0, 0x4}}) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000000c0)='cifs\x00', 0x19e1080, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@my=0x1, 0x1}) write(r2, &(0x7f00000001c0)='kyber', 0x5) personality(0x4000000) 1.770848581s ago: executing program 3 (id=93): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r0, 0x2000, 0x1) 1.521898359s ago: executing program 3 (id=97): timer_create(0x6, &(0x7f0000000280)={0x0, 0xa1, 0x0, @thr={&(0x7f0000000080)="612f80c3d8afec5b295e7f82c6c538e46fc0ffc2db5efb39d4e84c3978e6a8b1360350cab398d089ef189a7fbbc6b180e7f4c01d4b2a019632d1574e21c03fffd956134b62e535bf2347504412963e9a094456beb089e76fc7c9efdf8beaef073494b006f8d0f85894faceec00f4968c008328d3ec8efac7c84a38211f1ffbef", &(0x7f0000000100)="fa4b43cbd430aaba08ac98307823625c03643a56563df6cd7f6fd53bab1603be9f094665eb139443d0a7b6cf8911d8671a2b5c77d0bf72c6642aa3f41385c89d9fb37e4b3e6246e3"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mmap(&(0x7f00000c6000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, 0xffffffffffffffff, 0x33e1a000) mprotect(&(0x7f00000bc000/0x1000)=nil, 0x1000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) 1.420497838s ago: executing program 3 (id=98): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40045b0a, &(0x7f0000000000)={0x2, 0xfffffffe, 0x7, 0xff, 0x1}) 1.42026527s ago: executing program 1 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='-:test/event1', 0xd) 1.371270419s ago: executing program 1 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='kyber', 0x5) (fail_nth: 9) 1.370936188s ago: executing program 0 (id=101): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) socket$inet6(0xa, 0x1, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x393000) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0xc8) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f03f, 0x6e}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, &(0x7f0000000040)={@local, 0x8000}) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202"], 0x0) r4 = syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x2400) ioctl$CEC_DQEVENT(r4, 0xc0506107, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/gnss0\x00', 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 1.270856231s ago: executing program 1 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read /etc/passwd task.uid=0 exec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) 1.267515326s ago: executing program 1 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read /etc/passwd task.uid=0 exec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) (fail_nth: 1) 1.13134689s ago: executing program 1 (id=104): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$mtd(&(0x7f0000000040), 0x0, 0x82000) ioctl$ECCGETSTATS(r0, 0x80104d12, &(0x7f0000000080)) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/95) 891.165798ms ago: executing program 2 (id=105): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000300)='-:test/event', 0xc) 890.47887ms ago: executing program 2 (id=106): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04023c20"], 0x7) clock_gettime(0x3, &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) syz_emit_ethernet(0x2a, &(0x7f0000000580)={@local, @random="50a245d5cde0", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3, 0x1d, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010100, @local}, {0x11, 0x7, 0x0, @broadcast}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x8000) close_range(r2, 0xffffffffffffffff, 0x200000000000000) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000280)={{r4, 0x800, 0x1, 0x200, 0x7, 0x8, 0x0, 0x3, 0x4, 0x1, 0xb, 0x8, 0x7, 0x7, 0x4}, 0x18, [0x0, 0x0, 0x0]}) 811.04261ms ago: executing program 2 (id=107): syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) (async) r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000380)={"1b8000", 0xe, 0x5, 0x2, 0x200000, 0x2, "f70000400000000019000000140040", '\x00', "03010c00", "17ff00", ["8bada940edff000a00", "155a0a1371cc54e706528660", "000000ff0000000000000020", "0000000000000000000100"]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x5, 0x5, 0x7, 0x3}, {0x100, 0x10, 0x4, 0x3}, {0x5, 0x40, 0x5, 0x1}, {0x4, 0x7, 0x6, 0x7}]}) 809.717735ms ago: executing program 2 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='-:test/event1', 0xd) 760.022797ms ago: executing program 2 (id=109): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x428}}, 0x40088) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c0100000000090400"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/95) 209.82081ms ago: executing program 3 (id=110): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r3 = dup(r2) ioctl$FS_IOC_SETFLAGS(r3, 0x40081271, &(0x7f0000000040)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28011, r3, 0x2cb25000) madvise(&(0x7f00000a6000/0x2000)=nil, 0x2000, 0x9) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000a74000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000240)="c4c131ece3ea0a000000ab00660f1688000001000f01ba54dc00002ef20fd034fcc744240000680000c744240203000000c7442406000000000f011424c4c375460d00400000073e0f07440f20c03505000000440f22c00f30", 0x59}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x7, 0x81}) write(r5, &(0x7f0000000200)='atkbd', 0x5) 111.235722ms ago: executing program 0 (id=111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0xa, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x281, 0x0, 0xf7}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x0) 848.174µs ago: executing program 0 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000240)='binfmt_misc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="3168619886", 0x5) 229.189µs ago: executing program 0 (id=113): r0 = socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x109, 0x0) (async) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x109, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r1, 0x3b65, 0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x421, 0x2, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}]}}}]}, 0x38}}, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe0b, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 1 (id=114): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000001e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x130, 0x0, 0x10001, {0x3ffffffffffffffc, 0xfffffff7, 0x0, '\x00', {0x1, 0x0, 0x8000000000010000, 0xffff, r1, r2, 0xc000, '\x00', 0x6, 0x27efc00800000, 0x81, 0x6, {0xa, 0x3ff}, {0x8, 0x3}, {0x5, 0x1}, {0x40009, 0xa03}, 0x80008001, 0xa, 0x10001, 0x5}}}}) setxattr$security_capability(&(0x7f0000000280)='./sys/bus/i2c/devices/i2c-0/new_device\x00', &(0x7f00000004c0), &(0x7f0000000500)=@v3={0x3000000, [{0x94, 0x7f}, {0x1197, 0x80000001}], r1}, 0x18, 0x2) mount(&(0x7f0000000200)=@sg0, &(0x7f0000000180)='./sys/bus/i2c/devices/i2c-0/new_device\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000040)={0x1, 0x0, [{}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x9, [@var={0x7, 0x0, 0x0, 0xe, 0x3}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2e]}}, 0x0, 0x4d, 0x0, 0x1}, 0x28) write(r3, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x12) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000000000000a000800060001003a00000008000a00", @ANYRES32=r7], 0x24}}, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000080)=""/52, 0x34}, {&(0x7f0000000580)=""/145, 0x91}], 0x2, &(0x7f0000000b80)=[{&(0x7f00000000c0)=""/34, 0x22}, {&(0x7f0000000640)=""/141, 0x8d}, {&(0x7f0000000740)=""/182, 0xb6}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000800)=""/253, 0xfd}, {&(0x7f0000000b40)=""/53, 0x35}], 0x6, 0x0) close(r3) r8 = openat(r4, &(0x7f0000000540)='./file0\x00', 0x621c3, 0x18) write(r8, &(0x7f0000000700)='rt1719 0', 0x8) close(r5) r9 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r9, &(0x7f0000000900)='rt1711h', 0x7) close(r9) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r8) kernel console output (not intermixed with test programs): [ 37.995628][ T42] audit: type=1400 audit(1787041337.920:114): avc: denied { rlimitinh } for pid=5631 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.005876][ T42] audit: type=1400 audit(1787041337.920:115): avc: denied { siginh } for pid=5631 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.110917][ T42] audit: type=1400 audit(1787041338.060:116): avc: denied { write } for pid=5634 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.160528][ T42] audit: type=1400 audit(1787041338.110:117): avc: denied { write } for pid=5639 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.856255][ T42] audit: type=1400 audit(1787041338.800:118): avc: denied { write } for pid=5642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.915873][ T42] audit: type=1400 audit(1787041338.860:119): avc: denied { write } for pid=5645 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.191063][ T42] audit: type=1400 audit(1787041339.140:120): avc: denied { write } for pid=5648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:55617' (ED25519) to the list of known hosts. [ 42.417657][ T5687] cgroup: Unknown subsys name 'net' [ 42.571560][ T5687] cgroup: Unknown subsys name 'cpuset' [ 42.575695][ T5687] cgroup: Unknown subsys name 'rlimit' [ 42.795116][ T5717] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.559882][ T5687] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.683019][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 46.683031][ T42] audit: type=1400 audit(1787041346.630:156): avc: denied { execmem } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.839619][ T42] audit: type=1400 audit(1787041346.790:157): avc: denied { create } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.845828][ T42] audit: type=1400 audit(1787041346.790:158): avc: denied { read write } for pid=5724 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.853284][ T42] audit: type=1400 audit(1787041346.790:159): avc: denied { open } for pid=5724 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.860655][ T42] audit: type=1400 audit(1787041346.800:160): avc: denied { ioctl } for pid=5724 comm="syz-executor" path="socket:[5625]" dev="sockfs" ino=5625 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.878557][ T5729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.885626][ T5735] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.890689][ T5730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.890784][ T5740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.894057][ T5730] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.896582][ T5740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.901234][ T5741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.902443][ T5741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.905294][ T5743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.909107][ T5741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.909695][ T5741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.911742][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.912179][ T5743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.912604][ T5743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.912911][ T5743] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.913044][ T5730] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.916654][ T5741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.919753][ T42] audit: type=1400 audit(1787041346.870:161): avc: denied { read } for pid=5733 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.920551][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.920790][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.928860][ T5741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.944328][ T42] audit: type=1400 audit(1787041346.870:162): avc: denied { open } for pid=5733 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.952148][ T42] audit: type=1400 audit(1787041346.870:163): avc: denied { mounton } for pid=5724 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.962279][ T42] audit: type=1400 audit(1787041346.880:164): avc: denied { module_request } for pid=5724 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.969612][ T42] audit: type=1400 audit(1787041346.900:165): avc: denied { sys_module } for pid=5724 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.489342][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.491675][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.494019][ T5733] bridge_slave_0: entered allmulticast mode [ 47.496824][ T5733] bridge_slave_0: entered promiscuous mode [ 47.535863][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.539032][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.542094][ T5733] bridge_slave_1: entered allmulticast mode [ 47.546006][ T5733] bridge_slave_1: entered promiscuous mode [ 47.604993][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.608845][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.612418][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.615578][ T5724] bridge_slave_0: entered allmulticast mode [ 47.619951][ T5724] bridge_slave_0: entered promiscuous mode [ 47.625158][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.628236][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.631108][ T5724] bridge_slave_1: entered allmulticast mode [ 47.634893][ T5724] bridge_slave_1: entered promiscuous mode [ 47.664139][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.707158][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.711798][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.718889][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.721311][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.723738][ T5732] bridge_slave_0: entered allmulticast mode [ 47.726378][ T5732] bridge_slave_0: entered promiscuous mode [ 47.730385][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.732869][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.735665][ T5732] bridge_slave_1: entered allmulticast mode [ 47.739497][ T5732] bridge_slave_1: entered promiscuous mode [ 47.743366][ T5733] team0: Port device team_slave_0 added [ 47.746617][ T5733] team0: Port device team_slave_1 added [ 47.785776][ T5724] team0: Port device team_slave_0 added [ 47.789578][ T5724] team0: Port device team_slave_1 added [ 47.841963][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.846642][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.848989][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.856829][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.870136][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.872869][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.882226][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.886343][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.889022][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.891375][ T5725] bridge_slave_0: entered allmulticast mode [ 47.894352][ T5725] bridge_slave_0: entered promiscuous mode [ 47.901118][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.904973][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.907195][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.915715][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.920536][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.922832][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.930929][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.940099][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.942488][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.944911][ T5725] bridge_slave_1: entered allmulticast mode [ 47.949067][ T5725] bridge_slave_1: entered promiscuous mode [ 47.994993][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.999616][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.012675][ T5732] team0: Port device team_slave_0 added [ 48.024824][ T5732] team0: Port device team_slave_1 added [ 48.037258][ T5724] hsr_slave_0: entered promiscuous mode [ 48.040701][ T5724] hsr_slave_1: entered promiscuous mode [ 48.069299][ T5725] team0: Port device team_slave_0 added [ 48.074512][ T5733] hsr_slave_0: entered promiscuous mode [ 48.076788][ T5733] hsr_slave_1: entered promiscuous mode [ 48.079203][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 48.081543][ T5733] Cannot create hsr debugfs directory [ 48.092915][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.095645][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.105621][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.112319][ T5725] team0: Port device team_slave_1 added [ 48.136859][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.139716][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.150255][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.174657][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.177556][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.187523][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.208718][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.211447][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.221446][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.302586][ T5732] hsr_slave_0: entered promiscuous mode [ 48.305832][ T5732] hsr_slave_1: entered promiscuous mode [ 48.309500][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 48.311901][ T5732] Cannot create hsr debugfs directory [ 48.317439][ T5725] hsr_slave_0: entered promiscuous mode [ 48.320132][ T5725] hsr_slave_1: entered promiscuous mode [ 48.322646][ T5725] debugfs: 'hsr0' already exists in 'hsr' [ 48.324467][ T5725] Cannot create hsr debugfs directory [ 48.566563][ T5724] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.572809][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.575846][ T5724] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.580488][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.584124][ T5724] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.589581][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.593540][ T5724] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.598196][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.644140][ T5732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.648978][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.652035][ T5732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.656051][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.659039][ T5732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.663882][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.667949][ T5732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.671980][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.728472][ T5733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.733722][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.744874][ T5733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.752942][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.761354][ T5733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.766530][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.770904][ T5733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.776818][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.822899][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.828385][ T5725] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.833122][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.838006][ T5725] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.844110][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.846857][ T5725] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.850913][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.856917][ T5725] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.861821][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.895007][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.903036][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.905616][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.919209][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.936384][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.938887][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.950011][ T5729] Bluetooth: hci1: command tx timeout [ 48.950017][ T5083] Bluetooth: hci3: command tx timeout [ 48.951221][ T5741] Bluetooth: hci0: command tx timeout [ 48.953030][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.970884][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.974003][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.998855][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.001165][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.028107][ T5741] Bluetooth: hci2: command tx timeout [ 49.058596][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.082273][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.099262][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.109179][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.111854][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.121486][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.128521][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.130818][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.135146][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.137541][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.160847][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.163274][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.379227][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.388463][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.424783][ T5724] veth0_vlan: entered promiscuous mode [ 49.436813][ T5724] veth1_vlan: entered promiscuous mode [ 49.453634][ T5732] veth0_vlan: entered promiscuous mode [ 49.465458][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.469009][ T5732] veth1_vlan: entered promiscuous mode [ 49.475914][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.513212][ T5725] veth0_vlan: entered