last executing test programs: 2.429391804s ago: executing program 3 (id=434): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f0000000100)='attr/prev\x00') socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000240)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000003c0)=[r1], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 2.380298761s ago: executing program 3 (id=436): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x8001, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}], 0x1, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) shutdown(r0, 0x1) close(0x3) 2.291798449s ago: executing program 3 (id=437): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000004c0)=0x0, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) sendfile(r1, r1, 0x0, 0x40000000800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00'], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r2, r1, 0x0, 0x7ffff000) 1.663986158s ago: executing program 1 (id=442): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000000", @ANYRES32=0x0], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.321266514s ago: executing program 1 (id=448): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 1.272992894s ago: executing program 3 (id=449): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 1.180236009s ago: executing program 3 (id=452): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(0x0, 0x1c527e, 0x10) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00'], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 1.042817607s ago: executing program 1 (id=455): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00'], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 1.026399979s ago: executing program 3 (id=456): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) write$nci(r0, &(0x7f0000000440)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="500404"], 0x7) write$nci(r0, &(0x7f00000004c0)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x24, r3, 0x1, 0x70bd28, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x2a}]}, 0x24}, 0x1, 0x0, 0x0, 0x5855}, 0x0) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="40020ff6"], 0x12) 833.453253ms ago: executing program 2 (id=458): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4002, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet(0x2, 0x2, 0x20000006) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r3, 0x1}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 728.699714ms ago: executing program 0 (id=459): r0 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) write$md_sysfs(r0, &(0x7f0000000180)=@str='2', 0x1) 688.251382ms ago: executing program 0 (id=460): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3) r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='level\x00'}, 0x1, 0x0) write$md_sysfs(r1, &(0x7f0000000100)=@str='raid1', 0x5) r2 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) write$md_sysfs(r2, &(0x7f0000000180)=@str='2', 0x1) openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000001c0)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x1, 0x0) r3 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0) write$md_sysfs(r3, &(0x7f0000000280)=@dev={'1:', 0x0}, 0x16) write$md_sysfs(r3, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16) write$md_sysfs(0xffffffffffffffff, &(0x7f0000000340)=@str='0', 0x1) r4 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000380)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r4, &(0x7f00000003c0)=@str='1', 0x1) r5 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r5, &(0x7f0000000440)=@str='active', 0x6) r6 = openat$md(0xffffffffffffff9c, &(0x7f0000000480)={'/dev/md', @num=0x0}, 0x2, 0x0) pwrite64(r6, &(0x7f00000004c0)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) write$md_sysfs(r5, &(0x7f0000000500)=@str='clear', 0x5) 542.828771ms ago: executing program 2 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000004c0)=0x0, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) sendfile(r1, r1, 0x0, 0x40000000800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00'], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 507.771981ms ago: executing program 2 (id=462): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a0000000000000004000400"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000000000060000000008001e0002"], 0x30}}, 0x4090) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 463.786357ms ago: executing program 2 (id=463): ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) mount$overlay(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r0 = openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000e80)=0x0, 0x0, &(0x7f0000000f00)=0x0) r4 = syz_ublk_add_dev(r1, r2, 0x0, r3, &(0x7f0000000f40)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) syz_open_dev$ublk_chdev(0x0, r4, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/nullb/nullb1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000ac0)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000b80)='100', 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) socket(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r6, &(0x7f0000000c40)='1', 0x1) 427.816708ms ago: executing program 1 (id=464): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x240}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 365.841015ms ago: executing program 0 (id=465): ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) mount$overlay(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r0 = openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000e80)=0x0, 0x0, &(0x7f0000000f00)=0x0) r4 = syz_ublk_add_dev(r1, r2, 0x0, r3, &(0x7f0000000f40)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) syz_open_dev$ublk_chdev(0x0, r4, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/nullb/nullb1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000ac0)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000b80)='100', 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) socket(0x10, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r6, &(0x7f0000000c40)='1', 0x1) 359.692397ms ago: executing program 1 (id=466): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f0000000100)='attr/prev\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000240)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000003c0)=[r1], 0x0, &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 328.981582ms ago: executing program 2 (id=467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0xffffffffffffffff, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000680)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000700)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000800)="27030200dc0f14000e0000000025c10200000001125c", 0x16}, {&(0x7f0000000040)="02db0b9ef1cafdabc0356e8eb692d5ce214549d51f0063d6", 0x18}], 0x2}, 0x4005) 282.187407ms ago: executing program 0 (id=468): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000007d80)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x48) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000007e00)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000007e40)={0xa, 0x4e22, 0xfffffffd, @empty, 0x7}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000007ec0), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000007f00)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000007f40)={0x0, 0x0, &(0x7f0000007f80)={&(0x7f0000007fc0)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000008000)={0x0, 0x20, &(0x7f0000008040)={&(0x7f0000008080)={0x30, 0x0, 0x1, 0x70bd2c, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 248.327333ms ago: executing program 1 (id=469): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 180.408588ms ago: executing program 2 (id=470): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000004c0)=0x0, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) sendfile(r1, r1, 0x0, 0x40000000800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 128.571669ms ago: executing program 0 (id=471): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000007d80)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x48) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000007e40)={0xa, 0x4e22, 0xfffffffd, @empty, 0x7}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000007e80), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000007ec0), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000007f00)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000007f40)={0x0, 0x0, &(0x7f0000007f80)={&(0x7f0000007fc0)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000008000)={0x0, 0x20, &(0x7f0000008040)={&(0x7f0000008080)={0x30, r2, 0x1, 0x70bd2c, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 0s ago: executing program 0 (id=472): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x8001, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}], 0x1, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x4041) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000003c0)='2', 0x1}], 0x1}}], 0x1, 0x20000014) close(0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:20748' (ED25519) to the list of known hosts. [ 39.916357][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 39.916385][ T42] audit: type=1400 audit(1793843162.344:138): avc: denied { name_bind } for pid=5768 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.958131][ T42] audit: type=1400 audit(1793843162.384:139): avc: denied { execute } for pid=5769 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.958767][ T42] audit: type=1400 audit(1793843162.384:140): avc: denied { execute_no_trans } for pid=5769 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.274966][ T42] audit: type=1400 audit(1793843164.704:141): avc: denied { mounton } for pid=5769 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.277115][ T42] audit: type=1400 audit(1793843164.704:142): avc: denied { mount } for pid=5769 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.280142][ T5769] cgroup: Unknown subsys name 'net' [ 42.282068][ T42] audit: type=1400 audit(1793843164.704:143): avc: denied { unmount } for pid=5769 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.455387][ T5769] cgroup: Unknown subsys name 'cpuset' [ 42.459812][ T5769] cgroup: Unknown subsys name 'rlimit' [ 42.593612][ T42] audit: type=1400 audit(1793843165.024:144): avc: denied { setattr } for pid=5769 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.594002][ T42] audit: type=1400 audit(1793843165.024:145): avc: denied { create } for pid=5769 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.594211][ T42] audit: type=1400 audit(1793843165.024:146): avc: denied { write } for pid=5769 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.594480][ T42] audit: type=1400 audit(1793843165.024:147): avc: denied { read } for pid=5769 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.639913][ T5773] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.354932][ T5769] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.699890][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 46.699908][ T42] audit: type=1400 audit(1793843169.124:154): avc: denied { execmem } for pid=5776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.879290][ T42] audit: type=1400 audit(1793843169.304:155): avc: denied { create } for pid=5780 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.879637][ T42] audit: type=1400 audit(1793843169.304:156): avc: denied { read write } for pid=5780 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.879998][ T42] audit: type=1400 audit(1793843169.304:157): avc: denied { open } for pid=5780 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.886967][ T42] audit: type=1400 audit(1793843169.314:158): avc: denied { ioctl } for pid=5780 comm="syz-executor" path="socket:[6584]" dev="sockfs" ino=6584 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.906309][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.906650][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.908001][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.908587][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.908870][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.909259][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.909503][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.909907][ T5141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.911814][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.912356][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.915810][ T42] audit: type=1400 audit(1793843169.344:159): avc: denied { read } for pid=5780 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.916232][ T42] audit: type=1400 audit(1793843169.344:160): avc: denied { open } for pid=5780 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.919131][ T42] audit: type=1400 audit(1793843169.344:161): avc: denied { mounton } for pid=5780 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.923530][ T42] audit: type=1400 audit(1793843169.354:162): avc: denied { module_request } for pid=5780 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.926971][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.929245][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.931330][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.935531][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.935676][ T42] audit: type=1400 audit(1793843169.364:163): avc: denied { mounton } for pid=5781 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.936565][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.937071][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.938253][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.940064][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.948024][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.952600][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.113241][ T5790] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.115134][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.116530][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.120315][ T5789] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.122351][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.192846][ T5781] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.210872][ T5780] infiniband rxe0: set active [ 47.214826][ T5780] infiniband rxe0: added rxe_eth0 [ 47.222904][ T5780] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 47.222932][ T5780] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 47.222955][ T5780] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 47.226769][ T5136] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.234624][ T5780] RDS/IB: rxe0: added [ 47.234775][ T5780] smc: adding ib device rxe0 with port count 1 [ 47.234813][ T5780] smc: ib device rxe0 port 1 has no pnetid [ 47.257444][ T5136] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.271294][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.351048][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.415309][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.415383][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.415474][ T5789] bridge_slave_0: entered allmulticast mode [ 47.416604][ T5789] bridge_slave_0: entered promiscuous mode [ 47.420767][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.420843][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.421080][ T5789] bridge_slave_1: entered allmulticast mode [ 47.426453][ T5789] bridge_slave_1: entered promiscuous mode [ 