last executing test programs: 3.116480378s ago: executing program 2 (id=420): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x0, 0x80) read$FUSE(r0, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x4, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="667d0f38c573ababc76fb4360fc9bb25cc00007666f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x32}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r6, 0x0) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.967026662s ago: executing program 2 (id=424): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1404022, &(0x7f0000000180)=ANY=[@ANYBLOB="66f5"]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'caif0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x2, 0xa8182) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sched_getscheduler(r3) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @private0, [0xff, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff000000], 'wlan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x2c, 0xc7, 0x6, 0x61}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x8, 0xe, 0x2}}, @common=@srh1={{0x90}, {0x3a, 0x2, 0xf, 0x0, 0x9, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xffffff00], 0x13a8, 0x4000}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x4, 0x6}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005", 0xb}], 0x1}, 0x4005) (async) socket(0x15, 0x5, 0x0) (async) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async) recvfrom$inet6(r2, 0x0, 0x0, 0x100, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r2], 0xb0}, 0x1, 0x0, 0x0, 0x20004015}, 0x20000814) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000000)) (async) sched_getscheduler(r3) (async) 1.026590616s ago: executing program 0 (id=447): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x26, &(0x7f0000000040)={@local, @random, @val={@void, {0x8100, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2}, @rand_addr=0x64010101}}}}}, 0x0) 1.026273414s ago: executing program 3 (id=448): mount$9p_fd(0x0, 0x0, 0x0, 0x1200810, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4001000010000100feffffbf00010000fe8000000000000000000000000000aaff010000000000000000000000000001000100044e230000000000003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000000000000000000000000000090000000000000009000000000000000600000000000000ffff0000000000001025080000000000040004000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700000000000020000fd20000000000000004800030064bceb572ff04e2c9f920b3692c3b89bd965666c617465000000000000000006cabc2200"/248], 0x140}, 0x1, 0x0, 0x0, 0xc801}, 0x10) syslog(0x4, &(0x7f0000000ac0)=""/50, 0x32) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e24, 0x5, @remote, 0x9}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff17, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0xfffffffe}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3d}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x63}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x43}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x48040) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r4, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x43}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x20000044) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='offline', 0x7) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x38, 0x0, &(0x7f0000000140)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x84, 0x244082) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r10, 0x40045542, &(0x7f0000000b00)) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x17, 0x20, 0x70bd26, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040810) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000640)={0x0, 0x0}, 0x10) 1.026131071s ago: executing program 0 (id=449): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000280), 0x1a402, 0x0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x200, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0xfe80000000000000}}]}, 0x30}}, 0x0) readv(r0, &(0x7f0000001400)=[{&(0x7f0000002700)=""/4106, 0x100a}], 0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_ENCODED_WRITE(r1, 0x40809440, &(0x7f0000000300)={&(0x7f0000000240)=[{&(0x7f0000000180)="19d8e99bb4419ab9ef99b42f7cd2b538812b96d3131d13aa288314f236d70e45410ccc9d09c74f03a5b0e2bd4a9f4b178b2e55aed6b38c5f591c147e18fb2c79cabf8c351ad4d7f3cc232e63c0ac1178c1167b15b536ab3282055e1a5cb839c4b2799f4be36549885371087d", 0x6c}, {&(0x7f0000000200)="2e13d4db70649b458c692df436acc87255965dd5a1b8e3b5dff417e52df616398cad0a33e1311e18bceb90e819126cfc8159793d0c7ccb2d89b9", 0x3a}], 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x7, 0x6, 0x6, 0x6}) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 967.083355ms ago: executing program 0 (id=450): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fc3ae65065c600000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000400090000000000fa1635de16000000000000000000000000000000bade740bc9f40da17e6848e627"], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), 0x0}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xbc, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 886.976907ms ago: executing program 3 (id=452): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xd}, [@map_fd={0x18, 0x2, 0x1, 0xf0, r2}]}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 813.926042ms ago: executing program 3 (id=454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000", @ANYRES32, @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166e", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8d90}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x200}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001c0001"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 745.551578ms ago: executing program 0 (id=455): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7010040000000500e400080009000200000008000c00a80a0000060001000500000008000b000200000014000800"], 0x48}}, 0x20000034) 657.336779ms ago: executing program 0 (id=457): futex(&(0x7f0000000580), 0x0, 0x0, &(0x7f0000000600)={0x77359400}, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x42}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x8040) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 656.875167ms ago: executing program 3 (id=459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14004004d2321000000000000000000100"], 0x4a) 465.734616ms ago: executing program 3 (id=463): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000e640c3", @ANYRESDEC=r0], 0x0}, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000000140)=""/166, 0xa6) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x208000, 0x0) 405.849103ms ago: executing program 1 (id=465): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) 405.426234ms ago: executing program 1 (id=466): r0 = fsopen(&(0x7f0000000080)='overlay\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'pimreg\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='a\xb5p\xbb\x9b\x8fp.blloc', &(0x7f00000002c0)='0\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='a\xb5p\xbb\x9b\x8fp.blloc', &(0x7f00000002c0)='0\x00', 0x0) 347.024884ms ago: executing program 1 (id=467): userfaultfd(0x1) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305006000070000070000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r0], 0x84}}, 0x20008040) 285.745516ms ago: executing program 1 (id=468): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0xff00}, 0x40000) 236.320024ms ago: executing program 1 (id=469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2b1, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) 235.954973ms ago: executing program 1 (id=470): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, 0xee00, r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = accept4(r3, &(0x7f0000000100)=@in6, &(0x7f0000000180)=0x80, 0x80000) r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) r6 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_G_CTRL(r6, 0xc008561b, &(0x7f0000000240)={0x2, 0x3}) accept4$tipc(r4, &(0x7f0000000280)=@id, &(0x7f00000002c0)=0x10, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000300)=0x4) ioctl$VIDIOC_DBG_S_REGISTER(r5, 0x4038564f, &(0x7f0000000340)={{0x2, @addr=0x4}, 0x8, 0x80, 0x8}) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000380)={0x3, 0x4e6, {0xffffffffffffffff}, {r1}, 0x9, 0x3}) capset(&(0x7f00000003c0)={0x19980330, r7}, &(0x7f0000000400)={0xef1, 0x5, 0x100, 0x9, 0x80, 0x101}) ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f0000000440)={0xffffffff80000000, 0x88d, 0x10, 0x5, 0x7fff}) ioctl$HIDIOCGRDESC(r5, 0x90044802, &(0x7f0000000480)={0x53a, "0a26e645811cdc84ce1adf136899f5b02426830275497c221374d5407051cd8aa7fffc67640c46b55e214a8b039c65a9342278256969606012938d53ee4b4c94ac20f4b459ee1a1a073043d156011c960133c3ae4ba713dc9f6825b4f0d4d16b7697a04ce89fb57a7d3b37174aac13d3a28b837bc22bd68cab909b648acf9533c9157fdecdb190fe9b16dd1f5994b1d1d2cff20ac68ac20fa46b5d80a183eab25a5eb3bd30e64800de2df7995a8d2d904200a8892df9e34386c15e30e29282a54ea6e3b2c0fb9d1ccb6bec9e094bbe3500e33b48fa614cd780ca31bff5b15d93b6ab61ead4a1c7fed27562cf1a0223a7d208595b4f8cabeb9eae22e040994383275ed1ec915c38f8551bbdf9cf344f2bb5c28d24d95e86939051dbf69caec06f2802a6c46182756e5e3f64137a49086573cb11fdf51e3cb49609930ef6533bd49277be8e7b808e9c00508ac15a9120f5601dd45fe054694e83b5ba6b98fc001db863bca3594d03d06a3739408ec896c764da8e0373334ce41f2b79a923b27960992390d69ce7d0773eaf3ec7ed3ddf13133510398ceef42fb43476f023184926f85eee8e302fa9beb5ea89cbf765158b1298dfd003971b90d2cd37cba096e1e58278d12491650e8fef96124a0a89456977bdd9b6773eda515382e6801a655f71a8471a9d5094a13824b54ad30e984cf459f165021e62c0e6c3d2510e9f738961809e93d4e03ba8fe9e955001b79e3423fc99fecd7d3d2d64581d3a93127813d16828d7ccd9d287bf06e0f19d9a59bafc40f6ff2242943efd26267fcf19c530220ca36683ab3345cc6e02842bb3428db3c67abadcbde0c530e938e246cfd5382a1b4763567cbdd8376963c922048ead25433c6632ecd57016444077aa915c523dc66141f210bae9aa066ab77c46895bad821148fa40fd47e30acb032c1339d18b3408ea6927a709fc5ff706ccf23fae4b59bb0c3a36430c4926da9e799fc9d08b22b2e5c86fb91298cb0ae48177b36a837106f4935067f2b91f8afa9c19a0bd0f7ef79ba668073c756731a24014cc3632409b52e12813a446a48136eb57f84aa6530dae96e967629f14bb6bab9bcd04cc612928c1cdc37e2ec0fcc63393394482cae04bbfc81a59f9cf44bb43dfd0ae13b4a470d22d25a9078938a0e74ff8ec70a7a1e1d3c40a92107289f69ad23d6c022b66ffb510561fe47b90e3c5c4f7c5b51297674b39f6d81b4ca732b17b1f00eeeda96b3cb502506889445965d0c5fdd627ea00c8b56244ce56a853f2f39ac1c609d85f37114c6e7fb49a78add0825dee2541a0c47ace994834948d5dbe332f32a90867cabe90f68cb119639ec9f35d67af165e6588391377815f1b2d4135903566b1b659fbbc9d31c445b40834f11304a601dc907b21de30695e52e7d9f9b3d1448e3027945c37f1aade21c6585ef22e902f298210d2d15a302d4c2d506c845c3f32ddb22d04f7356c4b860b427db38744334eb927db536ec5d247d1bdd9a2bc3fa397c2fea36bad7bb6c5d6a83f42565ace41c166cf5ecdbdd40cae7f9bed46610da4ff3684f056e2c497960e5b9feda1bf3adff1b955be7acc919a63f81bc24e1165e488675a3038873b442a8ff06916c575450e3cc256497be2f4bf8ac13dcc260c425cf35f6bf5d6776db724bdce696f5b0a6a5719dd8238c52cf05d362368e01d5da440ff838116db5c32f65e4a790c5fe38896c85ff07a3c682c7718a1a315484b3bf85058b7f90aac8994735796a8a4c613e466a49b7bc1fa91909f9616effb1c8dc304e9fc6c8a6521ab85e7d92ff757cf9d5997e8b0ab130606a94be99d695fc51c1cf734cfa6ecf720f8a70f24fa4d6b3f9dc33f51cdfebead00248d38c79f21199573f8c0"}) write$snddsp(r3, &(0x7f00000009c0)="d9a3df7282f1acb069d40b15034ff3c063a7ca42405310a38d67982405114d6f336312280117c98007a36fe816ba41ff24d4a77ae5a29ad02dffe2602a75f4cb1a14d8a2a40d8797a36bb8434c8ee96332edabfb69dfadfad14cef03d2f4ec7049ab2426e83468256c618a3b946d65fd8923b61348bbcf2b56537c5b4c2ab3c8577b33e54bf3e54914e6d8ff52a349e00c2d2a4d408ba3defead80c7a6010bebfd474b5a7c2ff5dfb51382641b3e1429927def7ec4d7b6b475eb270b387d89ca489950de2ef041fab5e8c52a0ab14c4f7406636d58624803f299d9939d5750fce72187565f58c57df60909716108f35a01efd2b1a726", 0xf6) timer_create(0x4, &(0x7f0000000ac0)={0x0, 0x6, 0x5, @tid=r7}, &(0x7f0000000b00)=0x0) timer_settime(r8, 0x0, &(0x7f0000000b40), 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), r5) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x8c, r9, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x79a}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2f61}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x20044080) clock_gettime(0x0, &(0x7f0000000e00)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000d40)={[0x5]}, &(0x7f0000000d80), &(0x7f0000000e40)={r10, r11+60000000}, 0x8) capget(&(0x7f0000000e80)={0x19980330, r7}, &(0x7f0000000ec0)={0x40, 0x8, 0x1, 0x7, 0xa954, 0x3}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r12, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x74, 0x1, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xb4}, @NFQA_CT={0x38, 0xb, 0x0, 0x1, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x3}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x402}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc26}]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0xc40}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x6}}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000001040)={0xa, [0x785, 0x200, 0x8, 0x8, 0x2, 0x0, 0x3000, 0x9, 0x7, 0xff]}, 0x18) r13 = socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0x50, r13, 0xcd763000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000010c0)={0x4, &(0x7f0000001080)=[{0x101, 0x5, 0xb, 0x736}, {0x7fff, 0x88, 0x8, 0x1}, {0x1, 0x1, 0x0, 0x7}, {0x1ff, 0x7, 0x5, 0x7}]}) 0s ago: executing program 2 (id=471): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x9c, r3, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x9c}}, 0x20000000) (fail_nth: 41) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:3903' (ED25519) to the list of known hosts. [ 43.035498][ T45] kauditd_printk_skb: 20 callbacks suppressed [ 43.035870][ T45] audit: type=1400 audit(1788286724.157:141): avc: denied { mounton } for pid=5713 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 43.039286][ T45] audit: type=1400 audit(1788286724.157:142): avc: denied { mount } for pid=5713 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.041507][ T5713] cgroup: Unknown subsys name 'net' [ 43.043187][ T45] audit: type=1400 audit(1788286724.157:143): avc: denied { unmount } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.185040][ T5713] cgroup: Unknown subsys name 'cpuset' [ 43.188330][ T5713] cgroup: Unknown subsys name 'rlimit' [ 43.346485][ T45] audit: type=1400 audit(1788286724.467:144): avc: denied { setattr } for pid=5713 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.346992][ T45] audit: type=1400 audit(1788286724.467:145): avc: denied { create } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.347274][ T45] audit: type=1400 audit(1788286724.467:146): avc: denied { write } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.347695][ T45] audit: type=1400 audit(1788286724.467:147): avc: denied { read } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.387918][ T45] audit: type=1400 audit(1788286724.507:148): avc: denied { read } for pid=5440 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 43.393993][ T45] audit: type=1400 audit(1788286724.517:149): avc: denied { read } for pid=5440 comm="dhcpcd" name="n31" dev="tmpfs" ino=1890 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.394173][ T45] audit: type=1400 audit(1788286724.517:150): avc: denied { open } for pid=5440 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1890 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.414294][ T5719] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.138722][ T5713] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.138146][ T45] kauditd_printk_skb: 6 callbacks suppressed [ 48.138223][ T45] audit: type=1400 audit(1788286729.257:157): avc: denied { create } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.141022][ T45] audit: type=1400 audit(1788286729.257:158): avc: denied { read write } for pid=5727 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.141063][ T45] audit: type=1400 audit(1788286729.257:159): avc: denied { open } for pid=5727 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.148991][ T45] audit: type=1400 audit(1788286729.267:160): avc: denied { ioctl } for pid=5728 comm="syz-executor" path="socket:[6557]" dev="sockfs" ino=6557 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.179096][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.184580][ T5740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.185110][ T5740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.185353][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.185662][ T5740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.186471][ T5740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.187800][ T5740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.188285][ T5740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.188488][ T5740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.188594][ T5740] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.189485][ T5740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.189650][ T5740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.193122][ T5740] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.193230][ T5740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.193927][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.194487][ T5740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.194815][ T5739] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.194919][ T5739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.195311][ T5739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.202121][ T45] audit: type=1400 audit(1788286729.317:161): avc: denied { read } for pid=5728 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.202152][ T45] audit: type=1400 audit(1788286729.317:162): avc: denied { open } for pid=5728 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.202173][ T45] audit: type=1400 audit(1788286729.327:163): avc: denied { mounton } for pid=5728 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.209037][ T45] audit: type=1400 audit(1788286729.327:164): avc: denied { module_request } for pid=5728 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.210557][ T5087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.241918][ T45] audit: type=1400 audit(1788286729.367:165): avc: denied { sys_module } for pid=5728 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.891876][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.892616][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.892725][ T5727] bridge_slave_0: entered allmulticast mode [ 48.893747][ T5727] bridge_slave_0: entered promiscuous mode [ 48.938499][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.939276][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.939437][ T5728] bridge_slave_0: entered allmulticast mode [ 48.940205][ T5728] bridge_slave_0: entered promiscuous mode [ 48.941017][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.941056][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.941253][ T5727] bridge_slave_1: entered allmulticast mode [ 48.942576][ T5727] bridge_slave_1: entered promiscuous mode [ 48.965732][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.965859][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.966135][ T5728] bridge_slave_1: entered allmulticast mode [ 48.966867][ T5728] bridge_slave_1: entered promiscuous mode [ 48.967556][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.967595][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.968125][ T5736] bridge_slave_0: entered allmulticast mode [ 48.968804][ T5736] bridge_slave_0: entered promiscuous mode [ 48.981443][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.981643][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.981703][ T5736] bridge_slave_1: entered allmulticast mode [ 48.982551][ T5736] bridge_slave_1: entered promiscuous mode [ 48.998696][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.022929][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.024606][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.032890][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.035048][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.048764][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.055948][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.056088][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.056148][ T5735] bridge_slave_0: entered allmulticast mode [ 49.056910][ T5735] bridge_slave_0: entered promiscuous mode [ 49.066696][ T5727] team0: Port device team_slave_0 added [ 49.079435][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.079807][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.079919][ T5735] bridge_slave_1: entered allmulticast mode [ 49.080738][ T5735] bridge_slave_1: entered promiscuous mode [ 49.088715][ T5727] team0: Port device team_slave_1 added [ 49.096555][ T5728] team0: Port device team_slave_0 added [ 49.098900][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.100152][ T5736] team0: Port device team_slave_0 added [ 49.102848][ T5736] team0: Port device team_slave_1 added [ 49.109365][ T5728] team0: Port device team_slave_1 added [ 49.116374][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.132654][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.132703][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.132778][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.158944][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.158988][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.159297][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.160203][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.160215][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.160240][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.161239][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.161251][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.161270][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.184975][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.184991][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.185011][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.185786][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.185796][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.185808][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.194400][ T5735] team0: Port device team_slave_0 added [ 49.196111][ T5735] team0: Port device team_slave_1 added [ 49.260167][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.260215][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.260432][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.272077][ T5728] hsr_slave_0: entered promiscuous mode [ 49.272826][ T5728] hsr_slave_1: entered promiscuous mode [ 49.279009][ T5736] hsr_slave_0: entered promiscuous mode [ 49.279766][ T5736] hsr_slave_1: entered promiscuous mode [ 49.280255][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 49.280323][ T5736] Cannot create hsr debugfs directory [ 49.280944][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.280953][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.280965][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.290687][ T5727] hsr_slave_0: entered promiscuous mode [ 49.291160][ T5727] hsr_slave_1: entered promiscuous mode [ 49.292062][ T5727] debugfs: 'hsr0' already exists in 'hsr' [ 49.292074][ T5727] Cannot create hsr debugfs directory [ 49.341034][ T5735] hsr_slave_0: entered promiscuous mode [ 49.341896][ T5735] hsr_slave_1: entered promiscuous mode [ 49.342415][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 49.342432][ T5735] Cannot create hsr debugfs directory [ 49.658159][ T5727] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.665947][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.666691][ T5727] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.673167][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.673751][ T5727] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.679685][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.680340][ T5727] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.686014][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.742598][ T5736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.747668][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.748809][ T5736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.753226][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.756538][ T5736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.760824][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.762806][ T5736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.768723][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.845388][ T5735] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.850381][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.855014][ T5735] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.860960][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.862741][ T5735] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.867671][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.878550][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.879023][ T5735] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.885579][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.936827][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.951936][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.952212][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.970102][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.970270][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.979217][ T5728] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.984913][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.987017][ T5728] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.989882][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.990463][ T5728] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.996238][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.997759][ T5728] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.004730][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.014237][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.042431][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.062246][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.062408][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.074913][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.075038][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.157002][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.172647][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.178657][ T600] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.178747][ T600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.192663][ T600] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.192772][ T600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.203802][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.232475][ T5087] Bluetooth: hci0: command tx timeout [ 50.232490][ T5740] Bluetooth: hci2: command tx timeout [ 50.232759][ T5740] Bluetooth: hci1: command tx timeout [ 50.232958][ T5733] Bluetooth: hci3: command tx timeout [ 50.246705][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.274467][ T600] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.274761][ T600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.275975][ T600] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.276053][ T600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.378539][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.415903][ T5727] veth0_vlan: entered promiscuous mode [ 50.421171][ T5727] veth1_vlan: entered promiscuous mode [ 50.438103][ T5727] veth0_macvtap: entered promiscuous mode [ 50.440548][ T5727] veth1_macvtap: entered promiscuous mode [ 50.449802][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.457949][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.465122][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.483132][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.483922][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.483953][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.521181][ T5736] veth0_vlan: entered promiscuous mode [ 50.534630][ T5736] veth1_vlan: entered promiscuous mode [ 50.564461][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.575120][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.575182][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.577741][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.607488][ T5736] veth0_macvtap: entered promiscuous mode [ 50.625831][ T234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.625876][ T234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.627529][ T5736] veth1_macvtap: entered promiscuous mode [ 50.644973][ T45] audit: type=1400 audit(1788286731.767:166): avc: denied { mount } for pid=5727 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.659512][ T5735] veth0_vlan: entered promiscuous mode [ 50.674693][ T5735] veth1_vlan: entered promiscuous mode [ 50.677693][ T5727] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.688755][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.699798][ T5728] veth0_vlan: entered promiscuous mode [ 50.702158][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.704730][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.708024][ T5728] veth1_vlan: entered promiscuous mode [ 50.731993][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.732180][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.751290][ T5735] veth0_macvtap: entered promiscuous mode [ 50.777497][ T5735] veth1_macvtap: entered promiscuous mode [ 50.786292][ T5728] veth0_macvtap: entered promiscuous mode [ 50.791157][ T5728] veth1_macvtap: entered promiscuous mode [ 50.803031][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.803101][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.819692][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.830868][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.836123][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.855389][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.855457][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.865107][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.967023][ T234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.967087][ T234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.012859][ T5889] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 51.021739][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.021802][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.021835][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.021856][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.021874][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.021893][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.021912][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.021930][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.021948][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.021966][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.037620][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.037638][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.045765][ T234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.045787][ T234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.082753][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.083124][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.194890][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 51.214891][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 51.219746][ T5895] macvlan0: entered allmulticast mode [ 51.222349][ T5895] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 51.230423][ T5895] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 51.341369][ T5913] ======================================================= [ 51.341369][ T5913] WARNING: The mand mount option has been deprecated and [ 51.341369][ T5913] and is ignored by this kernel. Remove the mand [ 51.341369][ T5913] option from the mount to silence this warning. [ 51.341369][ T5913] ======================================================= [ 51.360335][ T5913] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 51.443603][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 51.461002][ T5925] macvlan1: entered allmulticast mode [ 51.488485][ T5925] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 51.497407][ T5923] ipvlan2: entered allmulticast mode [ 51.497474][ T5923] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 51.499228][ T5923] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 51.518327][ T5930] loop2: detected capacity change from 0 to 16384 [ 51.595685][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 51.621955][ T5936] macvlan2: entered allmulticast mode [ 51.630707][ T5936] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 51.702490][ T5935] loop2: detected capacity change from 16384 to 0 [ 51.937251][ T854] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.012144][ T5977] netlink: 'syz.1.32': attribute type 10 has an invalid length. [ 52.016121][ T5977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.017304][ T5977] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 52.102627][ T854] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 52.105641][ T854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.105683][ T854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.105708][ T854] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 52.105757][ T854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.124532][ T854] usb 5-1: config 0 descriptor?? [ 52.241260][ T5987] bridge0: port 3(ipvlan3) entered blocking state [ 52.241406][ T5987] bridge0: port 3(ipvlan3) entered disabled state [ 52.241918][ T5987] ipvlan3: entered allmulticast mode [ 52.241929][ T5987] bridge0: entered allmulticast mode [ 52.243426][ T5987] ipvlan3: left allmulticast mode [ 52.243437][ T5987] bridge0: left allmulticast mode [ 52.312565][ T5733] Bluetooth: hci3: command tx timeout [ 52.312623][ T5733] Bluetooth: hci1: command tx timeout [ 52.312660][ T5740] Bluetooth: hci0: command tx timeout [ 52.312726][ T5740] Bluetooth: hci2: command tx timeout [ 52.353806][ T5997] netlink: 'syz.2.36': attribute type 10 has an invalid length. [ 52.353866][ T5997] team0: Device wg2 is up. Set it down before adding it as a team port [ 52.438726][ T6003] block nbd0: Receive control failed (result -32) [ 52.459121][ T6008] block nbd0: Receive control failed (result -32) [ 52.546310][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 52.550155][ T854] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.550204][ T854] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.550222][ T854] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.550237][ T854] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.550249][ T854] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.550262][ T854] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.599403][ T854] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 52.817408][ T854] usb 5-1: USB disconnect, device number 2 [ 53.342148][ T6042] binder: 6041:6042 ioctl c0306201 200000000080 returned -14 [ 53.344610][ T45] kauditd_printk_skb: 137 callbacks suppressed [ 53.344620][ T45] audit: type=1400 audit(1788286734.467:304): avc: denied { create } for pid=6041 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.351967][ T45] audit: type=1400 audit(1788286734.467:305): avc: denied { read write } for pid=6041 comm="syz.0.45" path="socket:[11896]" dev="sockfs" ino=11896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.378159][ T45] audit: type=1400 audit(1788286734.497:306): avc: denied { create } for pid=6036 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.378578][ T45] audit: type=1400 audit(1788286734.497:307): avc: denied { connect } for pid=6036 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.389485][ T45] audit: type=1400 audit(1788286734.507:308): avc: denied { write } for pid=6036 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.394605][ T45] audit: type=1400 audit(1788286734.517:309): avc: denied { write } for pid=6036 comm="syz.1.44" name="usbmon9" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 53.394671][ T45] audit: type=1400 audit(1788286734.517:310): avc: denied { open } for pid=6036 comm="syz.1.44" path="/dev/usbmon9" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 53.719894][ T45] audit: type=1400 audit(1788286734.837:311): avc: denied { read write } for pid=6050 comm="syz.0.48" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.721832][ T45] audit: type=1400 audit(1788286734.837:312): avc: denied { open } for pid=6050 comm="syz.0.48" path="/dev/uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.724870][ T45] audit: type=1400 audit(1788286734.837:313): avc: denied { mount } for pid=6050 comm="syz.0.48" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 54.118013][ T6066] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 54.177186][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.326894][ T6080] ipvlan3: entered allmulticast mode [ 54.328543][ T6080] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 54.354538][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 54.357935][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.357954][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.357965][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 54.357985][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.367007][ T10] usb 5-1: config 0 descriptor?? [ 54.367297][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 54.373499][ T6082] macvlan3: entered allmulticast mode [ 54.387557][ T6082] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 54.401967][ T5730] Bluetooth: hci0: command tx timeout [ 54.402092][ T5730] Bluetooth: hci3: command tx timeout [ 54.402107][ T5730] Bluetooth: hci1: command tx timeout [ 54.402187][ T5733] Bluetooth: hci2: command tx timeout [ 54.480056][ T6091] loop2: detected capacity change from 0 to 16384 [ 54.663946][ T6094] loop2: detected capacity change from 16384 to 0 [ 54.664489][ C3] I/O error, dev loop2, sector 14440 op 0x0:(READ) flags 0x80700 phys_seg 19 prio class 2 [ 54.777999][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 54.778080][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 54.782790][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 54.782808][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 54.792036][ T10] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 54.886619][ T6113] bridge0: port 3(ipvlan4) entered blocking state [ 54.886821][ T6113] bridge0: port 3(ipvlan4) entered disabled state [ 54.886924][ T6113] ipvlan4: entered allmulticast mode [ 54.886939][ T6113] bridge0: entered allmulticast mode [ 54.889172][ T6113] ipvlan4: left allmulticast mode [ 54.889184][ T6113] bridge0: left allmulticast mode [ 55.050606][ T10] usb 5-1: USB disconnect, device number 3 [ 55.104005][ T6122] FAULT_INJECTION: forcing a failure. [ 55.104005][ T6122] name failslab, interval 1, probability 0, space 0, times 1 [ 55.105107][ T6122] CPU: 3 UID: 0 PID: 6122 Comm: syz.1.72 Tainted: G L syzkaller #0 PREEMPT(full) [ 55.105139][ T6122] Tainted: [L]=SOFTLOCKUP [ 55.105145][ T6122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.105155][ T6122] Call Trace: [ 55.105162][ T6122] [ 55.105169][ T6122] dump_stack_lvl+0x100/0x190 [ 55.105200][ T6122] should_fail_ex.cold+0x5/0xa [ 55.105223][ T6122] should_failslab+0xc2/0x120 [ 55.105243][ T6122] __kmalloc_cache_node_noprof+0x94/0x720 [ 55.105263][ T6122] ? sbitmap_queue_init_node+0x291/0x4a0 [ 55.105289][ T6122] sbitmap_queue_init_node+0x291/0x4a0 [ 55.105312][ T6122] blk_mq_init_tags+0x184/0x300 [ 55.105333][ T6122] blk_mq_alloc_map_and_rqs+0x244/0xe30 [ 55.105359][ T6122] blk_mq_alloc_sched_tags+0x1de/0x350 [ 55.105387][ T6122] blk_mq_alloc_sched_res+0x8e/0x250 [ 55.105411][ T6122] blk_mq_alloc_sched_res_batch+0xfc/0x4f0 [ 55.105494][ T6122] blk_mq_update_nr_hw_queues+0x263/0x15f0 [ 55.105515][ T6122] ? find_held_lock+0x2b/0x80 [ 55.105546][ T6122] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 55.105570][ T6122] ? sysfs_create_file_ns+0x14c/0x1e0 [ 55.105591][ T6122] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 55.105615][ T6122] nbd_start_device+0x1a6/0xbd0 [ 55.105642][ T6122] nbd_genl_connect+0xfc2/0x1760 [ 55.105665][ T6122] ? __pfx_nbd_genl_connect+0x10/0x10 [ 55.105688][ T6122] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 55.105707][ T6122] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 55.105731][ T6122] genl_family_rcv_msg_doit+0x214/0x300 [ 55.105751][ T6122] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 55.105767][ T6122] ? genl_get_cmd+0x3e7/0x760 [ 55.105800][ T6122] ? netlink_sendmsg+0x680/0xda0 [ 55.105822][ T6122] ? ____sys_sendmsg+0xa4d/0xbe0 [ 55.105841][ T6122] ? __radix_tree_lookup+0x217/0x2b0 [ 55.105864][ T6122] genl_rcv_msg+0x560/0x800 [ 55.105883][ T6122] ? __pfx_genl_rcv_msg+0x10/0x10 [ 55.105899][ T6122] ? __lock_acquire+0x4c5/0x1ec0 [ 55.105916][ T6122] ? __pfx_nbd_genl_connect+0x10/0x10 [ 55.105938][ T6122] ? __lock_acquire+0x4c5/0x1ec0 [ 55.105960][ T6122] netlink_rcv_skb+0x159/0x420 [ 55.105984][ T6122] ? __pfx_genl_rcv_msg+0x10/0x10 [ 55.106002][ T6122] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 55.106036][ T6122] ? netlink_deliver_tap+0x1ae/0xcc0 [ 55.106063][ T6122] genl_rcv+0x28/0x40 [ 55.106121][ T6122] netlink_unicast+0x585/0x850 [ 55.106149][ T6122] ? __pfx_netlink_unicast+0x10/0x10 [ 55.106173][ T6122] ? __pfx_sock_has_perm+0x10/0x10 [ 55.106202][ T6122] netlink_sendmsg+0x8b0/0xda0 [ 55.106230][ T6122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.106258][ T6122] ? selinux_socket_sendmsg+0x198/0x2f0 [ 55.106293][ T6122] ____sys_sendmsg+0xa4d/0xbe0 [ 55.106311][ T6122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.106337][ T6122] ? __pfx_____sys_sendmsg+0x10/0x10 [ 55.106362][ T6122] ? lock_acquire+0x1d1/0x380 [ 55.106378][ T6122] ? get_pid_task+0x2a/0x250 [ 55.106403][ T6122] ___sys_sendmsg+0x190/0x1e0 [ 55.106427][ T6122] ? __pfx____sys_sendmsg+0x10/0x10 [ 55.106448][ T6122] ? get_pid_task+0x106/0x250 [ 55.106478][ T6122] ? find_held_lock+0x2b/0x80 [ 55.106515][ T6122] __sys_sendmsg+0x160/0x210 [ 55.106533][ T6122] ? __pfx___sys_sendmsg+0x10/0x10 [ 55.106563][ T6122] do_syscall_64+0x123/0x790 [ 55.106584][ T6122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.106602][ T6122] RIP: 0033:0x7f0ad1d9e159 [ 55.106620][ T6122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.106636][ T6122] RSP: 002b:00007f0ad2c0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.106655][ T6122] RAX: ffffffffffffffda RBX: 00007f0ad2025fa0 RCX: 00007f0ad1d9e159 [ 55.106667][ T6122] RDX: 0000000020000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 55.106678][ T6122] RBP: 00007f0ad2c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 55.106688][ T6122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.106699][ T6122] R13: 00007f0ad2026038 R14: 00007f0ad2025fa0 R15: 00007ffd41481578 [ 55.106723][ T6122] [ 55.114509][ T6123] block nbd1: Receive control failed (result -32) [ 55.140007][ T6127] block nbd1: Receive control failed (result -32) [ 55.152729][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'. [ 