promiscuous mode [ 49.518008][ T5724] veth0_macvtap: entered promiscuous mode [ 49.528947][ T5724] veth1_macvtap: entered promiscuous mode [ 49.533996][ T5732] veth0_macvtap: entered promiscuous mode [ 49.545368][ T5725] veth1_vlan: entered promiscuous mode [ 49.549715][ T5732] veth1_macvtap: entered promiscuous mode [ 49.566345][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.581794][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.589761][ T5733] veth0_vlan: entered promiscuous mode [ 49.594409][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.599186][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.620622][ T5733] veth1_vlan: entered promiscuous mode [ 49.637973][ T5725] veth0_macvtap: entered promiscuous mode [ 49.652647][ T5725] veth1_macvtap: entered promiscuous mode [ 49.667950][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.691116][ T5733] veth0_macvtap: entered promiscuous mode [ 49.695451][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.707706][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.715783][ T5733] veth1_macvtap: entered promiscuous mode [ 49.728542][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.729870][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.731659][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.763357][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.769303][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.772394][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.785837][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.788440][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.791255][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.825535][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.828887][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.847728][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.854153][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.873232][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.878724][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.880924][ T5732] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.887964][ T5805] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.906327][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.910511][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.948117][ T5596] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.957697][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.965931][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.981246][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.985824][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.987500][ T5805] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.991630][ T5805] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.007481][ T5805] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.010349][ T5805] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.015781][ T5805] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.024439][ T5805] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.030436][ T5805] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.034066][ T5805] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.036849][ T5805] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.039852][ T5805] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.088827][ T5888] loop0: detected capacity change from 0 to 16384 [ 50.097169][ T5886] jffs2: notice: (5886) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 50.124698][ T5888] loop0: p1 [ 50.195318][ T5903] fuse: Unknown parameter '°' [ 50.203141][ T5903] Bluetooth: MGMT ver 1.23 [ 50.302172][ T5910] SELinux: unknown common socke$ [ 50.305198][ T5910] SELinux: invalid class [ 50.323107][ T5910] SELinux: failed to load policy [ 50.357971][ T5819] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.474546][ T5924] MTRR 1 not used [ 50.508359][ T5819] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 50.513939][ T5819] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 50.516826][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.522087][ T5819] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 50.525098][ T5819] usb 5-1: Manufacturer: syz [ 50.533228][ T5819] usb 5-1: config 0 descriptor?? [ 50.597980][ T5819] rc_core: IR keymap rc-hauppauge not found [ 50.600553][ T5819] Registered IR keymap rc-empty [ 50.604495][ T5819] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 50.608899][ T5819] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 50.750393][ T34] usb 5-1: USB disconnect, device number 2 [ 50.817803][ T56] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.967425][ T56] usb 7-1: device descriptor read/64, error -71 [ 51.028071][ T5741] Bluetooth: hci0: command tx timeout [ 51.028133][ T5729] Bluetooth: hci1: command tx timeout [ 51.037465][ T5729] Bluetooth: hci3: command tx timeout [ 51.107564][ T5729] Bluetooth: hci2: command tx timeout [ 51.177408][ T5737] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 51.211365][ T5964] vivid-003: ================= START STATUS ================= [ 51.214160][ T5964] vivid-003: RDS Tx I/O Mode: Controls [ 51.215930][ T5964] vivid-003: RDS Program ID: 32904 [ 51.218136][ T5964] vivid-003: RDS Program Type: 3 [ 51.219727][ T5964] vivid-003: RDS PS Name: VIVID-TX [ 51.221592][ T5964] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 51.224751][ T5964] vivid-003: RDS Stereo: true [ 51.226151][ T5964] vivid-003: RDS Artificial Head: false [ 51.228053][ T56] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 51.230454][ T5964] vivid-003: RDS Compressed: false [ 51.232084][ T5964] vivid-003: RDS Dynamic PTY: false [ 51.233721][ T5964] vivid-003: RDS Traffic Announcement: false [ 51.235596][ T5964] vivid-003: RDS Traffic Program: true [ 51.237489][ T5964] vivid-003: RDS Music: true [ 51.238960][ T5964] vivid-003: ================== END STATUS ================== [ 51.292358][ T5966] FAULT_INJECTION: forcing a failure. [ 51.292358][ T5966] name failslab, interval 1, probability 0, space 0, times 1 [ 51.296477][ T5966] CPU: 0 UID: 0 PID: 5966 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full) [ 51.296491][ T5966] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.296497][ T5966] Call Trace: [ 51.296501][ T5966] [ 51.296505][ T5966] dump_stack_lvl+0x100/0x190 [ 51.296525][ T5966] should_fail_ex.cold+0x5/0xa [ 51.296540][ T5966] should_failslab+0xc2/0x120 [ 51.296556][ T5966] kmem_cache_alloc_noprof+0x91/0x6a0 [ 51.296569][ T5966] ? vm_area_dup+0x27/0x8e0 [ 51.296581][ T5966] vm_area_dup+0x27/0x8e0 [ 51.296592][ T5966] __split_vma+0x18c/0xda0 [ 51.296604][ T5966] ? __pfx___split_vma+0x10/0x10 [ 51.296617][ T5966] ? __pfx_mas_prev+0x10/0x10 [ 51.296637][ T5966] vms_gather_munmap_vmas+0x3a5/0x1720 [ 51.296650][ T5966] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 51.296665][ T5966] ? mas_walk+0x6ef/0x9b0 [ 51.296681][ T5966] __mmap_region+0x4a7/0x2db0 [ 51.296694][ T5966] ? __pfx___mmap_region+0x10/0x10 [ 51.296707][ T5966] ? __pfx___might_resched+0x10/0x10 [ 51.296726][ T5966] ? up_write+0x2e5/0x5c0 [ 51.296742][ T5966] ? process_measurement+0x1f4/0x2350 [ 51.296761][ T5966] ? __lock_acquire+0x49f/0x1a40 [ 51.296777][ T5966] ? __lock_acquire+0x49f/0x1a40 [ 51.296791][ T5966] ? check_irq_usage+0xe5/0x810 [ 51.296818][ T5966] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 51.296835][ T5966] mmap_region+0x527/0x620 [ 51.296848][ T5966] ? __pfx_mmap_region+0x10/0x10 [ 51.296859][ T5966] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 51.296874][ T5966] ? selinux_mmap_addr+0x2b/0x110 [ 51.296889][ T5966] ? bpf_lsm_mmap_addr+0x9/0x30 [ 51.296899][ T5966] ? security_mmap_addr+0x71/0x1e0 [ 51.296910][ T5966] ? __get_unmapped_area+0x255/0x3e0 [ 51.296926][ T5966] do_mmap+0xc63/0x12f0 [ 51.296942][ T5966] ? __pfx_do_mmap+0x10/0x10 [ 51.296956][ T5966] ? __pfx_down_write_killable+0x10/0x10 [ 51.296974][ T5966] vm_mmap_pgoff+0x29e/0x470 [ 51.296990][ T5966] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 51.297003][ T5966] ? __fget_files+0x215/0x3d0 [ 51.297022][ T5966] ? __fget_files+0x21f/0x3d0 [ 51.297037][ T5966] ksys_mmap_pgoff+0x3cb/0x610 [ 51.297052][ T5966] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 51.297065][ T5966] ? fput+0x79/0x100 [ 51.297090][ T5966] ? ksys_write+0x1ac/0x250 [ 51.297100][ T5966] ? __pfx_ksys_write+0x10/0x10 [ 51.297111][ T5966] __x64_sys_mmap+0x125/0x190 [ 51.297128][ T5966] do_syscall_64+0x115/0x870 [ 51.297140][ T5966] ? clear_bhb_loop+0x70/0xc0 [ 51.297153][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.297163][ T5966] RIP: 0033:0x7fe4b679e0d9 [ 51.297173][ T5966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.297183][ T5966] RSP: 002b:00007fe4b75d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 51.297195][ T5966] RAX: ffffffffffffffda RBX: 00007fe4b6a25fa0 RCX: 00007fe4b679e0d9 [ 51.297201][ T5966] RDX: 0000000003000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 51.297207][ T5966] RBP: 00007fe4b75d0090 R08: 0000000000000004 R09: 0000000000000000 [ 51.297213][ T5966] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001 [ 51.297219][ T5966] R13: 00007fe4b6a26038 R14: 00007fe4b6a25fa0 R15: 00007fffe4557338 [ 51.297231][ T5966] [ 51.398770][ T5737] usb 8-1: Using ep0 maxpacket: 8 [ 51.401864][ T56] usb 7-1: device descriptor read/64, error -71 [ 51.406064][ T5737] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 51.416649][ T5737] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.420956][ T5737] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 51.424405][ T5737] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.435235][ T5737] usb 8-1: config 0 descriptor?? [ 51.518250][ T56] usb usb7-port1: attempt power cycle [ 51.578128][ T5984] FAULT_INJECTION: forcing a failure. [ 51.578128][ T5984] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 51.579907][ T5979] gfs2: error -5 reading superblock [ 51.582977][ T5984] CPU: 2 UID: 0 PID: 5984 Comm: syz.1.28 Not tainted syzkaller #0 PREEMPT(full) [ 51.582992][ T5984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.582999][ T5984] Call Trace: [ 51.583003][ T5984] [ 51.583007][ T5984] dump_stack_lvl+0x100/0x190 [ 51.583025][ T5984] should_fail_ex.cold+0x5/0xa [ 51.583039][ T5984] _copy_from_user+0x2e/0xd0 [ 51.583057][ T5984] copy_msghdr_from_user+0x9f/0x4c0 [ 51.583071][ T5984] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 51.583084][ T5984] ? __pfx__kstrtoull+0x10/0x10 [ 51.583098][ T5984] ___sys_sendmsg+0x106/0x1e0 [ 51.583110][ T5984] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.583127][ T5984] ? find_held_lock+0x2b/0x80 [ 51.583164][ T5984] __sys_sendmmsg+0x20c/0x440 [ 51.583182][ T5984] ? __pfx___sys_sendmmsg+0x10/0x10 [ 51.583196][ T5984] ? ksys_write+0x190/0x250 [ 51.583215][ T5984] ? fput+0x79/0x100 [ 51.583227][ T5984] ? ksys_write+0x1ac/0x250 [ 51.583237][ T5984] ? __pfx_ksys_write+0x10/0x10 [ 51.583248][ T5984] __x64_sys_sendmmsg+0x9c/0x100 [ 51.583263][ T5984] ? lockdep_hardirqs_on+0x78/0x100 [ 51.583277][ T5984] do_syscall_64+0x115/0x870 [ 51.583289][ T5984] ? clear_bhb_loop+0x70/0xc0 [ 51.583302][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.583313][ T5984] RIP: 0033:0x7f57c659e0d9 [ 51.583323][ T5984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.583333][ T5984] RSP: 002b:00007f57c73a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 51.583345][ T5984] RAX: ffffffffffffffda RBX: 00007f57c6825fa0 RCX: 00007f57c659e0d9 [ 51.583351][ T5984] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 51.583357][ T5984] RBP: 00007f57c73a9090 R08: 0000000000000000 R09: 0000000000000000 [ 51.583363][ T5984] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000001 [ 51.583369][ T5984] R13: 00007f57c6826038 R14: 00007f57c6825fa0 R15: 00007fff6f7d4048 [ 51.583381][ T5984] [ 51.788214][ T5959] Set syz1 is full, maxelem 6117 reached [ 51.795811][ T5819] usb 8-1: USB disconnect, device number 2 [ 51.877471][ T56] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 51.887508][ T5806] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.897833][ T56] usb 7-1: device descriptor read/8, error -71 [ 52.037450][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 52.041457][ T5806] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 52.045982][ T5806] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 52.048733][ T5806] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.052615][ T5806] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 52.055343][ T5806] usb 6-1: Manufacturer: syz [ 52.059045][ T5806] usb 6-1: config 0 descriptor?? [ 52.117443][ T5806] rc_core: IR keymap rc-hauppauge not found [ 52.120157][ T5806] Registered IR keymap rc-empty [ 52.124078][ T5806] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 52.130922][ T5806] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input6 [ 52.158979][ T56] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 52.177796][ T56] usb 7-1: device descriptor read/8, error -71 [ 52.219313][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 52.223224][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.226838][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.230942][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 52.234956][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.239895][ T24] usb 5-1: config 0 descriptor?? [ 52.268472][ T5737] usb 6-1: USB disconnect, device number 2 [ 52.288293][ T56] usb usb7-port1: unable to enumerate USB device [ 52.577404][ T5806] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 52.664227][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.667091][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.669723][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.672143][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.674387][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.676753][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.679291][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.681650][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.683961][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.686265][ T24] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.694996][ T24] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 52.727872][ T5806] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 52.731635][ T5806] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.735105][ T5806] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.738353][ T5806] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 52.742684][ T5806] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.746703][ T5806] usb 8-1: config 0 descriptor?? [ 52.924636][ T1346] usb 5-1: USB disconnect, device number 3 [ 53.067393][ T5819] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 53.107867][ T5729] Bluetooth: hci3: command tx timeout [ 53.108371][ T5741] Bluetooth: hci0: command tx timeout [ 53.108442][ T5083] Bluetooth: hci1: command tx timeout [ 53.163027][ T5806] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 53.187624][ T5741] Bluetooth: hci2: command tx timeout [ 53.228399][ T5819] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 53.232542][ T5819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.237138][ T5819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.241243][ T5819] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 53.246476][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.252813][ T5819] usb 6-1: config 0 descriptor?? [ 53.408878][ T5997] FAULT_INJECTION: forcing a failure. [ 53.408878][ T5997] name failslab, interval 1, probability 0, space 0, times 0 [ 53.413164][ T5997] CPU: 1 UID: 0 PID: 5997 Comm: syz.3.33 Not tainted syzkaller #0 PREEMPT(full) [ 53.413180][ T5997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.413186][ T5997] Call Trace: [ 53.413191][ T5997] [ 53.413195][ T5997] dump_stack_lvl+0x100/0x190 [ 53.413213][ T5997] should_fail_ex.cold+0x5/0xa [ 53.413228][ T5997] should_failslab+0xc2/0x120 [ 53.413242][ T5997] __kmalloc_noprof+0xfc/0x820 [ 53.413255][ T5997] ? rcu_is_watching+0x12/0xc0 [ 53.413272][ T5997] ? tomoyo_realpath_from_path+0xb6/0x690 [ 53.413287][ T5997] tomoyo_realpath_from_path+0xb6/0x690 [ 53.413300][ T5997] tomoyo_path_number_perm+0x23c/0x580 [ 53.413316][ T5997] ? tomoyo_path_number_perm+0x22e/0x580 [ 53.413331][ T5997] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 53.413358][ T5997] ? find_held_lock+0x2b/0x80 [ 53.413368][ T5997] ? __fget_files+0x215/0x3d0 [ 53.413380][ T5997] ? hook_file_ioctl_common+0x140/0x440 [ 53.413392][ T5997] ? __fget_files+0x215/0x3d0 [ 53.413406][ T5997] ? __fget_files+0x21f/0x3d0 [ 53.413419][ T5997] security_file_ioctl+0xd3/0x230 [ 53.413437][ T5997] __x64_sys_ioctl+0xb7/0x210 [ 53.413449][ T5997] do_syscall_64+0x115/0x870 [ 53.413462][ T5997] ? clear_bhb_loop+0x70/0xc0 [ 53.413475][ T5997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.413486][ T5997] RIP: 0033:0x7fd0f079e0d9 [ 53.413496][ T5997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.413505][ T5997] RSP: 002b:00007fd0ee9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.413516][ T5997] RAX: ffffffffffffffda RBX: 00007fd0f0a25fa0 RCX: 00007fd0f079e0d9 [ 53.413523][ T5997] RDX: 0000000000000000 RSI: 0000000000004805 RDI: 0000000000000004 [ 53.413528][ T5997] RBP: 00007fd0ee9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 53.413534][ T5997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.413540][ T5997] R13: 00007fd0f0a26038 R14: 00007fd0f0a25fa0 R15: 00007ffd3a2b1438 [ 53.413552][ T5997] [ 53.413558][ T5997] ERROR: Out of memory at tomoyo_realpath_from_path. [ 53.512791][ T9] usb 8-1: USB disconnect, device number 3 [ 53.597072][ T42] kauditd_printk_skb: 92 callbacks suppressed [ 53.597084][ T42] audit: type=1400 audit(1787041353.540:258): avc: denied { read write } for pid=6009 comm="syz.2.38" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.606287][ T42] audit: type=1400 audit(1787041353.540:259): avc: denied { open } for pid=6009 comm="syz.2.38" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.613491][ T42] audit: type=1400 audit(1787041353.540:260): avc: denied { ioctl } for pid=6009 comm="syz.2.38" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.622405][ T6010] netlink: 40 bytes leftover after parsing attributes in process `syz.2.38'. [ 53.626076][ T42] audit: type=1400 audit(1787041353.550:261): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 53.641820][ T42] audit: type=1400 audit(1787041353.590:262): avc: denied { mount } for pid=6015 comm="syz.0.39" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 53.654371][ T42] audit: type=1400 audit(1787041353.600:263): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 53.673716][ T5819] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 53.684300][ T6018] netlink: 36 bytes leftover after parsing attributes in process `syz.0.40'. [ 53.689754][ T42] audit: type=1400 audit(1787041353.640:264): avc: denied { getopt } for pid=6017 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.695720][ T42] audit: type=1400 audit(1787041353.640:265): avc: denied { connect } for pid=6017 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.702523][ T42] audit: type=1400 audit(1787041353.640:266): avc: denied { name_connect } for pid=6017 comm="syz.0.40" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 53.727775][ T42] audit: type=1400 audit(1787041353.670:267): avc: denied { write } for pid=6020 comm="syz.0.41" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.756316][ T6025] jffs2: notice: (6025) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 53.864768][ T6032] FAULT_INJECTION: forcing a failure. [ 53.864768][ T6032] name failslab, interval 1, probability 0, space 0, times 0 [ 53.870182][ T6032] CPU: 1 UID: 0 PID: 6032 Comm: syz.0.46 Not tainted syzkaller #0 PREEMPT(full) [ 53.870197][ T6032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.870203][ T6032] Call Trace: [ 53.870207][ T6032] [ 53.870211][ T6032] dump_stack_lvl+0x100/0x190 [ 53.870229][ T6032] should_fail_ex.cold+0x5/0xa [ 53.870243][ T6032] should_failslab+0xc2/0x120 [ 53.870258][ T6032] __kmalloc_cache_noprof+0x91/0x6c0 [ 53.870269][ T6032] ? trace_parse_run_command+0x58/0x3b0 [ 53.870285][ T6032] trace_parse_run_command+0x58/0x3b0 [ 53.870297][ T6032] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 53.870314][ T6032] vfs_write+0x2aa/0x1050 [ 53.870325][ T6032] ? __pfx_probes_write+0x10/0x10 [ 53.870339][ T6032] ? __pfx_vfs_write+0x10/0x10 [ 53.870348][ T6032] ? __fget_files+0x215/0x3d0 [ 53.870364][ T6032] ? __fget_files+0x21f/0x3d0 [ 53.870379][ T6032] ksys_write+0x12a/0x250 [ 53.870389][ T6032] ? __pfx_ksys_write+0x10/0x10 [ 53.870402][ T6032] do_syscall_64+0x115/0x870 [ 53.870417][ T6032] ? clear_bhb_loop+0x70/0xc0 [ 53.870429][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.870440][ T6032] RIP: 0033:0x7fe4b679e0d9 [ 53.870450][ T6032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.870459][ T6032] RSP: 002b:00007fe4b75d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 53.870477][ T6032] RAX: ffffffffffffffda RBX: 00007fe4b6a25fa0 RCX: 00007fe4b679e0d9 [ 53.870483][ T6032] RDX: 0000000000000022 RSI: 0000200000000300 RDI: 0000000000000004 [ 53.870489][ T6032] RBP: 00007fe4b75d0090 R08: 0000000000000000 R09: 0000000000000000 [ 53.870495][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.870501][ T6032] R13: 00007fe4b6a26038 R14: 00007fe4b6a25fa0 R15: 00007fffe4557338 [ 53.870514][ T6032] [ 53.955077][ T6034] fuse: Invalid rootmode [ 54.058452][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 54.081606][ T6041] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 54.107155][ T6048] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.3.51:6048 [ 54.208671][ T9] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 54.212135][ T9] usb 7-1: config 0 has no interfaces? [ 54.214877][ T9] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 