last executing test programs: 1.791677665s ago: executing program 3 (id=267): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000540)=ANY=[@ANYRES64=r0], 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000002000)={0xa, 0x4e1e, 0x7579cf98, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x103}, 0x1c) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000040)={0xfffffc00, @random="ae30d1802808"}) fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x39b3) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0xff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000380)={0x0, 0x0, 0xfffffffa, 0x81, 0xfffffdff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000400)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r9 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$DM_DEV_CREATE(r9, 0xc138fd03, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r9, 0xc138fd09, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x1d8, 0x138, 0x1, 0x0, 0x28001, 0x0, 0x0, @by_dev={r10}, [@cache={0x0, 0x1800, 0x0, 0xa0, 'cache\x00', {@ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x1}, 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, '65', 0x20, '2 metadata2 writethrough', 0x20, 'smq 2 migration_threshold 1024'}}]}) 1.71086578s ago: executing program 3 (id=271): r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x92}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000740)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_UNLOCK(r3, 0x6406) 1.641735123s ago: executing program 0 (id=272): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x20) mount(&(0x7f0000000440)=@filename='mtd0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='jffs2\x00', 0x800000, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) pipe2$9p(&(0x7f00000001c0), 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000180)=0x8, 0x4) ioctl$SET_ARRAY_INFO(0xffffffffffffffff, 0x40480923, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c80052004e000100"], 0x57) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={r3, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.091829593s ago: executing program 0 (id=276): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'wlan0\x00', &(0x7f0000000280)=@ethtool_drvinfo={0x3, "8fa8a111c226f1ae7cf961a603c5f09445a58c925104a311a31aa0f456d0924e", "3d33604e934f84f05c2aa2738c3abc67d5210fa800f14230f2ea3bec0bd7c69c", "31078e301b6f8d793821e6ff96cc36e157e4e46cbfae79d798f42ae0c7400ac0", "78d3b072119f0881f1dacfd8dce2621425297957a2f2c77a0bc525f8ead8a193", "10b8be04471dcd25d4ce04591d2cdf3263b7bcb13cfd178fcdb13594a6a63c3d", "b87937d932faf9ab77a715c4", 0x3, 0x6, 0x9, 0xd, 0xffff}}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x33, 0x0, 0x6}]}}}], 0x18}}], 0x1, 0x50008000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x5c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x40241, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000700), 0x4) (async) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000780)={@multicast1=0xe0000300, @local}, 0x8) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) (async, rerun: 64) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000800)={@loopback, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x4000000a}, 0x3c) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f00000006c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x3c, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x4, 0xa0, 0x3, 0x1}]}}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @pic={0x8, 0x5, 0x9, 0x7, 0x2, 0x0, 0x2, 0x4, 0x3, 0xc0, 0x4, 0x0, 0x6, 0x4, 0xc}}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000240), 0x40000000000009f, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000240), 0xfdef) 1.001581759s ago: executing program 0 (id=278): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f00000004c0)='nfsd\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x143) getdents64(r0, &(0x7f0000000040)=""/174, 0xff56) r1 = syz_open_dev$dri(&(0x7f0000000440), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000480)={0x0, &(0x7f0000000580)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000005c0)={0x0, 0xffffffffffffff2b, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000640)={r3, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffd], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000006c0)={r4, 0x80000}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000180)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x30}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r7, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000000780)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c000280050001"], 0xc8}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000002010300000000000000000003008798"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x4048811) recvmsg(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/81, 0x51}], 0x1}, 0x2) r11 = landlock_create_ruleset(&(0x7f0000000400)={0x7f6e, 0x1}, 0x30, 0x3) landlock_restrict_self(r11, 0xe) 830.355097ms ago: executing program 3 (id=279): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000440)=@filename='mtd0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='jffs2\x00', 0x800000, 0x0) mount$overlay(0x1f4, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 770.27158ms ago: executing program 3 (id=280): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 769.779873ms ago: executing program 3 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000001100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000001200), &(0x7f0000001240)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='r', 0x1) r2 = inotify_init() r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x201, &(0x7f0000001200)={0x0, 0x300}) tkill(r3, 0x1) inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0xa50003d1) readv(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/3, 0x20}], 0x1) open(&(0x7f0000000300)='./bus\x00', 0x143142, 0x88) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000012c0)=0x254e, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001300)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000001340)={&(0x7f0000001380)={0x1d, r6}, 0x10, &(0x7f00000013c0)={&(0x7f0000001400)=@can={{0x1, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "68b48f76cd92b45a"}, 0x10}, 0x1, 0x0, 0x0, 0x2400c015}, 0x4000811) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x83, &(0x7f00000001c0)={r9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r9, 0xd, 0x1}, 0x8) 581.914048ms ago: executing program 3 (id=282): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r1 = socket(0x1e, 0x4, 0x0) (rerun: 32) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req={0x82, 0x57b3, 0x3, 0x9}, 0x10) (async) recvfrom$inet_nvme(r1, &(0x7f0000000180)=""/18, 0x12, 0x40000020, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, 0x0, 0x24008004) (async, rerun: 32) recvmmsg$unix(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/27, 0x1b}], 0x1}}], 0x40000000000007f, 0x0, 0x0) (async, rerun: 32) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000300)=[{&(0x7f0000000340)="ee", 0x101d0}], 0x1}}], 0x3467028987bc7b9, 0x9200000000000000) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) (async) openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x519b42, 0x0) (async) close(0x3) (async) write$binfmt_misc(r0, &(0x7f0000000100), 0xd) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe21, 0x10, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc}, 0xfffffffffffffdbb}, 0x48) 366.452875ms ago: executing program 2 (id=286): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000440)=@filename='mtd0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='jffs2\x00', 0x800000, 0x0) mount$overlay(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (fail_nth: 4) 340.049001ms ago: executing program 2 (id=288): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0) fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x83282, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000180)=0x8) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f0000000000)={0x9f63422128830807, 0x0, {[0x3, 0xfffeffffff7fff80, 0x80000001, 0x7, 0x3, 0x1000010, 0x9, 0x800]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) 240.842884ms ago: executing program 2 (id=291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0x7, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x13, 0x7, 0x8, 0xfbee}, 0x8000002, 0x1, 0x3, 0x5, 0xe, 0x6, 0xd, 0x18, 0x5, 0x2, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x13, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e105000000130000001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 240.537446ms ago: executing program 1 (id=292): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x173) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x4076cbba9945d516, &(0x7f0000000200)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000390426bd7000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="81b8000000000000300012800b000100697036746e6c00002000028014000300200100000000eeffffffffffffff05000500090029000000"], 0x50}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) sendto$packet(r1, &(0x7f00000003c0)="e8b77052a9", 0x28, 0x40, &(0x7f0000000400)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0xb, &(0x7f0000000540)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) write(r4, &(0x7f0000000180)='14', 0x2) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000600)=ANY=[]) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x1, 0x200, 0xffffffff, 0x9, 0xd, "5f14bf724b9e7892518835e47410494ca4d5bc"}) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x9902) 139.027033ms ago: executing program 1 (id=293): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'netdevsim0\x00'}) (async, rerun: 32) socket$unix(0x1, 0x5, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) 138.867463ms ago: executing program 1 (id=294): socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) close(0x4) 138.549823ms ago: executing program 0 (id=295): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) r1 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000040), 0x759cc1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f00000002c0)=0x100000) recvmsg$unix(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="ff", 0x1}], 0x1}, 0xc001) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000480)={0x5}) r4 = creat(&(0x7f0000000080)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x9) write$tcp_mem(r4, &(0x7f0000000180)={0xffffffffffff82bc, 0x20, 0x30, 0x20, 0xfffffffff7fffffc}, 0x48) write$UHID_INPUT(r4, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x800, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000160051c31a2970000000000006"], 0x14}}, 0x4040) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f0000000240)) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 71.94428ms ago: executing program 2 (id=296): socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x44) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x2000084) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@loopback, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b80000001300e92ea7a675a77c86b0f066fcaac1ed040bd59b91abdb534cd72b0f0905fd40aa094e6b50d26f252dd062011f3d31b97d9fa4038e1d2ac9f484b58aa31f2671d21931ffeb43cd039e805315f6b20f1e11e41c39a1c97d68b9d9521d834e15ef0a7a707e88a48760b31b383343d7493150bd13c18669ecf902004361cf3eac122a9101c4b90f04d00961f9df657d7441ec5a1949fa792286"], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x20004000) ioctl$DRM_IOCTL_PANTHOR_BO_SET_LABEL(0xffffffffffffffff, 0xc010644d, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)='nl80211\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x31}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008"], 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}, 0x1, 0xffffffffffff86dd}, 0x4000) 71.768664ms ago: executing program 1 (id=297): syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) 71.59421ms ago: executing program 1 (id=298): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 71.324035ms ago: executing program 2 (id=299): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x15, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000300)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1}, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000060801"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4) 1.474478ms ago: executing program 0 (id=300): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000440)=@filename='mtd0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='jffs2\x00', 0x800000, 0x0) mount$overlay(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (fail_nth: 5) 291.925µs ago: executing program 1 (id=301): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}, @nested_create_vm={0x12d, 0x18, 0x3}], 0x60}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write(r0, &(0x7f0000000040)='transport=fc,traddr=nn-33333333333333:pnpnx4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2232222222222222,nqn=n', 0x79) syz_usb_connect(0x0, 0x2b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040936901b00001010203010902190001010080320904000001030000000705810310"], 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000740)='/dev/comedi2\x00', 0x1, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000200)={0x101, 0x5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/size\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='256', 0x3) bind$bt_hci(r6, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) ioctl$KVM_CAP_XEN_HVM(r6, 0x4068aea3, &(0x7f0000000300)={0x26, 0x0, 0x4}) ioctl$COMEDI_UNLOCK(r5, 0x6406) 93.351µs ago: executing program 2 (id=302): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a80140000000003e4ff000014000200fc0200000000000000000000000000ff080018004e214e241400010020010000000000000000000000000001414c64fefc06"], 0x4c}}, 0x40000) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @remote}]}}}]}, 0x5c}}, 0x0) 0s ago: executing program 0 (id=303): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000f8180000bfa30000000000000703000018feffff7a0af0fff8ffffff71a4f0ff700000002d040200000000001d400200000000004604000001ed000062030000000000000f440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:50195' (ED25519) to the list of known hosts. [ 39.994413][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 39.994431][ T42] audit: type=1400 audit(1793244019.856:138): avc: denied { name_bind } for pid=5770 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.038571][ T42] audit: type=1400 audit(1793244019.896:139): avc: denied { execute } for pid=5771 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.039460][ T42] audit: type=1400 audit(1793244019.896:140): avc: denied { execute_no_trans } for pid=5771 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.665601][ T42] audit: type=1400 audit(1793244022.526:141): avc: denied { mounton } for pid=5771 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.667325][ T42] audit: type=1400 audit(1793244022.526:142): avc: denied { mount } for pid=5771 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.669533][ T5771] cgroup: Unknown subsys name 'net' [ 42.670810][ T42] audit: type=1400 audit(1793244022.526:143): avc: denied { unmount } for pid=5771 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.807808][ T5771] cgroup: Unknown subsys name 'cpuset' [ 42.816489][ T5771] cgroup: Unknown subsys name 'rlimit' [ 42.959918][ T42] audit: type=1400 audit(1793244022.816:144): avc: denied { setattr } for pid=5771 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.960546][ T42] audit: type=1400 audit(1793244022.816:145): avc: denied { create } for pid=5771 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.960845][ T42] audit: type=1400 audit(1793244022.816:146): avc: denied { write } for pid=5771 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.961224][ T42] audit: type=1400 audit(1793244022.816:147): avc: denied { read } for pid=5771 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.042655][ T5776] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.759942][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.774114][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 47.774140][ T42] audit: type=1400 audit(1793244027.636:154): avc: denied { execmem } for pid=5778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.983731][ T42] audit: type=1400 audit(1793244027.846:155): avc: denied { create } for pid=5782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.984144][ T42] audit: type=1400 audit(1793244027.846:156): avc: denied { read write } for pid=5782 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.984562][ T42] audit: type=1400 audit(1793244027.846:157): avc: denied { open } for pid=5782 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.993306][ T42] audit: type=1400 audit(1793244027.856:158): avc: denied { ioctl } for pid=5782 comm="syz-executor" path="socket:[1646]" dev="sockfs" ino=1646 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.012964][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.021024][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.021179][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.022117][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.023724][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.024156][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.025206][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.026323][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.026967][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.027268][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.028022][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.031284][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.032938][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.036157][ T42] audit: type=1400 audit(1793244027.896:159): avc: denied { read } for pid=5782 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.036934][ T42] audit: type=1400 audit(1793244027.896:160): avc: denied { open } for pid=5782 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.038483][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.042282][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.042584][ T42] audit: type=1400 audit(1793244027.906:161): avc: denied { mounton } for pid=5782 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.044699][ T5144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.047753][ T42] audit: type=1400 audit(1793244027.906:162): avc: denied { module_request } for pid=5782 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.052799][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.053418][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.055243][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.064954][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.065077][ T42] audit: type=1400 audit(1793244027.916:163): avc: denied { mounton } for pid=5788 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.250838][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.251341][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.254996][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.257521][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 48.279212][ T5787] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 48.328813][ T5788] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 48.367228][ T5782] infiniband rxe0: set active [ 48.367763][ T5782] infiniband rxe0: added rxe_eth0 [ 48.374261][ T5574] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.377792][ T5782] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 48.377815][ T5782] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 48.377837][ T5782] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 48.399617][ T5782] RDS/IB: rxe0: added [ 48.399843][ T5782] smc: adding ib device rxe0 with port count 1 [ 48.399910][ T5782] smc: ib device rxe0 port 1 has no pnetid [ 48.413229][ T1036] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.432545][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.454158][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.594926][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.681093][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.681238][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.681336][ T5785] bridge_slave_0: entered allmulticast mode [ 48.682243][ T5785] bridge_slave_0: entered promiscuous mode [ 48.706990][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.707064][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.707193][ T5785] bridge_slave_1: entered allmulticast mode [ 48.708350][ T5785] bridge_slave_1: entered promiscuous mode [ 48.710672][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.710851][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.710931][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.711058][ T5787] bridge_slave_0: entered allmulticast mode [ 48.712363][ T5787] bridge_slave_0: entered promiscuous mode [ 48.714411][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.714473][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.714555][ T5787] bridge_slave_1: entered allmulticast mode [ 48.716943][ T5787] bridge_slave_1: entered promiscuous mode [ 48.784481][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.786653][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.789011][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.804832][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.826663][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.826973][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.827301][ T5788] bridge_slave_0: entered allmulticast mode [ 48.828576][ T5788] bridge_slave_0: entered promiscuous mode [ 48.832346][ T5785] team0: Port device team_slave_0 added [ 48.832910][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.833035][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.833100][ T5788] bridge_slave_1: entered allmulticast mode [ 48.833850][ T5788] bridge_slave_1: entered promiscuous mode [ 48.850372][ T5785] team0: Port device team_slave_1 added [ 48.852165][ T5787] team0: Port device team_slave_0 added [ 48.888558][ T5782] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.900351][ T5787] team0: Port device team_slave_1 added [ 48.901616][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.903317][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.903327][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.903341][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.912833][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.913186][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.913195][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.913209][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.950408][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.950420][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.950435][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.959825][ T5788] team0: Port device team_slave_0 added [ 48.960852][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.960866][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.960887][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.962740][ T5788] team0: Port device team_slave_1 added [ 48.968787][ T5785] hsr_slave_0: entered promiscuous mode [ 48.969549][ T5785] hsr_slave_1: entered promiscuous mode [ 49.001162][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.001180][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.001200][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.024570][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.024586][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.024609][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.101702][ T5787] hsr_slave_0: entered promiscuous mode [ 49.102866][ T5787] hsr_slave_1: entered promiscuous mode [ 49.104522][ T5787] debugfs: 'hsr0' already exists in 'hsr' [ 49.104605][ T5787] Cannot create hsr debugfs directory [ 49.189354][ T5788] hsr_slave_0: entered promiscuous mode [ 49.190172][ T5788] hsr_slave_1: entered promiscuous mode [ 49.190804][ T5788] debugfs: 'hsr0' already exists in 'hsr' [ 49.190822][ T5788] Cannot create hsr debugfs directory [ 49.455646][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.459016][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.468279][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.472373][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.473121][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.476269][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.494398][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.497007][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.523466][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.523589][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.523688][ T5782] bridge_slave_0: entered allmulticast mode [ 49.524846][ T5782] bridge_slave_0: entered promiscuous mode [ 49.527918][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.528014][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.528110][ T5782] bridge_slave_1: entered allmulticast mode [ 49.529592][ T5782] bridge_slave_1: entered promiscuous mode [ 49.568307][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.572607][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.595980][ T5782] team0: Port device team_slave_0 added [ 49.596025][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.598677][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.600360][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.602820][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.604522][ T5782] team0: Port device team_slave_1 added [ 49.617486][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.619439][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.632434][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.633983][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.634513][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.634522][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.634537][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.636218][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.636227][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.636241][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.696577][ T5782] hsr_slave_0: entered promiscuous mode [ 49.697028][ T5782] hsr_slave_1: entered promiscuous mode [ 49.697342][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 49.697354][ T5782] Cannot create hsr debugfs directory [ 49.746804][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.750319][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.751636][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.756339][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.766884][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.769650][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.770328][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.773977][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.862820][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.902947][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.924094][ T1295] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.924219][ T1295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.940268][ T1295] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.940434][ T1295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.941047][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.944781][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.945491][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.949130][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.952759][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.956215][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.962841][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.966434][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.976999][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.010548][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.028888][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.028969][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.037261][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.041503][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.041601][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.052586][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.052821][ T5786] Bluetooth: hci0: command tx timeout [ 50.052828][ T5144] Bluetooth: hci2: command tx timeout [ 50.093834][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.112251][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.112299][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.118292][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.130267][ T1295] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.130313][ T1295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.133530][ T5144] Bluetooth: hci1: command tx timeout [ 50.142881][ T5144] Bluetooth: hci3: command tx timeout [ 50.145528][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.170753][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.179496][ T1295] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.179543][ T1295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.192434][ T1295] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.192522][ T1295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.204541][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.357666][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.393709][ T5785] veth0_vlan: entered promiscuous mode [ 50.398985][ T5785] veth1_vlan: entered promiscuous mode [ 50.401583][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.430628][ T5787] veth0_vlan: entered promiscuous mode [ 50.441058][ T5785] veth0_macvtap: entered promiscuous mode [ 50.442934][ T5787] veth1_vlan: entered promiscuous mode [ 50.447639][ T5785] veth1_macvtap: entered promiscuous mode [ 50.458095][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.464691][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.477577][ T5787] veth0_macvtap: entered promiscuous mode [ 50.485299][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.487817][ T5787] veth1_macvtap: entered promiscuous mode [ 50.529292][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.545100][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.548179][ T5788] veth0_vlan: entered promiscuous mode [ 50.575456][ T5788] veth1_vlan: entered promiscuous mode [ 50.579710][ T228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.579730][ T228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.615569][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.618323][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.618343][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.662426][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.662787][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.662808][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.662827][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.662845][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.662865][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.662883][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.662902][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.664754][ T228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.664767][ T228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.680708][ T5788] veth0_macvtap: entered promiscuous mode [ 50.690149][ T5788] veth1_macvtap: entered promiscuous mode [ 50.692789][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.692803][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.709633][ T5782] veth0_vlan: entered promiscuous mode [ 50.718064][ T5782] veth1_vlan: entered promiscuous mode [ 50.724979][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.735915][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.739196][ T5785] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.779189][ T5782] veth0_macvtap: entered promiscuous mode [ 50.803987][ T5782] veth1_macvtap: entered promiscuous mode [ 50.804656][ T228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.804674][ T228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.835677][ T228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.835691][ T228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.842381][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.845269][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.900800][ T228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.900814][ T228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.916697][ T5956] block nbd2: shutting down sockets [ 50.934213][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.934227][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.943188][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.943643][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.943911][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.944210][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.944390][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.944605][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.944878][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.945072][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.979242][ T5963] FAULT_INJECTION: forcing a failure. [ 50.979242][ T5963] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 50.979263][ T5963] CPU: 3 UID: 0 PID: 5963 Comm: syz.2.6 Not tainted syzkaller #0 PREEMPT(full) [ 50.979277][ T5963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.979284][ T5963] Call Trace: [ 50.979288][ T5963] [ 50.979293][ T5963] dump_stack_lvl+0x100/0x190 [ 50.979317][ T5963] should_fail_ex.cold+0x5/0xa [ 50.979336][ T5963] should_fail_alloc_page+0xeb/0x140 [ 50.979356][ T5963] prepare_alloc_pages+0x1f0/0x5b0 [ 50.979398][ T5963] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 50.979434][ T5963] ? vma_is_shared_writable+0x173/0x1e0 [ 50.979454][ T5963] ? __pfx_vma_is_shared_writable+0x10/0x10 [ 50.979467][ T5963] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 50.979488][ T5963] ? vma_wants_writenotify+0xe7/0x340 [ 50.979503][ T5963] ? __pfx_vma_wants_writenotify+0x10/0x10 [ 50.979519][ T5963] ? mas_store_prealloc+0x8b5/0x10a0 [ 50.979535][ T5963] ? __pfx_perf_event_mmap+0x10/0x10 [ 50.979557][ T5963] ? vma_set_page_prot+0x13e/0x1c0 [ 50.979574][ T5963] ? __pfx_vma_set_page_prot+0x10/0x10 [ 50.979591][ T5963] ? __pfx___vma_start_write+0x10/0x10 [ 50.979622][ T5963] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.979646][ T5963] ? policy_nodemask+0xed/0x5e0 [ 50.979660][ T5963] alloc_pages_mpol+0x201/0x560 [ 50.979674][ T5963] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 50.979692][ T5963] alloc_pages_noprof+0x1a/0x160 [ 50.979707][ T5963] __pmd_alloc+0x3b/0x950 [ 50.979728][ T5963] __handle_mm_fault+0xa9d/0x2f60 [ 50.979745][ T5963] ? __pfx___handle_mm_fault+0x10/0x10 [ 50.979763][ T5963] ? __pfx_mt_find+0x10/0x10 [ 50.979784][ T5963] ? find_vma+0xbf/0x140 [ 50.979800][ T5963] ? __pfx_find_vma+0x10/0x10 [ 50.979818][ T5963] handle_mm_fault+0x363/0xa20 [ 50.979835][ T5963] do_user_addr_fault+0x745/0x12f0 [ 50.979859][ T5963] exc_page_fault+0x6f/0xd0 [ 50.979879][ T5963] asm_exc_page_fault+0x26/0x30 [ 50.979891][ T5963] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 50.979905][ T5963] Code: 89 ee 48 89 ef e8 01 73 d5 fc 4d 85 ff 75 26 e8 17 79 d5 fc 89 de 4c 89 e7 e8 5d 68 4f fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 f1 78 d5 fc 48 89 d8 5b 5d 41 [ 50.979917][ T5963] RSP: 0018:ffffc9000429f878 EFLAGS: 00050246 [ 50.979941][ T5963] RAX: 0000000000000001 RBX: 0000000000000030 RCX: 0000000000000030 [ 50.979949][ T5963] RDX: 0000000000000001 RSI: ffffc90001676000 RDI: 0000000000000000 [ 50.979957][ T5963] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff520002cec05 [ 50.979964][ T5963] R10: ffffc9000167602f R11: 0000000000000001 R12: ffffc90001676000 [ 50.979972][ T5963] R13: 0000000000000030 R14: 00007ffffffff000 R15: 0000000000000000 [ 50.979988][ T5963] ? _copy_to_user+0x93/0xd0 [ 50.980003][ T5963] copy_everything_to_user+0x2d9/0xbb0 [ 50.980023][ T5963] ? __pfx___mutex_lock+0x10/0x10 [ 50.980039][ T5963] ? __pfx_copy_everything_to_user+0x10/0x10 [ 50.980064][ T5963] ? find_inlist_lock.constprop.0+0xcc/0x730 [ 50.980084][ T5963] do_ebt_get_ctl+0x51d/0x910 [ 50.980103][ T5963] ? __pfx_do_ebt_get_ctl+0x10/0x10 [ 50.980121][ T5963] ? __lock_acquire+0x5c0/0x1f40 [ 50.980146][ T5963] ? nf_sockopt_find.isra.0+0x222/0x290 [ 50.980165][ T5963] nf_getsockopt+0x7c/0xe0 [ 50.980182][ T5963] ip_getsockopt+0x192/0x1e0 [ 50.980197][ T5963] ? __pfx_ip_getsockopt+0x10/0x10 [ 50.980210][ T5963] ? _copy_from_user+0x59/0xd0 [ 50.980224][ T5963] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 50.980243][ T5963] tcp_getsockopt+0xa1/0x110 [ 50.980270][ T5963] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 50.980287][ T5963] do_sock_getsockopt+0x415/0x570 [ 50.980301][ T5963] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 50.980318][ T5963] ? __fget_files+0x34/0x3d0 [ 50.980333][ T5963] ? find_held_lock+0x2b/0x80 [ 50.980350][ T5963] ? __fget_files+0x21f/0x3d0 [ 50.980368][ T5963] __sys_getsockopt+0x148/0x260 [ 50.980385][ T5963] ? __x64_sys_getsockopt+0xbd/0x160 [ 50.980398][ T5963] __x64_sys_getsockopt+0xbd/0x160 [ 50.980410][ T5963] ? do_syscall_64+0xae/0x790 [ 50.980422][ T5963] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.980440][ T5963] do_syscall_64+0x123/0x790 [ 50.980453][ T5963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.980465][ T5963] RIP: 0033:0x7f2cd4f9f559 [ 50.980475][ T5963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.980486][ T5963] RSP: 002b:00007f2cd5d9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 50.980497][ T5963] RAX: ffffffffffffffda RBX: 00007f2cd5225fa0 RCX: 00007f2cd4f9f559 [ 50.980504][ T5963] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000006 [ 50.980510][ T5963] RBP: 00007f2cd5036b20 R08: 00002000000003c0 R09: 0000000000000000 [ 50.980517][ T5963] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 50.980524][ T5963] R13: 00007f2cd5226038 R14: 00007f2cd5225fa0 R15: 00007ffdc5f2fab8 [ 50.980539][ T5963] [ 51.074536][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 51.181590][ T5974] uhci_hcd 0000:00:1d.0: remove, state 4 [ 51.181638][ T5974] usb usb1: USB disconnect, device number 1 [ 51.192557][ T5974] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 51.201771][ T5983] syzkaller0: entered promiscuous mode [ 51.201785][ T5983] syzkaller0: entered allmulticast mode [ 51.207161][ T5974] FAULT_INJECTION: forcing a failure. [ 51.207161][ T5974] name failslab, interval 1, probability 0, space 0, times 1 [ 51.207187][ T5974] CPU: 3 UID: 0 PID: 5974 Comm: syz.1.8 Not tainted syzkaller #0 PREEMPT(full) [ 51.207207][ T5974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.207217][ T5974] Call Trace: [ 51.207224][ T5974] [ 51.207231][ T5974] dump_stack_lvl+0x100/0x190 [ 51.207266][ T5974] should_fail_ex.cold+0x5/0xa [ 51.207289][ T5974] should_failslab+0xc2/0x120 [ 51.207303][ T5974] kmem_cache_alloc_noprof+0x92/0x6a0 [ 51.207322][ T5974] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 51.207342][ T5974] ? acpi_ut_create_update_state+0x72/0x130 [ 51.207359][ T5974] acpi_ut_create_update_state+0x72/0x130 [ 51.207374][ T5974] acpi_ut_create_update_state_and_push+0x2f/0x70 [ 51.207396][ T5974] acpi_ut_update_object_reference+0x32f/0x800 [ 51.207416][ T5974] ? __pfx_acpi_ut_update_object_reference+0x10/0x10 [ 51.207434][ T5974] ? __pfx_acpi_ut_trace+0x10/0x10 [ 51.207448][ T5974] ? __pfx_acpi_ut_trace+0x10/0x10 [ 51.207463][ T5974] ? acpi_ut_status_exit+0x111/0x1c0 [ 51.207481][ T5974] acpi_ut_add_reference+0x80/0x170 [ 51.207498][ T5974] acpi_ex_resolve_node_to_value+0x7e1/0x9a0 [ 51.207519][ T5974] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 51.207539][ T5974] ? acpi_ds_create_operand+0x267/0xc20 [ 51.207555][ T5974] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 51.207573][ T5974] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 51.207591][ T5974] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 51.207606][ T5974] ? __asan_memset+0x23/0x50 [ 51.207623][ T5974] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 51.207641][ T5974] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 51.207655][ T5974] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 51.207670][ T5974] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 51.207684][ T5974] ? acpi_ut_trace_ptr+0x141/0x2a0 [ 51.207716][ T5974] acpi_ds_exec_end_op+0xb78/0x1e60 [ 51.207733][ T5974] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 51.207747][ T5974] acpi_ps_parse_loop+0x5e1/0x26e0 [ 51.207770][ T5974] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 51.207783][ T5974] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 51.207801][ T5974] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 51.207817][ T5974] ? acpi_ut_create_thread_state+0x6d/0x170 [ 51.207836][ T5974] acpi_ps_parse_aml+0x81e/0x1120 [ 51.207853][ T5974] acpi_ps_execute_method+0x5c4/0xe90 [ 51.207873][ T5974] acpi_ns_evaluate+0x640/0x1670 [ 51.207893][ T5974] acpi_ut_evaluate_object+0xf7/0x610 [ 51.207914][ T5974] acpi_rs_get_prt_method_data+0xa0/0x150 [ 51.207932][ T5974] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 51.207950][ T5974] ? acpi_ut_status_exit+0x111/0x1c0 [ 51.207966][ T5974] ? acpi_rs_validate_parameters+0x104/0x210 [ 51.207985][ T5974] acpi_get_irq_routing_table+0xb8/0x140 [ 51.208004][ T5974] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 51.208026][ T5974] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 51.208047][ T5974] ? preempt_schedule_thunk+0x16/0x40 [ 51.208066][ T5974] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 51.208090][ T5974] acpi_pci_irq_lookup+0x8e/0x6b0 [ 51.208108][ T5974] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 51.208130][ T5974] acpi_pci_irq_disable+0x1a8/0x360 [ 51.208148][ T5974] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 51.208166][ T5974] pcibios_disable_device+0x89/0xb0 [ 51.208185][ T5974] do_pci_disable_device+0x9f/0x100 [ 51.208202][ T5974] ? __pfx_do_pci_disable_device+0x10/0x10 [ 51.208218][ T5974] ? hub_event+0x17a3/0x4420 [ 51.208232][ T5974] ? kfree+0x22b/0x6d0 [ 51.208249][ T5974] pci_disable_device+0x130/0x270 [ 51.208268][ T5974] usb_hcd_pci_remove+0x1ed/0x300 [ 51.208285][ T5974] pci_device_remove+0xb2/0x1d0 [ 51.208299][ T5974] ? __pfx_pci_device_remove+0x10/0x10 [ 51.208314][ T5974] device_remove+0xcb/0x180 [ 51.208328][ T5974] device_release_driver_internal+0x441/0x610 [ 51.208348][ T5974] pci_stop_bus_device+0x120/0x160 [ 51.208365][ T5974] pci_stop_and_remove_bus_device+0x58/0xa0 [ 51.208383][ T5974] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 51.208400][ T5974] remove_store+0x123/0x140 [ 51.208419][ T5974] ? __pfx_remove_store+0x10/0x10 [ 51.208437][ T5974] ? find_held_lock+0x2b/0x80 [ 51.208451][ T5974] ? sysfs_file_kobj+0xe4/0x290 [ 51.208465][ T5974] ? sysfs_file_kobj+0xe4/0x290 [ 51.208481][ T5974] ? __pfx_remove_store+0x10/0x10 [ 51.208505][ T5974] dev_attr_store+0x58/0x80 [ 51.208528][ T5974] ? __pfx_dev_attr_store+0x10/0x10 [ 51.208551][ T5974] sysfs_kf_write+0xf2/0x150 [ 51.208574][ T5974] kernfs_fop_write_iter+0x3e0/0x5f0 [ 51.208592][ T5974] ? __pfx_sysfs_kf_write+0x10/0x10 [ 51.208617][ T5974] vfs_write+0x6af/0x1050 [ 51.208636][ T5974] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 51.208658][ T5974] ? __pfx_vfs_write+0x10/0x10 [ 51.208678][ T5974] ? find_held_lock+0x2b/0x80 [ 51.208701][ T5974] ksys_write+0x12a/0x250 [ 51.208711][ T5974] ? __pfx_ksys_write+0x10/0x10 [ 51.208727][ T5974] do_syscall_64+0x123/0x790 [ 51.208741][ T5974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.208758][ T5974] RIP: 0033:0x7fb13339f559 [ 51.208769][ T5974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.208780][ T5974] RSP: 002b:00007fb1315cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.208793][ T5974] RAX: ffffffffffffffda RBX: 00007fb133626090 RCX: 00007fb13339f559 [ 51.208801][ T5974] RDX: 0000000000000001 RSI: 0000200000000d80 RDI: 000000000000000c [ 51.208808][ T5974] RBP: 00007fb133436b20 R08: 0000000000000000 R09: 0000000000000000 [ 51.208815][ T5974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.208822][ T5974] R13: 00007fb133626128 R14: 00007fb133626090 R15: 00007ffd09174828 [ 51.208838][ T5974] [ 51.213023][ T5974] ACPI Error: AE_NO_MEMORY, Could not update object reference count (20260408/utdelete-651) [ 51.331104][ T5990] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.351974][ T1036] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 51.437410][ T5993] FAULT_INJECTION: forcing a failure. [ 51.437410][ T5993] name failslab, interval 1, probability 0, space 0, times 0 [ 51.437431][ T5993] CPU: 1 UID: 0 PID: 5993 Comm: syz.2.10 Not tainted syzkaller #0 PREEMPT(full) [ 51.437446][ T5993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.437454][ T5993] Call Trace: [ 51.437458][ T5993] [ 51.437463][ T5993] dump_stack_lvl+0x100/0x190 [ 51.437487][ T5993] should_fail_ex.cold+0x5/0xa [ 51.437507][ T5993] should_failslab+0xc2/0x120 [ 51.437521][ T5993] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 51.437539][ T5993] ? lock_acquire+0x1d1/0x380 [ 51.437556][ T5993] ? security_netlbl_sid_to_secattr+0x94/0x4d0 [ 51.437571][ T5993] ? security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 51.437588][ T5993] kstrdup+0x51/0xe0 [ 51.437601][ T5993] security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 51.437617][ T5993] selinux_netlbl_sock_genattr+0x128/0x4e0 [ 51.437637][ T5993] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 51.437658][ T5993] selinux_socket_post_create+0x363/0x7e0 [ 51.437701][ T5993] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 51.437720][ T5993] ? rawv6_init_sk+0x18d/0x1d0 [ 51.437737][ T5993] ? __pfx_rawv6_init_sk+0x10/0x10 [ 51.437752][ T5993] ? inet6_create+0xb34/0x12b0 [ 51.437771][ T5993] security_socket_post_create+0xaf/0x270 [ 51.437790][ T5993] __sock_create+0x70b/0x860 [ 51.437812][ T5993] inet_ctl_sock_create+0x94/0x230 [ 51.437825][ T5993] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 51.437838][ T5993] ? ndisc_net_init+0x148/0x3e0 [ 51.437849][ T5993] ? __pfx_ndisc_net_init+0x10/0x10 [ 51.437879][ T5993] ? __pfx_igmp6_net_init+0x10/0x10 [ 51.437891][ T5993] igmp6_net_init+0x35/0x430 [ 51.437902][ T5993] ? __pfx_igmp6_net_init+0x10/0x10 [ 51.437914][ T5993] ops_init+0x1e2/0x5f0 [ 51.437930][ T5993] setup_net+0x118/0x3a0 [ 51.437945][ T5993] ? __pfx_setup_net+0x10/0x10 [ 51.437961][ T5993] ? bpf_lsm_namespace_init+0x9/0x10 [ 51.437977][ T5993] copy_net_ns+0x340/0x7a0 [ 51.437995][ T5993] create_new_namespaces+0x3ea/0xac0 [ 51.438015][ T5993] unshare_nsproxy_namespaces+0xf6/0x210 [ 51.438034][ T5993] ksys_unshare+0x44f/0x980 [ 51.438049][ T5993] ? __pfx_ksys_unshare+0x10/0x10 [ 51.438072][ T5993] __x64_sys_unshare+0x31/0x40 [ 51.438087][ T5993] do_syscall_64+0x123/0x790 [ 51.438100][ T5993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.438113][ T5993] RIP: 0033:0x7f2cd4f9f559 [ 51.438124][ T5993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.438135][ T5993] RSP: 002b:00007f2cd5d9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 51.438147][ T5993] RAX: ffffffffffffffda RBX: 00007f2cd5225fa0 RCX: 00007f2cd4f9f559 [ 51.438154][ T5993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 51.438162][ T5993] RBP: 00007f2cd5036b20 R08: 0000000000000000 R09: 0000000000000000 [ 51.438169][ T5993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.438177][ T5993] R13: 00007f2cd5226038 R14: 00007f2cd5225fa0 R15: 00007ffdc5f2fab8 [ 51.438197][ T5993] [ 51.438323][ T5993] Failed to initialize the IGMP6 control socket (err -12) [ 51.473900][ T5991] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.483735][ T1036] usb 8-1: device descriptor read/64, error -71 [ 51.634691][ T5999] syzkaller0: entered promiscuous mode [ 51.634707][ T5999] syzkaller0: entered allmulticast mode [ 51.722525][ T1036] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 51.769618][ T6003] syzkaller0: entered promiscuous mode [ 51.769645][ T6003] syzkaller0: entered allmulticast mode [ 51.852135][ T1036] usb 8-1: device descriptor read/64, error -71 [ 51.964559][ T1036] usb usb8-port1: attempt power cycle [ 52.132353][ T5144] Bluetooth: hci2: command tx timeout [ 52.134777][ T5144] Bluetooth: hci0: command tx timeout [ 52.212010][ T5144] Bluetooth: hci1: command tx timeout [ 52.212024][ T5786] Bluetooth: hci3: command tx timeout [ 52.302506][ T1036] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 52.324911][ T1036] usb 8-1: device descriptor read/8, error -71 [ 52.564150][ T1036] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 52.585202][ T1036] usb 8-1: device descriptor read/8, error -71 [ 52.683673][ T6020] evm: overlay not supported [ 52.694490][ T1036] usb usb8-port1: unable to enumerate USB device [ 52.740867][ T5786] Bluetooth: hci2: Unable to find connection for big 0x00 [ 52.806392][ T42] kauditd_printk_skb: 68 callbacks suppressed [ 52.806406][ T42] audit: type=1400 audit(1793244032.666:232): avc: denied { create } for pid=6024 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 52.806997][ T42] audit: type=1400 audit(1793244032.666:233): avc: denied { getopt } for pid=6024 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 52.894144][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 53.064409][ T6040] syzkaller0: entered promiscuous mode [ 53.064431][ T6040] syzkaller0: entered allmulticast mode [ 53.275472][ T6043] capability: warning: `syz.2.25' uses deprecated v2 capabilities in a way that may be insecure [ 53.322869][ T42] audit: type=1400 audit(1793244033.186:234): avc: denied { create } for pid=6044 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.323908][ T42] audit: type=1400 audit(1793244033.186:235): avc: denied { read write } for pid=6044 comm="syz.2.26" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 53.325078][ T42] audit: type=1400 audit(1793244033.186:236): avc: denied { open } for pid=6044 comm="syz.2.26" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 53.375003][ T6048] syzkaller0: entered promiscuous mode [ 53.375018][ T6048] syzkaller0: entered allmulticast mode [ 53.425654][ T42] audit: type=1400 audit(1793244033.286:237): avc: denied { unmount } for pid=5782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 53.477431][ T42] audit: type=1400 audit(1793244033.336:238): avc: denied { mounton } for pid=6051 comm="syz.0.29" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 53.478444][ T6052] zonefs (loop0) ERROR: Not a zoned block device [ 53.480744][ T42] audit: type=1400 audit(1793244033.336:239): avc: denied { read } for pid=6051 comm="syz.0.29" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 53.481016][ T42] audit: type=1400 audit(1793244033.336:240): avc: denied { open } for pid=6051 comm="syz.0.29" path="/dev/dri/card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 53.484832][ T42] audit: type=1400 audit(1793244033.346:241): avc: denied { ioctl } for pid=6051 comm="syz.0.29" path="/dev/dri/card1" dev="devtmpfs" ino=637 ioctlcmd=0xc00864bf scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 54.042418][ T6071] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 54.042439][ T6071] overlayfs: overlapping lowerdir path [ 54.092187][ T6076] netlink: 'syz.3.38': attribute type 27 has an invalid length. [ 54.127282][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.127826][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.145411][ T6078] netlink: 52 bytes leftover after parsing attributes in process `syz.1.39'. [ 54.174976][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.177402][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.215708][ T5786] Bluetooth: hci2: command tx timeout [ 54.268970][ T6090] overlayfs: failed to resolve './file0': -2 [ 54.292291][ T5786] Bluetooth: hci1: command tx timeout [ 54.292324][ T5786] Bluetooth: hci3: command tx timeout [ 54.320776][ T6079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.327033][ T6079] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.331116][ T6079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.344727][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.344780][ T6079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.352508][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.352556][ T6079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.361478][ T6079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.363036][ T6079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.368649][ T6079] veth1_vlan: left promiscuous mode [ 54.369182][ T6079] veth0_vlan: left promiscuous mode [ 54.370111][ T6079] veth0_vlan: entered promiscuous mode [ 54.371794][ T6079] veth1_vlan: entered promiscuous mode [ 54.376099][ T6079] veth1_macvtap: left promiscuous mode [ 54.376569][ T6079] veth0_macvtap: left promiscuous mode [ 54.377305][ T6079] veth0_macvtap: entered promiscuous mode [ 54.378072][ T6079] veth1_macvtap: entered promiscuous mode [ 54.381141][ T6079] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.381724][ T6079] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.382250][ T6079] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.382888][ T6079] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.387589][ T6078] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.388160][ T6078] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.416836][ T6096] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 54.431989][ T5574] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.582083][ T5574] usb 6-1: Using ep0 maxpacket: 32 [ 54.586450][ T5574] usb 6-1: unable to get BOS descriptor or descriptor too short [ 54.586478][ T5574] usb 6-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 54.590536][ T5574] usb 6-1: string descriptor 0 read error: -22 [ 54.590617][ T5574] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.601845][ T5574] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 54.602717][ T5574] dw2102: su3000_power_ctrl: 1, initialized 0 [ 54.602904][ T5574] dvb-usb: bulk message failed: -22 (2/0) [ 54.608095][ T5574] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 54.611722][ T5574] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 54.611750][ T5574] usb 6-1: media controller created [ 54.615550][ T5574] dvb-usb: bulk message failed: -22 (6/0) [ 54.615561][ T5574] dw2102: i2c transfer failed. [ 54.615578][ T5574] dvb-usb: bulk message failed: -22 (6/0) [ 54.615585][ T5574] dw2102: i2c transfer failed. [ 54.615590][ T5574] dvb-usb: bulk message failed: -22 (6/0) [ 54.615597][ T5574] dw2102: i2c transfer failed. [ 54.615603][ T5574] dvb-usb: bulk message failed: -22 (6/0) [ 54.615609][ T5574] dw2102: i2c transfer failed. [ 54.615614][ T5574] dvb-usb: bulk message failed: -22 (6/0) [ 54.615622][ T5574] dw2102: i2c transfer failed. [ 54.615628][ T5574] dvb-usb: bulk message failed: -22 (6/0) [ 54.615634][ T5574] dw2102: i2c transfer failed. [ 54.615638][ T5574] dvb-usb: MAC address: 02:02:02:02:02:02 [ 54.626078][ T5574] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 54.641528][ T5574] dvb-usb: bulk message failed: -22 (3/0) [ 54.641540][ T5574] dw2102: command 0x0e transfer failed. [ 54.641544][ T5574] dvb-usb: bulk message failed: -22 (3/0) [ 54.641551][ T5574] dw2102: command 0x0e transfer failed. [ 54.711656][ T6107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=6107 comm=syz.3.45 [ 54.713956][ T6118] overlayfs: failed to clone lowerpath [ 54.848503][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 54.848525][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 54.854446][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 54.854465][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 54.859313][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 54.859331][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 54.868370][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 54.947142][ T5574] dvb-usb: bulk message failed: -22 (3/0) [ 54.947164][ T5574] dw2102: command 0x0e transfer failed. [ 54.947171][ T5574] dvb-usb: bulk message failed: -22 (3/0) [ 54.947188][ T5574] dw2102: command 0x0e transfer failed. [ 54.947195][ T5574] dvb-usb: bulk message failed: -22 (1/0) [ 54.947205][ T5574] dw2102: command 0x51 transfer failed. [ 54.980113][ T5574] DVB: Unable to find symbol ds3000_attach() [ 54.980127][ T5574] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 55.022680][ T6145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6145 comm=syz.2.52 [ 55.042023][ T5574] rc_core: IR keymap rc-su3000 not found [ 55.042039][ T5574] Registered IR keymap rc-empty [ 55.049878][ T5574] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 55.051598][ T5574] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input5 [ 55.061191][ T5574] dvb-usb: schedule remote query interval to 150 msecs. [ 55.061209][ T5574] dw2102: su3000_power_ctrl: 0, initialized 1 [ 55.061220][ T5574] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 55.068094][ T5574] usb 6-1: USB disconnect, device number 2 [ 55.111046][ T6158] loop0: detected capacity change from 0 to 4096 [ 55.149828][ T5574] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 55.172526][ T6164] syzkaller0: entered promiscuous mode [ 55.172540][ T6164] syzkaller0: entered allmulticast mode [ 55.179992][ T6158] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 55.180009][ T6158] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 55.180037][ T6158] loop0: [ 55.229204][ T6166] bond1: entered promiscuous mode [ 55.229470][ T6166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.240347][ T6169] syzkaller0: entered promiscuous mode [ 55.240360][ T6169] syzkaller0: entered allmulticast mode [ 55.285499][ T6173] misc userio: No port type given on /dev/userio [ 55.307238][ T6174] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 55.307260][ T6174] overlayfs: overlapping lowerdir path [ 55.339153][ T6178] ip_tables: iptables: counters copy to user failed while replacing table [ 55.345062][ T6178] Bluetooth: MGMT ver 1.23 [ 55.539622][ T6195] syzkaller0: entered promiscuous mode [ 55.539653][ T6195] syzkaller0: entered allmulticast mode [ 55.659863][ T6199] i2c i2c-0: new_device: Missing parameters [ 55.743168][ T5144] Bluetooth: hci0: command tx timeout [ 55.747813][ T6202] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 55.747834][ T6202] overlayfs: overlapping lowerdir path [ 55.785902][ T6207] syzkaller0: entered promiscuous mode [ 55.785916][ T6207] syzkaller0: entered allmulticast mode [ 56.000171][ T6219] Bluetooth: (null): Invalid header checksum [ 56.001616][ T6219] Bluetooth: (null): Invalid header checksum [ 56.013652][ T6219] Zero length message leads to an empty skb [ 56.206472][ T6235] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 56.206495][ T6235] overlayfs: overlapping lowerdir path [ 56.289006][ T6242] syzkaller0: entered promiscuous mode [ 56.289022][ T6242] syzkaller0: entered allmulticast mode [ 56.302064][ T5144] Bluetooth: hci2: command tx timeout [ 56.371994][ T5786] Bluetooth: hci1: command tx timeout [ 56.372004][ T5144] Bluetooth: hci3: command tx timeout [ 56.465142][ T6258] netlink: 'syz.1.89': attribute type 4 has an invalid length. [ 56.465157][ T6258] __nla_validate_parse: 62 callbacks suppressed [ 56.465164][ T6258] netlink: 17 bytes leftover after parsing attributes in process `syz.1.89'. [ 56.483568][ T6261] FAULT_INJECTION: forcing a failure. [ 56.483568][ T6261] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 56.483586][ T6261] CPU: 1 UID: 0 PID: 6261 Comm: syz.2.90 Not tainted syzkaller #0 PREEMPT(full) [ 56.483599][ T6261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.483606][ T6261] Call Trace: [ 56.483610][ T6261] [ 56.483615][ T6261] dump_stack_lvl+0x100/0x190 [ 56.483653][ T6261] should_fail_ex.cold+0x5/0xa [ 56.483673][ T6261] _copy_from_user+0x2e/0xd0 [ 56.483696][ T6261] ucma_write+0x123/0x330 [ 56.483723][ T6261] ? __pfx_ucma_write+0x10/0x10 [ 56.483739][ T6261] ? bpf_lsm_file_permission+0x9/0x10 [ 56.483764][ T6261] ? security_file_permission+0x76/0x210 [ 56.483789][ T6261] ? rw_verify_area+0xce/0x6d0 [ 56.483816][ T6261] vfs_write+0x2aa/0x1050 [ 56.483828][ T6261] ? __pfx_ucma_write+0x10/0x10 [ 56.483843][ T6261] ? lock_acquire+0x1d1/0x380 [ 56.483859][ T6261] ? __fget_files+0x34/0x3d0 [ 56.483874][ T6261] ? __pfx_vfs_write+0x10/0x10 [ 56.483891][ T6261] ? find_held_lock+0x2b/0x80 [ 56.483903][ T6261] ? __fget_files+0x215/0x3d0 [ 56.483916][ T6261] ? __fget_files+0x215/0x3d0 [ 56.483932][ T6261] ? __fget_files+0x21f/0x3d0 [ 56.483949][ T6261] ksys_write+0x1f8/0x250 [ 56.483979][ T6261] ? __pfx_ksys_write+0x10/0x10 [ 56.483994][ T6261] do_syscall_64+0x123/0x790 [ 56.484017][ T6261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.484030][ T6261] RIP: 0033:0x7f2cd4f9f559 [ 56.484040][ T6261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.484051][ T6261] RSP: 002b:00007f2cd5d9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.484063][ T6261] RAX: ffffffffffffffda RBX: 00007f2cd5225fa0 RCX: 00007f2cd4f9f559 [ 56.484071][ T6261] RDX: 0000000000000090 RSI: 0000200000000180 RDI: 0000000000000003 [ 56.484078][ T6261] RBP: 00007f2cd5d9e090 R08: 0000000000000000 R09: 0000000000000000 [ 56.484085][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.484092][ T6261] R13: 00007f2cd5226038 R14: 00007f2cd5225fa0 R15: 00007ffdc5f2fab8 [ 56.484107][ T6261] [ 56.492878][ T6258] geneve1: entered allmulticast mode [ 56.547643][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.92'. [ 56.567228][ T6265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.568100][ T6263] lo: entered allmulticast mode [ 56.607516][ T6265] bond1: (slave veth3): Enslaving as an active interface with an up link [ 56.621094][ T6265] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 56.802631][ T6262] lo: left allmulticast mode [ 56.896184][ T6283] syzkaller0: entered promiscuous mode [ 56.896200][ T6283] syzkaller0: entered allmulticast mode [ 56.987640][ T6287] FAULT_INJECTION: forcing a failure. [ 56.987640][ T6287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.987661][ T6287] CPU: 1 UID: 0 PID: 6287 Comm: syz.1.99 Not tainted syzkaller #0 PREEMPT(full) [ 56.987675][ T6287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.987681][ T6287] Call Trace: [ 56.987686][ T6287] [ 56.987690][ T6287] dump_stack_lvl+0x100/0x190 [ 56.987730][ T6287] should_fail_ex.cold+0x5/0xa [ 56.987749][ T6287] _copy_from_user+0x2e/0xd0 [ 56.987773][ T6287] ucma_resolve_ib_service+0x98/0x1a0 [ 56.987799][ T6287] ? __pfx_ucma_resolve_ib_service+0x10/0x10 [ 56.987823][ T6287] ? __pfx_ucma_resolve_ib_service+0x10/0x10 [ 56.987841][ T6287] ucma_write+0x1f6/0x330 [ 56.987857][ T6287] ? __pfx_ucma_write+0x10/0x10 [ 56.987873][ T6287] ? bpf_lsm_file_permission+0x9/0x10 [ 56.987898][ T6287] ? security_file_permission+0x76/0x210 [ 56.987918][ T6287] ? rw_verify_area+0xce/0x6d0 [ 56.987945][ T6287] vfs_write+0x2aa/0x1050 [ 56.987957][ T6287] ? __pfx_ucma_write+0x10/0x10 [ 56.987972][ T6287] ? lock_acquire+0x1d1/0x380 [ 56.987988][ T6287] ? __fget_files+0x34/0x3d0 [ 56.988002][ T6287] ? __pfx_vfs_write+0x10/0x10 [ 56.988019][ T6287] ? find_held_lock+0x2b/0x80 [ 56.988032][ T6287] ? __fget_files+0x215/0x3d0 [ 56.988045][ T6287] ? __fget_files+0x215/0x3d0 [ 56.988061][ T6287] ? __fget_files+0x21f/0x3d0 [ 56.988078][ T6287] ksys_write+0x1f8/0x250 [ 56.988089][ T6287] ? __pfx_ksys_write+0x10/0x10 [ 56.988104][ T6287] do_syscall_64+0x123/0x790 [ 56.988126][ T6287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.988139][ T6287] RIP: 0033:0x7fb13339f559 [ 56.988149][ T6287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.988161][ T6287] RSP: 002b:00007fb1315ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.988172][ T6287] RAX: ffffffffffffffda RBX: 00007fb133625fa0 RCX: 00007fb13339f559 [ 56.988180][ T6287] RDX: 0000000000000090 RSI: 0000200000000180 RDI: 0000000000000003 [ 56.988187][ T6287] RBP: 00007fb1315ee090 R08: 0000000000000000 R09: 0000000000000000 [ 56.988194][ T6287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.988201][ T6287] R13: 00007fb133626038 R14: 00007fb133625fa0 R15: 00007ffd09174828 [ 56.988221][ T6287] [ 57.051187][ T6289] fuse: Bad value for 'fd' [ 57.132667][ T6296] netlink: 'syz.0.102': attribute type 10 has an invalid length. [ 57.132680][ T6296] netlink: 55 bytes