55.155483][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.155829][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.373671][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.373671][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.374506][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.374506][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.374536][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.374536][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.374565][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.374565][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.374592][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.374592][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.374620][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.374620][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.374648][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.374648][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.374676][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.374676][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.374703][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.374703][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.374731][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.374731][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.374759][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.374759][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.374792][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.374792][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.374925][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.374925][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.374953][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.374953][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.374981][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.374981][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.375008][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.375008][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.375034][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.375034][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.375061][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.375061][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.375088][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.375088][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.375115][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.375115][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.375142][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.375142][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.375168][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.375168][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.375196][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.375196][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.375223][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.375223][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.375249][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.375249][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.375277][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.375277][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.375305][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.375305][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.375332][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.375332][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.375360][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.375360][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.375387][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.375387][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.375414][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.375414][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.375441][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.375441][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.375468][ T6143] PM: Enabling pm_trace changes system date and time during resume. [ 55.375468][ T6143] PM: Correct system time has to be restored manually after resume. [ 55.947525][ T6178] binder: 6177:6178 ioctl c0306201 200000000080 returned -14 [ 56.038250][ T6182] netlink: 'syz.2.82': attribute type 13 has an invalid length. [ 56.472005][ T5733] Bluetooth: hci2: command tx timeout [ 56.472392][ T5733] Bluetooth: hci3: command tx timeout [ 56.472409][ T5733] Bluetooth: hci0: command tx timeout [ 57.150228][ T6199] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 57.327794][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 57.394208][ T6207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.425563][ T6213] bond1: (slave ip6erspan0): making interface the new active one [ 57.433593][ T6213] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 57.773814][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'. [ 57.774061][ T6231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 58.015892][ T6240] ipvlan2: entered allmulticast mode [ 58.016890][ T6240] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 58.286741][ T6192] syz.1.78 (6192) used greatest stack depth: 18144 bytes left [ 58.589553][ T6251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.98'. [ 58.731830][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.903208][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.904308][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.904375][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.904409][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.904436][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.912547][ T10] usb 8-1: config 0 descriptor?? [ 58.912753][ T6266] ieee802154 phy0 wpan0: encryption failed: -22 [ 58.912915][ T6266] mmap: syz.0.106 (6266) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.046407][ T6274] bridge0: port 3(ipvlan3) entered blocking state [ 59.050516][ T6274] bridge0: port 3(ipvlan3) entered disabled state [ 59.054813][ T6274] ipvlan3: entered allmulticast mode [ 59.055021][ T6274] bridge0: entered allmulticast mode [ 59.057115][ T6274] ipvlan3: left allmulticast mode [ 59.057125][ T6274] bridge0: left allmulticast mode [ 59.209452][ T6283] FAULT_INJECTION: forcing a failure. [ 59.209452][ T6283] name failslab, interval 1, probability 0, space 0, times 0 [ 59.209543][ T6283] CPU: 1 UID: 0 PID: 6283 Comm: syz.0.112 Tainted: G L syzkaller #0 PREEMPT(full) [ 59.209581][ T6283] Tainted: [L]=SOFTLOCKUP [ 59.209588][ T6283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.209598][ T6283] Call Trace: [ 59.209604][ T6283] [ 59.209611][ T6283] dump_stack_lvl+0x100/0x190 [ 59.209641][ T6283] should_fail_ex.cold+0x5/0xa [ 59.209666][ T6283] should_failslab+0xc2/0x120 [ 59.209688][ T6283] __kmalloc_cache_node_noprof+0x94/0x720 [ 59.209709][ T6283] ? sbitmap_queue_init_node+0x291/0x4a0 [ 59.209737][ T6283] sbitmap_queue_init_node+0x291/0x4a0 [ 59.209763][ T6283] blk_mq_init_tags+0x1ba/0x300 [ 59.209787][ T6283] blk_mq_alloc_map_and_rqs+0x244/0xe30 [ 59.209814][ T6283] blk_mq_alloc_sched_tags+0x1de/0x350 [ 59.209844][ T6283] blk_mq_alloc_sched_res+0x8e/0x250 [ 59.209886][ T6283] blk_mq_alloc_sched_res_batch+0xfc/0x4f0 [ 59.209917][ T6283] blk_mq_update_nr_hw_queues+0x263/0x15f0 [ 59.209937][ T6283] ? find_held_lock+0x2b/0x80 [ 59.209966][ T6283] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 59.209992][ T6283] ? sysfs_create_file_ns+0x14c/0x1e0 [ 59.210012][ T6283] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 59.210036][ T6283] nbd_start_device+0x1a6/0xbd0 [ 59.210062][ T6283] nbd_genl_connect+0xfc2/0x1760 [ 59.210084][ T6283] ? __pfx_nbd_genl_connect+0x10/0x10 [ 59.210105][ T6283] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 59.210124][ T6283] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 59.210145][ T6283] genl_family_rcv_msg_doit+0x214/0x300 [ 59.210162][ T6283] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 59.210177][ T6283] ? genl_get_cmd+0x3e7/0x760 [ 59.210210][ T6283] ? netlink_sendmsg+0x680/0xda0 [ 59.210233][ T6283] ? ____sys_sendmsg+0xa4d/0xbe0 [ 59.210251][ T6283] ? __radix_tree_lookup+0x217/0x2b0 [ 59.210272][ T6283] genl_rcv_msg+0x560/0x800 [ 59.210285][ T6283] ? __pfx_genl_rcv_msg+0x10/0x10 [ 59.210296][ T6283] ? __lock_acquire+0x4c5/0x1ec0 [ 59.210307][ T6283] ? __pfx_nbd_genl_connect+0x10/0x10 [ 59.210321][ T6283] ? __lock_acquire+0x4c5/0x1ec0 [ 59.210335][ T6283] netlink_rcv_skb+0x159/0x420 [ 59.210351][ T6283] ? __pfx_genl_rcv_msg+0x10/0x10 [ 59.210363][ T6283] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 59.210385][ T6283] ? netlink_deliver_tap+0x1ae/0xcc0 [ 59.210403][ T6283] genl_rcv+0x28/0x40 [ 59.210419][ T6283] netlink_unicast+0x585/0x850 [ 59.210438][ T6283] ? __pfx_netlink_unicast+0x10/0x10 [ 59.210454][ T6283] ? __pfx_sock_has_perm+0x10/0x10 [ 59.210473][ T6283] netlink_sendmsg+0x8b0/0xda0 [ 59.210491][ T6283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.210509][ T6283] ? selinux_socket_sendmsg+0x198/0x2f0 [ 59.210528][ T6283] ____sys_sendmsg+0xa4d/0xbe0 [ 59.210541][ T6283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.210558][ T6283] ? __pfx_____sys_sendmsg+0x10/0x10 [ 59.210575][ T6283] ? lock_acquire+0x1d1/0x380 [ 59.210586][ T6283] ? get_pid_task+0x2a/0x250 [ 59.210602][ T6283] ___sys_sendmsg+0x190/0x1e0 [ 59.210617][ T6283] ? __pfx____sys_sendmsg+0x10/0x10 [ 59.210632][ T6283] ? get_pid_task+0x106/0x250 [ 59.210651][ T6283] ? find_held_lock+0x2b/0x80 [ 59.210675][ T6283] __sys_sendmsg+0x160/0x210 [ 59.210687][ T6283] ? __pfx___sys_sendmsg+0x10/0x10 [ 59.210705][ T6283] do_syscall_64+0x123/0x790 [ 59.210719][ T6283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.210731][ T6283] RIP: 0033:0x7f4c65d9e159 [ 59.210741][ T6283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.210751][ T6283] RSP: 002b:00007f4c66c75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.210762][ T6283] RAX: ffffffffffffffda RBX: 00007f4c66025fa0 RCX: 00007f4c65d9e159 [ 59.210769][ T6283] RDX: 0000000020000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 59.210776][ T6283] RBP: 00007f4c66c75090 R08: 0000000000000000 R09: 0000000000000000 [ 59.210782][ T6283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.210788][ T6283] R13: 00007f4c66026038 R14: 00007f4c66025fa0 R15: 00007fffc3492718 [ 59.210802][ T6283] [ 59.242223][ T6287] block nbd2: Receive control failed (result -32) [ 59.271862][ T6293] block nbd2: Receive control failed (result -32) [ 59.288625][ T6296] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.63.0), cmd(3) [ 59.324432][ T10] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 59.324456][ T10] hid_parser_main: 2 callbacks suppressed [ 59.324463][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 59.324475][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 59.324487][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 59.324498][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 59.324510][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 59.334182][ T45] kauditd_printk_skb: 33 callbacks suppressed [ 59.334197][ T45] audit: type=1400 audit(1788286740.457:347): avc: denied { unmount } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 59.335074][ T10] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 59.421744][ T45] audit: type=1400 audit(1788286740.547:348): avc: denied { create } for pid=6298 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.460228][ T45] audit: type=1400 audit(1788286740.577:349): avc: denied { setopt } for pid=6298 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.460655][ T45] audit: type=1400 audit(1788286740.577:350): avc: denied { write } for pid=6298 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.462405][ T45] audit: type=1400 audit(1788286740.577:351): avc: denied { connect } for pid=6298 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.463901][ T45] audit: type=1400 audit(1788286740.587:352): avc: denied { name_connect } for pid=6298 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 59.512480][ T45] audit: type=1400 audit(1788286740.637:353): avc: denied { listen } for pid=6298 comm="syz.0.115" lport=46969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.518058][ T45] audit: type=1400 audit(1788286740.637:354): avc: denied { accept } for pid=6298 comm="syz.0.115" lport=46969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.575199][ T5833] usb 8-1: USB disconnect, device number 2 [ 59.660660][ T45] audit: type=1400 audit(1788286740.777:355): avc: denied { read } for pid=6315 comm="syz.2.121" name="cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 59.660726][ T45] audit: type=1400 audit(1788286740.777:356): avc: denied { open } for pid=6315 comm="syz.2.121" path="/43/dev/cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 59.762412][ T6321] netlink: 'syz.2.123': attribute type 1 has an invalid length. [ 59.773370][ T6321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.783063][ T6321] bond1: (slave veth0_to_bond): making interface the new active one [ 59.786521][ T6321] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 59.806117][ T6321] bond1: entered promiscuous mode [ 59.806179][ T6321] veth0_to_bond: entered promiscuous mode [ 59.806579][ T6321] bond1: entered allmulticast mode [ 59.806592][ T6321] veth0_to_bond: entered allmulticast mode [ 59.820319][ T6321] macvlan2: entered promiscuous mode [ 59.820396][ T6321] macvlan2: entered allmulticast mode [ 59.827569][ T6321] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 59.830707][ T6321] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 60.027969][ T6332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.126'. [ 60.036848][ T6332] bond1: entered promiscuous mode [ 60.037087][ T6332] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.049145][ T6332] bridge1: entered promiscuous mode [ 60.049596][ T6332] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 60.129491][ T6327] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 60.129563][ T6327] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 60.154638][ T6327] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 60.162734][ T6327] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 60.179419][ T6327] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 60.179478][ T6327] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 60.201064][ T6356] netlink: 'syz.3.131': attribute type 1 has an invalid length. [ 60.201401][ T6327] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 60.201417][ T6327] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 60.224533][ T6356] netlink: 'syz.3.131': attribute type 10 has an invalid length. [ 60.224618][ T6356] netlink: 40 bytes leftover after parsing attributes in process `syz.3.131'. [ 60.225085][ T6356] dummy0: entered promiscuous mode [ 60.284932][ T6360] binder: 6359:6360 ioctl c0306201 200000000080 returned -14 [ 60.479453][ T6387] ip6gre1: entered promiscuous mode [ 60.480599][ T6387] ip6gre1: entered allmulticast mode [ 60.601819][ T5833] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 60.762186][ T5833] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.763273][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.763288][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.763299][ T5833] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.763323][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.766497][ T5833] usb 5-1: config 0 descriptor?? [ 60.898990][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 60.913106][ T6441] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.924466][ T6441] bond2: (slave ip6erspan0): making interface the new active one [ 60.927303][ T6441] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 61.131910][ T6460] netlink: 'syz.1.148': attribute type 1 has an invalid length. [ 61.151595][ T6460] bond3: entered promiscuous mode [ 61.151807][ T6460] 8021q: adding VLAN 0 to HW filter on device bond3 [ 61.159761][ T6460] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 61.160049][ T6460] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 61.160064][ T6460] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 61.188893][ T5833] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 61.188951][ T5833] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 61.189209][ T5833] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 61.189225][ T5833] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 61.189239][ T5833] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 61.189252][ T5833] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 61.192939][ T5833] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 61.437022][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'. [ 61.437545][ T4542] usb 5-1: USB disconnect, device number 4 [ 61.449008][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 61.474951][ T6484] macvlan4: entered allmulticast mode [ 61.480667][ T6484] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 61.599956][ T6491] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 61.601270][ T6495] ipvlan2: entered allmulticast mode [ 61.601295][ T6495] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 61.604203][ T6495] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 61.606814][ T6491] openvswitch: netlink: Flow key attr not present in new flow. [ 61.608929][ T6491] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 61.669690][ T6489] ftl_cs: FTL header not found. [ 61.725402][ T6512] netlink: 'syz.2.164': attribute type 10 has an invalid length. [ 61.725479][ T6512] team0: Device wg2 is up. Set it down before adding it as a team port [ 61.749475][ T6489] block2mtd: mtd1: [/dev/loop0] erase_size = 0KiB [1] [ 61.764458][ T6515] Zero length message leads to an empty skb [ 61.764933][ T6515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.165'. [ 61.810471][ T6519] netlink: 'syz.2.166': attribute type 1 has an invalid length. [ 61.810536][ T6519] netlink: 'syz.2.166': attribute type 1 has an invalid length. [ 61.810588][ T6519] netlink: 'syz.2.166': attribute type 1 has an invalid length. [ 61.848567][ T6524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.167'. [ 61.963901][ T6527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63248 sclass=netlink_route_socket pid=6527 comm=syz.2.168 [ 62.448223][ T6535] sctp: [Deprecated]: syz.1.171 (pid 6535) Use of struct sctp_assoc_value in delayed_ack socket option. [ 62.448223][ T6535] Use struct sctp_sack_info instead [ 62.448328][ T6536] sctp: [Deprecated]: syz.1.171 (pid 6536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 62.448328][ T6536] Use struct sctp_sack_info instead [ 62.573741][ T6549] loop2: detected capacity change from 0 to 16384 [ 62.611667][ T6546] device-mapper: ioctl: Invalid ioctl structure: name my, dev f801 [ 62.792659][ T6555] loop2: detected capacity change from 16384 to 0 [ 62.825384][ T6566] syzkaller0: entered promiscuous mode [ 62.825465][ T6566] syzkaller0: entered allmulticast mode [ 62.950249][ T6575] loop2: detected capacity change from 0 to 16384 [ 63.011713][ T2417] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 63.083659][ T6591] netlink: 'syz.3.185': attribute type 4 has an invalid length. [ 63.172351][ T2417] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.178909][ T2417] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.179356][ T6583] loop2: detected capacity change from 16384 to 0 [ 63.188372][ T2417] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.188428][ T2417] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.188468][ T2417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.203449][ T2417] usb 6-1: config 0 descriptor?? [ 63.229323][ T6605] lo: Caught tx_queue_len zero misconfig [ 63.395734][ T6625] bridge0: port 3(ipvlan3) entered blocking state [ 63.395850][ T6625] bridge0: port 3(ipvlan3) entered disabled state [ 63.395925][ T6625] ipvlan3: entered allmulticast mode [ 63.395934][ T6625] bridge0: entered allmulticast mode [ 63.396993][ T6625] ipvlan3: left allmulticast mode [ 63.397003][ T6625] bridge0: left allmulticast mode [ 63.507906][ T6634] block nbd3: Receive control failed (result -32) [ 63.538698][ T6637] block nbd3: Receive control failed (result -32) [ 63.574018][ T6643] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.240.0), cmd(3) [ 63.615739][ T6646] syzkaller0: entered promiscuous mode [ 63.615811][ T6646] syzkaller0: entered allmulticast mode [ 63.621194][ T6646] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 63.625295][ T2417] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 63.635453][ T2417] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 63.895495][ T5833] usb 6-1: USB disconnect, device number 2 [ 63.896675][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 63.968748][ T6665] bond0: entered promiscuous mode [ 63.968816][ T6665] bond_slave_0: entered promiscuous mode [ 63.968964][ T6665] bond_slave_1: entered promiscuous mode [ 63.970737][ T6665] batadv0: entered promiscuous mode [ 63.973043][ T6665] hsr1: entered promiscuous mode [ 63.973252][ T6665] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 63.980812][ T6665] bond0: left promiscuous mode [ 63.980875][ T6665] bond_slave_0: left promiscuous mode [ 63.980983][ T6665] bond_slave_1: left promiscuous mode [ 63.986740][ T6665] batadv0: left promiscuous mode [ 64.063180][ T6679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.209'. [ 64.199594][ T6682] CUSE: unknown device info "" [ 64.199641][ T6682] CUSE: unknown device info "" [ 64.199681][ T6682] CUSE: unknown device info "" [ 64.199698][ T6682] CUSE: unknown device info "" [ 64.199704][ T6682] CUSE: DEVNAME unspecified [ 64.202872][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.211'. [ 64.226015][ T6685] bond2: entered promiscuous mode [ 64.226270][ T6685] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.238145][ T6685] bridge1: entered promiscuous mode [ 64.239089][ T6685] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 64.275249][ T6689] team0: No ports can be present during mode change [ 64.277387][ T6689] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 64.347902][ T45] kauditd_printk_skb: 84 callbacks suppressed [ 64.347972][ T45] audit: type=1400 audit(1788286745.467:441): avc: denied { create } for pid=6692 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.348735][ T45] audit: type=1400 audit(1788286745.467:442): avc: denied { connect } for pid=6692 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.349305][ T45] audit: type=1400 audit(1788286745.467:443): avc: denied { write } for pid=6692 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.395068][ T45] audit: type=1400 audit(1788286745.517:444): avc: denied { ioctl } for pid=6696 comm="syz.0.217" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.395756][ T45] audit: type=1400 audit(1788286745.517:445): avc: denied { map } for pid=6696 comm="syz.0.217" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.395866][ T45] audit: type=1400 audit(1788286745.517:446): avc: denied { execute } for pid=6696 comm="syz.0.217" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.400904][ T6701] netlink: 'syz.2.218': attribute type 1 has an invalid length. [ 64.426097][ T6701] 8021q: adding VLAN 0 to HW filter on device bond3 [ 64.442060][ T6708] syz.1.220 uses obsolete (PF_INET,SOCK_PACKET) [ 64.447659][ T6701] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 64.448816][ T6701] netlink: 'syz.2.218': attribute type 10 has an invalid length. [ 64.448833][ T6701] netlink: 40 bytes leftover after parsing attributes in process `syz.2.218'. [ 64.457965][ T6701] dummy0: entered promiscuous mode [ 64.464841][ T6701] bond3: (slave dummy0): Releasing backup interface [ 64.473769][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 64.484133][ T6704] 0: reclassify loop, rule prio 0, protocol 03 [ 64.489142][ T6710] netlink: 112 bytes leftover after parsing attributes in process `syz.1.221'. [ 64.559543][ T45] audit: type=1400 audit(1788286745.677:447): avc: denied { append } for pid=6717 comm="syz.0.224" name="event1" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 64.560684][ T45] audit: type=1400 audit(1788286745.677:448): avc: denied { map } for pid=6717 comm="syz.0.224" path="socket:[17869]" dev="sockfs" ino=17869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.560791][ T45] audit: type=1400 audit(1788286745.677:449): avc: denied { read } for pid=6717 comm="syz.0.224" path="socket:[17869]" dev="sockfs" ino=17869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.588702][ T45] audit: type=1800 audit(1788286745.707:450): pid=6714 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.222" name="/" dev="fuse" ino=1 res=0 errno=0 [ 64.801624][ T5517] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 64.911631][ T5875] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 64.953902][ T5517] usb 5-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 64.960772][ T5517] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.963515][ T5517] usb 5-1: Product: 聡࿫缺莧鍃भ첧쟲瞥봒菛畁㋂㝩⃎㒜턏ᢓ仡밮䦘堜ᡓꭴᎿ鶄뼨ᜏ偮鉇蘬짬ᄙ﬈玓钼ꑫ뮃뛱岵䯗ﰥ妩꿗祃銛䵯棕匓耐í羚替䦞㻨架繇贆낆׀㮼盼郪ꄒ넽哐ⴜᎪ⏞﬈턹꬙왠滗ឃᷛ뢜脩겅缶ꮂ⩎⸲퉺ꒀ㘠퇖扫࠰ሹ鱝ᩞ徊䙹瞦䥬帧ཹ [ 64.965411][ T6750] netlink: 'syz.1.233': attribute type 1 has an invalid length. [ 64.975354][ T5517] usb 5-1: Manufacturer: ఌ [ 64.975368][ T5517] usb 5-1: SerialNumber: 컁줭瞂⊠牖ٱ瞝ず솬듫柟ꑗ獪茻粐箟젽䦁驢첰쎘커ᮩ珆こ纚움㑭驓渑旊븅걁뒠箯瞴疽쳱￞㾞촴䨯ﯣ㿛凂ⵁ㽪㨲뤵⛹浃㏝㫗傲藋혈㭈兡뭶좆 [ 64.996209][ T6750] bond5: entered promiscuous mode [ 64.996552][ T6750] 8021q: adding VLAN 0 to HW filter on device bond5 [ 65.007440][ T6750] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 65.007515][ T6750] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 65.007967][ T6750] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 65.074241][ T5875] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.077092][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.077109][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.077120][ T5875] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 65.077140][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.078799][ T5875] usb 7-1: config 0 descriptor?? [ 65.171004][ T6755] syzkaller1: entered promiscuous mode [ 65.171079][ T6755] syzkaller1: entered allmulticast mode [ 65.365052][ T6763] netlink: 32 bytes leftover after parsing attributes in process `syz.3.235'. [ 65.402636][ T5517] usb 5-1: USB disconnect, device number 5 [ 65.486560][ T5875] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 65.489470][ T5875] hid_parser_main: 5 callbacks suppressed [ 65.489552][ T5875] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 65.489593][ T5875] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 65.498440][ T5875] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 65.644333][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.240'. [ 65.727913][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 65.735306][ T6795] macvlan5: entered allmulticast mode [ 65.741409][ T6795] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 65.753273][ T5875] usb 7-1: USB disconnect, device number 2 [ 65.809997][ T6802] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 65.850987][ T6810] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 65.964884][ T5875] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 65.987435][ T6818] overlayfs: failed to resolve './file0': -2 [ 66.032079][ T6827] netlink: 'syz.0.250': attribute type 1 has an invalid length. [ 66.039996][ T6829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.251'. [ 70.993212][ T45] kauditd_printk_skb: 37 callbacks suppressed [ 70.993309][ T45] audit: type=1400 audit(1788286752.117:488): avc: denied { write } for pid=6876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.063573][ T45] audit: type=1400 audit(1788286752.187:489): avc: denied { write } for pid=6879 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.203804][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.203916][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.490352][ T45] audit: type=1400 audit(1788286752.607:490): avc: denied { write } for pid=6881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.549958][ T45] audit: type=1400 audit(1788286752.667:491): avc: denied { write } for pid=6884 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.416548][ T45] audit: type=1400 audit(1788286754.537:492): avc: denied { write } for pid=6890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.465934][ T45] audit: type=1400 audit(1788286754.587:493): avc: denied { write } for pid=6893 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.645286][ T45] audit: type=1400 audit(1788286754.767:494): avc: denied { write } for pid=6896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.689532][ T45] audit: type=1400 audit(1788286754.807:495): avc: denied { write } for pid=6899 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.318748][ T76] cfg80211: failed to load regulatory.db [ 76.686621][ T45] audit: type=1400 audit(1788286757.807:496): avc: denied { write } for pid=6904 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.751277][ T45] audit: type=1400 audit(1788286757.867:497): avc: denied { write } for pid=6907 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.669440][ T45] audit: type=1400 audit(1788286758.787:498): avc: denied { write } for pid=6910 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.720799][ T45] audit: type=1400 audit(1788286758.837:499): avc: denied { write } for pid=6913 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.542367][ T45] audit: type=1400 audit(1788286760.667:500): avc: denied { create } for pid=6922 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.543434][ T6919] validate_nla: 4 callbacks suppressed [ 79.543445][ T6919] netlink: 'syz.2.255': attribute type 4 has an invalid length. [ 79.604421][ T45] audit: type=1400 audit(1788286760.727:501): avc: denied { read } for pid=6918 comm="syz.2.255" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 79.604487][ T45] audit: type=1400 audit(1788286760.727:502): avc: denied { open } for pid=6918 comm="syz.2.255" path="/82/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 79.616902][ T45] audit: type=1400 audit(1788286760.737:503): avc: denied { write } for pid=6930 comm="syz.3.258" name="usb_gadget" dev="configfs" ino=3137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.617389][ T45] audit: type=1400 audit(1788286760.737:504): avc: denied { create } for pid=6930 comm="syz.3.258" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 79.620224][ T45] audit: type=1400 audit(1788286760.737:505): avc: denied { write } for pid=6930 comm="syz.3.258" name="functions" dev="configfs" ino=18859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.633188][ T6929] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.633257][ T6929] block device autoloading is deprecated and will be removed. [ 79.692834][ T6939] bond0: entered promiscuous mode [ 79.692876][ T6939] bond_slave_0: entered promiscuous mode [ 79.693018][ T6939] bond_slave_1: entered promiscuous mode [ 79.693128][ T6939] batadv0: entered promiscuous mode [ 79.708621][ T6939] bond0: left promiscuous mode [ 79.708700][ T6939] bond_slave_0: left promiscuous mode [ 79.708938][ T6939] bond_slave_1: left promiscuous mode [ 79.709081][ T6939] batadv0: left promiscuous mode [ 79.794633][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.266'. [ 79.834604][ T6949] bond4: entered promiscuous mode [ 79.837066][ T6949] 8021q: adding VLAN 0 to HW filter on device bond4 [ 79.875116][ T6949] bridge2: entered promiscuous mode [ 79.875795][ T6949] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 79.921914][ T854] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 80.004649][ T6973] netlink: 'syz.1.275': attribute type 1 has an invalid length. [ 80.030896][ T6973] 8021q: adding VLAN 0 to HW filter on device bond6 [ 80.041775][ T6973] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 80.044248][ T6973] netlink: 'syz.1.275': attribute type 10 has an invalid length. [ 80.044261][ T6973] netlink: 40 bytes leftover after parsing attributes in process `syz.1.275'. [ 80.044297][ T6973] dummy0: entered