54.217543][ T9] usb 7-1: Manufacturer: syz [ 54.220383][ T9] usb 7-1: config 0 descriptor?? [ 54.276801][ T6061] FAULT_INJECTION: forcing a failure. [ 54.276801][ T6061] name failslab, interval 1, probability 0, space 0, times 0 [ 54.281200][ T6061] CPU: 2 UID: 0 PID: 6061 Comm: syz.3.55 Not tainted syzkaller #0 PREEMPT(full) [ 54.281215][ T6061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.281244][ T6061] Call Trace: [ 54.281249][ T6061] [ 54.281254][ T6061] dump_stack_lvl+0x100/0x190 [ 54.281272][ T6061] should_fail_ex.cold+0x5/0xa [ 54.281286][ T6061] should_failslab+0xc2/0x120 [ 54.281301][ T6061] __kmalloc_noprof+0xfc/0x820 [ 54.281314][ T6061] ? tomoyo_encode2+0xfb/0x3c0 [ 54.281328][ T6061] tomoyo_encode2+0xfb/0x3c0 [ 54.281340][ T6061] tomoyo_encode+0x29/0x50 [ 54.281350][ T6061] tomoyo_realpath_from_path+0x18c/0x690 [ 54.281364][ T6061] tomoyo_path_number_perm+0x23c/0x580 [ 54.281378][ T6061] ? tomoyo_path_number_perm+0x22e/0x580 [ 54.281394][ T6061] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 54.281422][ T6061] ? find_held_lock+0x2b/0x80 [ 54.281432][ T6061] ? __fget_files+0x215/0x3d0 [ 54.281444][ T6061] ? hook_file_ioctl_common+0x140/0x440 [ 54.281456][ T6061] ? __fget_files+0x215/0x3d0 [ 54.281473][ T6061] ? __fget_files+0x21f/0x3d0 [ 54.281487][ T6061] security_file_ioctl+0xd3/0x230 [ 54.281504][ T6061] __x64_sys_ioctl+0xb7/0x210 [ 54.281516][ T6061] do_syscall_64+0x115/0x870 [ 54.281530][ T6061] ? clear_bhb_loop+0x70/0xc0 [ 54.281543][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.281553][ T6061] RIP: 0033:0x7fd0f079e0d9 [ 54.281563][ T6061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.281573][ T6061] RSP: 002b:00007fd0ee9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.281584][ T6061] RAX: ffffffffffffffda RBX: 00007fd0f0a25fa0 RCX: 00007fd0f079e0d9 [ 54.281591][ T6061] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 54.281597][ T6061] RBP: 00007fd0ee9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 54.281603][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.281609][ T6061] R13: 00007fd0f0a26038 R14: 00007fd0f0a25fa0 R15: 00007ffd3a2b1438 [ 54.281622][ T6061] [ 54.281762][ T6061] ERROR: Out of memory at tomoyo_realpath_from_path. [ 54.384200][ T6064] netlink: 36 bytes leftover after parsing attributes in process `syz.3.56'. [ 54.435842][ T5727] usb 7-1: USB disconnect, device number 6 [ 54.442105][ T6068] netlink: 'syz.3.58': attribute type 1 has an invalid length. [ 54.485140][ T6070] ima: policy update failed [ 54.697381][ T5737] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 54.847409][ T5737] usb 8-1: device descriptor read/64, error -71 [ 55.029138][ T6076] netlink: 64 bytes leftover after parsing attributes in process `syz.2.61'. [ 55.108546][ T5737] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 55.187964][ T5741] Bluetooth: hci1: command tx timeout [ 55.189822][ T5729] Bluetooth: hci0: command tx timeout [ 55.197435][ T5729] Bluetooth: hci3: command tx timeout [ 55.247484][ T5737] usb 8-1: device descriptor read/64, error -71 [ 55.270246][ T5729] Bluetooth: hci2: command tx timeout [ 55.358151][ T5737] usb usb8-port1: attempt power cycle [ 55.552692][ T6090] binder: 6089:6090 ioctl c0306201 0 returned -14 [ 55.697457][ T5737] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 55.723422][ T6101] FAULT_INJECTION: forcing a failure. [ 55.723422][ T6101] name failslab, interval 1, probability 0, space 0, times 0 [ 55.727813][ T5737] usb 8-1: device descriptor read/8, error -71 [ 55.729865][ T6101] CPU: 1 UID: 0 PID: 6101 Comm: syz.2.72 Not tainted syzkaller #0 PREEMPT(full) [ 55.729879][ T6101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.729885][ T6101] Call Trace: [ 55.729889][ T6101] [ 55.729893][ T6101] dump_stack_lvl+0x100/0x190 [ 55.729943][ T6101] should_fail_ex.cold+0x5/0xa [ 55.729958][ T6101] should_failslab+0xc2/0x120 [ 55.729980][ T6101] __kmalloc_noprof+0xfc/0x820 [ 55.729993][ T6101] ? rcu_is_watching+0x12/0xc0 [ 55.730015][ T6101] ? tomoyo_realpath_from_path+0xb6/0x690 [ 55.730048][ T6101] tomoyo_realpath_from_path+0xb6/0x690 [ 55.730063][ T6101] tomoyo_get_exe+0x63/0xa0 [ 55.730077][ T6101] tomoyo_write_control+0x69e/0x13a0 [ 55.730095][ T6101] ? __pfx_tomoyo_write_control+0x10/0x10 [ 55.730112][ T6101] vfs_write+0x2aa/0x1050 [ 55.730133][ T6101] ? __pfx_tomoyo_write+0x10/0x10 [ 55.730145][ T6101] ? __pfx_vfs_write+0x10/0x10 [ 55.730154][ T6101] ? __fget_files+0x215/0x3d0 [ 55.730175][ T6101] ? __fget_files+0x21f/0x3d0 [ 55.730191][ T6101] ksys_write+0x12a/0x250 [ 55.730200][ T6101] ? __pfx_ksys_write+0x10/0x10 [ 55.730214][ T6101] do_syscall_64+0x115/0x870 [ 55.730234][ T6101] ? clear_bhb_loop+0x70/0xc0 [ 55.730247][ T6101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.730258][ T6101] RIP: 0033:0x7f69e6d9e0d9 [ 55.730268][ T6101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.730278][ T6101] RSP: 002b:00007f69e7b98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 55.730290][ T6101] RAX: ffffffffffffffda RBX: 00007f69e7025fa0 RCX: 00007f69e6d9e0d9 [ 55.730296][ T6101] RDX: 000000000000004c RSI: 0000200000000100 RDI: 0000000000000003 [ 55.730302][ T6101] RBP: 00007f69e7b98090 R08: 0000000000000000 R09: 0000000000000000 [ 55.730308][ T6101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.730314][ T6101] R13: 00007f69e7026038 R14: 00007f69e7025fa0 R15: 00007ffdcd24e838 [ 55.730327][ T6101] [ 55.731420][ T6101] ERROR: Out of memory at tomoyo_realpath_from_path. [ 55.801404][ T56] usb 6-1: USB disconnect, device number 3 [ 55.878177][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 55.932435][ T6111] binder: 6109:6111 ioctl c0306201 2000000004c0 returned -14 [ 55.997465][ T5737] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 56.018576][ T5737] usb 8-1: device descriptor read/8, error -71 [ 56.029488][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 56.034334][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 56.040204][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.045699][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 56.049189][ T9] usb 5-1: Manufacturer: syz [ 56.054334][ T9] usb 5-1: config 0 descriptor?? [ 56.060741][ T9] igorplugusb 5-1:0.0: incorrect number of endpoints [ 56.127632][ T5737] usb usb8-port1: unable to enumerate USB device [ 56.264055][ T5737] usb 5-1: USB disconnect, device number 4 [ 56.608397][ T6121] FAULT_INJECTION: forcing a failure. [ 56.608397][ T6121] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 56.614045][ T6121] CPU: 3 UID: 0 PID: 6121 Comm: syz.1.78 Not tainted syzkaller #0 PREEMPT(full) [ 56.614068][ T6121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.614078][ T6121] Call Trace: [ 56.614084][ T6121] [ 56.614091][ T6121] dump_stack_lvl+0x100/0x190 [ 56.614119][ T6121] should_fail_ex.cold+0x5/0xa [ 56.614138][ T6121] ? prepare_alloc_pages+0x16d/0x5f0 [ 56.614165][ T6121] should_fail_alloc_page+0xeb/0x140 [ 56.614190][ T6121] prepare_alloc_pages+0x1f0/0x5f0 [ 56.614218][ T6121] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 56.614263][ T6121] ? rcu_is_watching+0x12/0xc0 [ 56.614291][ T6121] ? trace_mm_page_alloc+0x164/0x1c0 [ 56.614314][ T6121] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 56.614343][ T6121] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 56.614365][ T6121] ? stack_trace_save+0x8e/0xc0 [ 56.614385][ T6121] ? __pfx_stack_trace_save+0x10/0x10 [ 56.614404][ T6121] ? stack_depot_save_flags+0x27/0x9d0 [ 56.614447][ T6121] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 56.614470][ T6121] ? __kasan_slab_alloc+0x89/0x90 [ 56.614492][ T6121] ? kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 56.614512][ T6121] ? alloc_vmap_area+0x640/0x2bb0 [ 56.614533][ T6121] ? __get_vm_area_node+0x1ca/0x330 [ 56.614554][ T6121] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 56.614578][ T6121] ? __vmalloc_node_noprof+0xad/0xf0 [ 56.614600][ T6121] ? copy_process+0x803/0x8210 [ 56.614623][ T6121] ? vhost_task_create+0x1db/0x370 [ 56.614642][ T6121] ? kvm_mmu_post_init_vm+0x1b3/0x360 [ 56.614667][ T6121] ? kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 56.614693][ T6121] ? kvm_vcpu_ioctl+0x730/0x1700 [ 56.614710][ T6121] ? __x64_sys_ioctl+0x18e/0x210 [ 56.614726][ T6121] ? do_syscall_64+0x115/0x870 [ 56.614746][ T6121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.614770][ T6121] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 56.614794][ T6121] ? policy_nodemask+0xed/0x4f0 [ 56.614820][ T6121] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 56.614851][ T6121] __kasan_populate_vmalloc+0xf0/0x210 [ 56.614877][ T6121] alloc_vmap_area+0x95d/0x2bb0 [ 56.614906][ T6121] ? kasan_save_track+0x14/0x30 [ 56.614926][ T6121] ? __kasan_kmalloc+0xaa/0xb0 [ 56.614947][ T6121] ? __pfx_alloc_vmap_area+0x10/0x10 [ 56.614970][ T6121] ? __get_vm_area_node+0x101/0x330 [ 56.614996][ T6121] __get_vm_area_node+0x1ca/0x330 [ 56.615024][ T6121] __vmalloc_node_range_noprof+0x228/0x1630 [ 56.615051][ T6121] ? vhost_task_create+0x1db/0x370 [ 56.615070][ T6121] ? rcu_is_watching+0x12/0xc0 [ 56.615103][ T6121] ? vhost_task_create+0x1db/0x370 [ 56.615159][ T6121] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 56.615187][ T6121] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 56.615219][ T6121] ? trace_kmem_cache_alloc+0xdd/0x100 [ 56.615246][ T6121] ? vhost_task_create+0x1db/0x370 [ 56.615265][ T6121] __vmalloc_node_noprof+0xad/0xf0 [ 56.615291][ T6121] ? vhost_task_create+0x1db/0x370 [ 56.615313][ T6121] copy_process+0x803/0x8210 [ 56.615356][ T6121] ? __pfx_copy_process+0x10/0x10 [ 56.615378][ T6121] ? __kasan_kmalloc+0xaa/0xb0 [ 56.615397][ T6121] ? lockdep_init_map_type+0x5c/0x250 [ 56.615417][ T6121] ? lockdep_init_map_type+0x5c/0x250 [ 56.615437][ T6121] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 56.615455][ T6121] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 56.615470][ T6121] vhost_task_create+0x1db/0x370 [ 56.615488][ T6121] ? __pfx_vhost_task_create+0x10/0x10 [ 56.615511][ T6121] ? __pfx_vhost_task_fn+0x10/0x10 [ 56.615530][ T6121] ? __pfx___mutex_lock+0x10/0x10 [ 56.615550][ T6121] ? kasan_quarantine_put+0x104/0x240 [ 56.615571][ T6121] kvm_mmu_post_init_vm+0x1b3/0x360 [ 56.615595][ T6121] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 56.615619][ T6121] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 56.615643][ T6121] kvm_vcpu_ioctl+0x730/0x1700 [ 56.615663][ T6121] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 56.615682][ T6121] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 56.615704][ T6121] ? do_vfs_ioctl+0x226/0x13e0 [ 56.615729][ T6121] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 56.615754][ T6121] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 56.615786][ T6121] ? __fget_files+0x215/0x3d0 [ 56.615801][ T6121] ? hook_file_ioctl_common+0x140/0x440 [ 56.615824][ T6121] ? selinux_file_ioctl+0x13b/0x290 [ 56.615846][ T6121] ? selinux_file_ioctl+0xb6/0x290 [ 56.615872][ T6121] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 56.615893][ T6121] __x64_sys_ioctl+0x18e/0x210 [ 56.615911][ T6121] do_syscall_64+0x115/0x870 [ 56.615932][ T6121] ? clear_bhb_loop+0x70/0xc0 [ 56.615954][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.615972][ T6121] RIP: 0033:0x7f57c659e0d9 [ 56.615988][ T6121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.616004][ T6121] RSP: 002b:00007f57c73a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.616021][ T6121] RAX: ffffffffffffffda RBX: 00007f57c6825fa0 RCX: 00007f57c659e0d9 [ 56.616030][ T6121] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 56.616038][ T6121] RBP: 00007f57c73a9090 R08: 0000000000000000 R09: 0000000000000000 [ 56.616047][ T6121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.616056][ T6121] R13: 00007f57c6826038 R14: 00007f57c6825fa0 R15: 00007fff6f7d4048 [ 56.616079][ T6121] [ 56.617151][ T6121] syz.1.78: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 56.812994][ T6121] CPU: 2 UID: 0 PID: 6121 Comm: syz.1.78 Not tainted syzkaller #0 PREEMPT(full) [ 56.813007][ T6121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.813014][ T6121] Call Trace: [ 56.813018][ T6121] [ 56.813022][ T6121] dump_stack_lvl+0x100/0x190 [ 56.813040][ T6121] warn_alloc.cold+0x94/0xa8 [ 56.813052][ T6121] ? __pfx_warn_alloc+0x10/0x10 [ 56.813063][ T6121] ? lockdep_hardirqs_on+0x78/0x100 [ 56.813079][ T6121] ? __get_vm_area_node+0x2cd/0x330 [ 56.813096][ T6121] ? __get_vm_area_node+0x208/0x330 [ 56.813113][ T6121] __vmalloc_node_range_noprof+0xccd/0x1630 [ 56.813128][ T6121] ? rcu_is_watching+0x12/0xc0 [ 56.813148][ T6121] ? vhost_task_create+0x1db/0x370 [ 56.813164][ T6121] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 56.813181][ T6121] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 56.813200][ T6121] ? trace_kmem_cache_alloc+0xdd/0x100 [ 56.813216][ T6121] ? vhost_task_create+0x1db/0x370 [ 56.813227][ T6121] __vmalloc_node_noprof+0xad/0xf0 [ 56.813243][ T6121] ? vhost_task_create+0x1db/0x370 [ 56.813256][ T6121] copy_process+0x803/0x8210 [ 56.813278][ T6121] ? __pfx_copy_process+0x10/0x10 [ 56.813293][ T6121] ? __kasan_kmalloc+0xaa/0xb0 [ 56.813312][ T6121] ? lockdep_init_map_type+0x5c/0x250 [ 56.813327][ T6121] ? lockdep_init_map_type+0x5c/0x250 [ 56.813341][ T6121] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 56.813355][ T6121] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 56.813367][ T6121] vhost_task_create+0x1db/0x370 [ 56.813379][ T6121] ? __pfx_vhost_task_create+0x10/0x10 [ 56.813395][ T6121] ? __pfx_vhost_task_fn+0x10/0x10 [ 56.813409][ T6121] ? __pfx___mutex_lock+0x10/0x10 [ 56.813421][ T6121] ? kasan_quarantine_put+0x104/0x240 [ 56.813436][ T6121] kvm_mmu_post_init_vm+0x1b3/0x360 [ 56.813453][ T6121] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 56.813469][ T6121] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 56.813483][ T6121] kvm_vcpu_ioctl+0x730/0x1700 [ 56.813496][ T6121] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 56.813509][ T6121] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 56.813523][ T6121] ? do_vfs_ioctl+0x226/0x13e0 [ 56.813544][ T6121] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 56.813561][ T6121] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 56.813583][ T6121] ? __fget_files+0x215/0x3d0 [ 56.813595][ T6121] ? hook_file_ioctl_common+0x140/0x440 [ 56.813611][ T6121] ? selinux_file_ioctl+0x13b/0x290 [ 56.813626][ T6121] ? selinux_file_ioctl+0xb6/0x290 [ 56.813643][ T6121] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 56.813655][ T6121] __x64_sys_ioctl+0x18e/0x210 [ 56.813666][ T6121] do_syscall_64+0x115/0x870 [ 56.813678][ T6121] ? clear_bhb_loop+0x70/0xc0 [ 56.813691][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.813702][ T6121] RIP: 0033:0x7f57c659e0d9 [ 56.813712][ T6121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.813722][ T6121] RSP: 002b:00007f57c73a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.813732][ T6121] RAX: ffffffffffffffda RBX: 00007f57c6825fa0 RCX: 00007f57c659e0d9 [ 56.813739][ T6121] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 56.813745][ T6121] RBP: 00007f57c73a9090 R08: 0000000000000000 R09: 0000000000000000 [ 56.813750][ T6121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.813757][ T6121] R13: 00007f57c6826038 R14: 00007f57c6825fa0 R15: 00007fff6f7d4048 [ 56.813769][ T6121] [ 56.813773][ T6121] Mem-Info: [ 56.923226][ T6121] active_anon:8296 inactive_anon:0 isolated_anon:0 [ 56.923226][ T6121] active_file:0 inactive_file:58155 isolated_file:0 [ 56.923226][ T6121] unevictable:1000 dirty:1937 writeback:0 [ 56.923226][ T6121] slab_reclaimable:11770 slab_unreclaimable:66445 [ 56.923226][ T6121] mapped:24733 shmem:1554 pagetables:1170 [ 56.923226][ T6121] sec_pagetables:294 bounce:0 [ 56.923226][ T6121] kernel_misc_reclaimable:0 [ 56.923226][ T6121] free:455116 free_pcp:17077 free_cma:0 [ 56.938282][ T6121] Node 0 active_anon:33184kB inactive_anon:0kB active_file:0kB inactive_file:232416kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:98932kB dirty:7708kB writeback:0kB shmem:4216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13152kB pagetables:4496kB sec_pagetables:1176kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 56.952307][ T6121] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:40kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 56.963686][ T6121] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 56.973242][ T6121] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 56.975191][ T6121] Node 0 DMA32 free:159872kB boost:0kB min:27364kB low:34204kB high:41044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33184kB inactive_anon:0kB active_file:0kB inactive_file:232416kB unevictable:2000kB writepending:7708kB zspages:0kB present:2080628kB managed:1254872kB mlocked:0kB bounce:0kB free_pcp:63616kB local_pcp:19452kB free_cma:0kB [ 56.985924][ T6121] lowmem_reserve[]: 0 0 0 0 0 [ 56.987802][ T6121] Node 1 Normal free:1645104kB boost:0kB min:39872kB low:49840kB high:59808kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB writepending:40kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:4980kB local_pcp:2080kB free_cma:0kB [ 56.998061][ T6121] lowmem_reserve[]: 0 0 0 0 0 [ 56.999595][ T6121] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 57.003606][ T6121] Node 0 DMA32: 5*4kB (UME) 1*8kB (U) 62*16kB (UM) 70*32kB (ME) 11*64kB (UME) 3*128kB (M) 3*256kB (ME) 4*512kB (M) 1*1024kB (M) 4*2048kB (UM) 35*4096kB (UM) = 159740kB [ 57.009029][ T6121] Node 1 Normal: 8*4kB (UM) 4*8kB (U) 13*16kB (UM) 15*32kB (UM) 13*64kB (UM) 4*128kB (UM) 2*256kB (U) 4*512kB (UM) 2*1024kB (U) 2*2048kB (UM) 399*4096kB (M) = 1645104kB [ 57.014247][ T6121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 57.017416][ T6121] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 57.020375][ T6121] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 57.023397][ T6121] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 57.026354][ T6121] 59705 total pagecache pages [ 57.028123][ T6121] 0 pages in swap cache [ 57.029393][ T6121] Free swap = 124996kB [ 57.031081][ T6121] Total swap = 124996kB [ 57.032917][ T6121] 1048443 pages RAM [ 57.034290][ T6121] 0 pages HighMem/MovableOnly [ 57.036058][ T6121] 285414 pages reserved [ 57.037512][ T6121] 0 pages cma reserved [ 57.140759][ T6131] FAULT_INJECTION: forcing a failure. [ 57.140759][ T6131] name failslab, interval 1, probability 0, space 0, times 0 [ 57.146229][ T6131] CPU: 3 UID: 0 PID: 6131 Comm: syz.0.82 Not tainted syzkaller #0 PREEMPT(full) [ 57.146250][ T6131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.146259][ T6131] Call Trace: [ 57.146265][ T6131] [ 57.146271][ T6131] dump_stack_lvl+0x100/0x190 [ 57.146297][ T6131] should_fail_ex.cold+0x5/0xa [ 57.146326][ T6131] should_failslab+0xc2/0x120 [ 57.146348][ T6131] __kmalloc_cache_noprof+0x91/0x6c0 [ 57.146366][ T6131] ? trace_parse_run_command+0x58/0x3b0 [ 57.146389][ T6131] trace_parse_run_command+0x58/0x3b0 [ 57.146407][ T6131] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 57.146432][ T6131] vfs_write+0x2aa/0x1050 [ 57.146449][ T6131] ? __pfx_probes_write+0x10/0x10 [ 57.146470][ T6131] ? __pfx_vfs_write+0x10/0x10 [ 57.146484][ T6131] ? __fget_files+0x215/0x3d0 [ 57.146508][ T6131] ? __fget_files+0x21f/0x3d0 [ 57.146532][ T6131] ksys_write+0x12a/0x250 [ 57.146547][ T6131] ? __pfx_ksys_write+0x10/0x10 [ 57.146568][ T6131] do_syscall_64+0x115/0x870 [ 57.146587][ T6131] ? clear_bhb_loop+0x70/0xc0 [ 57.146606][ T6131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.146622][ T6131] RIP: 0033:0x7fe4b679e0d9 [ 57.146635][ T6131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.146650][ T6131] RSP: 002b:00007fe4b75d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.146666][ T6131] RAX: ffffffffffffffda RBX: 00007fe4b6a25fa0 RCX: 00007fe4b679e0d9 [ 57.146676][ T6131] RDX: 0000000000000022 RSI: 0000200000000300 RDI: 0000000000000004 [ 57.146684][ T6131] RBP: 00007fe4b75d0090 R08: 0000000000000000 R09: 0000000000000000 [ 57.146693][ T6131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.146701][ T6131] R13: 00007fe4b6a26038 R14: 00007fe4b6a25fa0 R15: 00007fffe4557338 [ 57.146723][ T6131] [ 57.218427][ T6133] binder: 6132:6133 ioctl c0306201 0 returned -14 [ 57.517545][ T5806] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 57.559164][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 57.681429][ T5806] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 57.685214][ T5806] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 57.688026][ T5806] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.693326][ T5806] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 57.696188][ T5806] usb 5-1: Manufacturer: syz [ 57.699757][ T5806] usb 5-1: config 0 descriptor?? [ 57.703584][ T5806] igorplugusb 5-1:0.0: incorrect number of endpoints [ 57.717898][ T9] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 57.721655][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.724910][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.727917][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.732226][ T9] usb 7-1: config 0 descriptor?? [ 57.831037][ T6154] kvm: pic: level sensitive irq not supported [ 57.831672][ T6154] syz.3.91 uses obsolete (PF_INET,SOCK_PACKET) [ 57.905171][ T5806] usb 5-1: USB disconnect, device number 5 [ 58.248995][ T6167] FAULT_INJECTION: forcing a failure. [ 58.248995][ T6167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.254938][ T6167] CPU: 2 UID: 0 PID: 6167 Comm: syz.1.96 Not tainted syzkaller #0 PREEMPT(full) [ 58.254954][ T6167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.254960][ T6167] Call Trace: [ 58.254965][ T6167] [ 58.254969][ T6167] dump_stack_lvl+0x100/0x190 [ 58.255017][ T6167] should_fail_ex.cold+0x5/0xa [ 58.255034][ T6167] _copy_to_user+0x32/0xd0 [ 58.255058][ T6167] simple_read_from_buffer+0xcb/0x170 [ 58.255078][ T6167] proc_fail_nth_read+0x1af/0x230 [ 58.255093][ T6167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 58.255106][ T6167] ? rw_verify_area+0xce/0x6d0 [ 58.255156][ T6167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 58.255168][ T6167] vfs_read+0x1e4/0xb40 [ 58.255179][ T6167] ? __pfx_vfs_read+0x10/0x10 [ 58.255188][ T6167] ? __fget_files+0x215/0x3d0 [ 58.255204][ T6167] ? __fget_files+0x21f/0x3d0 [ 58.255219][ T6167] ksys_read+0x12a/0x250 [ 58.255228][ T6167] ? __pfx_ksys_read+0x10/0x10 [ 58.255241][ T6167] do_syscall_64+0x115/0x870 [ 58.255261][ T6167] ? clear_bhb_loop+0x70/0xc0 [ 58.255274][ T6167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.255285][ T6167] RIP: 0033:0x7f57c655e90e [ 58.255296][ T6167] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 58.255306][ T6167] RSP: 002b:00007f57c7387fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.255317][ T6167] RAX: ffffffffffffffda RBX: 00007f57c73886c0 RCX: 00007f57c655e90e [ 58.255324][ T6167] RDX: 000000000000000f RSI: 00007f57c73880a0 RDI: 0000000000000004 [ 58.255330][ T6167] RBP: 00007f57c7388090 R08: 0000000000000000 R09: 0000000000000000 [ 58.255335][ T6167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.255341][ T6167] R13: 00007f57c6826128 R14: 00007f57c6826090 R15: 00007fff6f7d4048 [ 58.255354][ T6167] [ 58.343890][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 58.345895][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 58.363876][ T9] usb 7-1: USB disconnect, device number 7 [ 58.540762][ T6183] FAULT_INJECTION: forcing a failure. [ 58.540762][ T6183] name failslab, interval 1, probability 0, space 0, times 0 [ 58.545327][ T6183] CPU: 2 UID: 0 PID: 6183 Comm: syz.1.103 Not tainted syzkaller #0 PREEMPT(full) [ 58.545342][ T6183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.545348][ T6183] Call Trace: [ 58.545352][ T6183] [ 58.545356][ T6183] dump_stack_lvl+0x100/0x190 [ 58.545374][ T6183] should_fail_ex.cold+0x5/0xa [ 58.545389][ T6183] should_failslab+0xc2/0x120 [ 58.545404][ T6183] __kmalloc_noprof+0xfc/0x820 [ 58.545420][ T6183] ? rcu_is_watching+0x12/0xc0 [ 58.545448][ T6183] ? tomoyo_realpath_from_path+0xb6/0x690 [ 58.545470][ T6183] tomoyo_realpath_from_path+0xb6/0x690 [ 58.545483][ T6183] tomoyo_get_exe+0x63/0xa0 [ 58.545496][ T6183] tomoyo_write_control+0x69e/0x13a0 [ 58.545515][ T6183] ? __pfx_tomoyo_write_control+0x10/0x10 [ 58.545531][ T6183] vfs_write+0x2aa/0x1050 [ 58.545542][ T6183] ? __pfx_tomoyo_write+0x10/0x10 [ 58.545554][ T6183] ? __pfx_vfs_write+0x10/0x10 [ 58.545563][ T6183] ? __fget_files+0x215/0x3d0 [ 58.545579][ T6183] ? __fget_files+0x21f/0x3d0 [ 58.545594][ T6183] ksys_write+0x12a/0x250 [ 58.545604][ T6183] ? __pfx_ksys_write+0x10/0x10 [ 58.545617][ T6183] do_syscall_64+0x115/0x870 [ 58.545632][ T6183] ? clear_bhb_loop+0x70/0xc0 [ 58.545645][ T6183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.545655][ T6183] RIP: 0033:0x7f57c659e0d9 [ 58.545665][ T6183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.545675][ T6183] RSP: 002b:00007f57c73a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.545686][ T6183] RAX: ffffffffffffffda RBX: 00007f57c6825fa0 RCX: 00007f57c659e0d9 [ 58.545693][ T6183] RDX: 000000000000004c RSI: 0000200000000100 RDI: 0000000000000003 [ 58.545699][ T6183] RBP: 00007f57c73a9090 R08: 0000000000000000 R09: 0000000000000000 [ 58.545705][ T6183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.545711][ T6183] R13: 00007f57c6826038 R14: 00007f57c6825fa0 R15: 00007fff6f7d4048 [ 58.545724][ T6183] [ 58.545729][ T6183] ERROR: Out of memory at tomoyo_realpath_from_path. [ 58.607417][ T5737] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 58.677542][ T5834] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 58.787411][ T5737] usb 8-1: Using ep0 maxpacket: 8 [ 58.789557][ T5737] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 58.793450][ T5737] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 58.795900][ T5737] usb 8-1: config 16 has an invalid interface number: 48 but max is 0 [ 58.798535][ T5737] usb 8-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 58.801862][ T5737] usb 8-1: config 16 has no interface number 0 [ 58.803790][ T5737] usb 8-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 58.807104][ T5737] usb 8-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 58.811394][ T5737] usb 8-1: config 16 interface 48 has no altsetting 0 [ 58.813507][ T5737] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.828134][ T5834] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 58.832773][ T5834] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 58.836711][ T5834] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 58.840606][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.888253][ T5806] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 58.907782][ T42] kauditd_printk_skb: 78 callbacks suppressed [ 58.907793][ T42] audit: type=1400 audit(1787041358.860:346): avc: denied { map_read map_write } for pid=6191 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.023522][ C3] raw-gadget.0 gadget.3: ignoring, device is not running [ 59.026853][ T5737] usb 8-1: string descriptor 0 read error: -71 [ 59.032472][ T5737] usb 8-1: USB disconnect, device number 8 [ 59.039031][ T5806] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 59.044010][ T5806] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 59.047876][ T5806] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.049570][ T42] audit: type=1400 audit(1787041359.000:347): avc: denied { append } for pid=6177 comm="syz.0.101" name="cec0" dev="devtmpfs" ino=972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.053234][ T5806] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 59.063066][ T5806] usb 6-1: Manufacturer: syz [ 59.067887][ T5806] usb 6-1: config 0 descriptor?? [ 59.116385][ T34] usb 5-1: USB disconnect, device number 6 [ 59.127382][ T5806] rc_core: IR keymap rc-hauppauge not found [ 59.129247][ T5806] Registered IR keymap rc-empty [ 59.131418][ T5806] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 59.135416][ T5806] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input7 [ 59.267494][ T56] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 59.278048][ T5737] usb 6-1: USB disconnect, device number 4 [ 59.418950][ T56] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 59.426060][ T56] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 59.429758][ T56] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.435584][ T56] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 59.439145][ T56] usb 7-1: Manufacturer: syz [ 59.443985][ T56] usb 7-1: config 0 descriptor?? [ 59.453532][ T56] igorplugusb 7-1:0.0: incorrect number of endpoints [ 59.573064][ T42] audit: type=1400 audit(1787041359.520:348): avc: denied { ioctl } for pid=6203 comm="syz.3.110" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 59.625665][ T42] audit: type=1400 audit(1787041359.570:349): avc: denied { execute } for pid=6203 comm="syz.3.110" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 59.660388][ T5737] usb 7-1: USB disconnect, device number 8 [ 59.694263][ T6205] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88803665e4b0 pfn:0x3665e [ 59.698762][ T6205] memcg:ffff8880311ce200 [ 59.700038][ T6205] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 59.702682][ T6205] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 59.705406][ T6205] raw: ffff88803665e4b0 0000000000000000 00000001ffffffff ffff8880311ce200 [ 59.710369][ T6205] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 59.713335][ T6205] page_owner tracks the page as allocated [ 59.715077][ T6205] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6205, tgid 6203 (syz.3.110), ts 59694227036, free_ts 59677920865 [ 59.721684][ T42] audit: type=1400 audit(1787041359.670:350): avc: denied { read } for pid=5116 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 59.723467][ T6205] post_alloc_hook+0xfd/0x120 [ 59.729993][ T6205] get_page_from_freelist+0xf48/0x3530 [ 59.731156][ T42] audit: type=1400 audit(1787041359.670:351): avc: denied { search } for pid=5116 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.732345][ T6205] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 59.739336][ T42] audit: type=1400 audit(1787041359.670:352): avc: denied { write search } for pid=5116 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.742194][ T6205] alloc_pages_mpol+0x1fb/0x540 [ 59.750273][ T42] audit: type=1400 audit(1787041359.670:353): avc: denied { add_name } for pid=5116 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.751244][ T6205] folio_alloc_noprof+0x22/0x250 [ 59.757950][ T42] audit: type=1400 audit(1787041359.670:354): avc: denied { create } for pid=5116 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.757976][ T42] audit: type=1400 audit(1787041359.670:355): avc: denied { append open } for pid=5116 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.779769][ T6205] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 59.782786][ T6205] filemap_alloc_folio_noprof+0x5e/0x80 [ 59.785202][ T6205] page_cache_ra_order+0x539/0xed0 [ 59.787522][ T6205] filemap_fault+0x1943/0x3130 [ 59.789521][ T6205] __do_fault+0x10b/0x440 [ 59.791353][ T6205] do_fault+0xa99/0x1750 [ 59.793175][ T6205] __handle_mm_fault+0x187d/0x2a00 [ 59.795364][ T6205] handle_mm_fault+0x37b/0xa30 [ 59.797522][ T6205] __get_user_pages+0x1178/0x32a0 [ 59.799903][ T6205] populate_vma_page_range+0x267/0x3f0 [ 59.802219][ T6205] __mm_populate+0x107/0x3a0 [ 59.804218][ T6205] page last free pid 0 tgid 0 stack trace: [ 59.807058][ T6205] __free_frozen_pages+0x79f/0x1090 [ 59.808844][ T6205] rcu_core+0x5a2/0x10d0 [ 59.810183][ T6205] handle_softirqs+0x1ea/0x9b0 [ 59.811773][ T6205] __irq_exit_rcu+0x162/0x210 [ 59.813259][ T6205] irq_exit_rcu+0x9/0x30 [ 59.814598][ T6205] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 59.816361][ T6205] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 59.821054][ T6212] input: syz0 as /devices/virtual/input/input8 [ 59.821614][ T6205] ------------[ cut here ]------------ [ 59.825260][ T6205] kernel BUG at mm/filemap.c:858! [ 59.826850][ T6205] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 59.829442][ T6205] CPU: 3 UID: 0 PID: 6205 Comm: syz.3.110 Not tainted syzkaller #0 PREEMPT(full) [ 59.833046][ T6205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.835914][ T6214] befs: (nbd0): unable to read superblock [ 59.836110][ T6205] RIP: 0010:__filemap_add_folio+0x1033/0x12f0 [ 59.839143][ T6215] befs: (nbd0): unable to read superblock [ 59.840281][ T6205] Code: 43 c1 ff 48 c7 c6 e0 a2 fd 8b 4c 89 ef e8 c5 ee 12 00 90 0f 0b e8 7d 43 c1 ff 48 c7 c6 40 a3 fd 8b 4c 89 ef e8 ae ee 12 00 90 <0f> 0b e8 66 43 c1 ff 90 0f 0b 90 e9 76 fe ff ff e8 58 43 c1 ff 90 [ 59.840296][ T6205] RSP: 0018:ffffc90005a0f3f8 EFLAGS: 00010246 [ 59.840306][ T6205] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc90025cc9000 [ 59.840314][ T6205] RDX: 0000000000080000 RSI: ffffffff825c2128 RDI: ffff88802bd32a44 [ 59.855724][ T6205] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 59.858217][ T6205] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000002 [ 59.860629][ T6205] R13: ffffea0000d99780 R14: 0000000000000000 R15: 1ffff92000b41eaa [ 59.863049][ T6205] FS: 00007fd0ee9d56c0(0000) GS:ffff8880d5edc000(0000) knlGS:0000000000000000 [ 59.865794][ T6205] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.867848][ T6205] CR2: 000000110c4840b4 CR3: 000000005c901000 CR4: 0000000000352ef0 [ 59.870330][ T6205] Call Trace: [ 59.871427][ T6205] [ 59.872333][ T6205] ? __pfx___filemap_add_folio+0x10/0x10 [ 59.874084][ T6205] filemap_add_folio+0x1d3/0x630 [ 59.875650][ T6205] ? __lock_acquire+0x49f/0x1a40 [ 59.877229][ T6205] ? __pfx_filemap_add_folio+0x10/0x10 [ 59.878928][ T6205] ? __pfx___css_rstat_updated+0x10/0x10 [ 59.880602][ T6205] page_cache_ra_order+0x602/0xed0 [ 59.882435][ T6205] filemap_fault+0x1943/0x3130 [ 59.883952][ T6205] ? __pfx_filemap_fault+0x10/0x10 [ 59.885554][ T6205] ? find_held_lock+0x2b/0x80 [ 59.887011][ T6205] __do_fault+0x10b/0x440 [ 59.888310][ T6205] do_fault+0xa99/0x1750 [ 59.889642][ T6205] __handle_mm_fault+0x187d/0x2a00 [ 59.891268][ T6205] ? mt_find+0x45e/0x8e0 [ 59.892603][ T6205] ? __pfx___handle_mm_fault+0x10/0x10 [ 59.894288][ T6205] ? __pfx_mt_find+0x10/0x10 [ 59.895697][ T6205] handle_mm_fault+0x37b/0xa30 [ 59.897181][ T6205] __get_user_pages+0x1178/0x32a0 [ 59.898756][ T6205] ? __pfx___get_user_pages+0x10/0x10 [ 59.900439][ T6205] populate_vma_page_range+0x267/0x3f0 [ 59.902470][ T6205] ? __pfx_populate_vma_page_range+0x10/0x10 [ 59.904241][ T6205] ? __pfx_find_vma_intersection+0x10/0x10 [ 59.906060][ T6205] ? do_mmap+0x93f/0x12f0 [ 59.907444][ T6205] __mm_populate+0x107/0x3a0 [ 59.908896][ T6205] ? __pfx___mm_populate+0x10/0x10 [ 59.910503][ T6205] ? up_write+0x2e5/0x5c0 [ 59.911850][ T6205] vm_mmap_pgoff+0x37f/0x470 [ 59.913272][ T6205] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 59.914873][ T6205] ? __fget_files+0x215/0x3d0 [ 59.916352][ T6205] ? __fget_files+0x21f/0x3d0 [ 59.917835][ T6205] ksys_mmap_pgoff+0x3cb/0x610 [ 59.919343][ T6205] ? kcov_ioctl+0x17a/0x750 [ 59.920756][ T6205] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 59.922503][ T6205] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 59.924269][ T6205] __x64_sys_mmap+0x125/0x190 [ 59.925723][ T6205] do_syscall_64+0x115/0x870 [ 59.927169][ T6205] ? clear_bhb_loop+0x70/0xc0 [ 59.928652][ T6205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.930484][ T6205] RIP: 0033:0x7fd0f079e0d9 [ 59.931913][ T6205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.937724][ T6205] RSP: 002b:00007fd0ee9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 59.940309][ T6205] RAX: ffffffffffffffda RBX: 00007fd0f0a26090 RCX: 00007fd0f079e0d9 [ 59.942971][ T6205] RDX: 0000000000000007 RSI: 0000000000b36000 RDI: 0000200000000000 [ 59.945418][ T6205] RBP: 00007fd0f0835024 R08: 0000000000000006 R09: 000000002cb25000 [ 59.948166][ T6205] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 59.950597][ T6205] R13: 00007fd0f0a26128 R14: 00007fd0f0a26090 R15: 00007ffd3a2b1438 [ 59.953056][ T6205] [ 59.953969][ T6205] Modules linked in: [ 59.955564][ T6205] ---[ end trace 0000000000000000 ]--- [ 59.957756][ T6205] RIP: 0010:__filemap_add_folio+0x1033/0x12f0 [ 59.959736][ T6205] Code: 43 c1 ff 48 c7 c6 e0 a2 fd 8b 4c 89 ef e8 c5 ee 12 00 90 0f 0b e8 7d 43 c1 ff 48 c7 c6 40 a3 fd 8b 4c 89 ef e8 ae ee 12 00 90 <0f> 0b e8 66 43 c1 ff 90 0f 0b 90 e9 76 fe ff ff e8 58 43 c1 ff 90 [ 59.965652][ T6205] RSP: 0018:ffffc90005a0f3f8 EFLAGS: 00010246 [ 59.967636][ T6205] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc90025cc9000 [ 59.970081][ T6205] RDX: 0000000000080000 RSI: ffffffff825c2128 RDI: ffff88802bd32a44 [ 59.972534][ T6205] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 59.974952][ T6205] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000002 [ 59.977509][ T6205] R13: ffffea0000d99780 R14: 0000000000000000 R15: 1ffff92000b41eaa [ 59.979963][ T6205] FS: 00007fd0ee9d56c0(0000) GS:ffff8880d5edc000(0000) knlGS:0000000000000000 [ 59.982737][ T6205] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.984808][ T6205] CR2: 000000110c4840b4 CR3: 000000005c901000 CR4: 0000000000352ef0 [ 59.987450][ T6205] Kernel panic - not syncing: Fatal exception [ 59.989894][ T6205] Kernel Offset: disabled [ 59.991341][ T6205] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:22:39 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000000 RBX=0000000000000097 RCX=ffffffff84de925a RDX=ffff88802eea2580 RSI=ffffffff84de9264 RDI=ffff88802eea2580 RBP=dffffc0000000000 RSP=ffffc90003a3fa68 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffc90003a3fb98 R13=ffff88802d5fbfb0 R14=0000000000000097 R15=0000000000000000 RIP=ffffffff820a7599 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f7f9e3e6880 ffffffff 00c00000 GS =0000 ffff8880d5bdc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c329e35 CR3=00000000337f6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000010410 Opmask02=00000000ffffffff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff12d152a8 00007fff12d152a8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff12d15480 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d85caa59b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d85ca8dd40 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f9ddf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326ab2fdb5483 737326ae72721259 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a35d0108b7fa2725 737373762ef6b9fe ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65636172742f3070 6f6f6c2f6b636f6c 622f6c6175747269 762f736563697665 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000081 000065636172742f 30706f6f6c2f6b63 6f6c622f6c617574 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000063 000055dd012c1b2e 0000000000000021 000000000000302e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f9ddf22b0 000055d85cb5b7d0 000000000001f051 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000025f74 RBX=ffff88801eeea580 RCX=ffffffff8bbd5345 RDX=0000000000000001 RSI=ffffffff8c601b00 RDI=ffffffff81df3db7 RBP=ffffed1003ddd4b0 RSP=ffffc90000177e00 R8 =0000000000000000 R9 =ffffed100d4a678d R10=ffff88806a533c6b R11=ffffffff81d6123c R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=dffffc0000000000 RIP=ffffffff8bbd38ff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5cdc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=000000005be1b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fcc0e0 Opmask01=00000000000000ff Opmask02=00000000fffffeff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d85ca9d9c0 000055d85ca9d9c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0f0e0d0c0b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f9ddf1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d826080a00 277766736c6d6172 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffff00 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000000000ff 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 32312c30652d3532 3030653030303070 3530303076303030 30623a7475706e69 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 007766736c6d6172 6b2c35312c32312c 30652d3532303065 3030303070353030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d580d0d0d0d4d08 0d0d0d4b0d0d0d0d 5f0749484d535400 5341494c41444f4d ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d85ca93a20 000055d85ca8cca0 000055d85ca839c0 000055d85ca83e70 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d85ca83c50 000055d85c84ab20 000055d85ca9d140 000055d85ca80f80 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d85ca83eb0 000055d85ca8e9f0 000055d85ca85480 000055d85ca8ae10 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d85ca800c0 000055d85ca85aa0 000055d85c8483b0 000055d85ca7fd70 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557f5ca81b00 000055343035623a 0000000000000021 0000552d012d000a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00004e3430354430 0000000000000021 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000008 RCX=dffffc0000000000 RDX=ffff88802aaa8000 RSI=ffffffff826070be RDI=ffff88802aaa84c4 RBP=0000000000001000 RSP=ffffc90003c2f548 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000008 R13=000000000000bff8 R14=ffff888023d9ca38 R15=ffffea000132d2c0 RIP=ffffffff826070c6 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555582a84500 ffffffff 00c00000 GS =0000 ffff8880d5ddc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe4b75556c8 CR3=0000000023d8f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555840bd734 00005555840bd730 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff0f0e0d0c 0b0a090807060504 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59813f2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555840be578 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 100008004cfc0065 7375662f7665642f 01ffffffffffffff ffeb080a800307fe ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff041580030fff ffffffffff0414f0 0300080014e80300 080014e003000800 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80040a1000060102 e000080015a00300 0800159803000800 1590030fffffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0102a81000138004 0a1000060102e000 080015a003000800 1598030008001590 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030fffffffffffff 041580030fffffff ffffff0414f00300 080014e803000800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 14e00300080014d8 0300080014d0030f ffffffffffff0414 c00300080014b803 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080014b0030fff ffffffffff0414a0 0300080014980301 0800149003000800 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a41e55 RDI=ffffffff9bc08340 RBP=ffffffff9bc08300 RSP=ffffc90005a0ece0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b8fa203 R15=ffffffff85a41df0 RIP=ffffffff85a41e7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fd0ee9d56c0 ffffffff 00c00000 GS =0000 ffff8880d5edc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c4840b4 CR3=000000005c901000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57c735d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6f7d4536 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6f7d4536 00007fff6f7d453c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57c6635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57c6635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57c66357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57c6635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57c67f2600 00007f57c67f25e0 00007f57c67f25e8 00007f57c67f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57c67f25f8 00007f57c67f25c8 00007f57c67f2600 00007f57c67f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000