47.451669][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.475216][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.487610][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.494052][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.494093][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.494165][ T5790] bridge_slave_0: entered allmulticast mode [ 47.494827][ T5790] bridge_slave_0: entered promiscuous mode [ 47.495961][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.496000][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.496052][ T5790] bridge_slave_1: entered allmulticast mode [ 47.497589][ T5790] bridge_slave_1: entered promiscuous mode [ 47.515066][ T5789] team0: Port device team_slave_0 added [ 47.526864][ T5789] team0: Port device team_slave_1 added [ 47.541096][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.547877][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.547920][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.547973][ T5781] bridge_slave_0: entered allmulticast mode [ 47.548631][ T5781] bridge_slave_0: entered promiscuous mode [ 47.554093][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.554325][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.554369][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.554518][ T5781] bridge_slave_1: entered allmulticast mode [ 47.555519][ T5781] bridge_slave_1: entered promiscuous mode [ 47.576202][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.576212][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.576227][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.589353][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.589876][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.589887][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.589905][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.599798][ T5780] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.608657][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.610465][ T5790] team0: Port device team_slave_0 added [ 47.626388][ T5790] team0: Port device team_slave_1 added [ 47.649099][ T5781] team0: Port device team_slave_0 added [ 47.658182][ T5789] hsr_slave_0: entered promiscuous mode [ 47.658813][ T5789] hsr_slave_1: entered promiscuous mode [ 47.660243][ T5781] team0: Port device team_slave_1 added [ 47.660986][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.660994][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.661008][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.679607][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.679617][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.679632][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.697362][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.697374][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.697389][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.713423][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.713434][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.713449][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.758690][ T5790] hsr_slave_0: entered promiscuous mode [ 47.759224][ T5790] hsr_slave_1: entered promiscuous mode [ 47.759532][ T5790] debugfs: 'hsr0' already exists in 'hsr' [ 47.759541][ T5790] Cannot create hsr debugfs directory [ 47.793116][ T5781] hsr_slave_0: entered promiscuous mode [ 47.793561][ T5781] hsr_slave_1: entered promiscuous mode [ 47.793854][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 47.793863][ T5781] Cannot create hsr debugfs directory [ 47.983511][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.988285][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.988791][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.994489][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.995561][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.004825][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.005235][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.009269][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.077288][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.077367][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.077428][ T5780] bridge_slave_0: entered allmulticast mode [ 48.078156][ T5780] bridge_slave_0: entered promiscuous mode [ 48.083424][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.083480][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.083747][ T5780] bridge_slave_1: entered allmulticast mode [ 48.084396][ T5780] bridge_slave_1: entered promiscuous mode [ 48.089249][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.093820][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.094232][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.097570][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.113433][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.115165][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.116807][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.116942][ T5789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.117228][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.117274][ T5789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.120403][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.122237][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.128024][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.131261][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.164214][ T5780] team0: Port device team_slave_0 added [ 48.165860][ T5780] team0: Port device team_slave_1 added [ 48.179265][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.179277][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.179290][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.185094][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.185104][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.185119][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.201145][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.201196][ T5781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.201299][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.201342][ T5781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.222023][ T5780] hsr_slave_0: entered promiscuous mode [ 48.222782][ T5780] hsr_slave_1: entered promiscuous mode [ 48.223168][ T5780] debugfs: 'hsr0' already exists in 'hsr' [ 48.223178][ T5780] Cannot create hsr debugfs directory [ 48.224031][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.227806][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.228278][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.230523][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.230987][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.234627][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.235085][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.238886][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.287691][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.288632][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.291158][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.291420][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.357208][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.384995][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.397484][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.409981][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.412150][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.416488][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.416535][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.419349][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.425707][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.429266][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.433875][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.436451][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.436995][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.440358][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.444668][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.444778][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.446496][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.446615][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.459286][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.459334][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.498631][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.530615][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.540653][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.540698][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.554464][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.554546][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.585269][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.601341][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.609441][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.617582][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.617662][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.632327][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.632450][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.756572][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.782760][ T5789] veth0_vlan: entered promiscuous mode [ 48.786848][ T5789] veth1_vlan: entered promiscuous mode [ 48.795093][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.816634][ T5789] veth0_macvtap: entered promiscuous mode [ 48.827278][ T5789] veth1_macvtap: entered promiscuous mode [ 48.829682][ T5781] veth0_vlan: entered promiscuous mode [ 48.835467][ T5781] veth1_vlan: entered promiscuous mode [ 48.839677][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.844608][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.857300][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.858926][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.882707][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.882839][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.882860][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.882879][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.889904][ T5781] veth0_macvtap: entered promiscuous mode [ 48.913643][ T5781] veth1_macvtap: entered promiscuous mode [ 48.928516][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.928538][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.928832][ T5780] veth0_vlan: entered promiscuous mode [ 48.937516][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.940331][ T5780] veth1_vlan: entered promiscuous mode [ 48.946494][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.958487][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.958499][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.964300][ T5790] veth0_vlan: entered promiscuous mode [ 48.980624][ T5790] veth1_vlan: entered promiscuous mode [ 48.994055][ T5788] Bluetooth: hci3: command tx timeout [ 48.994247][ T5788] Bluetooth: hci1: command tx timeout [ 48.994373][ T5788] Bluetooth: hci0: command tx timeout [ 48.994537][ T68] Bluetooth: hci2: command tx timeout [ 48.996603][ T5780] veth0_macvtap: entered promiscuous mode [ 49.008172][ T5780] veth1_macvtap: entered promiscuous mode [ 49.023486][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.023592][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.026040][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.026050][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.045876][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.046959][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.046974][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.053846][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.056366][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.065557][ T5789] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.072288][ T5790] veth0_macvtap: entered promiscuous mode [ 49.076110][ T5790] veth1_macvtap: entered promiscuous mode [ 49.082779][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.082848][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.082930][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.082997][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.113117][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.121707][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.134237][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.134252][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.156942][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.156961][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.162770][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.194027][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.194203][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.194362][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.200478][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.200494][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.226796][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.226818][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.243729][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.344621][ T5958] 9pnet_fd: p9_fd_create_unix (5958): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 49.505901][ T5991] syzkaller0: entered promiscuous mode [ 49.505917][ T5991] syzkaller0: entered allmulticast mode [ 49.521034][ T5991] tipc: Started in network mode [ 49.521052][ T5991] tipc: Node identity a296e0a5185, cluster identity 4711 [ 49.521411][ T5991] tipc: Enabled bearer , priority 0 [ 49.524832][ T5990] tipc: Resetting bearer [ 49.541991][ T5990] tipc: Disabling bearer [ 49.550885][ T5994] syzkaller0: entered promiscuous mode [ 49.550900][ T5994] syzkaller0: entered allmulticast mode [ 49.697285][ T6006] netlink: 'syz.1.25': attribute type 27 has an invalid length. [ 49.730512][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.731220][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.782229][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.785305][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.853429][ T6007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.854230][ T6007] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.858808][ T6007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.873580][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.873632][ T6007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.875176][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.875250][ T6007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.886302][ T6007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.888645][ T6007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.900029][ T6007] veth1_vlan: left promiscuous mode [ 49.900964][ T6007] veth0_vlan: left promiscuous mode [ 49.905936][ T6007] veth0_vlan: entered promiscuous mode [ 49.908859][ T6007] veth1_vlan: entered promiscuous mode [ 49.911854][ T6007] veth1_macvtap: left promiscuous mode [ 49.912317][ T6007] veth0_macvtap: left promiscuous mode [ 49.913154][ T6007] veth0_macvtap: entered promiscuous mode [ 49.913954][ T6007] veth1_macvtap: entered promiscuous mode [ 49.916942][ T6007] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.917583][ T6007] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.918058][ T6007] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.918527][ T6007] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.172573][ T1044] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.322472][ T1044] usb 8-1: Using ep0 maxpacket: 8 [ 50.322967][ T1044] usb 8-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 50.324880][ T1044] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 