leftover after parsing attributes in process `syz.0.102'. [ 57.201811][ T6308] process 'syz.1.106' launched './file0' with NULL argv: empty string added [ 57.354636][ T6314] overlayfs: failed to clone upperpath [ 57.428214][ T6324] syzkaller0: entered promiscuous mode [ 57.428234][ T6324] syzkaller0: entered allmulticast mode [ 57.468386][ T6330] ======================================================= [ 57.468386][ T6330] WARNING: The mand mount option has been deprecated and [ 57.468386][ T6330] and is ignored by this kernel. Remove the mand [ 57.468386][ T6330] option from the mount to silence this warning. [ 57.468386][ T6330] ======================================================= [ 57.470468][ T6330] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 57.491367][ T6330] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 57.491603][ T6330] overlayfs: failed to look up (tracing) for ino (-66) [ 57.498006][ T6330] bond0: option arp_interval: invalid value ( ) [ 57.498019][ T6330] bond0: option arp_interval: allowed values 0 - 2147483647 [ 57.584028][ T6341] random: crng reseeded on system resumption [ 57.669896][ T6355] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 57.669913][ T6355] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 57.669976][ T6355] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 57.757483][ T6363] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 57.886456][ T42] kauditd_printk_skb: 108 callbacks suppressed [ 57.886473][ T42] audit: type=1400 audit(1793244037.746:350): avc: denied { ioctl } for pid=6378 comm="syz.3.127" path="socket:[10777]" dev="sockfs" ino=10777 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.888459][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.127'. [ 57.926039][ T6383] fuse: fd is not a fuse device [ 57.927296][ T6383] overlayfs: failed to clone upperpath [ 57.928899][ T42] audit: type=1400 audit(1793244037.786:351): avc: denied { mount } for pid=6382 comm="syz.0.129" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 58.045825][ T42] audit: type=1400 audit(1793244037.906:352): avc: denied { read } for pid=6395 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.047013][ T42] audit: type=1400 audit(1793244037.906:353): avc: denied { ioctl } for pid=6395 comm="syz.2.133" path="/dev/vhost-net" dev="devtmpfs" ino=1307 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 58.129740][ T42] audit: type=1400 audit(1793244037.986:354): avc: denied { connect } for pid=6406 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.129863][ T42] audit: type=1400 audit(1793244037.986:355): avc: denied { name_connect } for pid=6406 comm="syz.1.136" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 58.173415][ T6413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.139'. [ 58.181129][ T42] audit: type=1400 audit(1793244038.036:356): avc: denied { listen } for pid=6406 comm="syz.1.136" lport=49793 faddr=fc01:: fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.181481][ T42] audit: type=1400 audit(1793244038.036:357): avc: denied { accept } for pid=6406 comm="syz.1.136" lport=49793 faddr=fc01:: fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.182958][ T42] audit: type=1400 audit(1793244038.036:358): avc: denied { getopt } for pid=6406 comm="syz.1.136" lport=49793 faddr=fc01:: fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 58.202438][ T6417] netlink: 108 bytes leftover after parsing attributes in process `syz.3.141'. [ 58.204881][ T42] audit: type=1400 audit(1793244038.066:359): avc: denied { prog_run } for pid=6416 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 58.526862][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.150'. [ 59.037830][ T6458] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 59.041145][ T6458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.155'. [ 59.431703][ T6464] netlink: 52 bytes leftover after parsing attributes in process `syz.1.156'. [ 59.434029][ T5890] rxe_eth0 speed is unknown, defaulting to 1000 [ 59.527526][ T6476] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xc90b instead [ 59.527544][ T6476] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xa5a2 instead [ 59.527553][ T6476] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xa59c instead [ 59.527561][ T6476] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0xf126 instead [ 59.527570][ T6476] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x876b instead [ 59.527579][ T6476] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x5e5e instead [ 59.527588][ T6476] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0ced instead [ 59.527598][ T6476] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x8bc3 instead [ 59.527607][ T6476] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xccc8 instead [ 59.527616][ T6476] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xf716 instead [ 59.527626][ T6476] jffs2: Further such events for this erase block will not be printed [ 59.527925][ T6476] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 59.527930][ T6476] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 59.671962][ T5890] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 59.700738][ T6480] netlink: 'syz.0.160': attribute type 2 has an invalid length. [ 59.841986][ T5890] usb 6-1: Using ep0 maxpacket: 32 [ 59.844347][ T5890] usb 6-1: unable to get BOS descriptor or descriptor too short [ 59.844381][ T5890] usb 6-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 59.848611][ T5890] usb 6-1: string descriptor 0 read error: -22 [ 59.848737][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.859839][ T5890] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 59.859873][ T5890] dw2102: su3000_power_ctrl: 1, initialized 0 [ 59.859887][ T5890] dvb-usb: bulk message failed: -22 (2/0) [ 59.878950][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 59.882412][ T5890] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 59.882455][ T5890] usb 6-1: media controller created [ 59.882476][ T5890] dvb-usb: bulk message failed: -22 (6/0) [ 59.882487][ T5890] dw2102: i2c transfer failed. [ 59.882498][ T5890] dvb-usb: bulk message failed: -22 (6/0) [ 59.882508][ T5890] dw2102: i2c transfer failed. [ 59.882518][ T5890] dvb-usb: bulk message failed: -22 (6/0) [ 59.882528][ T5890] dw2102: i2c transfer failed. [ 59.882538][ T5890] dvb-usb: bulk message failed: -22 (6/0) [ 59.882549][ T5890] dw2102: i2c transfer failed. [ 59.882558][ T5890] dvb-usb: bulk message failed: -22 (6/0) [ 59.882567][ T5890] dw2102: i2c transfer failed. [ 59.882577][ T5890] dvb-usb: bulk message failed: -22 (6/0) [ 59.882587][ T5890] dw2102: i2c transfer failed. [ 59.882593][ T5890] dvb-usb: MAC address: 02:02:02:02:02:02 [ 59.900899][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 59.921838][ T5890] dvb-usb: bulk message failed: -22 (3/0) [ 59.921925][ T5890] dw2102: command 0x0e transfer failed. [ 59.921963][ T5890] dvb-usb: bulk message failed: -22 (3/0) [ 59.921976][ T5890] dw2102: command 0x0e transfer failed. [ 60.000987][ T6502] syzkaller0: entered promiscuous mode [ 60.001002][ T6502] syzkaller0: entered allmulticast mode [ 60.091185][ T5144] Bluetooth: Frame is too long (len 38, expected len 31) [ 60.091212][ T5144] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 60.091223][ T5144] Bluetooth: Wrong link type (-22) [ 60.134740][ T6510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xc90b instead [ 60.134765][ T6510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xa5a2 instead [ 60.134775][ T6510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xa59c instead [ 60.134784][ T6510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0xf126 instead [ 60.134794][ T6510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x876b instead [ 60.134824][ T6510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x5e5e instead [ 60.134833][ T6510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0ced instead [ 60.134843][ T6510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x8bc3 instead [ 60.134852][ T6510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xccc8 instead [ 60.134862][ T6510] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xf716 instead [ 60.134871][ T6510] jffs2: Further such events for this erase block will not be printed [ 60.135181][ T6510] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 60.135188][ T6510] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 60.137059][ T6510] overlayfs: missing 'lowerdir' [ 60.198971][ T6512] IPv6: sit1: Disabled Multicast RS [ 60.199514][ T6512] sit1: entered allmulticast mode [ 60.232047][ T5890] dvb-usb: bulk message failed: -22 (3/0) [ 60.232061][ T5890] dw2102: command 0x0e transfer failed. [ 60.232066][ T5890] dvb-usb: bulk message failed: -22 (3/0) [ 60.232072][ T5890] dw2102: command 0x0e transfer failed. [ 60.232076][ T5890] dvb-usb: bulk message failed: -22 (1/0) [ 60.232083][ T5890] dw2102: command 0x51 transfer failed. [ 60.235622][ T6464] dvb-usb: bulk message failed: -22 (3/0) [ 60.235635][ T6464] dw2102: i2c transfer failed. [ 60.276336][ T5890] DVB: Unable to find symbol ds3000_attach() [ 60.276347][ T5890] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 60.352903][ T5890] rc_core: IR keymap rc-su3000 not found [ 60.352915][ T5890] Registered IR keymap rc-empty [ 60.353406][ T5890] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 60.354203][ T5890] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input6 [ 60.372755][ T5890] dvb-usb: schedule remote query interval to 150 msecs. [ 60.372769][ T5890] dw2102: su3000_power_ctrl: 0, initialized 1 [ 60.372775][ T5890] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 60.376560][ T5890] usb 6-1: USB disconnect, device number 3 [ 60.419407][ T5890] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 60.479766][ T6521] netlink: 72 bytes leftover after parsing attributes in process `syz.0.174'. [ 60.568386][ T6536] batadv0: entered promiscuous mode [ 60.569305][ T6536] macsec1: entered promiscuous mode [ 60.569420][ T6536] macsec1: entered allmulticast mode [ 60.569429][ T6536] batadv0: entered allmulticast mode [ 60.570026][ T6536] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 60.571047][ T6536] batadv0: left allmulticast mode [ 60.571234][ T6536] batadv0: left promiscuous mode [ 60.599069][ T6540] syzkaller0: entered promiscuous mode [ 60.599085][ T6540] syzkaller0: entered allmulticast mode [ 60.647531][ T6543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.655482][ T6543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.827276][ T6560] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 60.835556][ T6560] cramfs: wrong magic [ 60.838841][ T6560] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 60.842234][ T6560] cramfs: wrong magic [ 60.895217][ T6567] x_tables: duplicate underflow at hook 1 [ 60.926127][ T6568] fuse: Bad value for 'fd' [ 61.004305][ T6570] syzkaller0: entered promiscuous mode [ 61.004325][ T6570] syzkaller0: entered allmulticast mode [ 61.190682][ T6573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22292 sclass=netlink_route_socket pid=6573 comm=syz.1.193 [ 61.318975][ T6578] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 61.420521][ T6585] ovs-dp0: entered promiscuous mode [ 61.492165][ T6587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.494279][ T6587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.612016][ T5574] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 61.757312][ T6606] ip_tables: iptables: counters copy to user failed while replacing table [ 61.761965][ T5574] usb 6-1: Using ep0 maxpacket: 32 [ 61.768092][ T5574] usb 6-1: unable to get BOS descriptor or descriptor too short [ 61.768131][ T5574] usb 6-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 61.772495][ T5574] usb 6-1: string descriptor 0 read error: -22 [ 61.772600][ T5574] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.784340][ T5574] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 61.784375][ T5574] dw2102: su3000_power_ctrl: 1, initialized 0 [ 61.784388][ T5574] dvb-usb: bulk message failed: -22 (2/0) [ 61.794355][ T5574] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 61.797178][ T5574] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 61.797219][ T5574] usb 6-1: media controller created [ 61.797239][ T5574] dvb-usb: bulk message failed: -22 (6/0) [ 61.797250][ T5574] dw2102: i2c transfer failed. [ 61.797261][ T5574] dvb-usb: bulk message failed: -22 (6/0) [ 61.797272][ T5574] dw2102: i2c transfer failed. [ 61.797282][ T5574] dvb-usb: bulk message failed: -22 (6/0) [ 61.797293][ T5574] dw2102: i2c transfer failed. [ 61.797302][ T5574] dvb-usb: bulk message failed: -22 (6/0) [ 61.797313][ T5574] dw2102: i2c transfer failed. [ 61.797322][ T5574] dvb-usb: bulk message failed: -22 (6/0) [ 61.797333][ T5574] dw2102: i2c transfer failed. [ 61.797342][ T5574] dvb-usb: bulk message failed: -22 (6/0) [ 61.797352][ T5574] dw2102: i2c transfer failed. [ 61.797359][ T5574] dvb-usb: MAC address: 02:02:02:02:02:02 [ 61.815807][ T5574] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 61.836158][ T5574] dvb-usb: bulk message failed: -22 (3/0) [ 61.836175][ T5574] dw2102: command 0x0e transfer failed. [ 61.836183][ T5574] dvb-usb: bulk message failed: -22 (3/0) [ 61.836194][ T5574] dw2102: command 0x0e transfer failed. [ 61.866208][ T6613] __nla_validate_parse: 4 callbacks suppressed [ 61.866227][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.204'. [ 61.880973][ T6614] tipc: Started in network mode [ 61.880991][ T6614] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 61.881755][ T6614] tipc: Enabled bearer , priority 0 [ 62.083215][ T6623] netlink: 112 bytes leftover after parsing attributes in process `syz.2.206'. [ 62.109867][ T6621] netlink: 'syz.2.206': attribute type 49 has an invalid length. [ 62.116284][ T6621] bond0: (slave bond_slave_0): Releasing backup interface [ 62.141929][ T5574] dvb-usb: bulk message failed: -22 (3/0) [ 62.141944][ T5574] dw2102: command 0x0e transfer failed. [ 62.141948][ T5574] dvb-usb: bulk message failed: -22 (3/0) [ 62.141955][ T5574] dw2102: command 0x0e transfer failed. [ 62.141959][ T5574] dvb-usb: bulk message failed: -22 (1/0) [ 62.141965][ T5574] dw2102: command 0x51 transfer failed. [ 62.142326][ T6581] dvb-usb: bulk message failed: -22 (3/0) [ 62.142337][ T6581] dw2102: i2c transfer failed. [ 62.167538][ T5574] DVB: Unable to find symbol ds3000_attach() [ 62.167551][ T5574] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 62.168637][ T6621] bond_slave_0: entered promiscuous mode [ 62.168650][ T6621] bond_slave_0: entered allmulticast mode [ 62.222281][ T5574] rc_core: IR keymap rc-su3000 not found [ 62.222298][ T5574] Registered IR keymap rc-empty [ 62.223279][ T5574] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 62.224282][ T5574] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input7 [ 62.234813][ T5574] dvb-usb: schedule remote query interval to 150 msecs. [ 62.234826][ T5574] dw2102: su3000_power_ctrl: 0, initialized 1 [ 62.234833][ T5574] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 62.243783][ T5574] usb 6-1: USB disconnect, device number 4 [ 62.300004][ T6630] xt_LOG: prefix is not null-terminated [ 62.313777][ T5574] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 62.439939][ T6637] syzkaller0: entered promiscuous mode [ 62.439961][ T6637] syzkaller0: entered allmulticast mode [ 62.913289][ T29] tipc: Node number set to 43690 [ 62.938163][ T6677] fuse: fd is not a fuse device [ 62.941129][ T42] kauditd_printk_skb: 3374 callbacks suppressed [ 62.941143][ T42] audit: type=1400 audit(1793244042.796:3734): avc: denied { ioctl } for pid=6675 comm="syz.3.218" path="socket:[13142]" dev="sockfs" ino=13142 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.988536][ T6679] netlink: 52 bytes leftover after parsing attributes in process `syz.3.219'. [ 62.989586][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.989821][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.056194][ T6682] Could not find key with description: [syz] [ 63.056209][ T6682] process_request_key_err: No key [ 63.056217][ T6682] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 63.056225][ T6682] One or more global auth toks could not properly register; rc = [-2] [ 63.056270][ T6682] Error validating options; rc = [-2] [ 63.139066][ T42] audit: type=1400 audit(1793244042.996:3735): avc: denied { read } for pid=6690 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.191759][ T42] audit: type=1400 audit(1793244043.046:3736): avc: denied { write } for pid=6690 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.224038][ T6694] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 63.283774][ T6699] syzkaller0: entered promiscuous mode [ 63.283790][ T6699] syzkaller0: entered allmulticast mode [ 63.452684][ T6709] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x7ac7 instead [ 63.452702][ T6709] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x76e1 instead [ 63.452713][ T6709] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x5a13 instead [ 63.452724][ T6709] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x05d6 instead [ 63.452734][ T6709] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x5ec1 instead [ 63.452745][ T6709] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xeddf instead [ 63.452756][ T6709] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x61c5 instead [ 63.452766][ T6709] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x5ee7 instead [ 63.452775][ T6709] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xf0ed instead [ 63.452785][ T6709] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xc38b instead [ 63.452794][ T6709] jffs2: Further such events for this erase block will not be printed [ 63.453120][ T6709] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 63.453131][ T6709] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 63.460411][ T6709] overlayfs: overlapping lowerdir path [ 63.469110][ T6711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.228'. [ 63.487991][ T6713] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x7ac7 instead [ 63.488006][ T6713] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x76e1 instead [ 63.488015][ T6713] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x5a13 instead [ 63.488024][ T6713] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x05d6 instead [ 63.488032][ T6713] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x5ec1 instead [ 63.488041][ T6713] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xeddf instead [ 63.488057][ T6713] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x61c5 instead [ 63.488066][ T6713] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x5ee7 instead [ 63.488074][ T6713] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xf0ed instead [ 63.488083][ T6713] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xc38b instead [ 63.488091][ T6713] jffs2: Further such events for this erase block will not be printed [ 63.488351][ T6713] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 63.488356][ T6713] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 63.500620][ T6717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x7ac7 instead [ 63.500637][ T6717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x76e1 instead [ 63.500646][ T6717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x5a13 instead [ 63.500654][ T6717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x05d6 instead [ 63.500663][ T6717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x5ec1 instead [ 63.500672][ T6717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xeddf instead [ 63.500681][ T6717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x61c5 instead [ 63.500690][ T6717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x5ee7 instead [ 63.500700][ T6717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xf0ed instead [ 63.500709][ T6717] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xc38b instead [ 63.500718][ T6717] jffs2: Further such events for this erase block will not be printed [ 63.500992][ T6717] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 63.500997][ T6717] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 63.505695][ T42] audit: type=1400 audit(1793244043.366:3737): avc: denied { read } for pid=6714 comm="syz.0.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.510375][ T6717] overlayfs: overlapping lowerdir path [ 63.601025][ T42] audit: type=1400 audit(1793244043.456:3738): avc: denied { mount } for pid=6720 comm="syz.2.234" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 63.603206][ T42] audit: type=1400 audit(1793244043.466:3739): avc: denied { search } for pid=6720 comm="syz.2.234" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 63.603377][ T42] audit: type=1400 audit(1793244043.466:3740): avc: denied { search } for pid=6720 comm="syz.2.234" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 63.604545][ T42] audit: type=1400 audit(1793244043.466:3741): avc: denied { read write } for pid=6720 comm="syz.2.234" name="threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 63.604582][ T42] audit: type=1400 audit(1793244043.466:3742): avc: denied { open } for pid=6720 comm="syz.2.234" path="/69/nfsd/threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 63.613146][ T6726] syzkaller0: entered promiscuous mode [ 63.613160][ T6726] syzkaller0: entered allmulticast mode [ 63.642263][ T6724] NFSD: Failed to start, no listeners configured. [ 63.658156][ T42] audit: type=1400 audit(1793244043.516:3743): avc: denied { read write } for pid=6720 comm="syz.2.234" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 63.683549][ T6733] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 63.717718][ T6744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.240'. [ 63.776103][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x7ac7 instead [ 63.776121][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x76e1 instead [ 63.776130][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x5a13 instead [ 63.776138][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x05d6 instead [ 63.776147][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x5ec1 instead [ 63.776155][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xeddf instead [ 63.776164][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x61c5 instead [ 63.776178][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x5ee7 instead [ 63.776187][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xf0ed instead [ 63.776195][ T6755] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xc38b instead [ 63.776203][ T6755] jffs2: Further such events for this erase block will not be printed [ 63.776578][ T6755] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 63.776587][ T6755] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 63.776976][ T6755] FAULT_INJECTION: forcing a failure. [ 63.776976][ T6755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.776993][ T6755] CPU: 3 UID: 0 PID: 6755 Comm: syz.1.243 Tainted: G L syzkaller #0 PREEMPT(full) [ 63.777009][ T6755] Tainted: [L]=SOFTLOCKUP [ 63.777013][ T6755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.777020][ T6755] Call Trace: [ 63.777024][ T6755] [ 63.777029][ T6755] dump_stack_lvl+0x100/0x190 [ 63.777066][ T6755] should_fail_ex.cold+0x5/0xa [ 63.777084][ T6755] _copy_from_user+0x2e/0xd0 [ 63.777107][ T6755] memdup_user+0x6b/0xe0 [ 63.777129][ T6755] strndup_user+0x78/0xe0 [ 63.777142][ T6755] __x64_sys_mount+0x136/0x310 [ 63.777159][ T6755] ? __pfx___x64_sys_mount+0x10/0x10 [ 63.777185][ T6755] do_syscall_64+0x123/0x790 [ 63.777206][ T6755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.777218][ T6755] RIP: 0033:0x7fb13339f559 [ 63.777228][ T6755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.777239][ T6755] RSP: 002b:00007fb1315ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 63.777250][ T6755] RAX: ffffffffffffffda RBX: 00007fb133625fa0 RCX: 00007fb13339f559 [ 63.777258][ T6755] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 0000000000000000 [ 63.777265][ T6755] RBP: 00007fb1315ee090 R08: 0000200000000680 R09: 0000000000000000 [ 63.777271][ T6755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.777278][ T6755] R13: 00007fb133626038 R14: 00007fb133625fa0 R15: 00007ffd09174828 [ 63.777292][ T6755] [ 63.787604][ T6757] netlink: 52 bytes leftover after parsing attributes in process `syz.3.244'. [ 63.792524][ T6753] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x7ac7 instead [ 63.792540][ T6753] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x76e1 instead [ 63.792551][ T6753] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x5a13 instead [ 63.792562][ T6753] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x05d6 instead [ 63.792573][ T6753] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x5ec1 instead [ 63.792584][ T6753] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xeddf instead [ 63.792609][ T6753] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x61c5 instead [ 63.792619][ T6753] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x5ee7 instead [ 63.792630][ T6753] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xf0ed instead [ 63.792641][ T6753] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xc38b instead [ 63.792652][ T6753] jffs2: Further such events for this erase block will not be printed [ 63.792948][ T6753] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 63.792954][ T6753] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 63.807104][ T6753] overlayfs: failed to clone lowerpath [ 63.825717][ T6759] Bluetooth: hci0: expected 65520 bytes, got 19 bytes [ 63.862527][ T6761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x7ac7 instead [ 63.862550][ T6761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x76e1 instead [ 63.862560][ T6761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x5a13 instead [ 63.862569][ T6761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x05d6 instead [ 63.862579][ T6761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x5ec1 instead [ 63.862588][ T6761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xeddf instead [ 63.862598][ T6761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x61c5 instead [ 63.862608][ T6761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x5ee7 instead [ 63.862617][ T6761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xf0ed instead [ 63.862626][ T6761] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xc38b instead [ 63.862635][ T6761] jffs2: Further such events for this erase block will not be printed [ 63.863004][ T6761] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 63.863037][ T6761] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 63.864099][ T6761] overlayfs: failed to clone lowerpath [ 63.905749][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.249'. [ 63.931290][ T6765] xt_hashlimit: size too large, truncated to 1048576 [ 63.977944][ T6772] syzkaller0: entered promiscuous mode [ 63.977963][ T6772] syzkaller0: entered allmulticast mode [ 64.066020][ T6778] syzkaller0: entered promiscuous mode [ 64.066036][ T6778] syzkaller0: entered allmulticast mode [ 64.120095][ T6780] FAULT_INJECTION: forcing a failure. [ 64.120095][ T6780] name failslab, interval 1, probability 0, space 0, times 0 [ 64.120123][ T6780] CPU: 2 UID: 0 PID: 6780 Comm: syz.1.253 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.120141][ T6780] Tainted: [L]=SOFTLOCKUP [ 64.120146][ T6780] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.120153][ T6780] Call Trace: [ 64.120158][ T6780] [ 64.120163][ T6780] dump_stack_lvl+0x100/0x190 [ 64.120188][ T6780] should_fail_ex.cold+0x5/0xa [ 64.120208][ T6780] should_failslab+0xc2/0x120 [ 64.120222][ T6780] __kmalloc_noprof+0xfc/0x840 [ 64.120241][ T6780] ? __register_sysctl_table+0xac/0x1650 [ 64.120263][ T6780] __register_sysctl_table+0xac/0x1650 [ 64.120303][ T6780] ? lock_acquire+0x1d1/0x380 [ 64.120336][ T6780] ? __pfx___register_sysctl_table+0x10/0x10 [ 64.120355][ T6780] ? is_module_address+0x5f/0xf0 [ 64.120368][ T6780] ? is_module_address+0x5f/0xf0 [ 64.120384][ T6780] register_net_sysctl_sz+0x325/0x420 [ 64.120403][ T6780] neigh_sysctl_register+0x326/0x660 [ 64.120432][ T6780] ? __pfx_neigh_proc_base_reachable_time+0x10/0x10 [ 64.120452][ T6780] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 64.120472][ T6780] ? lockdep_init_map_type+0x5c/0x250 [ 64.120494][ T6780] ? neigh_table_register+0xd30/0x11b0 [ 64.120514][ T6780] ? __pfx_arp_net_init+0x10/0x10 [ 64.120537][ T6780] arp_net_init+0x7b/0x160 [ 64.120549][ T6780] ops_init+0x1e2/0x5f0 [ 64.120566][ T6780] setup_net+0x118/0x3a0 [ 64.120581][ T6780] ? __pfx_setup_net+0x10/0x10 [ 64.120597][ T6780] ? bpf_lsm_namespace_init+0x9/0x10 [ 64.120614][ T6780] copy_net_ns+0x340/0x7a0 [ 64.120631][ T6780] create_new_namespaces+0x3ea/0xac0 [ 64.120652][ T6780] unshare_nsproxy_namespaces+0xf6/0x210 [ 64.120670][ T6780] ksys_unshare+0x44f/0x980 [ 64.120686][ T6780] ? __pfx_ksys_unshare+0x10/0x10 [ 64.120708][ T6780] __x64_sys_unshare+0x31/0x40 [ 64.120724][ T6780] do_syscall_64+0x123/0x790 [ 64.120737][ T6780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.120749][ T6780] RIP: 0033:0x7fb13339f559 [ 64.120760][ T6780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.120771][ T6780] RSP: 002b:00007fb1315ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 64.120783][ T6780] RAX: ffffffffffffffda RBX: 00007fb133625fa0 RCX: 00007fb13339f559 [ 64.120791][ T6780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 64.120798][ T6780] RBP: 00007fb133436b20 R08: 0000000000000000 R09: 0000000000000000 [ 64.120804][ T6780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.120811][ T6780] R13: 00007fb133626038 R14: 00007fb133625fa0 R15: 00007ffd09174828 [ 64.120828][ T6780] [ 64.235876][ T6786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x7ac7 instead [ 64.235903][ T6786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x76e1 instead [ 64.235920][ T6786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x5a13 instead [ 64.235939][ T6786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x05d6 instead [ 64.235956][ T6786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x5ec1 instead [ 64.235970][ T6786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xeddf instead [ 64.235985][ T6786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x61c5 instead [ 64.235999][ T6786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x5ee7 instead [ 64.236014][ T6786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xf0ed instead [ 64.236029][ T6786] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xc38b instead [ 64.236044][ T6786] jffs2: Further such events for this erase block will not be printed [ 64.236538][ T6786] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 64.236551][ T6786] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 64.246484][ T6786] overlayfs: overlapping lowerdir path [ 64.335147][ T6794] IPv6: NLM_F_CREATE should be specified when creating new route [ 64.384726][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.262'. [ 64.453161][ T6808] macvlan0: entered promiscuous mode [ 64.453185][ T6808] bridge0: entered promiscuous mode [ 64.467494][ T6811] syzkaller0: entered promiscuous mode [ 64.467509][ T6811] syzkaller0: entered allmulticast mode [ 64.507871][ T6815] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 64.510235][ T6815] gre0: entered promiscuous mode [ 64.510248][ T6815] gre0: entered allmulticast mode [ 64.599075][ T6821] capability: warning: `syz.3.267' uses 32-bit capabilities (legacy support in use) [ 64.606105][ T6823] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x7ac7 instead [ 64.606137][ T6823] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x76e1 instead [ 64.606153][ T6823] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x5a13 instead [ 64.606170][ T6823] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x05d6 instead [ 64.606187][ T6823] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x5ec1 instead [ 64.606203][ T6823] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xeddf instead [ 64.606218][ T6823] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x61c5 instead [ 64.606233][ T6823] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x5ee7 instead [ 64.606248][ T6823] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xf0ed instead [ 64.606264][ T6823] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xc38b instead [ 64.606278][ T6823] jffs2: Further such events for this erase block will not be printed [ 64.608502][ T6823] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 64.608515][ T6823] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 64.637775][ T6825] Bluetooth: MGMT ver 1.23 [ 64.660725][ T6827] netlink: 52 bytes leftover after parsing attributes in process `syz.0.270'. [ 64.664343][ T6827] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.664596][ T6827] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.724122][ T6832] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x7ac7 instead [ 64.724148][ T6832] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x76e1 instead [ 64.724165][ T6832] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x5a13 instead [ 64.724180][ T6832] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x05d6 instead [ 64.724196][ T6832] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x5ec1 instead [ 64.724211][ T6832] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xeddf instead [ 64.724227][ T6832] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x61c5 instead [ 64.724240][ T6832] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x5ee7 instead [ 64.724253][ T6832] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xf0ed instead [ 64.724269][ T6832] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xc38b instead [ 64.724281][ T6832] jffs2: Further such events for this erase block will not be printed [ 64.724670][ T6832] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 64.724680][ T6832] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 64.727799][ T6832] overlayfs: failed to clone lowerpath [ 64.882033][ T58] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 65.032395][ T58] usb 6-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 65.034427][ T58] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 65.034453][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.208578][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.274'. [ 65.251470][ T58] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device [ 65.260667][ T58] wwan wwan0: port wwan0qmi0 attached [ 65.269071][ T6841] syzkaller0: entered promiscuous mode [ 65.269086][ T6841] syzkaller0: entered allmulticast mode [ 65.289842][ T6844] syz_tun: entered allmulticast mode [ 65.368994][ T6844] syz_tun: left allmulticast mode [ 65.370720][ T5144] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 65.459756][ T58] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 9a:04:5c:b3:32:b5 [ 65.460688][ T58] usb 6-1: USB disconnect, device number 5 [ 65.464986][ T58] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 65.529063][ T58] wwan wwan0: port wwan0qmi0 disconnected [ 65.551952][ T6856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x7ac7 instead [ 65.551977][ T6856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x76e1 instead [ 65.551992][ T6856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x5a13 instead [ 65.552006][ T6856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x05d6 instead [ 65.552020][ T6856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x5ec1 instead [ 65.552034][ T6856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xeddf instead [ 65.552049][ T6856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x61c5 instead [ 65.552062][ T6856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x5ee7 instead [ 65.552076][ T6856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xf0ed instead [ 65.552089][ T6856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xc38b instead [ 65.552103][ T6856] jffs2: Further such events for this erase block will not be printed [ 65.552513][ T6856] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 65.552524][ T6856] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 65.941348][ T6871] SELinux: policydb version 747027216 does not match my version range 15-35 [ 65.941540][ T6871] SELinux: failed to load policy [ 65.945447][ T6871] xt_MASQUERADE: bad MAP_IPS. [ 66.017891][ T6880] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x7ac7 instead [ 66.017909][ T6880] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x76e1 instead [ 66.017918][ T6880] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x5a13 instead [ 66.017927][ T6880] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x05d6 instead [ 66.017936][ T6880] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x5ec1 instead [ 66.017945][ T6880] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xeddf instead [ 66.017953][ T6880] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x61c5 instead [ 66.017962][ T6880] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x5ee7 instead [ 66.017971][ T6880] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xf0ed instead [ 66.017980][ T6880] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xc38b instead [ 66.017988][ T6880] jffs2: Further such events for this erase block will not be printed [ 66.018320][ T6880] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 66.018326][ T6880] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 66.018946][ T6880] FAULT_INJECTION: forcing a failure. [ 66.018946][ T6880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.018965][ T6880] CPU: 0 UID: 0 PID: 6880 Comm: syz.2.286 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.018981][ T6880] Tainted: [L]=SOFTLOCKUP [ 66.018986][ T6880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.018993][ T6880] Call Trace: [ 66.018997][ T6880] [ 66.019023][ T6880] dump_stack_lvl+0x100/0x190 [ 66.019047][ T6880] should_fail_ex.cold+0x5/0xa [ 66.019066][ T6880] _copy_from_user+0x2e/0xd0 [ 66.019080][ T6880] copy_mount_options+0x76/0x190 [ 66.019105][ T6880] __x64_sys_mount+0x1ab/0x310 [ 66.019122][ T6880] ? __pfx___x64_sys_mount+0x10/0x10 [ 66.019143][ T6880] do_syscall_64+0x123/0x790 [ 66.019155][ T6880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.019168][ T6880] RIP: 0033:0x7f2cd4f9f559 [ 66.019178][ T6880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.019188][ T6880] RSP: 002b:00007f2cd5d9e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 66.019201][ T6880] RAX: ffffffffffffffda RBX: 00007f2cd5225fa0 RCX: 00007f2cd4f9f559 [ 66.019208][ T6880] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 0000000000000000 [ 66.019215][ T6880] RBP: 00007f2cd5d9e090 R08: 0000200000000680 R09: 0000000000000000 [ 66.019221][ T6880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.019228][ T6880] R13: 00007f2cd5226038 R14: 00007f2cd5225fa0 R15: 00007ffdc5f2fab8 [ 66.019242][ T6880] [ 66.020492][ T6880] overlayfs: overlapping lowerdir path [ 66.151758][ T6892] syzkaller0: entered promiscuous mode [ 66.151773][ T6892] syzkaller0: entered allmulticast mode [ 66.178431][ T6894] FAULT_INJECTION: forcing a failure. [ 66.178431][ T6894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.178453][ T6894] CPU: 2 UID: 0 PID: 6894 Comm: syz.1.292 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.178469][ T6894] Tainted: [L]=SOFTLOCKUP [ 66.178474][ T6894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.178481][ T6894] Call Trace: [ 66.178485][ T6894] [ 66.178491][ T6894] dump_stack_lvl+0x100/0x190 [ 66.178514][ T6894] should_fail_ex.cold+0x5/0xa [ 66.178533][ T6894] strncpy_from_user+0x3b/0x2d0 [ 66.178563][ T6894] do_getname+0x78/0x390 [ 66.178582][ T6894] vfs_open_tree+0x1aa/0xb60 [ 66.178598][ T6894] ? _raw_spin_unlock+0x28/0x50 [ 66.178616][ T6894] ? __pfx_vfs_open_tree+0x10/0x10 [ 66.178636][ T6894] __x64_sys_open_tree+0xbe/0x150 [ 66.178653][ T6894] do_syscall_64+0x123/0x790 [ 66.178666][ T6894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.178678][ T6894] RIP: 0033:0x7fb13339f559 [ 66.178688][ T6894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.178700][ T6894] RSP: 002b:00007fb1315ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 66.178717][ T6894] RAX: ffffffffffffffda RBX: 00007fb133625fa0 RCX: 00007fb13339f559 [ 66.178724][ T6894] RDX: 0000000000009902 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 66.178732][ T6894] RBP: 00007fb133436b20 R08: 0000000000000000 R09: 0000000000000000 [ 66.178739][ T6894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.178761][ T6894] R13: 00007fb133626038 R14: 00007fb133625fa0 R15: 00007ffd09174828 [ 66.178779][ T6894] [ 66.347958][ T6911] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 66.347985][ T6911] iwpm_mapping_info_cb: Unable to parse nlmsg [ 66.357262][ T6913] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x7ac7 instead [ 66.357280][ T6913] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x76e1 instead [ 66.357294][ T6913] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x5a13 instead [ 66.357308][ T6913] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x05d6 instead [ 66.357321][ T6913] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x5ec1 instead [ 66.357335][ T6913] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xeddf instead [ 66.357348][ T6913] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x61c5 instead [ 66.357362][ T6913] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x5ee7 instead [ 66.357372][ T6913] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xf0ed instead [ 66.357384][ T6913] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xc38b instead [ 66.357398][ T6913] jffs2: Further such events for this erase block will not be printed [ 66.357765][ T6913] jffs2: Cowardly refusing to erase blocks on filesystem with no valid ** replaying previous printk message ** [ 66.357765][ T6913] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 66.357773][ T6913] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 66.408992][ T6917] ================================================================== [ 66.409002][ T6917] BUG: KASAN: slab-use-after-free in acpi_ut_update_object_reference+0x701/0x800 [ 66.409029][ T6917] Read of size 1 at addr ffff888023ff3f11 by task syz.2.302/6917 [ 66.409038][ T6917] [ 66.409046][ T6917] CPU: 2 UID: 0 PID: 6917 Comm: syz.2.302 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.409062][ T6917] Tainted: [L]=SOFTLOCKUP [ 66.409066][ T6917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.409073][ T6917] Call Trace: [ 66.409078][ T6917] [ 66.409082][ T6917] dump_stack_lvl+0x100/0x190 [ 66.409102][ T6917] print_report+0x13d/0x4b0 [ 66.409119][ T6917] ? __virt_addr_valid+0x239/0x430 [ 66.409135][ T6917] ? acpi_ut_update_object_reference+0x701/0x800 [ 66.409150][ T6917] kasan_report+0xdf/0x1c0 [ 66.409163][ T6917] ? acpi_ut_update_object_reference+0x701/0x800 [ 66.409181][ T6917] acpi_ut_update_object_reference+0x701/0x800 [ 66.409198][ T6917] ? __pfx_acpi_ut_update_object_reference+0x10/0x10 [ 66.409215][ T6917] ? __pfx_acpi_ut_trace+0x10/0x10 [ 66.409229][ T6917] ? __pfx_acpi_ut_trace+0x10/0x10 [ 66.409242][ T6917] ? acpi_ut_status_exit+0x111/0x1c0 [ 66.409257][ T6917] acpi_ut_add_reference+0x80/0x170 [ 66.409273][ T6917] acpi_ex_resolve_node_to_value+0x7e1/0x9a0 [ 66.409291][ T6917] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 66.409309][ T6917] ? acpi_ds_create_operand+0x267/0xc20 [ 66.409322][ T6917] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 66.409339][ T6917] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 66.409355][ T6917] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 66.409369][ T6917] ? __asan_memset+0x23/0x50 [ 66.409384][ T6917] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 66.409399][ T6917] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 66.409412][ T6917] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 66.409426][ T6917] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 66.409438][ T6917] ? acpi_ut_trace_ptr+0x141/0x2a0 [ 66.409453][ T6917] acpi_ds_exec_end_op+0xb78/0x1e60 [ 66.409466][ T6917] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 66.409479][ T6917] acpi_ps_parse_loop+0x5e1/0x26e0 [ 66.409511][ T6917] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 66.409524][ T6917] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 66.409541][ T6917] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 66.409555][ T6917] ? acpi_ut_create_thread_state+0x6d/0x170 [ 66.409570][ T6917] acpi_ps_parse_aml+0x81e/0x1120 [ 66.409585][ T6917] acpi_ps_execute_method+0x5c4/0xe90 [ 66.409601][ T6917] acpi_ns_evaluate+0x640/0x1670 [ 66.409631][ T6917] acpi_ut_evaluate_object+0xf7/0x610 [ 66.409652][ T6917] acpi_rs_get_prt_method_data+0xa0/0x150 [ 66.409669][ T6917] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 66.409686][ T6917] ? acpi_ut_status_exit+0x111/0x1c0 [ 66.409700][ T6917] ? acpi_rs_validate_parameters+0x104/0x210 [ 66.409717][ T6917] acpi_get_irq_routing_table+0xb8/0x140 [ 66.409734][ T6917] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 66.409752][ T6917] ? do_raw_spin_lock+0x128/0x260 [ 66.409762][ T6917] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 66.409780][ T6917] ? do_raw_spin_lock+0x128/0x260 [ 66.409791][ T6917] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 66.409808][ T6917] ? mark_held_locks+0x40/0x70 [ 66.409823][ T6917] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 66.409841][ T6917] acpi_pci_irq_lookup+0x8e/0x6b0 [ 66.409857][ T6917] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 66.409875][ T6917] acpi_pci_irq_disable+0x1a8/0x360 [ 66.409891][ T6917] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 66.409908][ T6917] pcibios_disable_device+0x89/0xb0 [ 66.409925][ T6917] do_pci_disable_device+0x9f/0x100 [ 66.409941][ T6917] ? __pfx_do_pci_disable_device+0x10/0x10 [ 66.409957][ T6917] ? pci_release_region.part.0+0x15b/0x2e0 [ 66.409969][ T6917] pci_disable_device+0x130/0x270 [ 66.409984][ T6917] virtio_pci_remove+0xcf/0x110 [ 66.410001][ T6917] pci_device_remove+0xb2/0x1d0 [ 66.410013][ T6917] ? __pfx_pci_device_remove+0x10/0x10 [ 66.410027][ T6917] device_remove+0xcb/0x180 [ 66.410051][ T6917] device_release_driver_internal+0x441/0x610 [ 66.410067][ T6917] pci_stop_bus_device+0x120/0x160 [ 66.410082][ T6917] pci_stop_and_remove_bus_device+0x58/0xa0 [ 66.410098][ T6917] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 66.410114][ T6917] remove_store+0x123/0x140 [ 66.410130][ T6917] ? __pfx_remove_store+0x10/0x10 [ 66.410147][ T6917] ? find_held_lock+0x2b/0x80 [ 66.410159][ T6917] ? sysfs_file_kobj+0xe4/0x290 [ 66.410172][ T6917] ? sysfs_file_kobj+0xe4/0x290 [ 66.410186][ T6917] ? __pfx_remove_store+0x10/0x10 [ 66.410202][ T6917] dev_attr_store+0x58/0x80 [ 66.410217][ T6917] ? __pfx_dev_attr_store+0x10/0x10 [ 66.410231][ T6917] sysfs_kf_write+0xf2/0x150 [ 66.410245][ T6917] kernfs_fop_write_iter+0x3e0/0x5f0 [ 66.410256][ T6917] ? __pfx_sysfs_kf_write+0x10/0x10 [ 66.410270][ T6917] vfs_write+0x6af/0x1050 [ 66.410280][ T6917] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 66.410293][ T6917] ? __pfx_vfs_write+0x10/0x10 [ 66.410309][ T6917] ? find_held_lock+0x2b/0x80 [ 66.410325][ T6917] ksys_write+0x12a/0x250 [ 66.410334][ T6917] ? __pfx_ksys_write+0x10/0x10 [ 66.410346][ T6917] do_syscall_64+0x123/0x790 [ 66.410357][ T6917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.410368][ T6917] RIP: 0033:0x7f2cd4f9f559 [ 66.410377][ T6917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.410389][ T6917] RSP: 002b:00007f2cd5d9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 66.410401][ T6917] RAX: ffffffffffffffda RBX: 00007f2cd5225fa0 RCX: 00007f2cd4f9f559 [ 66.410408][ T6917] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 66.410415][ T6917] RBP: 00007f2cd5036b20 R08: 0000000000000000 R09: 0000000000000000 [ 66.410422][ T6917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.410429][ T6917] R13: 00007f2cd5226038 R14: 00007f2cd5225fa0 R15: 00007ffdc5f2fab8 [ 66.410440][ T6917] [ 66.410443][ T6917] [ 66.410446][ T6917] Allocated by task 1: [ 66.410452][ T6917] kasan_save_stack+0x30/0x50 [ 66.410469][ T6917] kasan_save_track+0x14/0x30 [ 66.410478][ T6917] __kasan_slab_alloc+0x89/0x90 [ 66.410487][ T6917] kmem_cache_alloc_noprof+0x269/0x6a0 [ 66.410503][ T6917] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 66.410513][ T6917] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 66.410525][ T6917] acpi_ds_build_internal_package_obj+0xa8c/0xe60 [ 66.410551][ T6917] acpi_ds_eval_data_object_operands+0x2fd/0x640 [ 66.410562][ T6917] acpi_ds_exec_end_op+0xe41/0x1e60 [ 66.410573][ T6917] acpi_ps_parse_loop+0x5e1/0x26e0 [ 66.410584][ T6917] acpi_ps_parse_aml+0x81e/0x1120 [ 66.410597][ T6917] acpi_ps_execute_table+0x393/0x500 [ 66.410610][ T6917] acpi_ns_execute_table+0x596/0x970 [ 66.410626][ T6917] acpi_ns_parse_table+0xcb/0x160 [ 66.410642][ T6917] acpi_ns_load_table+0xc9/0x490 [ 66.410663][ T6917] acpi_tb_load_namespace+0x2b0/0x8f0 [ 66.410673][ T6917] acpi_load_tables+0x89/0x160 [ 66.410684][ T6917] acpi_init+0x146/0x840 [ 66.410699][ T6917] do_one_initcall+0x11c/0x6f0 [ 66.410711][ T6917] kernel_init_freeable+0x6ea/0x7b0 [ 66.410723][ T6917] kernel_init+0x21/0x1e0 [ 66.410735][ T6917] ret_from_fork+0x730/0xd60 [ 66.410748][ T6917] ret_from_fork_asm+0x1a/0x30 [ 66.410761][ T6917] [ 66.410763][ T6917] Freed by task 5974: [ 66.410769][ T6917] kasan_save_stack+0x30/0x50 [ 66.410785][ T6917] kasan_save_track+0x14/0x30 [ 66.410793][ T6917] kasan_save_free_info+0x3b/0x70 [ 66.410807][ T6917] __kasan_slab_free+0x5f/0x80 [ 66.410816][ T6917] kmem_cache_free+0x127/0x6c0 [ 66.410829][ T6917] acpi_os_release_object+0x1c/0x30 [ 66.410842][ T6917] acpi_ut_delete_object_desc+0xea/0x130 [ 66.410853][ T6917] acpi_ut_update_ref_count.part.0+0x510/0x2250 [ 66.410868][ T6917] acpi_ut_update_object_reference+0x5f9/0x800 [ 66.410883][ T6917] acpi_ut_remove_reference+0x192/0x1d0 [ 66.410898][ T6917] acpi_rs_get_prt_method_data+0xcd/0x150 [ 66.410913][ T6917] acpi_get_irq_routing_table+0xb8/0x140 [ 66.410929][ T6917] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 66.410944][ T6917] acpi_pci_irq_lookup+0x8e/0x6b0 [ 66.410959][ T6917] acpi_pci_irq_disable+0x1a8/0x360 [ 66.410973][ T6917] pcibios_disable_device+0x89/0xb0 [ 66.410989][ T6917] do_pci_disable_device+0x9f/0x100 [ 66.411023][ T6917] pci_disable_device+0x130/0x270 [ 66.411038][ T6917] usb_hcd_pci_remove+0x1ed/0x300 [ 66.411058][ T6917] pci_device_remove+0xb2/0x1d0 [ 66.411070][ T6917] device_remove+0xcb/0x180 [ 66.411080][ T6917] device_release_driver_internal+0x441/0x610 [ 66.411094][ T6917] pci_stop_bus_device+0x120/0x160 [ 66.411107][ T6917] pci_stop_and_remove_bus_device+0x58/0xa0 [ 66.411121][ T6917] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 66.411136][ T6917] remove_store+0x123/0x140 [ 66.411152][ T6917] dev_attr_store+0x58/0x80 [ 66.411164][ T6917] sysfs_kf_write+0xf2/0x150 [ 66.411176][ T6917] kernfs_fop_write_iter+0x3e0/0x5f0 [ 66.411186][ T6917] vfs_write+0x6af/0x1050 [ 66.411195][ T6917] ksys_write+0x12a/0x250 [ 66.411203][ T6917] do_syscall_64+0x123/0x790 [ 66.411212][ T6917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.411222][ T6917] [ 66.411225][ T6917] The buggy address belongs to the object at ffff888023ff3f08 [ 66.411225][ T6917] which belongs to the cache Acpi-Operand of size 72 [ 66.411234][ T6917] The buggy address is located 9 bytes inside of [ 66.411234][ T6917] freed 72-byte region [ffff888023ff3f08, ffff888023ff3f50) [ 66.411245][ T6917] [ 66.411247][ T6917] The buggy address belongs to the physical page: [ 66.411252][ T6917] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888023ff3dd0 pfn:0x23ff3 [ 66.411263][ T6917] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 66.411274][ T6917] page_type: f5(slab) [ 66.411284][ T6917] raw: 00fff00000000200 ffff88801d44da40 ffffea00008ffe90 ffffea00008ffc10 [ 66.411295][ T6917] raw: ffff888023ff3dd0 0000000200270012 00000000f5000000 0000000000000000 [ 66.411301][ T6917] page dumped because: kasan: bad access detected [ 66.411306][ T6917] page_owner tracks the page as allocated [ 66.411310][ T6917] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2905729162 [ 66.411327][ T6917] post_alloc_hook+0xfd/0x120 [ 66.411339][ T6917] get_page_from_freelist+0x1113/0x35e0 [ 66.411353][ T6917] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 66.411367][ T6917] new_slab+0xb1/0x6d0 [ 66.411380][ T6917] refill_objects+0xe3/0x410 [ 66.411393][ T6917] __pcs_replace_empty_main+0x35e/0x650 [ 66.411406][ T6917] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 66.411422][ T6917] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 66.411432][ T6917] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 66.411443][ T6917] acpi_ds_build_internal_object+0x173/0x790 [ 66.411454][ T6917] acpi_ds_build_internal_package_obj+0x481/0xe60 [ 66.411465][ T6917] acpi_ds_eval_data_object_operands+0x2fd/0x640 [ 66.411476][ T6917] acpi_ds_exec_end_op+0xe41/0x1e60 [ 66.411487][ T6917] acpi_ps_parse_loop+0x5e1/0x26e0 [ 66.411498][ T6917] acpi_ps_parse_aml+0x81e/0x1120 [ 66.411510][ T6917] acpi_ps_execute_table+0x393/0x500 [ 66.411524][ T6917] page_owner free stack trace missing [ 66.411527][ T6917] [ 66.411529][ T6917] Memory state around the buggy address: [ 66.411535][ T6917] ffff888023ff3e00: fb fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb [ 66.411542][ T6917] ffff888023ff3e80: fc fc fc fc fa fb fb fb fb fb fb fb fb fc fc fc [ 66.411550][ T6917] >ffff888023ff3f00: fc fa fb fb fb fb fb fb fb fb fc fc fc fc fa fb [ 66.411556][ T6917] ^ [ 66.411561][ T6917] ffff888023ff3f80: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc [ 66.411569][ T6917] ffff888023ff4000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.411574][ T6917] ================================================================== [ 66.413401][ T6917] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 66.813265][ T6917] CPU: 2 UID: 0 PID: 6917 Comm: syz.2.302 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.817540][ T6917] Tainted: [L]=SOFTLOCKUP [ 66.819317][ T6917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.823378][ T6917] Call Trace: [ 66.824753][ T6917] [ 66.825970][ T6917] dump_stack_lvl+0x100/0x190 [ 66.827910][ T6917] vpanic+0x2dc/0x6f8 [ 66.829480][ T6917] panic+0xd1/0xe0 [ 66.830676][ T6917] ? __pfx_panic+0x10/0x10 [ 66.832347][ T6917] ? acpi_ut_update_object_reference+0x701/0x800 [ 66.834858][ T6917] ? preempt_schedule+0x57/0xd0 [ 66.836807][ T6917] check_panic_on_warn.cold+0x19/0x34 [ 66.838917][ T6917] end_report.part.0+0x3a/0x90 [ 66.840883][ T6917] kasan_report.cold+0xe/0x18 [ 66.842817][ T6917] ? acpi_ut_update_object_reference+0x701/0x800 [ 66.845371][ T6917] acpi_ut_update_object_reference+0x701/0x800 [ 66.847828][ T6917] ? __pfx_acpi_ut_update_object_reference+0x10/0x10 [ 66.850433][ T6917] ? __pfx_acpi_ut_trace+0x10/0x10 [ 66.852026][ T6917] ? __pfx_acpi_ut_trace+0x10/0x10 [ 66.853956][ T6917] ? acpi_ut_status_exit+0x111/0x1c0 [ 66.856009][ T6917] acpi_ut_add_reference+0x80/0x170 [ 66.857771][ T6917] acpi_ex_resolve_node_to_value+0x7e1/0x9a0 [ 66.860209][ T6917] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 66.862588][ T6917] ? acpi_ds_create_operand+0x267/0xc20 [ 66.864398][ T6917] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 66.866658][ T6917] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 66.869166][ T6917] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 66.871305][ T6917] ? __asan_memset+0x23/0x50 [ 66.873214][ T6917] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 66.875662][ T6917] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 66.877981][ T6917] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 66.880528][ T6917] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 66.882895][ T6917] ? acpi_ut_trace_ptr+0x141/0x2a0 [ 66.884941][ T6917] acpi_ds_exec_end_op+0xb78/0x1e60 [ 66.886797][ T6917] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 66.888671][ T6917] acpi_ps_parse_loop+0x5e1/0x26e0 [ 66.890771][ T6917] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 66.892861][ T6917] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 66.894568][ T6917] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 66.896965][ T6917] ? acpi_ut_create_thread_state+0x6d/0x170 [ 66.898927][ T6917] acpi_ps_parse_aml+0x81e/0x1120 [ 66.900767][ T6917] acpi_ps_execute_method+0x5c4/0xe90 [ 66.902960][ T6917] acpi_ns_evaluate+0x640/0x1670 [ 66.904612][ T6917] acpi_ut_evaluate_object+0xf7/0x610 [ 66.906448][ T6917] acpi_rs_get_prt_method_data+0xa0/0x150 [ 66.908797][ T6917] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 66.910831][ T6917] ? acpi_ut_status_exit+0x111/0x1c0 [ 66.912835][ T6917] ? acpi_rs_validate_parameters+0x104/0x210 [ 66.915113][ T6917] acpi_get_irq_routing_table+0xb8/0x140 [ 66.916845][ T6917] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 66.919381][ T6917] ? do_raw_spin_lock+0x128/0x260 [ 66.921237][ T6917] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 66.923089][ T6917] ? do_raw_spin_lock+0x128/0x260 [ 66.925159][ T6917] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 66.927407][ T6917] ? mark_held_locks+0x40/0x70 [ 66.928999][ T6917] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 66.931347][ T6917] acpi_pci_irq_lookup+0x8e/0x6b0 [ 66.933082][ T6917] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 66.934774][ T6917] acpi_pci_irq_disable+0x1a8/0x360 [ 66.936877][ T6917] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 66.939013][ T6917] pcibios_disable_device+0x89/0xb0 [ 66.940628][ T6917] do_pci_disable_device+0x9f/0x100 [ 66.942739][ T6917] ? __pfx_do_pci_disable_device+0x10/0x10 [ 66.944797][ T6917] ? pci_release_region.part.0+0x15b/0x2e0 [ 66.946782][ T6917] pci_disable_device+0x130/0x270 [ 66.948860][ T6917] virtio_pci_remove+0xcf/0x110 [ 66.950570][ T6917] pci_device_remove+0xb2/0x1d0 [ 66.952166][ T6917] ? __pfx_pci_device_remove+0x10/0x10 [ 66.954383][ T6917] device_remove+0xcb/0x180 [ 66.956260][ T6917] device_release_driver_internal+0x441/0x610 [ 66.958721][ T6917] pci_stop_bus_device+0x120/0x160 [ 66.960848][ T6917] pci_stop_and_remove_bus_device+0x58/0xa0 [ 66.963019][ T6917] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 66.965602][ T6917] remove_store+0x123/0x140 [ 66.967476][ T6917] ? __pfx_remove_store+0x10/0x10 [ 66.969353][ T6917] ? find_held_lock+0x2b/0x80 [ 66.971062][ T6917] ? sysfs_file_kobj+0xe4/0x290 [ 66.973061][ T6917] ? sysfs_file_kobj+0xe4/0x290 [ 66.974968][ T6917] ? __pfx_remove_store+0x10/0x10 [ 66.977030][ T6917] dev_attr_store+0x58/0x80 [ 66.978937][ T6917] ? __pfx_dev_attr_store+0x10/0x10 [ 66.981086][ T6917] sysfs_kf_write+0xf2/0x150 [ 66.982993][ T6917] kernfs_fop_write_iter+0x3e0/0x5f0 [ 66.985166][ T6917] ? __pfx_sysfs_kf_write+0x10/0x10 [ 66.987319][ T6917] vfs_write+0x6af/0x1050 [ 66.989124][ T6917] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 66.991106][ T6917] ? __pfx_vfs_write+0x10/0x10 [ 66.993081][ T6917] ? find_held_lock+0x2b/0x80 [ 66.995048][ T6917] ksys_write+0x12a/0x250 [ 66.996828][ T6917] ? __pfx_ksys_write+0x10/0x10 [ 66.998851][ T6917] do_syscall_64+0x123/0x790 [ 67.000762][ T6917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.003156][ T6917] RIP: 0033:0x7f2cd4f9f559 [ 67.004986][ T6917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.012594][ T6917] RSP: 002b:00007f2cd5d9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.015818][ T6917] RAX: ffffffffffffffda RBX: 00007f2cd5225fa0 RCX: 00007f2cd4f9f559 [ 67.019020][ T6917] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 67.022204][ T6917] RBP: 00007f2cd5036b20 R08: 0000000000000000 R09: 0000000000000000 [ 67.024752][ T6917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.027845][ T6917] R13: 00007f2cd5226038 R14: 00007f2cd5225fa0 R15: 00007ffdc5f2fab8 [ 67.031075][ T6917] [ 67.033019][ T6917] Kernel Offset: disabled [ 67.034795][ T6917] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:20:46 Registers: info registers vcpu 0 CPU#0 RAX=8000000000000001 RBX=0000000000000000 RCX=ffff88801e718000 RDX=0000000000000001 RSI=ffffffff81ec5946 RDI=0000000000000001 RBP=ffffc900007cfda8 RSP=ffffc900007cfa38 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000003 R11=43203a327366666a R12=0000000000000000 R13=1ffff920000f9f52 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff820e4bb1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d448e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcc4275da08 CR3=0000000050a7b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff7d46c2b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff7d46c2b6 00007fff7d46c2bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc41a3714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc41a37184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc41a372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc41a37176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000060 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000060 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffff88802b8f2580 RDX=0000000000000001 RSI=ffffffff82019163 RDI=0000000000000005 RBP=ffff88806a044560 RSP=ffffc9000171f4c8 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=ffffed100571e763 R13=0000000000000003 R14=ffffed100d4088ad R15=0000000000000001 RIP=ffffffff820e52e0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555689c4500 ffffffff 00c00000 GS =0000 ffff8880d458e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcc427556c8 CR3=0000000050a7b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 337a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffab05d3d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffab05d3d6 00007fffab05d3dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea0643714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea06437184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea064372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea06437176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c0c735 RDI=ffffffff9cf39a00 RBP=ffffffff9cf399c0 RSP=ffffc9000d276980 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000033 R14=000000000000000d R15=ffffc9000d276c98 RIP=ffffffff85c0c75f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2cd5d9e6c0 ffffffff 00c00000 GS =0000 ffff8880d468e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2cd4fecc40 CR3=000000004a0e8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 317a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd09174d16 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd09174d16 00007ffd09174d1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb13343714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb133437184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1334372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb133437176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000020000 RBX=ffff888030c00bb0 RCX=0000000000000000 RDX=0000000000020007 RSI=0000000000000000 RDI=ffffffff8ffeb4e0 RBP=0000000000000007 RSP=ffffc9000390f3b0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888030c00000 R13=0000000000020000 R14=0000000000000000 R15=ffffffff8ffeb4e0 RIP=ffffffff81e93a1c RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6583300c80 ffffffff 00c00000 GS =0000 ffff8880d478e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcc4277dff8 CR3=00000000379ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffff7f Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa49e949b 00007fffa49e949b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa49e99a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa49e99a0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4e5f5046475f5f 7c4e5241574f4e5f 5046475f5f7c4c45 4e52454b5f504647 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3236313932373530 3932207374202c29 302f726570706177 7328203120646967 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74202c3120646970 202c29434f4c4c41 4d454d4f4e5f5046 475f5f7c504d4f43 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f5046475f5f7c59 525445524f4e5f50 46475f5f7c4e5241 574f4e5f5046475f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f7c4c454e52454b 5f50464728306363 32647830206b7361 6d5f706667202c65 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d72657020656c69 665f7268633d7373 616c637420745f6c ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000