50.324905][ T1044] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.326600][ T1044] usb 8-1: config 0 descriptor?? [ 50.541343][ T1044] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 50.722927][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.746887][ T1044] usb 8-1: USB disconnect, device number 2 [ 50.873722][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 50.874297][ T29] usb 6-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 50.875251][ T29] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 50.877775][ T29] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 50.877794][ T29] usb 6-1: Product: syz [ 50.877807][ T29] usb 6-1: Manufacturer: syz [ 50.877819][ T29] usb 6-1: SerialNumber: syz [ 50.880893][ T29] usb 6-1: config 0 descriptor?? [ 50.881726][ T6038] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 50.888566][ T29] hub 6-1:0.0: bad descriptor, ignoring hub [ 50.888586][ T29] hub 6-1:0.0: probe with driver hub failed with error -5 [ 51.082508][ T5784] Bluetooth: hci2: command tx timeout [ 51.082540][ T5784] Bluetooth: hci0: command tx timeout [ 51.082560][ T5784] Bluetooth: hci1: command tx timeout [ 51.082578][ T5784] Bluetooth: hci3: command tx timeout [ 51.148739][ T6049] trusted_key: device-mapper: crypt: unrecognised message received. [ 51.196411][ T6059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.39'. [ 51.431443][ T6091] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0000 [ 51.431564][ T6091] tipc: Enabled bearer , priority 10 [ 51.436989][ T6093] Cannot find add_set index 0 as target [ 51.465104][ T6098] comedi: No check for data length of config insn id 2037591854 is implemented [ 51.465119][ T6098] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 51.465126][ T6098] comedi: Assuming n=65536 is correct [ 51.610373][ T6115] netlink: 'syz.2.62': attribute type 1 has an invalid length. [ 51.642473][ T857] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.792781][ T857] usb 5-1: Using ep0 maxpacket: 32 [ 51.802100][ T857] usb 5-1: unable to get BOS descriptor or descriptor too short [ 51.802126][ T857] usb 5-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 51.813328][ T857] usb 5-1: string descriptor 0 read error: -22 [ 51.813396][ T857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.818254][ T857] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 51.818276][ T857] dw2102: su3000_power_ctrl: 1, initialized 0 [ 51.818473][ T857] dvb-usb: bulk message failed: -22 (2/0) [ 51.821108][ T857] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 51.821641][ T857] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 51.821669][ T857] usb 5-1: media controller created [ 51.821863][ T857] dvb-usb: bulk message failed: -22 (6/0) [ 51.821871][ T857] dw2102: i2c transfer failed. [ 51.821885][ T857] dvb-usb: bulk message failed: -22 (6/0) [ 51.821892][ T857] dw2102: i2c transfer failed. [ 51.821897][ T857] dvb-usb: bulk message failed: -22 (6/0) [ 51.821904][ T857] dw2102: i2c transfer failed. [ 51.821910][ T857] dvb-usb: bulk message failed: -22 (6/0) [ 51.821916][ T857] dw2102: i2c transfer failed. [ 51.821922][ T857] dvb-usb: bulk message failed: -22 (6/0) [ 51.821928][ T857] dw2102: i2c transfer failed. [ 51.821934][ T857] dvb-usb: bulk message failed: -22 (6/0) [ 51.821940][ T857] dw2102: i2c transfer failed. [ 51.821944][ T857] dvb-usb: MAC address: 02:02:02:02:02:02 [ 51.860493][ T857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 51.873828][ T857] dvb-usb: bulk message failed: -22 (3/0) [ 51.873842][ T857] dw2102: command 0x0e transfer failed. [ 51.873846][ T857] dvb-usb: bulk message failed: -22 (3/0) [ 51.873853][ T857] dw2102: command 0x0e transfer failed. [ 52.029767][ T42] kauditd_printk_skb: 115 callbacks suppressed [ 52.029788][ T42] audit: type=1400 audit(1793843174.454:277): avc: denied { read write } for pid=6144 comm="syz.3.74" name="rdma_cm" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 52.029894][ T42] audit: type=1400 audit(1793843174.454:278): avc: denied { open } for pid=6144 comm="syz.3.74" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 52.074446][ T42] audit: type=1400 audit(1793843174.504:279): avc: denied { relabelfrom } for pid=6148 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 52.074571][ T42] audit: type=1400 audit(1793843174.504:280): avc: denied { relabelto } for pid=6148 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 52.095309][ T42] audit: type=1400 audit(1793843174.514:281): avc: denied { create } for pid=6150 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.095340][ T42] audit: type=1400 audit(1793843174.514:282): avc: denied { setopt } for pid=6150 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.095359][ T42] audit: type=1400 audit(1793843174.524:283): avc: denied { write } for pid=6150 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.095379][ T42] audit: type=1400 audit(1793843174.524:284): avc: denied { read } for pid=6150 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.182711][ T857] dvb-usb: bulk message failed: -22 (3/0) [ 52.182739][ T857] dw2102: command 0x0e transfer failed. [ 52.182744][ T857] dvb-usb: bulk message failed: -22 (3/0) [ 52.182750][ T857] dw2102: command 0x0e transfer failed. [ 52.182754][ T857] dvb-usb: bulk message failed: -22 (1/0) [ 52.182761][ T857] dw2102: command 0x51 transfer failed. [ 52.184614][ T6089] dvb-usb: bulk message failed: -22 (5/0) [ 52.184627][ T6089] dw2102: i2c transfer failed. [ 52.209106][ T6157] FAULT_INJECTION: forcing a failure. [ 52.209106][ T6157] name failslab, interval 1, probability 0, space 0, times 0 [ 52.209127][ T6157] CPU: 1 UID: 0 PID: 6157 Comm: syz.3.83 Not tainted syzkaller #0 PREEMPT(full) [ 52.209143][ T6157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.209150][ T6157] Call Trace: [ 52.209155][ T6157] [ 52.209160][ T6157] dump_stack_lvl+0x100/0x190 [ 52.209183][ T6157] should_fail_ex.cold+0x5/0xa [ 52.209201][ T6157] should_failslab+0xc2/0x120 [ 52.209215][ T6157] kmem_cache_alloc_noprof+0x92/0x6a0 [ 52.209235][ T6157] ? skb_clone+0x187/0x3f0 [ 52.209252][ T6157] skb_clone+0x187/0x3f0 [ 52.209266][ T6157] netlink_broadcast_filtered+0xbab/0xfd0 [ 52.209284][ T6157] ? netlink_has_listeners+0x20f/0x430 [ 52.209300][ T6157] netlink_broadcast+0x39/0x50 [ 52.209314][ T6157] kobject_uevent_env+0xcdd/0x18b0 [ 52.209335][ T6157] ? sysfs_do_create_link_sd+0xbb/0x140 [ 52.209353][ T6157] ? bus_to_subsys+0x114/0x150 [ 52.209373][ T6157] device_add+0x1173/0x1970 [ 52.209390][ T6157] ? __pfx_device_add+0x10/0x10 [ 52.209409][ T6157] ? kobject_get+0xbb/0x150 [ 52.209425][ T6157] cdev_device_add+0x12b/0x270 [ 52.209441][ T6157] nvme_add_ctrl+0x15c/0x320 [ 52.209464][ T6157] nvme_loop_create_ctrl+0x201/0xee0 [ 52.209482][ T6157] nvmf_dev_write+0x4ee/0xb60 [ 52.209504][ T6157] vfs_write+0x2aa/0x1050 [ 52.209517][ T6157] ? __pfx_nvmf_dev_write+0x10/0x10 [ 52.209534][ T6157] ? lock_acquire+0x1d1/0x380 [ 52.209551][ T6157] ? __fget_files+0x34/0x3d0 [ 52.209566][ T6157] ? __pfx_vfs_write+0x10/0x10 [ 52.209578][ T6157] ? find_held_lock+0x2b/0x80 [ 52.209590][ T6157] ? __fget_files+0x215/0x3d0 [ 52.209604][ T6157] ? __fget_files+0x215/0x3d0 [ 52.209620][ T6157] ? __fget_files+0x21f/0x3d0 [ 52.209639][ T6157] ksys_write+0x12a/0x250 [ 52.209650][ T6157] ? __pfx_ksys_write+0x10/0x10 [ 52.209665][ T6157] do_syscall_64+0x123/0x790 [ 52.209679][ T6157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.209691][ T6157] RIP: 0033:0x7f171e99fb19 [ 52.209703][ T6157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.209713][ T6157] RSP: 002b:00007f171cbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.209725][ T6157] RAX: ffffffffffffffda RBX: 00007f171ec25fa0 RCX: 00007f171e99fb19 [ 52.209733][ T6157] RDX: 0000000000000014 RSI: 0000200000000a80 RDI: 0000000000000004 [ 52.209740][ T6157] RBP: 00007f171ea37b70 R08: 0000000000000000 R09: 0000000000000000 [ 52.209747][ T6157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.209754][ T6157] R13: 00007f171ec26038 R14: 00007f171ec25fa0 R15: 00007ffc5cac5dd8 [ 52.209769][ T6157] [ 52.211022][ T857] DVB: Unable to find symbol ds3000_attach() [ 52.211030][ T857] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 52.214729][ T1167] nvmet: connect request for invalid subsystem n! [ 52.219163][ T6157] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n" [ 52.265585][ T857] rc_core: IR keymap rc-su3000 not found [ 52.265599][ T857] Registered IR keymap rc-empty [ 52.267116][ T857] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 52.278727][ T857] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input5 [ 52.285474][ T857] dvb-usb: schedule remote query interval to 150 msecs. [ 52.285488][ T857] dw2102: su3000_power_ctrl: 0, initialized 1 [ 52.285495][ T857] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 52.290283][ T857] usb 5-1: USB disconnect, device number 2 [ 52.324127][ T857] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 52.777158][ T42] audit: type=1400 audit(1793843175.204:285): avc: denied { write } for pid=6166 comm="syz.0.85" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.097089][ T42] audit: type=1400 audit(1793843175.524:286): avc: denied { name_bind } for pid=6182 comm="syz.0.88" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 53.154609][ T68] Bluetooth: hci3: command tx timeout [ 53.154640][ T68] Bluetooth: hci0: command tx timeout [ 53.154669][ T5788] Bluetooth: hci2: command tx timeout [ 53.157085][ T5784] Bluetooth: hci1: command tx timeout [ 53.429117][ T5931] tipc: Node number set to 3133595813 [ 53.599515][ T6198] FAULT_INJECTION: forcing a failure. [ 53.599515][ T6198] name failslab, interval 1, probability 0, space 0, times 0 [ 53.599546][ T6198] CPU: 0 UID: 0 PID: 6198 Comm: syz.2.94 Not tainted syzkaller #0 PREEMPT(full) [ 53.599569][ T6198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.599580][ T6198] Call Trace: [ 53.599592][ T6198] [ 53.599600][ T6198] dump_stack_lvl+0x100/0x190 [ 53.599647][ T6198] should_fail_ex.cold+0x5/0xa [ 53.599674][ T6198] should_failslab+0xc2/0x120 [ 53.599702][ T6198] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 53.599737][ T6198] ? key_alloc+0x423/0x1310 [ 53.599772][ T6198] kmemdup_noprof+0x29/0x60 [ 53.599793][ T6198] key_alloc+0x423/0x1310 [ 53.599827][ T6198] ? __pfx_key_alloc+0x10/0x10 [ 53.599862][ T6198] keyring_alloc+0x44/0xc0 [ 53.599884][ T6198] lookup_user_key+0x828/0x14f0 [ 53.599913][ T6198] ? __pfx_lookup_user_key+0x10/0x10 [ 53.599947][ T6198] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 53.599984][ T6198] ? strncpy_from_user+0x19d/0x2d0 [ 53.600015][ T6198] __do_sys_add_key+0x2a6/0x460 [ 53.600039][ T6198] ? __pfx___do_sys_add_key+0x10/0x10 [ 53.600070][ T6198] do_syscall_64+0x123/0x790 [ 53.600099][ T6198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.600120][ T6198] RIP: 0033:0x7f285119fb19 [ 53.600150][ T6198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.600168][ T6198] RSP: 002b:00007f2852034028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 53.600190][ T6198] RAX: ffffffffffffffda RBX: 00007f2851425fa0 RCX: 00007f285119fb19 [ 53.600203][ T6198] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 53.600215][ T6198] RBP: 00007f2851237b70 R08: fffffffffffffffe R09: 0000000000000000 [ 53.600227][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.600239][ T6198] R13: 00007f2851426038 R14: 00007f2851425fa0 R15: 00007ffe13bc77b8 [ 53.600265][ T6198] [ 53.709887][ T6202] FAULT_INJECTION: forcing a failure. [ 53.709887][ T6202] name failslab, interval 1, probability 0, space 0, times 0 [ 53.709909][ T6202] CPU: 2 UID: 0 PID: 6202 Comm: syz.2.96 Not tainted syzkaller #0 PREEMPT(full) [ 53.709923][ T6202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.709931][ T6202] Call Trace: [ 53.709935][ T6202] [ 53.709940][ T6202] dump_stack_lvl+0x100/0x190 [ 53.709964][ T6202] should_fail_ex.cold+0x5/0xa [ 53.709983][ T6202] should_failslab+0xc2/0x120 [ 53.710005][ T6202] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 53.710027][ T6202] ? fib_notifier_ops_register+0x32/0x270 [ 53.710051][ T6202] ? __pfx_ipmr_net_init+0x10/0x10 [ 53.710062][ T6202] kmemdup_noprof+0x29/0x60 [ 53.710077][ T6202] fib_notifier_ops_register+0x32/0x270 [ 53.710095][ T6202] ? __pfx_ipmr_net_init+0x10/0x10 [ 53.710106][ T6202] ipmr_net_init+0xef/0x5e0 [ 53.710117][ T6202] ? __asan_memcpy+0x3c/0x60 [ 53.710136][ T6202] ? __pfx_ipmr_net_init+0x10/0x10 [ 53.710147][ T6202] ? mptcp_net_init+0x551/0x740 [ 53.710166][ T6202] ? udp_pernet_init+0x686/0x910 [ 53.710187][ T6202] ? __pfx_ipmr_net_init+0x10/0x10 [ 53.710197][ T6202] ops_init+0x1e2/0x5f0 [ 53.710213][ T6202] setup_net+0x118/0x3a0 [ 53.710229][ T6202] ? __pfx_setup_net+0x10/0x10 [ 53.710244][ T6202] ? bpf_lsm_namespace_init+0x9/0x10 [ 53.710260][ T6202] copy_net_ns+0x340/0x7a0 [ 53.710280][ T6202] create_new_namespaces+0x3ea/0xac0 [ 53.710301][ T6202] unshare_nsproxy_namespaces+0xf6/0x210 [ 53.710319][ T6202] ksys_unshare+0x44f/0x980 [ 53.710334][ T6202] ? __pfx_ksys_unshare+0x10/0x10 [ 53.710357][ T6202] __x64_sys_unshare+0x31/0x40 [ 53.710372][ T6202] do_syscall_64+0x123/0x790 [ 53.710385][ T6202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.710398][ T6202] RIP: 0033:0x7f285119fb19 [ 53.710408][ T6202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.710419][ T6202] RSP: 002b:00007f2852034028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 53.710431][ T6202] RAX: ffffffffffffffda RBX: 00007f2851425fa0 RCX: 00007f285119fb19 [ 53.710438][ T6202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 53.710445][ T6202] RBP: 00007f2851237b70 R08: 0000000000000000 R09: 0000000000000000 [ 53.710452][ T6202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.710459][ T6202] R13: 00007f2851426038 R14: 00007f2851425fa0 R15: 00007ffe13bc77b8 [ 53.710482][ T6202] [ 53.736420][ T6204] netlink: 76 bytes leftover after parsing attributes in process `syz.3.97'. [ 54.015495][ T6220] netlink: 44 bytes leftover after parsing attributes in process `syz.3.101'. [ 54.015719][ T6220] Zero length message leads to an empty skb [ 54.078010][ T6222] TC_ACT_REPEAT abuse ? [ 55.046655][ T1044] usb 6-1: USB disconnect, device number 2 [ 55.181012][ T6251] FAULT_INJECTION: forcing a failure. [ 55.181012][ T6251] name failslab, interval 1, probability 0, space 0, times 0 [ 55.181034][ T6251] CPU: 2 UID: 0 PID: 6251 Comm: syz.2.112 Not tainted syzkaller #0 PREEMPT(full) [ 55.181047][ T6251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.181054][ T6251] Call Trace: [ 55.181059][ T6251] [ 55.181063][ T6251] dump_stack_lvl+0x100/0x190 [ 55.181087][ T6251] should_fail_ex.cold+0x5/0xa [ 55.181106][ T6251] should_failslab+0xc2/0x120 [ 55.181120][ T6251] kmem_cache_alloc_noprof+0x92/0x6a0 [ 55.181139][ T6251] ? netlink_deliver_tap+0x103/0xb50 [ 55.181153][ T6251] ? skb_clone+0x187/0x3f0 [ 55.181171][ T6251] skb_clone+0x187/0x3f0 [ 55.181186][ T6251] netlink_deliver_tap+0x82f/0xb50 [ 55.181203][ T6251] netlink_unicast+0x708/0x950 [ 55.181219][ T6251] ? __pfx_netlink_unicast+0x10/0x10 [ 55.181238][ T6251] netlink_sendmsg+0x9ac/0x10c0 [ 55.181256][ T6251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.181276][ T6251] ? selinux_socket_sendmsg+0x198/0x2f0 [ 55.181294][ T6251] ? ____sys_sendmsg+0xa99/0xc30 [ 55.181310][ T6251] ____sys_sendmsg+0xa99/0xc30 [ 55.181326][ T6251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.181342][ T6251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 55.181366][ T6251] ___sys_sendmsg+0x190/0x1e0 [ 55.181384][ T6251] ? __pfx____sys_sendmsg+0x10/0x10 [ 55.181402][ T6251] ? futex_wait+0x11e/0x370 [ 55.181426][ T6251] ? find_held_lock+0x2b/0x80 [ 55.181448][ T6251] __sys_sendmsg+0x160/0x210 [ 55.181462][ T6251] ? __pfx___sys_sendmsg+0x10/0x10 [ 55.181488][ T6251] do_syscall_64+0x123/0x790 [ 55.181508][ T6251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.181527][ T6251] RIP: 0033:0x7f285119fb19 [ 55.181544][ T6251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.181561][ T6251] RSP: 002b:00007f2852034028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.181581][ T6251] RAX: ffffffffffffffda RBX: 00007f2851425fa0 RCX: 00007f285119fb19 [ 55.181594][ T6251] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 55.181606][ T6251] RBP: 00007f2851237b70 R08: 0000000000000000 R09: 0000000000000000 [ 55.181616][ T6251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.181626][ T6251] R13: 00007f2851426038 R14: 00007f2851425fa0 R15: 00007ffe13bc77b8 [ 55.181641][ T6251] [ 55.242552][ T5788] Bluetooth: hci1: command tx timeout [ 55.242583][ T5788] Bluetooth: hci2: command tx timeout [ 55.242601][ T5788] Bluetooth: hci0: command tx timeout [ 55.242644][ T5784] Bluetooth: hci3: command tx timeout [ 55.765541][ T6264] device-mapper: table: 248:4: cache: Error opening cache device (-ENOENT) [ 55.765566][ T6264] device-mapper: ioctl: error adding target to table [ 55.796637][ T6267] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xf0eb instead [ 55.796829][ T6267] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 55.796840][ T6267] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 55.874384][ T6271] FAULT_INJECTION: forcing a failure. [ 55.874384][ T6271] name failslab, interval 1, probability 0, space 0, times 0 [ 55.874407][ T6271] CPU: 1 UID: 0 PID: 6271 Comm: syz.2.121 Not tainted syzkaller #0 PREEMPT(full) [ 55.874422][ T6271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.874429][ T6271] Call Trace: [ 55.874433][ T6271] [ 55.874439][ T6271] dump_stack_lvl+0x100/0x190 [ 55.874463][ T6271] should_fail_ex.cold+0x5/0xa [ 55.874484][ T6271] should_failslab+0xc2/0x120 [ 55.874499][ T6271] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 55.874519][ T6271] ? alloc_vmap_area+0x643/0x2bc0 [ 55.874540][ T6271] alloc_vmap_area+0x643/0x2bc0 [ 55.874563][ T6271] ? kasan_save_track+0x14/0x30 [ 55.874575][ T6271] ? __kasan_kmalloc+0xaa/0xb0 [ 55.874586][ T6271] ? __pfx_alloc_vmap_area+0x10/0x10 [ 55.874605][ T6271] ? lruvec_stat_mod_folio+0x78/0x2e0 [ 55.874619][ T6271] ? __get_vm_area_node+0x124/0x350 [ 55.874634][ T6271] __get_vm_area_node+0x1ed/0x350 [ 55.874649][ T6271] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 55.874665][ T6271] ? n_tty_open+0x1a/0x170 [ 55.874684][ T6271] ? n_tty_open+0x1a/0x170 [ 55.874701][ T6271] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 55.874715][ T6271] ? do_raw_spin_lock+0x128/0x260 [ 55.874727][ T6271] ? find_held_lock+0x2b/0x80 [ 55.874740][ T6271] ? n_tty_open+0x12b/0x170 [ 55.874753][ T6271] ? n_tty_open+0x12b/0x170 [ 55.874767][ T6271] ? n_tty_open+0x1a/0x170 [ 55.874780][ T6271] __vmalloc_node_noprof+0xad/0xf0 [ 55.874793][ T6271] ? n_tty_open+0x1a/0x170 [ 55.874808][ T6271] ? __pfx_n_tty_open+0x10/0x10 [ 55.874822][ T6271] n_tty_open+0x1a/0x170 [ 55.874836][ T6271] tty_ldisc_open+0xa2/0x120 [ 55.874853][ T6271] tty_ldisc_setup+0x87/0xf0 [ 55.874871][ T6271] tty_init_dev.part.0+0x1b5/0x470 [ 55.874891][ T6271] tty_init_dev+0x60/0x80 [ 55.874906][ T6271] ? __pfx_ptmx_open+0x10/0x10 [ 55.874922][ T6271] ptmx_open+0x128/0x360 [ 55.874940][ T6271] ? __pfx_ptmx_open+0x10/0x10 [ 55.874957][ T6271] chrdev_open+0x234/0x6a0 [ 55.874972][ T6271] ? __pfx_chrdev_open+0x10/0x10 [ 55.874988][ T6271] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 55.875011][ T6271] do_dentry_open+0x674/0x1470 [ 55.875024][ T6271] ? __pfx_chrdev_open+0x10/0x10 [ 55.875041][ T6271] vfs_open_consume+0xcc/0x460 [ 55.875060][ T6271] path_openat+0x1547/0x23f0 [ 55.875078][ T6271] ? __pfx_path_openat+0x10/0x10 [ 55.875115][ T6271] do_file_open+0x20e/0x430 [ 55.875131][ T6271] ? __pfx_do_file_open+0x10/0x10 [ 55.875158][ T6271] ? _raw_spin_unlock+0x28/0x50 [ 55.875177][ T6271] ? alloc_fd+0x471/0x7a0 [ 55.875196][ T6271] do_sys_openat2+0x163/0x1d0 [ 55.875212][ T6271] ? __pfx_do_sys_openat2+0x10/0x10 [ 55.875229][ T6271] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 55.875246][ T6271] __x64_sys_openat+0x12d/0x210 [ 55.875263][ T6271] ? __pfx___x64_sys_openat+0x10/0x10 [ 55.875287][ T6271] do_syscall_64+0x123/0x790 [ 55.875301][ T6271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.875314][ T6271] RIP: 0033:0x7f285119fb19 [ 55.875325][ T6271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.875336][ T6271] RSP: 002b:00007f2852034028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 55.875349][ T6271] RAX: ffffffffffffffda RBX: 00007f2851425fa0 RCX: 00007f285119fb19 [ 55.875357][ T6271] RDX: 0000000000000002 RSI: 0000200000019c80 RDI: ffffffffffffff9c [ 55.875364][ T6271] RBP: 00007f2851237b70 R08: 0000000000000000 R09: 0000000000000000 [ 55.875371][ T6271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.875378][ T6271] R13: 00007f2851426038 R14: 00007f2851425fa0 R15: 00007ffe13bc77b8 [ 55.875396][ T6271] [ 55.875512][ T6271] syz.2.121: vmalloc error: size 9112, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 55.875584][ T6271] CPU: 1 UID: 0 PID: 6271 Comm: syz.2.121 Not tainted syzkaller #0 PREEMPT(full) [ 55.875599][ T6271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.875606][ T6271] Call Trace: [ 55.875610][ T6271] [ 55.875615][ T6271] dump_stack_lvl+0x100/0x190 [ 55.875636][ T6271] warn_alloc.cold+0x9e/0xb2 [ 55.875650][ T6271] ? __pfx_warn_alloc+0x10/0x10 [ 55.875667][ T6271] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.875680][ T6271] ? __get_vm_area_node+0x2f0/0x350 [ 55.875695][ T6271] ? __get_vm_area_node+0x22b/0x350 [ 55.875710][ T6271] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 55.875729][ T6271] ? n_tty_open+0x1a/0x170 [ 55.875747][ T6271] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 55.875761][ T6271] ? do_raw_spin_lock+0x128/0x260 [ 55.875774][ T6271] ? find_held_lock+0x2b/0x80 [ 55.875786][ T6271] ? n_tty_open+0x12b/0x170 [ 55.875799][ T6271] ? n_tty_open+0x12b/0x170 [ 55.875813][ T6271] ? n_tty_open+0x1a/0x170 [ 55.875826][ T6271] __vmalloc_node_noprof+0xad/0xf0 [ 55.875838][ T6271] ? n_tty_open+0x1a/0x170 [ 55.875852][ T6271] ? __pfx_n_tty_open+0x10/0x10 [ 55.875866][ T6271] n_tty_open+0x1a/0x170 [ 55.875880][ T6271] tty_ldisc_open+0xa2/0x120 [ 55.875905][ T6271] tty_ldisc_setup+0x87/0xf0 [ 55.875924][ T6271] tty_init_dev.part.0+0x1b5/0x470 [ 55.875939][ T6271] tty_init_dev+0x60/0x80 [ 55.875952][ T6271] ? __pfx_ptmx_open+0x10/0x10 [ 55.875968][ T6271] ptmx_open+0x128/0x360 [ 55.875985][ T6271] ? __pfx_ptmx_open+0x10/0x10 [ 55.876003][ T6271] chrdev_open+0x234/0x6a0 [ 55.876018][ T6271] ? __pfx_chrdev_open+0x10/0x10 [ 55.876034][ T6271] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 55.876057][ T6271] do_dentry_open+0x674/0x1470 [ 55.876069][ T6271] ? __pfx_chrdev_open+0x10/0x10 [ 55.876086][ T6271] vfs_open_consume+0xcc/0x460 [ 55.876103][ T6271] path_openat+0x1547/0x23f0 [ 55.876121][ T6271] ? __pfx_path_openat+0x10/0x10 [ 55.876139][ T6271] do_file_open+0x20e/0x430 [ 55.876155][ T6271] ? __pfx_do_file_open+0x10/0x10 [ 55.876180][ T6271] ? _raw_spin_unlock+0x28/0x50 [ 55.876197][ T6271] ? alloc_fd+0x471/0x7a0 [ 55.876216][ T6271] do_sys_openat2+0x163/0x1d0 [ 55.876232][ T6271] ? __pfx_do_sys_openat2+0x10/0x10 [ 55.876249][ T6271] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 55.876266][ T6271] __x64_sys_openat+0x12d/0x210 [ 55.876283][ T6271] ? __pfx___x64_sys_openat+0x10/0x10 [ 55.876305][ T6271] do_syscall_64+0x123/0x790 [ 55.876319][ T6271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.876331][ T6271] RIP: 0033:0x7f285119fb19 [ 55.876341][ T6271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.876351][ T6271] RSP: 002b:00007f2852034028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 55.876362][ T6271] RAX: ffffffffffffffda RBX: 00007f2851425fa0 RCX: 00007f285119fb19 [ 55.876370][ T6271] RDX: 0000000000000002 RSI: 0000200000019c80 RDI: ffffffffffffff9c [ 55.876377][ T6271] RBP: 00007f2851237b70 R08: 0000000000000000 R09: 0000000000000000 [ 55.876384][ T6271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.876391][ T6271] R13: 00007f2851426038 R14: 00007f2851425fa0 R15: 00007ffe13bc77b8 [ 55.876423][ T6271] [ 55.876498][ T6271] Mem-Info: [ 55.876506][ T6271] active_anon:8243 inactive_anon:0 isolated_anon:0 [ 55.876506][ T6271] active_file:0 inactive_file:61233 isolated_file:0 [ 55.876506][ T6271] unevictable:1000 dirty:1963 writeback:0 [ 55.876506][ T6271] slab_reclaimable:18646 slab_unreclaimable:66192 [ 55.876506][ T6271] mapped:25207 shmem:1561 pagetables:1290 [ 55.876506][ T6271] sec_pagetables:298 bounce:0 [ 55.876506][ T6271] kernel_misc_reclaimable:0 [ 55.876506][ T6271] free:433117 free_pcp:24001 free_cma:0 [ 55.876538][ T6271] Node 0 active_anon:32972kB inactive_anon:0kB active_file:0kB inactive_file:244728kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:100828kB dirty:7844kB writeback:0kB shmem:4244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13664kB pagetables:5008kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 55.876570][ T6271] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 55.876605][ T6271] Node 0 DMA free:15360kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 55.876654][ T6271] lowmem_reserve[]: 0 1201 1201 1201 1201 [ 55.876686][ T6271] Node 0 DMA32 free:80424kB boost:0kB min:27068kB low:33832kB high:40596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:32972kB inactive_anon:0kB active_file:0kB inactive_file:244728kB unevictable:2000kB writepending:7844kB zspages:0kB present:2080628kB managed:1230692kB mlocked:0kB bounce:0kB free_pcp:86196kB local_pcp:31820kB free_cma:0kB [ 55.876765][ T6271] lowmem_reserve[]: 0 0 0 0 0 [ 55.876798][ T6271] Node 1 Normal free:1636684kB boost:0kB min:40168kB low:50208kB high:60248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB writepending:8kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:9804kB local_pcp:4448kB free_cma:0kB [ 55.876850][ T6271] lowmem_reserve[]: 0 0 0 0 0 [ 55.876891][ T6271] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 55.877034][ T6271] Node 0 DMA32: 123*4kB (UM) 34*8kB (ME) 26*16kB (UME) 24*32kB (UME) 26*64kB (UME) 12*128kB (UME) 10*256kB (ME) 10*512kB (M) 12*1024kB (UME) 5*2048kB (ME) 11*4096kB (M) = 80412kB [ 55.877193][ T6271] Node 1 Normal: 10*4kB (U) 9*8kB (UM) 4*16kB (UM) 7*32kB (UM) 9*64kB (UM) 7*128kB (UM) 2*256kB (U) 4*512kB (UM) 0*1024kB 3*2048kB (UM) 397*4096kB (M) = 1636688kB [ 55.877341][ T6271] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 55.877357][ T6271] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 55.877371][ T6271] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 55.877385][ T6271] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 55.877400][ T6271] 62790 total pagecache pages [ 55.877422][ T6271] 0 pages in swap cache [ 55.877430][ T6271] Free swap = 124996kB [ 55.877438][ T6271] Total swap = 124996kB [ 55.877445][ T6271] 1048443 pages RAM [ 55.877451][ T6271] 0 pages HighMem/MovableOnly [ 55.877457][ T6271] 291460 pages reserved [ 55.877464][ T6271] 0 pages cma reserved [ 55.877671][ T6271] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 56.027575][ T5136] hid-generic 0005:15C2:0B90.0002: item fetching failed at offset 0/1 [ 56.028989][ T5136] hid-generic 0005:15C2:0B90.0002: probe with driver hid-generic failed with error -22 [ 56.316895][ T6338] ======================================================= [ 56.316895][ T6338] WARNING: The mand mount option has been deprecated and [ 56.316895][ T6338] and is ignored by this kernel. Remove the mand [ 56.316895][ T6338] option from the mount to silence this warning. [ 56.316895][ T6338] ======================================================= [ 56.317427][ T6338] FAULT_INJECTION: forcing a failure. [ 56.317427][ T6338] name failslab, interval 1, probability 0, space 0, times 0 [ 56.317452][ T6338] CPU: 2 UID: 0 PID: 6338 Comm: syz.0.128 Not tainted syzkaller #0 PREEMPT(full) [ 56.317475][ T6338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.317487][ T6338] Call Trace: [ 56.317493][ T6338] [ 56.317500][ T6338] dump_stack_lvl+0x100/0x190 [ 56.317539][ T6338] should_fail_ex.cold+0x5/0xa [ 56.317570][ T6338] should_failslab+0xc2/0x120 [ 56.317593][ T6338] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 56.317626][ T6338] ? __d_alloc+0x34/0xad0 [ 56.317656][ T6338] __d_alloc+0x34/0xad0 [ 56.317685][ T6338] d_alloc+0x4a/0x1e0 [ 56.317712][ T6338] lookup_one_qstr_excl+0x171/0x250 [ 56.317742][ T6338] start_dirop+0x59/0xb0 [ 56.317764][ T6338] simple_start_creating+0xf9/0x110 [ 56.317788][ T6338] ? __pfx_simple_start_creating+0x10/0x10 [ 56.317813][ T6338] ? _raw_spin_unlock+0x28/0x50 [ 56.317841][ T6338] ? d_instantiate+0x8f/0xb0 [ 56.317880][ T6338] devpts_fill_super+0x36d/0x5e0 [ 56.317909][ T6338] ? __pfx_devpts_fill_super+0x10/0x10 [ 56.317937][ T6338] get_tree_nodev+0xe3/0x190 [ 56.317958][ T6338] vfs_get_tree+0x92/0x320 [ 56.317987][ T6338] path_mount+0x7d0/0x2850 [ 56.318020][ T6338] ? __pfx_path_mount+0x10/0x10 [ 56.318047][ T6338] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.318071][ T6338] ? putname+0xb1/0x110 [ 56.318094][ T6338] ? kmem_cache_free+0x127/0x6c0 [ 56.318130][ T6338] ? __x64_sys_mount+0x293/0x310 [ 56.318156][ T6338] __x64_sys_mount+0x293/0x310 [ 56.318185][ T6338] ? __pfx___x64_sys_mount+0x10/0x10 [ 56.318224][ T6338] do_syscall_64+0x123/0x790 [ 56.318248][ T6338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.318269][ T6338] RIP: 0033:0x7effc5f9fb19 [ 56.318286][ T6338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.318327][ T6338] RSP: 002b:00007effc6d8f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 56.318348][ T6338] RAX: ffffffffffffffda RBX: 00007effc6225fa0 RCX: 00007effc5f9fb19 [ 56.318361][ T6338] RDX: 0000200000000a40 RSI: 0000200000000a00 RDI: 0000000000000000 [ 56.318372][ T6338] RBP: 00007effc6037b70 R08: 0000000000000000 R09: 0000000000000000 [ 56.318384][ T6338] R10: 00000000022008d0 R11: 0000000000000246 R12: 0000000000000000 [ 56.318396][ T6338] R13: 00007effc6226038 R14: 00007effc6225fa0 R15: 00007fffbea305e8 [ 56.318423][ T6338] [ 56.318479][ T6338] devpts: Unable to alloc dentry for ptmx node [ 56.901268][ T6365] bond0: (slave bond_slave_1): Releasing backup interface [ 57.213524][ T5136] rxe_eth0 speed is unknown, defaulting to 1000 [ 57.284263][ T42] kauditd_printk_skb: 71 callbacks suppressed [ 57.284278][ T42] audit: type=1400 audit(1793843179.714:358): avc: denied { search } for pid=6373 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.284308][ T42] audit: type=1400 audit(1793843179.714:359): avc: denied { search } for pid=6373 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1854 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.284330][ T42] audit: type=1400 audit(1793843179.714:360): avc: denied { search } for pid=6373 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.284351][ T42] audit: type=1400 audit(1793843179.714:361): avc: denied { search } for pid=6373 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.290825][ T42] audit: type=1400 audit(1793843179.714:362): avc: denied { read } for pid=6376 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.291046][ T42] audit: type=1400 audit(1793843179.714:363): avc: denied { read open } for pid=6376 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.291220][ T42] audit: type=1400 audit(1793843179.714:364): avc: denied { getattr } for pid=6376 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.291923][ T42] audit: type=1400 audit(1793843179.714:365): avc: denied { name_bind } for pid=6374 comm="syz.1.139" src=24097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 57.369960][ T42] audit: type=1400 audit(1793843179.794:366): avc: denied { write } for pid=6373 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.374890][ T42] audit: type=1400 audit(1793843179.804:367): avc: denied { add_name } for pid=6373 comm="dhcpcd-run-hook" name="resolv.conf.rxe_eth0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.448797][ T6378] FAULT_INJECTION: forcing a failure. [ 57.448797][ T6378] name failslab, interval 1, probability 0, space 0, times 0 [ 57.448824][ T6378] CPU: 0 UID: 0 PID: 6378 Comm: syz.3.140 Not tainted syzkaller #0 PREEMPT(full) [ 57.448844][ T6378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.448853][ T6378] Call Trace: [ 57.448859][ T6378] [ 57.448866][ T6378] dump_stack_lvl+0x100/0x190 [ 57.448899][ T6378] should_fail_ex.cold+0x5/0xa [ 57.448923][ T6378] should_failslab+0xc2/0x120 [ 57.448941][ T6378] __kmalloc_cache_noprof+0x91/0x6d0 [ 57.448963][ T6378] ? sctp_transport_new+0xa4/0x760 [ 57.448985][ T6378] sctp_transport_new+0xa4/0x760 [ 57.449007][ T6378] sctp_assoc_add_peer+0x34b/0x1550 [ 57.449030][ T6378] sctp_connect_new_asoc+0x1f8/0x770 [ 57.449049][ T6378] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 57.449068][ T6378] ? selinux_sctp_bind_connect+0xe0/0x230 [ 57.449090][ T6378] sctp_sendmsg+0x1743/0x22e0 [ 57.449112][ T6378] ? __pfx_sctp_sendmsg+0x10/0x10 [ 57.449128][ T6378] ? __lock_acquire+0x560/0x1f40 [ 57.449150][ T6378] ? __pfx_sock_has_perm+0x10/0x10 [ 57.449178][ T6378] ? import_ubuf+0x1b6/0x220 [ 57.449200][ T6378] ? __pfx_sctp_sendmsg+0x10/0x10 [ 57.449219][ T6378] inet_sendmsg+0x11c/0x140 [ 57.449238][ T6378] ____sys_sendmsg+0xa23/0xc30 [ 57.449259][ T6378] ? __pfx_inet_sendmsg+0x10/0x10 [ 57.449281][ T6378] ? __pfx_____sys_sendmsg+0x10/0x10 [ 57.449321][ T6378] ___sys_sendmsg+0x190/0x1e0 [ 57.449346][ T6378] ? __pfx____sys_sendmsg+0x10/0x10 [ 57.449371][ T6378] ? futex_wait+0x11e/0x370 [ 57.449401][ T6378] ? find_held_lock+0x2b/0x80 [ 57.449431][ T6378] __sys_sendmsg+0x160/0x210 [ 57.449450][ T6378] ? __pfx___sys_sendmsg+0x10/0x10 [ 57.449479][ T6378] do_syscall_64+0x123/0x790 [ 57.449516][ T6378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.449536][ T6378] RIP: 0033:0x7f171e99fb19 [ 57.449550][ T6378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.449565][ T6378] RSP: 002b:00007f171cbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.449582][ T6378] RAX: ffffffffffffffda RBX: 00007f171ec25fa0 RCX: 00007f171e99fb19 [ 57.449592][ T6378] RDX: 0000000000000881 RSI: 00002000000002c0 RDI: 0000000000000003 [ 57.449603][ T6378] RBP: 00007f171ea37b70 R08: 0000000000000000 R09: 0000000000000000 [ 57.449613][ T6378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.449622][ T6378] R13: 00007f171ec26038 R14: 00007f171ec25fa0 R15: 00007ffc5cac5dd8 [ 57.449643][ T6378] [ 57.482152][ T6382] syzkaller0: entered promiscuous mode [ 57.482167][ T6382] syzkaller0: entered allmulticast mode [ 58.116659][ T6399] syz.0.146 (pid 6399) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 58.238147][ T6405] syzkaller0: entered promiscuous mode [ 58.238164][ T6405] syzkaller0: entered allmulticast mode [ 58.294790][ T6407] netlink: 32 bytes leftover after parsing attributes in process `syz.3.150'. [ 58.403934][ T6411] zero sized request [ 58.407527][ T6411] FAULT_INJECTION: forcing a failure. [ 58.407527][ T6411] name failslab, interval 1, probability 0, space 0, times 0 [ 58.407547][ T6411] CPU: 2 UID: 0 PID: 6411 Comm: syz.3.152 Not tainted syzkaller #0 PREEMPT(full) [ 58.407561][ T6411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.407568][ T6411] Call Trace: [ 58.407573][ T6411] [ 58.407578][ T6411] dump_stack_lvl+0x100/0x190 [ 58.407602][ T6411] should_fail_ex.cold+0x5/0xa [ 58.407621][ T6411] should_failslab+0xc2/0x120 [ 58.407636][ T6411] __kmalloc_noprof+0xfc/0x840 [ 58.407654][ T6411] ? __register_sysctl_table+0xbc8/0x1650 [ 58.407667][ T6411] ? __register_sysctl_table+0xbe4/0x1650 [ 58.407682][ T6411] __register_sysctl_table+0xbe4/0x1650 [ 58.407697][ T6411] ? __pfx___register_sysctl_table+0x10/0x10 [ 58.407708][ T6411] ? is_module_address+0x5f/0xf0 [ 58.407723][ T6411] ? is_module_address+0x5f/0xf0 [ 58.407739][ T6411] register_net_sysctl_sz+0x325/0x420 [ 58.407755][ T6411] ? __asan_memcpy+0x3c/0x60 [ 58.407774][ T6411] sysctl_core_net_init+0xe6/0x290 [ 58.407795][ T6411] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 58.407813][ T6411] ops_init+0x1e2/0x5f0 [ 58.407829][ T6411] setup_net+0x118/0x3a0 [ 58.407844][ T6411] ? __pfx_setup_net+0x10/0x10 [ 58.407859][ T6411] ? bpf_lsm_namespace_init+0x9/0x10 [ 58.407875][ T6411] copy_net_ns+0x340/0x7a0 [ 58.407892][ T6411] create_new_namespaces+0x3ea/0xac0 [ 58.407913][ T6411] unshare_nsproxy_namespaces+0xf6/0x210 [ 58.407932][ T6411] ksys_unshare+0x44f/0x980 [ 58.407948][ T6411] ? __pfx_ksys_unshare+0x10/0x10 [ 58.407970][ T6411] __x64_sys_unshare+0x31/0x40 [ 58.407985][ T6411] do_syscall_64+0x123/0x790 [ 58.408014][ T6411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.408026][ T6411] RIP: 0033:0x7f171e99fb19 [ 58.408038][ T6411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.408050][ T6411] RSP: 002b:00007f171cbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 58.408063][ T6411] RAX: ffffffffffffffda RBX: 00007f171ec25fa0 RCX: 00007f171e99fb19 [ 58.408071][ T6411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 58.408078][ T6411] RBP: 00007f171ea37b70 R08: 0000000000000000 R09: 0000000000000000 [ 58.408085][ T6411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.408093][ T6411] R13: 00007f171ec26038 R14: 00007f171ec25fa0 R15: 00007ffc5cac5dd8 [ 58.408110][ T6411] [ 58.408115][ T6411] sysctl could not get directory: /net/core -12 [ 58.563137][ T5929] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 58.673676][ T6419] null_blk: disk nullb1 created [ 58.727125][ T5929] usb 6-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 58.732782][ T5929] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.732809][ T5929] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 58.732827][ T5929] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.734730][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 58.734749][ T5929] usb 6-1: Product: syz [ 58.734761][ T5929] usb 6-1: Manufacturer: syz [ 58.734771][ T5929] usb 6-1: SerialNumber: syz [ 58.737351][ T5929] usb 6-1: config 0 descriptor?? [ 58.755924][ T5929] usb 6-1: selecting invalid altsetting 0 [ 58.946321][ T5929] usb 6-1: USB disconnect, device number 3 [ 60.740222][ T6455] FAULT_INJECTION: forcing a failure. [ 60.740222][ T6455] name failslab, interval 1, probability 0, space 0, times 0 [ 60.740253][ T6455] CPU: 0 UID: 0 PID: 6455 Comm: syz.2.168 Not tainted syzkaller #0 PREEMPT(full) [ 60.740277][ T6455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.740294][ T6455] Call Trace: [ 60.740302][ T6455] [ 60.740310][ T6455] dump_stack_lvl+0x100/0x190 [ 60.740350][ T6455] should_fail_ex.cold+0x5/0xa [ 60.740380][ T6455] should_failslab+0xc2/0x120 [ 60.740402][ T6455] __kmalloc_cache_noprof+0x91/0x6d0 [ 60.740429][ T6455] ? snd_seq_pool_new+0x44/0x230 [ 60.740453][ T6455] ? __pfx_snd_seq_open+0x10/0x10 [ 60.740484][ T6455] snd_seq_pool_new+0x44/0x230 [ 60.740507][ T6455] snd_seq_fifo_new+0x5a/0x270 [ 60.740529][ T6455] snd_seq_open+0x144/0x530 [ 60.740558][ T6455] ? __pfx_snd_seq_open+0x10/0x10 [ 60.740581][ T6455] snd_open+0x201/0x450 [ 60.740610][ T6455] ? __pfx_snd_open+0x10/0x10 [ 60.740635][ T6455] chrdev_open+0x234/0x6a0 [ 60.740659][ T6455] ? __pfx_chrdev_open+0x10/0x10 [ 60.740708][ T6455] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 60.740746][ T6455] do_dentry_open+0x674/0x1470 [ 60.740765][ T6455] ? __pfx_chrdev_open+0x10/0x10 [ 60.740792][ T6455] vfs_open_consume+0xcc/0x460 [ 60.740823][ T6455] path_openat+0x1547/0x23f0 [ 60.740852][ T6455] ? __pfx_path_openat+0x10/0x10 [ 60.740883][ T6455] do_file_open+0x20e/0x430 [ 60.740910][ T6455] ? __pfx_do_file_open+0x10/0x10 [ 60.740954][ T6455] ? _raw_spin_unlock+0x28/0x50 [ 60.740983][ T6455] ? alloc_fd+0x471/0x7a0 [ 60.741016][ T6455] do_sys_openat2+0x163/0x1d0 [ 60.741043][ T6455] ? __pfx_do_sys_openat2+0x10/0x10 [ 60.741081][ T6455] __x64_sys_openat+0x12d/0x210 [ 60.741110][ T6455] ? __pfx___x64_sys_openat+0x10/0x10 [ 60.741150][ T6455] do_syscall_64+0x123/0x790 [ 60.741174][ T6455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.741196][ T6455] RIP: 0033:0x7f285119fb19 [ 60.741214][ T6455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.741232][ T6455] RSP: 002b:00007f2852034028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 60.741253][ T6455] RAX: ffffffffffffffda RBX: 00007f2851425fa0 RCX: 00007f285119fb19 [ 60.741265][ T6455] RDX: 0000000000000000 RSI: 0000200000000f40 RDI: ffffffffffffff9c [ 60.741278][ T6455] RBP: 00007f2851237b70 R08: 0000000000000000 R09: 0000000000000000 [ 60.741296][ T6455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.741307][ T6455] R13: 00007f2851426038 R14: 00007f2851425fa0 R15: 00007ffe13bc77b8 [ 60.741335][ T6455] [ 60.895739][ T6460] syzkaller0: entered promiscuous mode [ 60.895761][ T6460] syzkaller0: entered allmulticast mode [ 61.081094][ T6463] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.062053][ T6433] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 62.211045][ T6469] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xf0eb instead [ 62.211105][ T6469] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 62.211110][ T6469] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 62.408648][ T6488] comedi comedi4: commands at RT priority not supported in this driver [ 62.442341][ T42] kauditd_printk_skb: 75 callbacks suppressed [ 62.442360][ T42] audit: type=1400 audit(1793843184.864:443): avc: denied { create } for pid=6490 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.446471][ T6492] device-mapper: raid: Choosing default region size of 8589934592 sectors [ 62.447245][ T42] audit: type=1400 audit(1793843184.874:444): avc: denied { write } for pid=6490 comm="syz.3.184" path="socket:[12079]" dev="sockfs" ino=12079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.449235][ T6491] ieee802154 phy0 wpan0: encryption failed: -22 [ 62.462919][ T80] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 62.503094][ T42] audit: type=1400 audit(1793843184.934:445): avc: denied { ioctl } for pid=6493 comm="syz.3.186" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0xc0304d18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 62.543322][ T42] audit: type=1400 audit(1793843184.974:446): avc: denied { map } for pid=6495 comm="syz.3.187" path="/dev/video36" dev="devtmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 62.543475][ T42] audit: type=1400 audit(1793843184.974:447): avc: denied { execute } for pid=6495 comm="syz.3.187" path="/dev/video36" dev="devtmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 62.612524][ T80] usb 7-1: Using ep0 maxpacket: 8 [ 62.613407][ T80] usb 7-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 62.614383][ T80] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 62.614404][ T80] usb 7-1: config 0 has no interface number 0 [ 62.614436][ T80] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 62.614468][ T80] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.617273][ T80] usb 7-1: config 0 descriptor?? [ 62.628776][ T80] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 62.685926][ T6492] device-mapper: table: 248:2: raid: Not enough devices to satisfy specification (-EINVAL) [ 62.685956][ T6492] device-mapper: ioctl: error adding target to table [ 62.740310][ T42] audit: type=1400 audit(1793843185.164:448): avc: denied { setopt } for pid=6505 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.838910][ T80] usb 7-1: USB disconnect, device number 2 [ 62.843596][ T6516] netlink: 'syz.1.197': attribute type 1 has an invalid length. [ 62.843610][ T6516] netlink: 228 bytes leftover after parsing attributes in process `syz.1.197'. [ 62.918184][ T42] audit: type=1400 audit(1793843185.344:449): avc: denied { append } for pid=6529 comm="syz.0.203" name="001" dev="devtmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 62.950275][ T5784] Bluetooth: Unexpected continuation frame (len 4) [ 62.970806][ T42] audit: type=1400 audit(1793843185.394:450): avc: denied { read write } for pid=6535 comm="syz.1.208" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.970961][ T42] audit: type=1400 audit(1793843185.394:451): avc: denied { open } for pid=6535 comm="syz.1.208" path="/dev/uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.974122][ T42] audit: type=1400 audit(1793843185.404:452): avc: denied { ioctl } for pid=6535 comm="syz.1.208" path="/dev/uinput" dev="devtmpfs" ino=941 ioctlcmd=0x406855c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 63.263522][ T6567] netlink: 'syz.3.222': attribute type 1 has an invalid length. [ 63.263543][ T6567] netlink: 244 bytes leftover after parsing attributes in process `syz.3.222'. [ 63.444067][ T6581] device-mapper: table: 248:0: flakey: Device lookup failed (-ENOENT) [ 63.444092][ T6581] device-mapper: ioctl: error adding target to table [ 63.580444][ T6595] qrtr: Invalid version 0 [ 63.668860][ T6605] comedi comedi1: dt2811-pgh: a I/O base address must be specified [ 63.739077][ T6617] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 63.813801][ T6626] dlm: no local IP address has been set [ 63.813814][ T6626] dlm: cannot start dlm midcomms -107 [ 63.896599][ T6634] warning: `syz.0.255' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 64.015476][ T6615] syz.2.246 (6615): drop_caches: 2 [ 64.194058][ T6662] nvme_fabrics: missing parameter 'transport=%s' [ 64.194075][ T6662] nvme_fabrics: missing parameter 'nqn=%s' [ 64.200118][ T6667] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xf0eb instead [ 64.200211][ T6667] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 64.200219][ T6667] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 64.419288][ T6688] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 64.419401][ T6688] block device autoloading is deprecated and will be removed. [ 64.547442][ T6702] ip_tables: iptables: counters copy to user failed while replacing table [ 64.786469][ T6728] ip_tables: iptables: counters copy to user failed while replacing table [ 64.816896][ T6732] Bluetooth: MGMT ver 1.23 [ 64.933636][ T6743] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 64.933654][ T6743] device-mapper: raid: Choosing default region size of 4MiB [ 64.955286][ T6746] device-mapper: table: 248:6: raid: max_write_behind option is only valid for RAID1 (-EINVAL) [ 64.955304][ T6746] device-mapper: ioctl: error adding target to table [ 64.993628][ T6751] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 64.993643][ T6751] device-mapper: raid: Choosing default region size of 4MiB [ 64.993880][ T6751] device-mapper: raid: Device 0 specified for rebuild; clearing superblock [ 65.010652][ T6743] md/raid1:mdX: active with 1 out of 2 mirrors [ 65.080455][ T6751] md/raid1:mdX: active with 1 out of 2 mirrors [ 65.080626][ T6751] mdX: invalid bitmap file superblock: bad magic [ 65.080730][ T6751] md: mdX: invalid bitmap magic 0x0 [ 65.080754][ T6751] mdX: failed to create bitmap (-22) [ 65.087651][ T6751] device-mapper: table: 248:7: raid: Failed to run raid array (-EINVAL) [ 65.087672][ T6751] device-mapper: ioctl: error adding target to table [ 65.129958][ T6771] bond0: (slave bond_slave_0): Releasing backup interface [ 65.138187][ T6772] xt_hashlimit: size too large, truncated to 1048576 [ 65.334268][ T6797] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xf0eb instead [ 65.334337][ T6797] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 65.334343][ T6797] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 65.583974][ T6829] mac80211_hwsim hwsim9 ..c: renamed from wlan1 (while UP) [ 65.607911][ T6832] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 65.705126][ T6841] netlink: 'syz.1.348': attribute type 2 has an invalid length. [ 65.705151][ T6841] netlink: 'syz.1.348': attribute type 2 has an invalid length. [ 65.830596][ T6854] xt_hashlimit: size too large, truncated to 1048576 [ 65.962546][ T6864] netlink: 'syz.1.359': attribute type 21 has an invalid length. [ 65.962571][ T6864] netlink: 128 bytes leftover after parsing attributes in process `syz.1.359'. [ 65.962639][ T6864] netlink: 'syz.1.359': attribute type 4 has an invalid length. [ 65.962653][ T6864] netlink: 'syz.1.359': attribute type 5 has an invalid length. [ 65.962664][ T6864] netlink: 3 bytes leftover after parsing attributes in process `syz.1.359'. [ 65.975468][ T6867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.354'. [ 66.031888][ T6872] netlink: 40 bytes leftover after parsing attributes in process `syz.0.362'. [ 66.178709][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 66.284796][ T5929] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 66.452482][ T5929] usb 6-1: Using ep0 maxpacket: 8 [ 66.455230][ T5929] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 66.456196][ T5929] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 66.456234][ T5929] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 66.456255][ T5929] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 66.456274][ T5929] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 66.456300][ T5929] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.456332][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.674813][ T5929] usb 6-1: usb_control_msg returned -32 [ 66.674853][ T5929] usbtmc 6-1:16.0: can't read capabilities [ 66.833531][ T5141] Bluetooth: hci0: command 0x0c13 tx timeout [ 66.833690][ T5784] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 67.312454][ T5875] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 67.334253][ C2] vcan0: j1939_tp_rxtimer: 0xffff888035494000: rx timeout, send abort [ 67.335933][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888035494000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 67.472667][ T5875] usb 8-1: Using ep0 maxpacket: 32 [ 67.473237][ T5875] usb 8-1: New USB device found: idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 67.474185][ T5875] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 67.474199][ T5875] usb 8-1: config 0 has no interface number 0 [ 67.474222][ T5875] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 67.474234][ T5875] usb 8-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 67.474247][ T5875] usb 8-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 67.474261][ T5875] usb 8-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 67.474278][ T5875] usb 8-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 67.476997][ T5875] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.477016][ T5875] usb 8-1: Product: syz [ 67.477028][ T5875] usb 8-1: Manufacturer: syz [ 67.477040][ T5875] usb 8-1: SerialNumber: syz [ 67.478682][ T5875] usb 8-1: config 0 descriptor?? [ 67.479441][ T6909] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 67.483907][ T5875] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.119/input/input7 [ 67.487019][ T42] kauditd_printk_skb: 73 callbacks suppressed [ 67.487034][ T42] audit: type=1400 audit(1793843189.914:526): avc: denied { read } for pid=5177 comm="acpid" name="mouse2" dev="devtmpfs" ino=2905 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.488522][ T42] audit: type=1400 audit(1793843189.914:527): avc: denied { open } for pid=5177 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2905 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.491206][ T42] audit: type=1400 audit(1793843189.914:528): avc: denied { ioctl } for pid=5177 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2905 ioctlcmd=0x80604520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.692840][ T5931] usb 8-1: USB disconnect, device number 3 [ 68.295019][ T42] audit: type=1400 audit(1793843190.724:529): avc: denied { unmount } for pid=5781 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 68.326520][ T42] audit: type=1400 audit(1793843190.754:530): avc: denied { read } for pid=6919 comm="syz.2.383" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.326817][ T42] audit: type=1400 audit(1793843190.754:531): avc: denied { open } for pid=6919 comm="syz.2.383" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.328396][ T42] audit: type=1400 audit(1793843190.754:532): avc: denied { ioctl } for pid=6919 comm="syz.2.383" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x6804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.372247][ T6922] FAULT_INJECTION: forcing a failure. [ 68.372247][ T6922] name failslab, interval 1, probability 0, space 0, times 0 [ 68.372277][ T6922] CPU: 1 UID: 0 PID: 6922 Comm: syz.2.384 Not tainted syzkaller #0 PREEMPT(full) [ 68.372299][ T6922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.372311][ T6922] Call Trace: [ 68.372318][ T6922] [ 68.372326][ T6922] dump_stack_lvl+0x100/0x190 [ 68.372396][ T6922] should_fail_ex.cold+0x5/0xa [ 68.372432][ T6922] should_failslab+0xc2/0x120 [ 68.372456][ T6922] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 68.372489][ T6922] ? proc_alloc_inode+0x25/0x200 [ 68.372521][ T6922] ? __pfx_proc_alloc_inode+0x10/0x10 [ 68.372550][ T6922] proc_alloc_inode+0x25/0x200 [ 68.372579][ T6922] alloc_inode+0x68/0x250 [ 68.372597][ T6922] new_inode+0x22/0x1c0 [ 68.372617][ T6922] proc_setup_self+0x5e/0x1e0 [ 68.372674][ T6922] proc_fill_super+0x5cb/0x880 [ 68.372697][ T6922] ? __pfx_proc_fill_super+0x10/0x10 [ 68.372719][ T6922] get_tree_nodev+0xe3/0x190 [ 68.372742][ T6922] vfs_get_tree+0x92/0x320 [ 68.372782][ T6922] path_mount+0x7d0/0x2850 [ 68.372818][ T6922] ? __pfx_path_mount+0x10/0x10 [ 68.372846][ T6922] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.372869][ T6922] ? putname+0xb1/0x110 [ 68.372893][ T6922] ? kmem_cache_free+0x127/0x6c0 [ 68.372929][ T6922] ? __x64_sys_mount+0x293/0x310 [ 68.372955][ T6922] __x64_sys_mount+0x293/0x310 [ 68.372985][ T6922] ? __pfx___x64_sys_mount+0x10/0x10 [ 68.373021][ T6922] do_syscall_64+0x123/0x790 [ 68.373045][ T6922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.373067][ T6922] RIP: 0033:0x7f285119fb19 [ 68.373084][ T6922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.373103][ T6922] RSP: 002b:00007f2852034028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.373124][ T6922] RAX: ffffffffffffffda RBX: 00007f2851425fa0 RCX: 00007f285119fb19 [ 68.373138][ T6922] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 68.373151][ T6922] RBP: 00007f2851237b70 R08: 0000000000000000 R09: 0000000000000000 [ 68.373165][ T6922] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 68.373178][ T6922] R13: 00007f2851426038 R14: 00007f2851425fa0 R15: 00007ffe13bc77b8 [ 68.373207][ T6922] [ 68.378214][ T6922] proc_fill_super: can't allocate /proc/self [ 68.441127][ T42] audit: type=1400 audit(1793843190.864:533): avc: denied { create } for pid=6923 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.444572][ T42] audit: type=1400 audit(1793843190.874:534): avc: denied { connect } for pid=6923 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.509477][ T42] audit: type=1400 audit(1793843190.934:535): avc: denied { mounton } for pid=6925 comm="syz.2.386" path="/100/file0/file0" dev="9p" ino=71827673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.552588][ T5875] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 68.702601][ T5875] usb 8-1: Using ep0 maxpacket: 32 [ 68.703436][ T5875] usb 8-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 68.704989][ T5875] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.707287][ T5875] usb 8-1: config 0 descriptor?? [ 68.715769][ T5875] as10x_usb: device has been detected [ 68.716407][ T5875] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 68.723281][ T5875] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 68.744574][ T5875] as10x_usb: error during firmware upload part1 [ 68.745057][ T5875] Registered device nBox DVB-T Dongle [ 68.784779][ T6928] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xf0eb instead [ 68.784843][ T6928] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 68.784849][ T6928] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 68.914149][ T857] usb 8-1: USB disconnect, device number 4 [ 68.924235][ T857] Unregistered device nBox DVB-T Dongle [ 68.925148][ T857] as10x_usb: device has been disconnected [ 69.069811][ T5929] usb 6-1: USB disconnect, device number 4 [ 69.076968][ T6933] ip_tables: iptables: counters copy to user failed while replacing table [ 69.423702][ T5929] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 69.454281][ T6950] process 'syz.3.393' launched './file0' with NULL argv: empty string added [ 69.474086][ T5784] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 69.546143][ T6954] 0x000000000000-0x000000010000 : "" [ 69.556321][ T6954] ftl_cs: FTL header not found. [ 69.563924][ T6954] FAULT_INJECTION: forcing a failure. [ 69.563924][ T6954] name failslab, interval 1, probability 0, space 0, times 0 [ 69.563950][ T6954] CPU: 3 UID: 0 PID: 6954 Comm: syz.0.395 Not tainted syzkaller #0 PREEMPT(full) [ 69.563974][ T6954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.563987][ T6954] Call Trace: [ 69.563994][ T6954] [ 69.564001][ T6954] dump_stack_lvl+0x100/0x190 [ 69.564040][ T6954] should_fail_ex.cold+0x5/0xa [ 69.564068][ T6954] should_failslab+0xc2/0x120 [ 69.564091][ T6954] kmem_cache_alloc_noprof+0x92/0x6a0 [ 69.564122][ T6954] ? __kernfs_new_node+0xd2/0xa10 [ 69.564146][ T6954] __kernfs_new_node+0xd2/0xa10 [ 69.564169][ T6954] ? __pfx___kernfs_new_node+0x10/0x10 [ 69.564190][ T6954] ? lock_acquire+0x1d1/0x380 [ 69.564216][ T6954] ? kernfs_root+0x23/0x2a0 [ 69.564244][ T6954] ? find_held_lock+0x2b/0x80 [ 69.564264][ T6954] ? kernfs_root+0xee/0x2a0 [ 69.564287][ T6954] ? kernfs_root+0xee/0x2a0 [ 69.564321][ T6954] kernfs_new_node+0x194/0x200 [ 69.564343][ T6954] ? __pfx_kernfs_new_node+0x10/0x10 [ 69.564363][ T6954] ? kernfs_add_one+0x213/0xb40 [ 69.564388][ T6954] __kernfs_create_file+0x53/0x350 [ 69.564413][ T6954] sysfs_add_file_mode_ns+0x207/0x3c0 [ 69.564447][ T6954] internal_create_group+0x593/0xfb0 [ 69.564482][ T6954] ? kernfs_create_dir_ns+0x16d/0x2b0 [ 69.564502][ T6954] ? __pfx_internal_create_group+0x10/0x10 [ 69.564529][ T6954] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 69.564557][ T6954] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 69.564590][ T6954] internal_create_groups+0x9d/0x150 [ 69.564621][ T6954] kobject_add_internal+0x317/0x930 [ 69.564683][ T6954] kobject_add+0x16a/0x1e0 [ 69.564711][ T6954] ? __pfx_kobject_add+0x10/0x10 [ 69.564746][ T6954] ? lock_acquire+0x1d1/0x380 [ 69.564771][ T6954] ? queue_hctx+0x26/0x2a0 [ 69.564811][ T6954] blk_mq_register_hctx+0x124/0x460 [ 69.564848][ T6954] blk_mq_sysfs_register+0x1cc/0x480 [ 69.564884][ T6954] blk_register_queue+0xda/0x640 [ 69.564919][ T6954] __add_disk+0x7dd/0xf10 [ 69.564950][ T6954] add_disk_fwnode+0x118/0x480 [ 69.564978][ T6954] add_mtd_blktrans_dev+0xd0b/0x1520 [ 69.565008][ T6954] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 69.565049][ T6954] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 69.565076][ T6954] ? mtdblock_add_mtd+0x4a/0x270 [ 69.565102][ T6954] mtdblock_add_mtd+0x1cc/0x270 [ 69.565128][ T6954] blktrans_notify_add+0xa2/0xf0 [ 69.565151][ T6954] add_mtd_device+0xb6d/0x1820 [ 69.565186][ T6954] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 69.565206][ T6954] ? __pfx_add_mtd_device+0x10/0x10 [ 69.565242][ T6954] mtd_add_partition+0x376/0x6a0 [ 69.565265][ T6954] ? __pfx_mtd_add_partition+0x10/0x10 [ 69.565284][ T6954] ? __might_fault+0xc5/0x140 [ 69.565305][ T6954] ? __might_fault+0xc5/0x140 [ 69.565335][ T6954] mtdchar_blkpg_ioctl+0x207/0x250 [ 69.565357][ T6954] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 69.565403][ T6954] mtdchar_ioctl+0x1670/0x1fd0 [ 69.565429][ T6954] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 69.565450][ T6954] ? lock_acquire+0x1d1/0x380 [ 69.565475][ T6954] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 69.565503][ T6954] ? rcu_is_watching+0x13/0xc0 [ 69.565525][ T6954] ? trace_contention_end+0x126/0x160 [ 69.565554][ T6954] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 69.565577][ T6954] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 69.565595][ T6954] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 69.565631][ T6954] ? __pfx___mutex_lock+0x10/0x10 [ 69.565654][ T6954] ? __fget_files+0x34/0x3d0 [ 69.565692][ T6954] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 69.565713][ T6954] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 69.565737][ T6954] __x64_sys_ioctl+0x18e/0x210 [ 69.565759][ T6954] do_syscall_64+0x123/0x790 [ 69.565780][ T6954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.565806][ T6954] RIP: 0033:0x7effc5f9fb19 [ 69.565825][ T6954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.565846][ T6954] RSP: 002b:00007effc6d8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.565868][ T6954] RAX: ffffffffffffffda RBX: 00007effc6225fa0 RCX: 00007effc5f9fb19 [ 69.565881][ T6954] RDX: 00002000000002c0 RSI: 0000000000001269 RDI: 0000000000000004 [ 69.565894][ T6954] RBP: 00007effc6037b70 R08: 0000000000000000 R09: 0000000000000000 [ 69.565906][ T6954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.565918][ T6954] R13: 00007effc6226038 R14: 00007effc6225fa0 R15: 00007fffbea305e8 [ 69.565946][ T6954] [ 69.566709][ T6954] kobject: kobject_add_internal failed for 0 (error: -12 parent: mq) [ 69.592484][ T5929] usb 6-1: Using ep0 maxpacket: 16 [ 69.593279][ T5929] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 69.594370][ T5929] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1967, setting to 1024 [ 69.594396][ T5929] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 69.594417][ T5929] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 69.594927][ T5929] usb 6-1: language id specifier not provided by device, defaulting to English [ 69.596369][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.596390][ T5929] usb 6-1: Manufacturer: 䋦ೠ四姁⺗軣톃싉怺蘞컧빧顶ⷕﶶ鈾鶤䑫 [ 69.596405][ T5929] usb 6-1: SerialNumber: 鮡콬友蓸啢쭙秠瞢咖괳፾嚏⣟뗢䝯㼋➵ཨꞤ狀蠗 [ 69.806558][ T6959] kvm: pic: non byte write [ 70.606877][ T6983] syz.2.405 uses obsolete (PF_INET,SOCK_PACKET) [ 70.616791][ T6983] TC_ACT_REPEAT abuse ? [ 71.318023][ T1450] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.318153][ T1450] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.469987][ T6998] input: syz0 as /devices/virtual/input/input8 [ 71.491932][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'. [ 72.114043][ T5929] cdc_ncm 6-1:1.0: bind() failure [ 72.119579][ T5929] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 72.119617][ T5929] cdc_ncm 6-1:1.1: bind() failure [ 72.130738][ T5929] usb 6-1: USB disconnect, device number 5 [ 72.151554][ T7019] syzkaller0: entered promiscuous mode [ 72.151571][ T7019] syzkaller0: entered allmulticast mode [ 72.155452][ T7019] tipc: Started in network mode [ 72.155468][ T7019] tipc: Node identity e21de61eac66, cluster identity 4711 [ 72.155780][ T7019] tipc: Enabled bearer , priority 0 [ 72.156765][ T7021] syzkaller0: entered promiscuous mode [ 72.156778][ T7021] syzkaller0: entered allmulticast mode [ 72.163814][ T7019] tipc: Resetting bearer [ 72.180876][ T1173] tipc: Resetting bearer [ 72.219812][ T1173] tipc: Disabling bearer [ 72.294880][ T7025] 0: reclassify loop, rule prio 0, protocol 03 [ 72.345755][ T7027] syzkaller0: entered promiscuous mode [ 72.345778][ T7027] syzkaller0: entered allmulticast mode [ 72.600034][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 72.600056][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 72.655466][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 72.655481][ T42] audit: type=1400 audit(1793843195.084:560): avc: denied { view } for pid=7037 comm="syz.1.427" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 72.674707][ T7040] xt_hashlimit: size too large, truncated to 1048576 [ 72.714207][ T42] audit: type=1400 audit(1793843195.144:561): avc: denied { read write } for pid=7037 comm="syz.1.427" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.714497][ T42] audit: type=1400 audit(1793843195.144:562): avc: denied { open } for pid=7037 comm="syz.1.427" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.742278][ T7044] syzkaller0: entered promiscuous mode [ 72.742295][ T7044] syzkaller0: entered allmulticast mode [ 72.746585][ T7045] ip_tables: iptables: counters copy to user failed while replacing table [ 72.816042][ T7046] tipc: Enabled bearer , priority 0 [ 72.880379][ T42] audit: type=1400 audit(1793843195.304:563): avc: denied { create } for pid=7050 comm="syz.3.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 72.958449][ T7058] tipc: Started in network mode [ 72.958468][ T7058] tipc: Node identity e63afc4793f9, cluster identity 4711 [ 72.958593][ T7058] tipc: Enabled bearer , priority 0 [ 72.959128][ T7058] syzkaller0: entered promiscuous mode [ 72.959139][ T7058] syzkaller0: entered allmulticast mode [ 72.974850][ T7058] tipc: Resetting bearer [ 72.977300][ T7057] tipc: Resetting bearer [ 72.987161][ T7057] tipc: Disabling bearer [ 73.105839][ T42] audit: type=1400 audit(1793843195.534:564): avc: denied { write } for pid=7059 comm="syz.3.434" name="raw6" dev="proc" ino=4026533032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 73.250248][ T42] audit: type=1400 audit(1793843195.674:565): avc: denied { mounton } for pid=7067 comm="syz.3.437" path="/135/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 73.272129][ T42] audit: type=1800 audit(1793843195.694:566): pid=7068 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.437" name=08 dev="sda1" ino=2038 res=0 errno=-22 [ 73.570124][ T7042] tipc: Resetting bearer [ 73.583577][ T7042] tipc: Disabling bearer [ 73.720490][ T7073] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.876066][ T7073] md: could not open device unknown-block(1,4). [ 73.934588][ T7079] md: could not open device unknown-block(1,5). [ 74.040919][ T6331] IPVS: starting estimator thread 0... [ 74.103493][ T7093] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 74.134194][ T7089] IPVS: using max 43 ests per chain, 103200 per kthread [ 74.169951][ T42] audit: type=1800 audit(1793843196.594:567): pid=7095 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.447" name=08 dev="sda1" ino=2038 res=0 errno=-22 [ 74.186603][ T42] audit: type=1400 audit(1793843196.614:568): avc: denied { create } for pid=7096 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 74.268080][ T42] audit: type=1800 audit(1793843196.694:569): pid=7099 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.448" name=08 dev="sda1" ino=2038 res=0 errno=-22 [ 74.663180][ T7132] nci: nci_start_poll: failed to set local general bytes [ 74.723282][ T7136] syz_tun: entered allmulticast mode [ 74.755395][ T7136] syz_tun (unregistering): left allmulticast mode [ 74.861820][ T7140] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 75.016003][ T7140] md: could not open device unknown-block(1,0). [ 75.035076][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.462'. [ 75.073963][ T7140] md: could not open device unknown-block(1,1). [ 75.075275][ T7140] md: md0 stopped. [ 75.213166][ T7157] syzkaller0: entered promiscuous mode [ 75.213183][ T7157] syzkaller0: entered allmulticast mode [ 75.660364][ C0] ================================================================== [ 75.660380][ C0] BUG: KASAN: slab-use-after-free in xfrm_input+0x5ae2/0x7750 [ 75.660422][ C0] Read of size 8 at addr ffff888055b24108 by task syz.0.472/7171 [ 75.660437][ C0] [ 75.660446][ C0] CPU: 0 UID: 0 PID: 7171 Comm: syz.0.472 Not tainted syzkaller #0 PREEMPT(full) [ 75.660467][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.660477][ C0] Call Trace: [ 75.660489][ C0] [ 75.660497][ C0] dump_stack_lvl+0x100/0x190 [ 75.660525][ C0] print_report+0x13d/0x4b0 [ 75.660552][ C0] ? __virt_addr_valid+0x239/0x430 [ 75.660575][ C0] ? xfrm_input+0x5ae2/0x7750 [ 75.660593][ C0] kasan_report+0xdf/0x1c0 [ 75.660646][ C0] ? xfrm_input+0x5ae2/0x7750 [ 75.660668][ C0] xfrm_input+0x5ae2/0x7750 [ 75.660687][ C0] ? kmalloc_reserve+0xf9/0x350 [ 75.660716][ C0] ? __asan_memcpy+0x3c/0x60 [ 75.660740][ C0] ? __pfx_xfrm_input+0x10/0x10 [ 75.660761][ C0] ? __pfx_skb_copy_seq_read+0x10/0x10 [ 75.660783][ C0] __input_process_payload.isra.0+0x147b/0x2290 [ 75.660818][ C0] ? __pfx___input_process_payload.isra.0+0x10/0x10 [ 75.660851][ C0] ? __asan_memcpy+0x3c/0x60 [ 75.660875][ C0] ? skb_copy_seq_read+0xeb/0x150 [ 75.660898][ C0] iptfs_input_ordered+0x692/0x870 [ 75.660920][ C0] ? __pfx_iptfs_input_ordered+0x10/0x10 [ 75.660941][ C0] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 75.660964][ C0] ? lock_acquire+0x1d1/0x380 [ 75.660990][ C0] ? iptfs_drop_timer+0x3a0/0x710 [ 75.661030][ C0] iptfs_drop_timer+0x4c7/0x710 [ 75.661053][ C0] ? __pfx_iptfs_drop_timer+0x10/0x10 [ 75.661074][ C0] ? mark_held_locks+0x40/0x70 [ 75.661096][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 75.661131][ C0] ? __pfx_iptfs_drop_timer+0x10/0x10 [ 75.661152][ C0] __hrtimer_run_queues+0x448/0x9a0 [ 75.661178][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 75.661201][ C0] handle_softirqs+0x216/0xa20 [ 75.661223][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 75.661243][ C0] ? _raw_spin_unlock+0x28/0x50 [ 75.661268][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 75.661292][ C0] __irq_exit_rcu+0x178/0x220 [ 75.661312][ C0] irq_exit_rcu+0x9/0x30 [ 75.661330][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 75.661360][ C0] [ 75.661366][ C0] [ 75.661373][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 75.661393][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 75.661418][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 bb e1 85 f5 cc [ 75.661435][ C0] RSP: 0018:ffffc900052a6e88 EFLAGS: 00000246 [ 75.661452][ C0] RAX: 0000000000080000 RBX: ffff888061f6d2a8 RCX: ffffc90006561000 [ 75.661464][ C0] RDX: 0000000000080000 RSI: ffffffff81f9226a RDI: 0000000000000001 [ 75.661476][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 75.661486][ C0] R10: ffffffff926a9d5f R11: 0000000000000000 R12: 0000000000000000 [ 75.661498][ C0] R13: ffffffff8d8225c0 R14: ffffffff9d10a300 R15: ffffffff8b228bd0 [ 75.661510][ C0] ? __pfx_sctp_generate_probe_event+0x10/0x10 [ 75.661536][ C0] ? timer_init_key+0x26a/0x310 [ 75.661563][ C0] timer_init_key+0x26a/0x310 [ 75.661590][ C0] sctp_transport_new+0x54b/0x760 [ 75.661611][ C0] sctp_assoc_add_peer+0x34b/0x1550 [ 75.661632][ C0] sctp_process_init+0x2738/0x2e50 [ 75.661660][ C0] ? __pfx_sctp_process_init+0x10/0x10 [ 75.661689][ C0] ? kmem_cache_free+0x127/0x6c0 [ 75.661712][ C0] ? sctp_chunk_put+0x20a/0x2d0 [ 75.661733][ C0] ? sctp_inq_pop+0x69a/0x1140 [ 75.661750][ C0] ? sctp_assoc_bh_rcv+0x117/0x740 [ 75.661765][ C0] ? sctp_inq_push+0x25c/0x320 [ 75.661784][ C0] sctp_do_sm+0x3ca8/0x5c30 [ 75.661813][ C0] ? __pfx_sctp_do_sm+0x10/0x10 [ 75.661848][ C0] ? ktime_get+0x22c/0x320 [ 75.661873][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 75.661893][ C0] sctp_assoc_bh_rcv+0x392/0x740 [ 75.661914][ C0] sctp_inq_push+0x25c/0x320 [ 75.661933][ C0] sctp_backlog_rcv+0x169/0x590 [ 75.661957][ C0] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 75.661979][ C0] __release_sock+0x39d/0x440 [ 75.661999][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 75.662018][ C0] release_sock+0x1e5/0x280 [ 75.662038][ C0] sctp_wait_for_connect+0x1ff/0x750 [ 75.662066][ C0] ? __pfx_sctp_wait_for_connect+0x10/0x10 [ 75.662091][ C0] ? skb_set_owner_w+0x386/0x780 [ 75.662109][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 75.662131][ C0] ? sctp_datamsg_put+0x62/0x5f0 [ 75.662153][ C0] ? sctp_primitive_SEND+0x9f/0xd0 [ 75.662175][ C0] sctp_sendmsg_to_asoc+0x17fd/0x1b60 [ 75.662206][ C0] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 75.662231][ C0] ? sctp_connect_new_asoc+0x41e/0x770 [ 75.662252][ C0] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 75.662272][ C0] ? selinux_sctp_bind_connect+0xe0/0x230 [ 75.662292][ C0] sctp_sendmsg+0x1144/0x22e0 [ 75.662313][ C0] ? __pfx_sctp_sendmsg+0x10/0x10 [ 75.662332][ C0] ? __lock_acquire+0x560/0x1f40 [ 75.662356][ C0] ? __pfx_sock_has_perm+0x10/0x10 [ 75.662384][ C0] ? import_ubuf+0x1b6/0x220 [ 75.662407][ C0] ? __pfx_sctp_sendmsg+0x10/0x10 [ 75.662428][ C0] inet_sendmsg+0x11c/0x140 [ 75.662451][ C0] ____sys_sendmsg+0xa23/0xc30 [ 75.662474][ C0] ? __pfx_inet_sendmsg+0x10/0x10 [ 75.662514][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.662539][ C0] ? futex_unqueue+0x133/0x2c0 [ 75.662572][ C0] ___sys_sendmsg+0x190/0x1e0 [ 75.662598][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.662623][ C0] ? __pfx___futex_wait+0x10/0x10 [ 75.662646][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 75.662671][ C0] ? futex_hash+0x311/0x400 [ 75.662692][ C0] ? __fget_files+0x34/0x3d0 [ 75.662723][ C0] __sys_sendmmsg+0x20c/0x440 [ 75.662745][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 75.662765][ C0] ? lock_acquire+0x1d1/0x380 [ 75.662797][ C0] ? __pfx_do_futex+0x10/0x10 [ 75.662822][ C0] ? xfd_validate_state+0x129/0x190 [ 75.662848][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 75.662868][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 75.662885][ C0] do_syscall_64+0x123/0x790 [ 75.662905][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.662923][ C0] RIP: 0033:0x7effc5f9fb19 [ 75.662950][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.662967][ C0] RSP: 002b:00007effc6d8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 75.662985][ C0] RAX: ffffffffffffffda RBX: 00007effc6225fa0 RCX: 00007effc5f9fb19 [ 75.662997][ C0] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004 [ 75.663009][ C0] RBP: 00007effc6037b70 R08: 0000000000000000 R09: 0000000000000000 [ 75.663020][ C0] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000000 [ 75.663032][ C0] R13: 00007effc6226038 R14: 00007effc6225fa0 R15: 00007fffbea305e8 [ 75.663049][ C0] [ 75.663056][ C0] [ 75.663060][ C0] Allocated by task 5769: [ 75.663069][ C0] kasan_save_stack+0x30/0x50 [ 75.663084][ C0] kasan_save_track+0x14/0x30 [ 75.663099][ C0] __kasan_slab_alloc+0x89/0x90 [ 75.663115][ C0] kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 75.663138][ C0] kmalloc_reserve+0x148/0x350 [ 75.663160][ C0] __alloc_skb+0x185/0x710 [ 75.663175][ C0] __pskb_copy_fclone+0xfa/0xf40 [ 75.663194][ C0] nf_dup_ipv4+0x1a2/0x8b0 [ 75.663217][ C0] tee_tg4+0x10c/0x170 [ 75.663235][ C0] ipt_do_table+0xc41/0x1b10 [ 75.663252][ C0] nf_hook_slow+0xbf/0x220 [ 75.663270][ C0] __ip_local_out+0x541/0xb80 [ 75.663285][ C0] ip_local_out+0x2a/0x1f0 [ 75.663300][ C0] __ip_queue_xmit+0x876/0x1f50 [ 75.663316][ C0] __tcp_transmit_skb+0x34d9/0x4f00 [ 75.663338][ C0] __tcp_send_ack.part.0+0x4e4/0x940 [ 75.663360][ C0] tcp_send_ack+0x84/0xa0 [ 75.663382][ C0] __tcp_ack_snd_check+0x210/0xa10 [ 75.663406][ C0] tcp_rcv_established+0xcf1/0x3900 [ 75.663425][ C0] tcp_v4_do_rcv+0xbc8/0x1270 [ 75.663444][ C0] tcp_v4_rcv+0x2eb0/0x4810 [ 75.663462][ C0] ip_protocol_deliver_rcu+0xba/0x4d0 [ 75.663486][ C0] ip_local_deliver_finish+0x3fb/0x6e0 [ 75.663509][ C0] ip_local_deliver+0x1a3/0x200 [ 75.663532][ C0] ip_rcv+0x33a/0x3c0 [ 75.663553][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 75.663570][ C0] __netif_receive_skb+0x1f/0x120 [ 75.663585][ C0] process_backlog+0x487/0x1600 [ 75.663601][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 75.663618][ C0] net_rx_action+0xa40/0xf20 [ 75.663633][ C0] handle_softirqs+0x216/0xa20 [ 75.663651][ C0] do_softirq+0xaf/0xf0 [ 75.663668][ C0] __local_bh_enable_ip+0xff/0x120 [ 75.663687][ C0] __dev_queue_xmit+0xa43/0x48d0 [ 75.663702][ C0] ip_finish_output2+0xfa4/0x2740 [ 75.663718][ C0] __ip_finish_output.part.0+0x43b/0x6f0 [ 75.663735][ C0] ip_output+0x392/0xc00 [ 75.663749][ C0] ip_local_out+0x193/0x1f0 [ 75.663764][ C0] __ip_queue_xmit+0x876/0x1f50 [ 75.663780][ C0] __tcp_transmit_skb+0x34d9/0x4f00 [ 75.663806][ C0] tcp_write_xmit+0x1133/0x84a0 [ 75.663829][ C0] tcp_sendmsg_locked+0x396a/0x46b0 [ 75.663850][ C0] tcp_sendmsg+0x2e/0x50 [ 75.663869][ C0] inet_sendmsg+0xb9/0x140 [ 75.663888][ C0] sock_write_iter+0x4fd/0x5d0 [ 75.663909][ C0] vfs_write+0x6af/0x1050 [ 75.663923][ C0] ksys_write+0x1f8/0x250 [ 75.663938][ C0] do_syscall_64+0x123/0x790 [ 75.663953][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.663969][ C0] [ 75.663973][ C0] Freed by task 5769: [ 75.663980][ C0] kasan_save_stack+0x30/0x50 [ 75.663996][ C0] kasan_save_track+0x14/0x30 [ 75.664011][ C0] kasan_save_free_info+0x3b/0x70 [ 75.664033][ C0] __kasan_slab_free+0x5f/0x80 [ 75.664050][ C0] kfree+0x22b/0x6d0 [ 75.664068][ C0] skb_free_head+0xb9/0x160 [ 75.664083][ C0] skb_release_data+0x698/0x860 [ 75.664101][ C0] __kfree_skb+0x4f/0x70 [ 75.664119][ C0] tcp_data_queue+0x1964/0x4fa0 [ 75.664138][ C0] tcp_rcv_established+0xb96/0x3900 [ 75.664158][ C0] tcp_v4_do_rcv+0xbc8/0x1270 [ 75.664176][ C0] __release_sock+0x355/0x440 [ 75.664193][ C0] release_sock+0x1e5/0x280 [ 75.664209][ C0] tcp_sendmsg+0x38/0x50 [ 75.664228][ C0] inet_sendmsg+0xb9/0x140 [ 75.664246][ C0] sock_write_iter+0x4fd/0x5d0 [ 75.664267][ C0] vfs_write+0x6af/0x1050 [ 75.664281][ C0] ksys_write+0x1f8/0x250 [ 75.664296][ C0] do_syscall_64+0x123/0x790 [ 75.664312][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.664328][ C0] [ 75.664332][ C0] The buggy address belongs to the object at ffff888055b24000 [ 75.664332][ C0] which belongs to the cache skbuff_small_head of size 704 [ 75.664347][ C0] The buggy address is located 264 bytes inside of [ 75.664347][ C0] freed 704-byte region [ffff888055b24000, ffff888055b242c0) [ 75.664365][ C0] [ 75.664369][ C0] The buggy address belongs to the physical page: [ 75.664377][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55b24 [ 75.664394][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 75.664409][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 75.664425][ C0] page_type: f5(slab) [ 75.664441][ C0] raw: 00fff00000000040 ffff888100a82280 dead000000000100 dead000000000122 [ 75.664457][ C0] raw: 0000000000000000 0000000200130013 00000000f5000000 0000000000000000 [ 75.664474][ C0] head: 00fff00000000040 ffff888100a82280 dead000000000100 dead000000000122 [ 75.664502][ C0] head: 0000000000000000 0000000200130013 00000000f5000000 0000000000000000 [ 75.664518][ C0] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 75.664533][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 75.664544][ C0] page dumped because: kasan: bad access detected [ 75.664552][ C0] page_owner tracks the page as allocated [ 75.664558][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xf2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_MEMALLOC|__GFP_COMP|__GFP_NOMEMALLOC), pid 5192, tgid 5192 (udevd), ts 75284032832 [ 75.664588][ C0] post_alloc_hook+0xfd/0x120 [ 75.664634][ C0] get_page_from_freelist+0x1113/0x35e0 [ 75.664656][ C0] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 75.664678][ C0] new_slab+0xb1/0x6d0 [ 75.664698][ C0] refill_objects+0xe3/0x410 [ 75.664718][ C0] __pcs_replace_empty_main+0x35e/0x650 [ 75.664738][ C0] kmem_cache_alloc_node_noprof+0x4ed/0x6e0 [ 75.664763][ C0] kmalloc_reserve+0x148/0x350 [ 75.664784][ C0] __alloc_skb+0x185/0x710 [ 75.664805][ C0] __netdev_alloc_skb+0x7a/0x980 [ 75.664823][ C0] __ieee80211_beacon_get+0xba9/0x1f00 [ 75.664840][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 75.664857][ C0] mac80211_hwsim_beacon_tx+0x4c8/0xa00 [ 75.664875][ C0] __iterate_interfaces+0x2e6/0x650 [ 75.664899][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 75.664926][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 75.664948][ C0] page last free pid 7136 tgid 7135 ts 74943132413 stack trace: [ 75.664960][ C0] __free_frozen_pages+0x7b4/0x1110 [ 75.664978][ C0] device_release+0xd2/0x270 [ 75.665002][ C0] kobject_put+0x1f7/0x640 [ 75.665023][ C0] netdev_run_todo+0xa36/0x1620 [ 75.665044][ C0] rtnl_dellink+0x47e/0xb30 [ 75.665064][ C0] rtnetlink_rcv_msg+0x95e/0xe90 [ 75.665085][ C0] netlink_rcv_skb+0x159/0x420 [ 75.665106][ C0] netlink_unicast+0x668/0x950 [ 75.665125][ C0] netlink_sendmsg+0x9ac/0x10c0 [ 75.665144][ C0] ____sys_sendmsg+0xa99/0xc30 [ 75.665166][ C0] ___sys_sendmsg+0x190/0x1e0 [ 75.665188][ C0] __sys_sendmsg+0x160/0x210 [ 75.665205][ C0] do_syscall_64+0x123/0x790 [ 75.665222][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.665239][ C0] [ 75.665243][ C0] Memory state around the buggy address: [ 75.665251][ C0] ffff888055b24000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.665264][ C0] ffff888055b24080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.665276][ C0] >ffff888055b24100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.665285][ C0] ^ [ 75.665293][ C0] ffff888055b24180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.665305][ C0] ffff888055b24200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.665314][ C0] ================================================================== [ 75.665406][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 76.256780][ C0] CPU: 0 UID: 0 PID: 7171 Comm: syz.0.472 Not tainted syzkaller #0 PREEMPT(full) [ 76.260651][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.264922][ C0] Call Trace: [ 76.266348][ C0] [ 76.267533][ C0] dump_stack_lvl+0x100/0x190 [ 76.269535][ C0] vpanic+0x2dc/0x6f8 [ 76.271194][ C0] panic+0xd1/0xe0 [ 76.272826][ C0] ? __pfx_panic+0x10/0x10 [ 76.274693][ C0] check_panic_on_warn.cold+0x19/0x34 [ 76.276972][ C0] end_report.part.0+0x3a/0x90 [ 76.279012][ C0] kasan_report.cold+0xe/0x18 [ 76.281032][ C0] ? xfrm_input+0x5ae2/0x7750 [ 76.283025][ C0] xfrm_input+0x5ae2/0x7750 [ 76.284968][ C0] ? kmalloc_reserve+0xf9/0x350 [ 76.287003][ C0] ? __asan_memcpy+0x3c/0x60 [ 76.288983][ C0] ? __pfx_xfrm_input+0x10/0x10 [ 76.291051][ C0] ? __pfx_skb_copy_seq_read+0x10/0x10 [ 76.293334][ C0] __input_process_payload.isra.0+0x147b/0x2290 [ 76.295948][ C0] ? __pfx___input_process_payload.isra.0+0x10/0x10 [ 76.298622][ C0] ? __asan_memcpy+0x3c/0x60 [ 76.300592][ C0] ? skb_copy_seq_read+0xeb/0x150 [ 76.302714][ C0] iptfs_input_ordered+0x692/0x870 [ 76.304962][ C0] ? __pfx_iptfs_input_ordered+0x10/0x10 [ 76.307298][ C0] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 76.310069][ C0] ? lock_acquire+0x1d1/0x380 [ 76.312037][ C0] ? iptfs_drop_timer+0x3a0/0x710 [ 76.314096][ C0] iptfs_drop_timer+0x4c7/0x710 [ 76.316043][ C0] ? __pfx_iptfs_drop_timer+0x10/0x10 [ 76.318190][ C0] ? mark_held_locks+0x40/0x70 [ 76.320050][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 76.322371][ C0] ? __pfx_iptfs_drop_timer+0x10/0x10 [ 76.324654][ C0] __hrtimer_run_queues+0x448/0x9a0 [ 76.326809][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 76.328975][ C0] handle_softirqs+0x216/0xa20 [ 76.330967][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 76.333223][ C0] ? _raw_spin_unlock+0x28/0x50 [ 76.335306][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 76.337639][ C0] __irq_exit_rcu+0x178/0x220 [ 76.339594][ C0] irq_exit_rcu+0x9/0x30 [ 76.341439][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 76.343810][ C0] [ 76.345084][ C0] [ 76.346349][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 76.348832][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 76.351063][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 bb e1 85 f5 cc [ 76.358659][ C0] RSP: 0018:ffffc900052a6e88 EFLAGS: 00000246 [ 76.361113][ C0] RAX: 0000000000080000 RBX: ffff888061f6d2a8 RCX: ffffc90006561000 [ 76.364289][ C0] RDX: 0000000000080000 RSI: ffffffff81f9226a RDI: 0000000000000001 [ 76.367416][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 76.370530][ C0] R10: ffffffff926a9d5f R11: 0000000000000000 R12: 0000000000000000 [ 76.373662][ C0] R13: ffffffff8d8225c0 R14: ffffffff9d10a300 R15: ffffffff8b228bd0 [ 76.376732][ C0] ? __pfx_sctp_generate_probe_event+0x10/0x10 [ 76.379251][ C0] ? timer_init_key+0x26a/0x310 [ 76.381217][ C0] timer_init_key+0x26a/0x310 [ 76.383134][ C0] sctp_transport_new+0x54b/0x760 [ 76.385152][ C0] sctp_assoc_add_peer+0x34b/0x1550 [ 76.387275][ C0] sctp_process_init+0x2738/0x2e50 [ 76.389365][ C0] ? __pfx_sctp_process_init+0x10/0x10 [ 76.391606][ C0] ? kmem_cache_free+0x127/0x6c0 [ 76.393647][ C0] ? sctp_chunk_put+0x20a/0x2d0 [ 76.395595][ C0] ? sctp_inq_pop+0x69a/0x1140 [ 76.397578][ C0] ? sctp_assoc_bh_rcv+0x117/0x740 [ 76.399630][ C0] ? sctp_inq_push+0x25c/0x320 [ 76.401570][ C0] sctp_do_sm+0x3ca8/0x5c30 [ 76.403461][ C0] ? __pfx_sctp_do_sm+0x10/0x10 [ 76.405437][ C0] ? ktime_get+0x22c/0x320 [ 76.407289][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 76.409451][ C0] sctp_assoc_bh_rcv+0x392/0x740 [ 76.411470][ C0] sctp_inq_push+0x25c/0x320 [ 76.413405][ C0] sctp_backlog_rcv+0x169/0x590 [ 76.415354][ C0] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 76.417519][ C0] __release_sock+0x39d/0x440 [ 76.419439][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 76.421570][ C0] release_sock+0x1e5/0x280 [ 76.423432][ C0] sctp_wait_for_connect+0x1ff/0x750 [ 76.425560][ C0] ? __pfx_sctp_wait_for_connect+0x10/0x10 [ 76.427944][ C0] ? skb_set_owner_w+0x386/0x780 [ 76.429994][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 76.432445][ C0] ? sctp_datamsg_put+0x62/0x5f0 [ 76.434461][ C0] ? sctp_primitive_SEND+0x9f/0xd0 [ 76.436413][ C0] sctp_sendmsg_to_asoc+0x17fd/0x1b60 [ 76.438434][ C0] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 76.440875][ C0] ? sctp_connect_new_asoc+0x41e/0x770 [ 76.443087][ C0] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 76.445432][ C0] ? selinux_sctp_bind_connect+0xe0/0x230 [ 76.447789][ C0] sctp_sendmsg+0x1144/0x22e0 [ 76.449782][ C0] ? __pfx_sctp_sendmsg+0x10/0x10 [ 76.451717][ C0] ? __lock_acquire+0x560/0x1f40 [ 76.453767][ C0] ? __pfx_sock_has_perm+0x10/0x10 [ 76.455881][ C0] ? import_ubuf+0x1b6/0x220 [ 76.457755][ C0] ? __pfx_sctp_sendmsg+0x10/0x10 [ 76.459844][ C0] inet_sendmsg+0x11c/0x140 [ 76.461772][ C0] ____sys_sendmsg+0xa23/0xc30 [ 76.463852][ C0] ? __pfx_inet_sendmsg+0x10/0x10 [ 76.466028][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 76.468272][ C0] ? futex_unqueue+0x133/0x2c0 [ 76.470343][ C0] ___sys_sendmsg+0x190/0x1e0 [ 76.472353][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 76.474447][ C0] ? __pfx___futex_wait+0x10/0x10 [ 76.476378][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 76.478462][ C0] ? futex_hash+0x311/0x400 [ 76.480346][ C0] ? __fget_files+0x34/0x3d0 [ 76.482158][ C0] __sys_sendmmsg+0x20c/0x440 [ 76.484087][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 76.486277][ C0] ? lock_acquire+0x1d1/0x380 [ 76.488316][ C0] ? __pfx_do_futex+0x10/0x10 [ 76.490365][ C0] ? xfd_validate_state+0x129/0x190 [ 76.492620][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 76.494803][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 76.497052][ C0] do_syscall_64+0x123/0x790 [ 76.499004][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.501571][ C0] RIP: 0033:0x7effc5f9fb19 [ 76.503505][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.511590][ C0] RSP: 002b:00007effc6d8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 76.515145][ C0] RAX: ffffffffffffffda RBX: 00007effc6225fa0 RCX: 00007effc5f9fb19 [ 76.518499][ C0] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004 [ 76.521874][ C0] RBP: 00007effc6037b70 R08: 0000000000000000 R09: 0000000000000000 [ 76.525155][ C0] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000000 [ 76.528453][ C0] R13: 00007effc6226038 R14: 00007effc6225fa0 R15: 00007fffbea305e8 [ 76.531841][ C0] [ 76.533849][ C0] Kernel Offset: disabled [ 76.535215][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:46:38 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c2bbf5 RDI=ffffffff9cf4c040 RBP=ffffffff9cf4c000 RSP=ffffc90000006fc8 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=0000000000000008 R15=ffffc900000072e0 RIP=ffffffff85c2bc1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007effc6d8f6c0 ffffffff 00c00000 GS =0000 ffff8880d447c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c27644d CR3=0000000023bbe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 337a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5cac62c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5cac62c6 00007ffc5cac62cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f171ea381ad ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f171ea381e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f171ea3834b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f171ea381d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=dffffc0000000000 RCX=0000000000000101 RDX=ffff88802ac10000 RSI=ffffffff89bb3314 RDI=ffffffff89bb2ae7 RBP=0000000000000001 RSP=ffffc900006a0ca8 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000200 R11=0000000000000001 R12=ffffffff9cc7b980 R13=ffff88806a13e3f8 R14=ffff888027e44280 R15=ffffffff89bb2ae7 RIP=ffffffff81f1e815 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6a87949300 ffffffff 00c00000 GS =0000 ffff8880d457c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007effc41f6d58 CR3=0000000037ad8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001e0 0000001800000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e01ffffffffffff ffffe30804800304 0000004700000001 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffe9080380030fff ffffffffff040010 005880045480040f ffffffffffff040a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0146dc007366706d 7476656401ffffff ffffffffffed0858 8003007665642f2e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01ffffffffffffff 00010fffffffffff ff0402d084080001 000000080606011b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ba00040020840800 04800401c7080008 0048a200306d6d6f 6366722f7665642f ZMM24=9565e7659565e765 9565e7659565e765 9565e7659565e765 9565e7659565e765 9565e7659565e765 9565e7659565e765 9565e7659565e765 9565e7659565e765 ZMM25=3f1728743f172874 3f1728743f172874 3f1728743f172874 3f1728743f172874 3f1728743f172874 3f1728743f172874 3f1728743f172874 3f1728743f172874 ZMM26=09c7467409c74674 09c7467409c74674 09c7467409c74674 09c7467409c74674 09c7467409c74674 09c7467409c74674 09c7467409c74674 09c7467409c74674 ZMM27=6c2fe4f66c2fe4f6 6c2fe4f66c2fe4f6 6c2fe4f66c2fe4f6 6c2fe4f66c2fe4f6 6c2fe4f66c2fe4f6 6c2fe4f66c2fe4f6 6c2fe4f66c2fe4f6 6c2fe4f66c2fe4f6 ZMM28=000001800000017f 0000017e0000017d 0000017c0000017b 0000017a00000179 0000017800000177 0000017600000175 0000017400000173 0000017200000171 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4d0700004d070000 4d0700004d070000 4d0700004d070000 4d0700004d070000 4d0700004d070000 4d0700004d070000 4d0700004d070000 4d0700004d070000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffffffff8ffeaf60 RCX=ffffffff93c97801 RDX=0000000000000000 RSI=ffffffff81bb5d7e RDI=ffffffff8ffeaf60 RBP=ffffffff81bb5d7e RSP=ffffc90003aa7458 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=00000000000aeda1 R12=ffffc90003aa7578 R13=ffffc90003aa7528 R14=ffffc90003aa7f48 R15=ffffc90003aa755c RIP=ffffffff81f1e81e RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6cfb597c80 ffffffff 00c00000 GS =0000 ffff8880d467c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007effc61f4458 CR3=0000000037484000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000000000010 Opmask03=0000000000000000 Opmask04=00000000fffffff7 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffecc51fd3b 00007ffecc51fd3b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffecc520240 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffecc520240 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f64726f6365725f 676e696361727420 3f20205d30432020 20205b5d31343930 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 32322d3d6f6e7272 6520303d73657220 383330323d6f6e69 202231616473223d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7665642038303d65 6d616e2022383434 2e312e7a7973223d 6d6d6f6320296f69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7463657269642864 656c6961663d6573 7561632061746164 5f7463656c6c6f63 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d706f20745f6d64 617379733a725f6d 64617379733a746f 6f723d6a62757320 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 203530373d6f6e69 20227366706d7476 6564223d76656420 2230626c6c756e2f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000719 RBX=ffff8880329e0c00 RCX=0000000000000000 RDX=0000000000000000 RSI=ffff8880329e0bd8 RDI=ffff8880391f2180 RBP=0000000000000719 RSP=ffffc90003ae79e0 R8 =0000000000000001 R9 =0000000000080000 R10=0000000000000002 R11=0000000000000001 R12=ffff8880329e0000 R13=0000000000000000 R14=0000000000000000 R15=ffff8880391f2180 RIP=ffffffff81e93221 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f4a8034e880 ffffffff 00c00000 GS =0000 ffff8880d477c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007effc6d5da08 CR3=0000000029b11000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000001004 Opmask01=0000000000000000 Opmask02=00000000effffdff Opmask03=0000000022080800 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e639f289c0 000055e639f289c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e639f199f0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e639f19fd0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4a7fdf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffff0000000000ff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffff0000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326954a877ca3 73730c390cac5163 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737359c2 7373737373734212 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6961660064657373 65636f727020756c 6c2520716573006e 6f69746974726170 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30302c443230302c 4332300031302d30 3030303030003931 3d5145534b534944 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d0d11440f0d0d11 430f0d000c0d100d 0d0d0d0d0d00040c 005145534b534944 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61742f3074736f68 2f316174612f322e 66313a30303a3030 30302f30303a3030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000001 000055e639cd22c0 0000000000000211 0030757063003161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000