promiscuous mode [ 80.053308][ T6973] bond6: (slave dummy0): Releasing backup interface [ 80.072628][ T854] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.079661][ T854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.079728][ T854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.079768][ T854] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.079825][ T854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.104929][ T854] usb 5-1: config 0 descriptor?? [ 80.106617][ T6977] : renamed from vlan0 (while UP) [ 80.337263][ T7007] netlink: 'syz.2.284': attribute type 13 has an invalid length. [ 80.337327][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 80.346197][ T7009] netlink: 'syz.3.285': attribute type 1 has an invalid length. [ 80.350951][ T7007] netlink: 'syz.2.284': attribute type 13 has an invalid length. [ 80.351247][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 80.370872][ T7009] bond1: entered promiscuous mode [ 80.371110][ T7009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.379687][ T7009] bond1: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 80.379739][ T7009] bond1: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 80.379959][ T7009] bond1: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 80.401795][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.407074][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.407098][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.407115][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.523595][ T854] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 80.523676][ T854] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 80.523892][ T854] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 80.532661][ T854] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 80.542200][ T7020] process 'syz.3.287' launched './file0' with NULL argv: empty string added [ 80.748143][ T7028] support for the xor transformation has been removed. [ 80.772834][ T5833] usb 5-1: USB disconnect, device number 6 [ 80.963319][ T7045] netlink: 42 bytes leftover after parsing attributes in process `syz.3.295'. [ 81.229935][ T7056] binder: 7055:7056 ioctl c0306201 200000000080 returned -14 [ 81.422250][ T7070] netlink: 'syz.1.299': attribute type 1 has an invalid length. [ 81.456945][ T7075] netlink: 'syz.0.305': attribute type 10 has an invalid length. [ 81.458612][ T7070] 8021q: adding VLAN 0 to HW filter on device bond7 [ 81.486551][ T7073] bond2: down delay (12) is not a multiple of miimon (100), value rounded to 0 ms [ 81.486943][ T7075] team0: Device wg2 is up. Set it down before adding it as a team port [ 81.494330][ T7070] bond7: (slave veth0_to_bond): making interface the new active one [ 81.497527][ T7070] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 81.503433][ T7070] bond7: entered promiscuous mode [ 81.503511][ T7070] veth0_to_bond: entered promiscuous mode [ 81.503668][ T7070] bond7: entered allmulticast mode [ 81.503680][ T7070] veth0_to_bond: entered allmulticast mode [ 81.511250][ T7070] macvlan2: entered promiscuous mode [ 81.511268][ T7070] macvlan2: entered allmulticast mode [ 81.512671][ T7070] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 81.517916][ T7070] bond7: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 81.631507][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'. [ 81.775079][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 81.780483][ T7099] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.780817][ T7099] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.941588][ T4542] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 81.949921][ T45] kauditd_printk_skb: 22 callbacks suppressed [ 81.952799][ T45] audit: type=1400 audit(1788286763.067:528): avc: denied { watch } for pid=7113 comm="syz.2.320" path="/95/bus" dev="tmpfs" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 81.953107][ T45] audit: type=1400 audit(1788286763.077:529): avc: denied { watch_sb watch_reads } for pid=7113 comm="syz.2.320" path="/95/bus" dev="tmpfs" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.960455][ T7114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.320'. [ 81.960467][ T7114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.320'. [ 81.960474][ T7114] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 81.960531][ T45] audit: type=1400 audit(1788286763.077:530): avc: denied { write } for pid=7113 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 81.972012][ T45] audit: type=1400 audit(1788286763.097:531): avc: denied { create } for pid=7113 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 81.982414][ T7117] syzkaller0: entered promiscuous mode [ 81.982426][ T7117] syzkaller0: entered allmulticast mode [ 82.053099][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 82.053669][ T7121] binder: 7120:7121 ioctl c0306201 200000000080 returned -14 [ 82.056578][ T45] audit: type=1400 audit(1788286763.177:532): avc: denied { listen } for pid=7120 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.058184][ T7121] netlink: 'syz.2.322': attribute type 4 has an invalid length. [ 82.077449][ T7121] binder: 7120:7121 ioctl 4008af03 200000000b40 returned -22 [ 82.094446][ T4542] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.110887][ T4542] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.110916][ T4542] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.110934][ T4542] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.110966][ T4542] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.130531][ T4542] usb 5-1: config 0 descriptor?? [ 82.140105][ T7126] Cannot find del_set index 0 as target [ 82.215429][ T7133] bond1: (slave veth0_to_bond): Releasing active interface [ 82.216645][ T7133] veth0_to_bond: left promiscuous mode [ 82.216831][ T7133] veth0_to_bond: left allmulticast mode [ 82.218991][ T7135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.320005][ T7143] FAULT_INJECTION: forcing a failure. [ 82.320005][ T7143] name failslab, interval 1, probability 0, space 0, times 0 [ 82.320051][ T7143] CPU: 3 UID: 0 PID: 7143 Comm: syz.2.332 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.320079][ T7143] Tainted: [L]=SOFTLOCKUP [ 82.320085][ T7143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.320092][ T7143] Call Trace: [ 82.320097][ T7143] [ 82.320102][ T7143] dump_stack_lvl+0x100/0x190 [ 82.320122][ T7143] should_fail_ex.cold+0x5/0xa [ 82.320139][ T7143] should_failslab+0xc2/0x120 [ 82.320154][ T7143] __kmalloc_noprof+0xfc/0x840 [ 82.320167][ T7143] ? vhost_dev_set_owner+0x3b2/0xa30 [ 82.320184][ T7143] vhost_dev_set_owner+0x3b2/0xa30 [ 82.320202][ T7143] vhost_dev_ioctl+0x521/0xe70 [ 82.320218][ T7143] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.320232][ T7143] ? do_vfs_ioctl+0x226/0x13e0 [ 82.320250][ T7143] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 82.320268][ T7143] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 82.320288][ T7143] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 82.320309][ T7143] vhost_vsock_dev_ioctl+0x320/0xb60 [ 82.320326][ T7143] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 82.320344][ T7143] ? selinux_file_ioctl+0x13b/0x290 [ 82.320360][ T7143] ? selinux_file_ioctl+0xb6/0x290 [ 82.320378][ T7143] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 82.320394][ T7143] __x64_sys_ioctl+0x18e/0x210 [ 82.320413][ T7143] do_syscall_64+0x123/0x790 [ 82.320427][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.320439][ T7143] RIP: 0033:0x7f41dab9e159 [ 82.320448][ T7143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.320459][ T7143] RSP: 002b:00007f41db9a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.320470][ T7143] RAX: ffffffffffffffda RBX: 00007f41dae25fa0 RCX: 00007f41dab9e159 [ 82.320477][ T7143] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000005 [ 82.320484][ T7143] RBP: 00007f41dac35024 R08: 0000000000000000 R09: 0000000000000000 [ 82.320490][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.320497][ T7143] R13: 00007f41dae26038 R14: 00007f41dae25fa0 R15: 00007fff975c5fc8 [ 82.320512][ T7143] [ 82.322042][ T7143] syz_tun: entered allmulticast mode [ 82.323777][ T45] audit: type=1400 audit(1788286763.447:533): avc: denied { setopt } for pid=7142 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.325287][ T7142] syz_tun: left allmulticast mode [ 82.430685][ T7154] loop2: detected capacity change from 0 to 16384 [ 82.478771][ T7156] ipvlan4: entered allmulticast mode [ 82.479595][ T7156] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 82.548310][ T4542] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 82.548405][ T4542] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 82.548713][ T4542] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 82.563733][ T4542] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 82.615587][ C3] I/O error, dev loop2, sector 14344 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2 [ 82.616055][ T7157] loop2: detected capacity change from 16384 to 0 [ 82.616068][ C3] I/O error, dev loop2, sector 14336 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 82.656206][ T7160] all: renamed from macvtap0 (while UP) [ 82.730473][ T7164] sock: sock_timestamping_bind_phc: sock not bind to device [ 82.767653][ T7174] netlink: 'syz.3.342': attribute type 1 has an invalid length. [ 82.806962][ T5081] usb 5-1: USB disconnect, device number 7 [ 82.843388][ T7179] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 82.852647][ T7179] bond3 (unregistering): Released all slaves [ 82.980466][ T45] audit: type=1400 audit(1788286764.097:534): avc: denied { ioctl } for pid=7203 comm="syz.1.352" path="socket:[18303]" dev="sockfs" ino=18303 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.036085][ T45] audit: type=1400 audit(1788286764.157:535): avc: denied { mounton } for pid=7207 comm="syz.1.354" path="/92/file0" dev="tmpfs" ino=524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 83.098514][ T7213] bond6: entered promiscuous mode [ 83.101306][ T7213] 8021q: adding VLAN 0 to HW filter on device bond6 [ 83.105074][ T45] audit: type=1400 audit(1788286764.227:536): avc: denied { write } for pid=7207 comm="syz.1.354" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 83.123840][ T7213] bridge3: entered promiscuous mode [ 83.124390][ T7213] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 83.151081][ T45] audit: type=1400 audit(1788286764.267:537): avc: denied { nlmsg_read } for pid=7217 comm="syz.1.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.152981][ T7218] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 83.461647][ T4542] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 83.636548][ T4542] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 83.637529][ T4542] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 83.637576][ T4542] usb 6-1: config 0 has no interface number 0 [ 83.639441][ T4542] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.639459][ T4542] usb 6-1: Product: syz [ 83.639471][ T4542] usb 6-1: Manufacturer: syz [ 83.639506][ T4542] usb 6-1: SerialNumber: syz [ 83.642058][ T4542] usb 6-1: config 0 descriptor?? [ 83.849263][ T7219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.849629][ T7219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.061663][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 84.128610][ T7265] bond7: entered promiscuous mode [ 84.130718][ T7265] 8021q: adding VLAN 0 to HW filter on device bond7 [ 84.150406][ T7265] bond7: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 84.150887][ T7265] bond7: (slave ipvlan5): The slave device specified does not support setting the MAC address [ 84.150949][ T7265] bond7: (slave ipvlan5): Setting fail_over_mac to active for active-backup mode [ 84.212001][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.216715][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.220593][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.220651][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.220679][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.222105][ T10] usb 8-1: config 0 descriptor?? [ 84.436664][ T7279] bond8: entered promiscuous mode [ 84.437177][ T7279] 8021q: adding VLAN 0 to HW filter on device bond8 [ 84.633027][ T10] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 84.633085][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 84.638491][ T10] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 84.895230][ T63] usb 8-1: USB disconnect, device number 3 [ 85.239290][ T7299] block nbd4: Receive control failed (result -32) [ 85.253557][ T7302] block nbd4: Receive control failed (result -32) [ 85.394020][ T7315] binder: 7314:7315 ioctl c0306201 200000000080 returned -14 [ 85.480263][ T7323] validate_nla: 5 callbacks suppressed [ 85.480363][ T7323] netlink: 'syz.2.391': attribute type 10 has an invalid length. [ 85.480407][ T7323] team0: Device wg2 is up. Set it down before adding it as a team port [ 85.491946][ T7324] input: syz1 as /devices/virtual/input/input5 [ 85.572876][ T7329] netlink: 'syz.3.394': attribute type 1 has an invalid length. [ 85.587968][ T7329] 8021q: adding VLAN 0 to HW filter on device bond3 [ 85.594756][ T7329] bond3: (slave veth0_to_bond): making interface the new active one [ 85.599270][ T7329] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 85.604078][ T7329] bond3: entered promiscuous mode [ 85.604940][ T7329] veth0_to_bond: entered promiscuous mode [ 85.605041][ T7329] bond3: entered allmulticast mode [ 85.605050][ T7329] veth0_to_bond: entered allmulticast mode [ 85.614175][ T7329] macvlan2: entered promiscuous mode [ 85.614223][ T7329] macvlan2: entered allmulticast mode [ 85.617515][ T7329] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 85.621421][ T7329] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 85.622072][ T7334] __nla_validate_parse: 11 callbacks suppressed [ 85.622082][ T7334] netlink: 277 bytes leftover after parsing attributes in process `syz.2.396'. [ 85.624670][ T7336] netlink: 277 bytes leftover after parsing attributes in process `syz.2.396'. [ 85.662135][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'. [ 85.790979][ T7352] netlink: 16 bytes leftover after parsing attributes in process `syz.2.401'. [ 85.981901][ T7100] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 86.015606][ T7365] syzkaller0: entered promiscuous mode [ 86.015705][ T7365] syzkaller0: entered allmulticast mode [ 86.162941][ T7100] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.164326][ T7100] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.164342][ T7100] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.164352][ T7100] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.164371][ T7100] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.168123][ T7100] usb 8-1: config 0 descriptor?? [ 86.168442][ T7369] Cannot find del_set index 0 as target [ 86.178486][ T4542] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 86.178504][ T4542] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 86.179367][ T4542] asix 6-1:0.251: probe with driver asix failed with error -5 [ 86.191193][ T4542] usb 6-1: USB disconnect, device number 3 [ 86.456524][ T7397] ipvlan5: entered allmulticast mode [ 86.457603][ T7397] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 86.576742][ T7100] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 86.576804][ T7100] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 86.582826][ T7100] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 86.668837][ T7412] loop2: detected capacity change from 0 to 16384 [ 86.671928][ T4542] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 86.832788][ T44] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 86.839883][ T43] usb 8-1: USB disconnect, device number 4 [ 86.840899][ T4542] usb 6-1: unable to get BOS descriptor or descriptor too short [ 86.840945][ T4542] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.844330][ T4542] usb 6-1: config 1 has an invalid interface descriptor of length 8, skipping [ 86.844352][ T4542] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.846150][ T4542] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.846168][ T4542] usb 6-1: Product: syz [ 86.846179][ T4542] usb 6-1: Manufacturer: syz [ 86.846191][ T4542] usb 6-1: SerialNumber: syz [ 86.931644][ T7412] loop2: detected capacity change from 16384 to 0 [ 86.991872][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 86.995183][ T44] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 87.001827][ T44] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 87.006850][ T44] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 87.012372][ T44] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.012398][ T44] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 87.025152][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.025214][ T44] usb 5-1: Product: syz [ 87.025498][ T44] usb 5-1: Manufacturer: syz [ 87.025511][ T44] usb 5-1: SerialNumber: syz [ 87.035897][ C2] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 87.038231][ T44] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input6 [ 87.060054][ T4542] usb 6-1: selecting invalid altsetting 1 [ 87.062394][ T4542] cdc_ncm 6-1:1.0: bind() failure [ 87.072208][ T4542] usb 6-1: USB disconnect, device number 4 [ 87.251582][ T44] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 87.251723][ T44] (id 0x00) [ 87.292228][ T44] rc_core: IR keymap rc-imon-pad not found [ 87.292282][ T44] Registered IR keymap rc-empty [ 87.292351][ T44] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 87.292363][ T44] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 87.317078][ T44] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 87.319136][ T44] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input7 [ 87.329255][ T44] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:8> initialized [ 87.397795][ T45] kauditd_printk_skb: 12 callbacks suppressed [ 87.397973][ T45] audit: type=1400 audit(1788286768.517:550): avc: denied { create } for pid=7419 comm="syz.3.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 87.490120][ T45] audit: type=1400 audit(1788286768.607:551): avc: denied { setopt } for pid=7419 comm="syz.3.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 87.500863][ T854] usb 5-1: USB disconnect, device number 8 [ 87.502667][ T7407] imon:display_open: could not find interface for minor 0 [ 87.621332][ T7427] syzkaller0: entered promiscuous mode [ 87.622441][ T7427] syzkaller0: entered allmulticast mode [ 87.709730][ T45] audit: type=1400 audit(1788286768.827:552): avc: denied { mount } for pid=7428 comm="syz.1.429" name="/" dev="hugetlbfs" ino=23565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 87.745253][ T7433] netlink: 'syz.1.430': attribute type 1 has an invalid length. [ 87.745306][ T7433] netlink: 'syz.1.430': attribute type 1 has an invalid length. [ 87.745341][ T7433] netlink: 'syz.1.430': attribute type 1 has an invalid length. [ 87.745351][ T7433] netlink: 'syz.1.430': attribute type 1 has an invalid length. [ 87.745358][ T7433] netlink: 'syz.1.430': attribute type 1 has an invalid length. [ 87.745365][ T7433] netlink: 'syz.1.430': attribute type 1 has an invalid length. [ 87.780394][ T7435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.431'. [ 87.807549][ T7438] netlink: 'syz.1.432': attribute type 13 has an invalid length. [ 88.113555][ T7465] netlink: 108 bytes leftover after parsing attributes in process `syz.0.436'. [ 88.194482][ T45] audit: type=1400 audit(1788286769.317:553): avc: denied { mount } for pid=7471 comm="syz.0.438" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 88.211618][ T76] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 88.217309][ T45] audit: type=1400 audit(1788286769.337:554): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 88.295725][ T45] audit: type=1400 audit(1788286769.417:555): avc: denied { read } for pid=7483 comm="syz.3.441" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 88.297318][ T45] audit: type=1400 audit(1788286769.417:556): avc: denied { open } for pid=7483 comm="syz.3.441" path="/dev/ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 88.297602][ T45] audit: type=1400 audit(1788286769.417:557): avc: denied { ioctl } for pid=7483 comm="syz.3.441" path="/dev/ptp0" dev="devtmpfs" ino=728 ioctlcmd=0x3d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 88.299182][ T45] audit: type=1400 audit(1788286769.417:558): avc: denied { setopt } for pid=7483 comm="syz.3.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.299529][ T7484] netlink: 'syz.3.441': attribute type 10 has an invalid length. [ 88.299653][ T7484] dummy0: left promiscuous mode [ 88.304476][ T7484] team0: Port device dummy0 added [ 88.384810][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.442'. [ 88.386740][ T76] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.387817][ T76] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.387839][ T76] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.387857][ T76] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.387890][ T76] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.396310][ T76] usb 7-1: config 0 descriptor?? [ 88.441234][ T7495] bond3: entered promiscuous mode [ 88.443423][ T7495] 8021q: adding VLAN 0 to HW filter on device bond3 [ 88.455877][ T7501] bridge1: entered promiscuous mode [ 88.456640][ T7501] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 88.476314][ T7504] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 88.519626][ T7508] ip6t_srh: unknown srh invflags 4000 [ 88.519959][ T45] audit: type=1400 audit(1788286769.637:559): avc: denied { create } for pid=7507 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.532982][ T7511] ip6t_srh: unknown srh invflags 4000 [ 88.619038][ T7523] IPv6: NLM_F_CREATE should be specified when creating new route [ 88.619060][ T7524] netlink: 80 bytes leftover after parsing attributes in process `syz.3.448'. [ 88.710883][ T7524] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4fe00 [ 88.711024][ T7524] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.711053][ T7524] raw: 00fff00000000000 ffffea00013f8008 ffffea00013f8008 0000000000000000 [ 88.711071][ T7524] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 88.711083][ T7524] page dumped because: unmovable page [ 88.711092][ T7524] page_owner tracks the page as allocated [ 88.711099][ T7524] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5723, tgid 5723 (syz-executor), ts 48121123240 [ 88.711127][ T7524] post_alloc_hook+0xfd/0x120 [ 88.711218][ T7524] get_page_from_freelist+0x110d/0x35d0 [ 88.711246][ T7524] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 88.711269][ T7524] alloc_pages_mpol+0x201/0x550 [ 88.711288][ T7524] alloc_pages_noprof+0x1a/0x160 [ 88.711311][ T7524] __vmalloc_node_range_noprof+0x833/0x1420 [ 88.711381][ T7524] vmalloc_user_noprof+0x9e/0xe0 [ 88.711401][ T7524] kcov_ioctl+0x4d/0x760 [ 88.711418][ T7524] __x64_sys_ioctl+0x18e/0x210 [ 88.711663][ T7524] do_syscall_64+0x123/0x790 [ 88.711685][ T7524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.711764][ T7524] page_owner free stack trace missing [ 88.821883][ T76] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd [ 88.821962][ T76] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 88.825791][ T7539] netlink: 232 bytes leftover after parsing attributes in process `syz.3.454'. [ 88.830508][ T76] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 88.969215][ T7550] bond8: entered promiscuous mode [ 88.969485][ T7550] 8021q: adding VLAN 0 to HW filter on device bond8 [ 88.974970][ T7550] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 88.975015][ T7550] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 88.975050][ T7550] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 89.073510][ T5875] usb 7-1: USB disconnect, device number 3 [ 89.271510][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.467'. [ 89.280534][ T7573] macvlan6: entered allmulticast mode [ 89.287138][ T7573] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 89.348997][ T7576] bond9: entered promiscuous mode [ 89.349387][ T7576] 8021q: adding VLAN 0 to HW filter on device bond9 [ 89.389489][ T7581] tipc: Enabling of bearer rejected, failed to enable media [ 89.391619][ T44] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 89.424265][ T7584] capability: warning: `syz.1.470' uses 32-bit capabilities (legacy support in use) [ 89.541560][ T44] usb 8-1: Using ep0 maxpacket: 32 [ 89.542462][ T44] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 89.543436][ T44] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.543481][ T44] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.543511][ T44] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.548571][ T44] usb 8-1: config 0 descriptor?? [ 89.617596][ T7593] FAULT_INJECTION: forcing a failure. [ 89.617596][ T7593] name failslab, interval 1, probability 0, space 0, times 0 [ 89.617676][ T7593] CPU: 1 UID: 0 PID: 7593 Comm: syz.2.471 Tainted: G ** replaying previous printk message ** [ 89.617676][ T7593] CPU: 1 UID: 0 PID: 7593 Comm: syz.2.471 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.617702][ T7593] Tainted: [L]=SOFTLOCKUP [ 89.617708][ T7593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.617719][ T7593] Call Trace: [ 89.617725][ T7593] [ 89.617732][ T7593] dump_stack_lvl+0x100/0x190 [ 89.617763][ T7593] should_fail_ex.cold+0x5/0xa [ 89.617788][ T7593] should_failslab+0xc2/0x120 [ 89.617810][ T7593] __kvmalloc_node_noprof+0x113/0x9b0 [ 89.617834][ T7593] ? sbitmap_init_node+0x1cc/0x720 [ 89.617863][ T7593] sbitmap_init_node+0x1cc/0x720 [ 89.617886][ T7593] ? __kmalloc_cache_node_noprof+0x271/0x720 [ 89.617909][ T7593] sbitmap_queue_init_node+0x40/0x4a0 [ 89.617937][ T7593] blk_mq_init_tags+0x184/0x300 [ 89.617961][ T7593] blk_mq_alloc_map_and_rqs+0x244/0xe30 [ 89.617991][ T7593] blk_mq_alloc_sched_tags+0x1de/0x350 [ 89.618028][ T7593] blk_mq_alloc_sched_res+0x8e/0x250 [ 89.618057][ T7593] blk_mq_alloc_sched_res_batch+0xfc/0x4f0 [ 89.618090][ T7593] blk_mq_update_nr_hw_queues+0x263/0x15f0 [ 89.618111][ T7593] ? find_held_lock+0x2b/0x80 [ 89.618143][ T7593] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 89.618170][ T7593] ? sysfs_create_file_ns+0x14c/0x1e0 [ 89.618204][ T7593] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 89.618231][ T7593] nbd_start_device+0x1a6/0xbd0 [ 89.618258][ T7593] nbd_genl_connect+0xfc2/0x1760 [ 89.618282][ T7593] ? __pfx_nbd_genl_connect+0x10/0x10 [ 89.618305][ T7593] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 89.618323][ T7593] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 89.618347][ T7593] genl_family_rcv_msg_doit+0x214/0x300 [ 89.618368][ T7593] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 89.618386][ T7593] ? genl_get_cmd+0x3e7/0x760 [ 89.618418][ T7593] ? netlink_sendmsg+0x680/0xda0 [ 89.618439][ T7593] ? ____sys_sendmsg+0xa4d/0xbe0 [ 89.618462][ T7593] ? __radix_tree_lookup+0x217/0x2b0 [ 89.618487][ T7593] genl_rcv_msg+0x560/0x800 [ 89.618509][ T7593] ? __pfx_genl_rcv_msg+0x10/0x10 [ 89.618528][ T7593] ? __lock_acquire+0x4c5/0x1ec0 [ 89.618545][ T7593] ? __pfx_nbd_genl_connect+0x10/0x10 [ 89.618568][ T7593] ? __lock_acquire+0x4c5/0x1ec0 [ 89.618590][ T7593] netlink_rcv_skb+0x159/0x420 [ 89.618615][ T7593] ? __pfx_genl_rcv_msg+0x10/0x10 [ 89.618634][ T7593] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 89.618668][ T7593] ? netlink_deliver_tap+0x1ae/0xcc0 [ 89.618694][ T7593] genl_rcv+0x28/0x40 [ 89.618719][ T7593] netlink_unicast+0x585/0x850 [ 89.618747][ T7593] ? __pfx_netlink_unicast+0x10/0x10 [ 89.618773][ T7593] ? __pfx_sock_has_perm+0x10/0x10 [ 89.618803][ T7593] netlink_sendmsg+0x8b0/0xda0 [ 89.618833][ T7593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.618861][ T7593] ? selinux_socket_sendmsg+0x198/0x2f0 [ 89.618892][ T7593] ____sys_sendmsg+0xa4d/0xbe0 [ 89.618913][ T7593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.618941][ T7593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.618969][ T7593] ? lock_acquire+0x1d1/0x380 [ 89.619004][ T7593] ? get_pid_task+0x2a/0x250 [ 89.619031][ T7593] ___sys_sendmsg+0x190/0x1e0 [ 89.619056][ T7593] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.619079][ T7593] ? get_pid_task+0x106/0x250 [ 89.619113][ T7593] ? find_held_lock+0x2b/0x80 [ 89.619155][ T7593] __sys_sendmsg+0x160/0x210 [ 89.619174][ T7593] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.619205][ T7593] do_syscall_64+0x123/0x790 [ 89.619229][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.619246][ T7593] RIP: 0033:0x7f41dab9e159 [ 89.619262][ T7593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.619279][ T7593] RSP: 002b:00007f41db9a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.619297][ T7593] RAX: ffffffffffffffda RBX: 00007f41dae25fa0 RCX: 00007f41dab9e159 [ 89.619308][ T7593] RDX: 0000000020000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 89.619321][ T7593] RBP: 00007f41db9a8090 R08: 0000000000000000 R09: 0000000000000000 [ 89.619331][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.619341][ T7593] R13: 00007f41dae26038 R14: 00007f41dae25fa0 R15: 00007fff975c5fc8 [ 89.619366][ T7593] [ 89.619440][ T7593] ================================================================== [ 89.619471][ T7593] BUG: KASAN: slab-out-of-bounds in blk_mq_free_rqs+0x6e2/0x760 [ 89.619489][ T7593] Read of size 8 at addr ffff888028e5b5e8 by task syz.2.471/7593 [ 89.619504][ T7593] [ 89.619513][ T7593] CPU: 1 UID: 0 PID: 7593 Comm: syz.2.471 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.619536][ T7593] Tainted: [L]=SOFTLOCKUP [ 89.619542][ T7593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.619552][ T7593] Call Trace: [ 89.619558][ T7593] [ 89.619564][ T7593] dump_stack_lvl+0x100/0x190 [ 89.619588][ T7593] print_report+0x13d/0x4b0 [ 89.619615][ T7593] ? __virt_addr_valid+0x239/0x430 [ 89.619633][ T7593] ? blk_mq_free_rqs+0x6e2/0x760 [ 89.619650][ T7593] kasan_report+0xdf/0x1c0 [ 89.619671][ T7593] ? blk_mq_free_rqs+0x6e2/0x760 [ 89.619691][ T7593] blk_mq_free_rqs+0x6e2/0x760 [ 89.619711][ T7593] blk_mq_free_map_and_rqs+0x30/0x120 [ 89.619730][ T7593] blk_mq_alloc_sched_tags+0x259/0x350 [ 89.619759][ T7593] blk_mq_alloc_sched_res+0x8e/0x250 [ 89.619786][ T7593] blk_mq_alloc_sched_res_batch+0xfc/0x4f0 [ 89.619816][ T7593] blk_mq_update_nr_hw_queues+0x263/0x15f0 [ 89.619836][ T7593] ? find_held_lock+0x2b/0x80 [ 89.619862][ T7593] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 89.619885][ T7593] ? sysfs_create_file_ns+0x14c/0x1e0 [ 89.619906][ T7593] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 89.619928][ T7593] nbd_start_device+0x1a6/0xbd0 [ 89.619951][ T7593] nbd_genl_connect+0xfc2/0x1760 [ 89.619972][ T7593] ? __pfx_nbd_genl_connect+0x10/0x10 [ 89.619993][ T7593] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 89.620018][ T7593] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 89.620039][ T7593] genl_family_rcv_msg_doit+0x214/0x300 [ 89.620057][ T7593] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 89.620075][ T7593] ? genl_get_cmd+0x3e7/0x760 [ 89.620104][ T7593] ? netlink_sendmsg+0x680/0xda0 [ 89.620128][ T7593] ? ____sys_sendmsg+0xa4d/0xbe0 [ 89.620148][ T7593] ? __radix_tree_lookup+0x217/0x2b0 [ 89.620168][ T7593] genl_rcv_msg+0x560/0x800 [ 89.620186][ T7593] ? __pfx_genl_rcv_msg+0x10/0x10 [ 89.620202][ T7593] ? __lock_acquire+0x4c5/0x1ec0 [ 89.620220][ T7593] ? __pfx_nbd_genl_connect+0x10/0x10 [ 89.620240][ T7593] ? __lock_acquire+0x4c5/0x1ec0 [ 89.620259][ T7593] netlink_rcv_skb+0x159/0x420 [ 89.620285][ T7593] ? __pfx_genl_rcv_msg+0x10/0x10 [ 89.620302][ T7593] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 89.620331][ T7593] ? netlink_deliver_tap+0x1ae/0xcc0 [ 89.620357][ T7593] genl_rcv+0x28/0x40 [ 89.620382][ T7593] netlink_unicast+0x585/0x850 [ 89.620409][ T7593] ? __pfx_netlink_unicast+0x10/0x10 [ 89.620434][ T7593] ? __pfx_sock_has_perm+0x10/0x10 [ 89.620460][ T7593] netlink_sendmsg+0x8b0/0xda0 [ 89.620486][ T7593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.620512][ T7593] ? selinux_socket_sendmsg+0x198/0x2f0 [ 89.620539][ T7593] ____sys_sendmsg+0xa4d/0xbe0 [ 89.620558][ T7593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.620584][ T7593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.620608][ T7593] ? lock_acquire+0x1d1/0x380 [ 89.620625][ T7593] ? get_pid_task+0x2a/0x250 [ 89.620649][ T7593] ___sys_sendmsg+0x190/0x1e0 [ 89.620671][ T7593] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.620693][ T7593] ? get_pid_task+0x106/0x250 [ 89.620718][ T7593] ? find_held_lock+0x2b/0x80 [ 89.620748][ T7593] __sys_sendmsg+0x160/0x210 [ 89.620765][ T7593] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.620787][ T7593] do_syscall_64+0x123/0x790 [ 89.620808][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.620825][ T7593] RIP: 0033:0x7f41dab9e159 [ 89.620839][ T7593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.620856][ T7593] RSP: 002b:00007f41db9a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.620873][ T7593] RAX: ffffffffffffffda RBX: 00007f41dae25fa0 RCX: 00007f41dab9e159 [ 89.620886][ T7593] RDX: 0000000020000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 89.620897][ T7593] RBP: 00007f41db9a8090 R08: 0000000000000000 R09: 0000000000000000 [ 89.620909][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.620919][ T7593] R13: 00007f41dae26038 R14: 00007f41dae25fa0 R15: 00007fff975c5fc8 [ 89.620937][ T7593] [ 89.620943][ T7593] [ 89.620947][ T7593] Allocated by task 1: [ 89.620955][ T7593] kasan_save_stack+0x30/0x50 [ 89.620972][ T7593] kasan_save_track+0x14/0x30 [ 89.620988][ T7593] __kasan_kmalloc+0xaa/0xb0 [ 89.621011][ T7593] __kmalloc_node_noprof+0x342/0x880 [ 89.621027][ T7593] blk_mq_alloc_tag_set+0x477/0x1330 [ 89.621043][ T7593] nbd_dev_add+0x341/0xb10 [ 89.621059][ T7593] nbd_init+0x2c5/0x2e0 [ 89.621082][ T7593] do_one_initcall+0x11c/0x6f0 [ 89.621098][ T7593] kernel_init_freeable+0x6ea/0x7b0 [ 89.621122][ T7593] kernel_init+0x21/0x1e0 [ 89.621143][ T7593] ret_from_fork+0x730/0xd60 [ 89.621160][ T7593] ret_from_fork_asm+0x1a/0x30 [ 89.621176][ T7593] [ 89.621180][ T7593] The buggy address belongs to the object at ffff888028e5b5e0 [ 89.621180][ T7593] which belongs to the cache kmalloc-8 of size 8 [ 89.621193][ T7593] The buggy address is located 0 bytes to the right of [ 89.621193][ T7593] allocated 8-byte region [ffff888028e5b5e0, ffff888028e5b5e8) [ 89.621210][ T7593] [ 89.621214][ T7593] The buggy address belongs to the physical page: [ 89.621221][ T7593] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028e5b840 pfn:0x28e5b [ 89.621237][ T7593] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 89.621253][ T7593] page_type: f5(slab) [ 89.621268][ T7593] raw: 00fff00000000200 ffff88801c042500 ffffea0000b7c6d0 ffffea0000dbe0d0 [ 89.621283][ T7593] raw: ffff888028e5b840 000000000080007d 00000000f5000000 0000000000000000 [ 89.621293][ T7593] page dumped because: kasan: bad access detected [ 89.621301][ T7593] page_owner tracks the page as allocated [ 89.621307][ T7593] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5962307541 [ 89.621333][ T7593] post_alloc_hook+0xfd/0x120 [ 89.621356][ T7593] get_page_from_freelist+0x110d/0x35d0 [ 89.621379][ T7593] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 89.621404][ T7593] new_slab+0xa9/0x6e0 [ 89.621426][ T7593] refill_objects+0xe3/0x410 [ 89.621469][ T7593] __pcs_replace_empty_main+0x35e/0x650 [ 89.621491][ T7593] __kmalloc_node_track_caller_noprof+0x6a8/0x870 [ 89.621508][ T7593] kstrdup+0x51/0xe0 [ 89.621530][ T7593] kstrdup_const+0x63/0x80 [ 89.621551][ T7593] __kernfs_new_node+0x9b/0xa10 [ 89.621574][ T7593] kernfs_new_node+0x117/0x150 [ 89.621596][ T7593] kernfs_create_link+0xcc/0x240 [ 89.621611][ T7593] sysfs_do_create_link_sd+0x90/0x140 [ 89.621631][ T7593] sysfs_create_link+0x61/0xc0 [ 89.621648][ T7593] device_add+0x675/0x1970 [ 89.621665][ T7593] __add_disk+0x518/0xe40 [ 89.621682][ T7593] page last free pid 2 tgid 2 ts 5961015862 stack trace: [ 89.621693][ T7593] __free_frozen_pages+0x79f/0x10f0 [ 89.621712][ T7593] __kasan_populate_vmalloc+0x1ea/0x210 [ 89.621728][ T7593] alloc_vmap_area+0x95d/0x2bb0 [ 89.621744][ T7593] __get_vm_area_node+0x1ed/0x350 [ 89.621760][ T7593] __vmalloc_node_range_noprof+0x268/0x1420 [ 89.621779][ T7593] __vmalloc_node_noprof+0xad/0xf0 [ 89.621797][ T7593] copy_process+0x803/0x8370 [ 89.621815][ T7593] kernel_clone+0x176/0x9d0 [ 89.621829][ T7593] kernel_thread+0xdb/0x120 [ 89.621844][ T7593] kthreadd+0x498/0x7a0 [ 89.621865][ T7593] ret_from_fork+0x730/0xd60 [ 89.621880][ T7593] ret_from_fork_asm+0x1a/0x30 [ 89.621897][ T7593] [ 89.621900][ T7593] Memory state around the buggy address: [ 89.621909][ T7593] ffff888028e5b480: 07 fc fc fc 07 fc fc fc 07 fc fc fc 00 fc fc fc [ 89.621921][ T7593] ffff888028e5b500: 00 fc fc fc 00 fc fc fc 07 fc fc fc 07 fc fc fc [ 89.621932][ T7593] >ffff888028e5b580: 07 fc fc fc 00 fc fc fc 05 fc fc fc 00 fc fc fc [ 89.621941][ T7593] ^ [ 89.621951][ T7593] ffff888028e5b600: 07 fc fc fc 07 fc fc fc 07 fc fc fc fa fc fc fc [ 89.621962][ T7593] ffff888028e5b680: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 89.621971][ T7593] ================================================================== [ 89.624304][ T7593] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 90.162604][ T7593] CPU: 1 UID: 0 PID: 7593 Comm: syz.2.471 Tainted: G L syzkaller #0 PREEMPT(full) [ 90.167032][ T7593] Tainted: [L]=SOFTLOCKUP [ 90.168874][ T7593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.173307][ T7593] Call Trace: [ 90.175157][ T7593] [ 90.176900][ T7593] dump_stack_lvl+0x100/0x190 [ 90.179181][ T7593] vpanic+0x553/0x970 [ 90.180820][ T7593] ? __pfx_vpanic+0x10/0x10 [ 90.182637][ T7593] ? mark_held_locks+0x40/0x70 [ 90.184599][ T7593] ? blk_mq_free_rqs+0x6e2/0x760 [ 90.186734][ T7593] panic+0xd1/0xe0 [ 90.188379][ T7593] ? __pfx_panic+0x10/0x10 [ 90.190287][ T7593] ? blk_mq_free_rqs+0x6e2/0x760 [ 90.192387][ T7593] ? preempt_schedule_common+0x3c/0xb0 [ 90.194675][ T7593] check_panic_on_warn.cold+0x19/0x34 [ 90.197041][ T7593] end_report.part.0+0x3a/0x90 [ 90.199483][ T7593] kasan_report.cold+0xe/0x18 [ 90.201663][ T7593] ? blk_mq_free_rqs+0x6e2/0x760 [ 90.203882][ T7593] blk_mq_free_rqs+0x6e2/0x760 [ 90.206010][ T7593] blk_mq_free_map_and_rqs+0x30/0x120 [ 90.208366][ T7593] blk_mq_alloc_sched_tags+0x259/0x350 [ 90.210685][ T7593] blk_mq_alloc_sched_res+0x8e/0x250 [ 90.213095][ T7593] blk_mq_alloc_sched_res_batch+0xfc/0x4f0 [ 90.215887][ T7593] blk_mq_update_nr_hw_queues+0x263/0x15f0 [ 90.218522][ T7593] ? find_held_lock+0x2b/0x80 [ 90.220624][ T7593] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 90.223273][ T7593] ? sysfs_create_file_ns+0x14c/0x1e0 [ 90.225562][ T7593] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 90.227981][ T7593] nbd_start_device+0x1a6/0xbd0 [ 90.230129][ T7593] nbd_genl_connect+0xfc2/0x1760 [ 90.232412][ T7593] ? __pfx_nbd_genl_connect+0x10/0x10 [ 90.235067][ T7593] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 90.238164][ T7593] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 90.241087][ T7593] genl_family_rcv_msg_doit+0x214/0x300 [ 90.243391][ T7593] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 90.245966][ T7593] ? genl_get_cmd+0x3e7/0x760 [ 90.248058][ T7593] ? netlink_sendmsg+0x680/0xda0 [ 90.250333][ T7593] ? ____sys_sendmsg+0xa4d/0xbe0 [ 90.252570][ T7593] ? __radix_tree_lookup+0x217/0x2b0 [ 90.254817][ T7593] genl_rcv_msg+0x560/0x800 [ 90.256770][ T7593] ? __pfx_genl_rcv_msg+0x10/0x10 [ 90.258874][ T7593] ? __lock_acquire+0x4c5/0x1ec0 [ 90.260933][ T7593] ? __pfx_nbd_genl_connect+0x10/0x10 [ 90.263133][ T7593] ? __lock_acquire+0x4c5/0x1ec0 [ 90.265458][ T7593] netlink_rcv_skb+0x159/0x420 [ 90.268077][ T7593] ? __pfx_genl_rcv_msg+0x10/0x10 [ 90.270642][ T7593] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 90.272942][ T7593] ? netlink_deliver_tap+0x1ae/0xcc0 [ 90.275150][ T7593] genl_rcv+0x28/0x40 [ 90.276856][ T7593] netlink_unicast+0x585/0x850 [ 90.278895][ T7593] ? __pfx_netlink_unicast+0x10/0x10 [ 90.281258][ T7593] ? __pfx_sock_has_perm+0x10/0x10 [ 90.283419][ T7593] netlink_sendmsg+0x8b0/0xda0 [ 90.285459][ T7593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.287646][ T7593] ? selinux_socket_sendmsg+0x198/0x2f0 [ 90.290074][ T7593] ____sys_sendmsg+0xa4d/0xbe0 [ 90.292172][ T7593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.294493][ T7593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.296795][ T7593] ? lock_acquire+0x1d1/0x380 [ 90.298786][ T7593] ? get_pid_task+0x2a/0x250 [ 90.300782][ T7593] ___sys_sendmsg+0x190/0x1e0 [ 90.302771][ T7593] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.305097][ T7593] ? get_pid_task+0x106/0x250 [ 90.307394][ T7593] ? find_held_lock+0x2b/0x80 [ 90.310289][ T7593] __sys_sendmsg+0x160/0x210 [ 90.312410][ T7593] ? __pfx___sys_sendmsg+0x10/0x10 [ 90.314551][ T7593] do_syscall_64+0x123/0x790 [ 90.316529][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.319028][ T7593] RIP: 0033:0x7f41dab9e159 [ 90.320915][ T7593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.328890][ T7593] RSP: 002b:00007f41db9a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.333038][ T7593] RAX: ffffffffffffffda RBX: 00007f41dae25fa0 RCX: 00007f41dab9e159 [ 90.336588][ T7593] RDX: 0000000020000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 90.339942][ T7593] RBP: 00007f41db9a8090 R08: 0000000000000000 R09: 0000000000000000 [ 90.343248][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.346536][ T7593] R13: 00007f41dae26038 R14: 00007f41dae25fa0 R15: 00007fff975c5fc8 [ 90.349829][ T7593] [ 90.351938][ T7593] Kernel Offset: disabled [ 90.353670][ T7593] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:19:31 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff888027e92580 RSI=ffffffff81ff305e RDI=ffff888027e92580 RBP=ffff88806a541900 RSP=ffffc900043378a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1004fd2763 R13=0000000000000003 R14=ffffed100d4a8321 R15=0000000000000001 RIP=ffffffff81ff3060 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b32924000 CR3=000000000eb96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9ed1a5b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9ed1a5b6 00007ffd9ed1a5bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2307035607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2307035647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23070357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2307035639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000d0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000d0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85afd015 RDI=ffffffff9bc60ca0 RBP=ffffffff9bc60c60 RSP=ffffc90027fb6908 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000073 R14=0000000000000004 R15=ffffc90027fb6c20 RIP=ffffffff85afd03f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f41db9a86c0 ffffffff 00c00000 GS =0000 ffff8880d5c64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001a80 CR3=000000002df1a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000002000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd20c4ec9b 00007ffd20c4ec9b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd20c4f1a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd20c4f1a0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65675f7866705f5f 203f20205d333935 3754205b5d383633 3831362e39382020 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e646e6f6220666f 2074726170207369 2074692073612067 6e6f6c2073612064 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656b636f6c622065 62206c6c69772073 4e414c5620676e69 646441202e657661 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c73206465676e65 6c6c616863204e41 4c5620646576616c 736e65203a29326e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616c767069206576 616c7328203a3864 6e6f62205d303535 3754205b5d303739 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63732065 30643378303d646d 636c74636f692038 32373d6f6e692022 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000ad917 RBX=ffff88801f2ca580 RCX=ffffffff8bcf5115 RDX=0000000000000001 RSI=ffffffff8e3eaf43 RDI=ffffffff8c620d80 RBP=ffffed1003e594b0 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4c67bd R10=ffff88806a633deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bcf36bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f23072220c0 CR3=000000002ae3f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ad2b5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd41481a66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd41481a66 00007ffd41481a6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ad1e35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ad1e35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ad1e357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ad1e35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ad1ff2600 00007f0ad1ff25e0 00007f0ad1ff25e8 00007f0ad1ff2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ad1ff25f8 00007f0ad1ff25c8 00007f0ad1ff2600 00007f0ad1ff25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 26a7b1d2ef015af3 0861710909f67dc5 585f568721e7fc50 579d93d999f20348 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 62586d6306744f4c b10a2ac5e8b5fa41 f02ede509948ca89 7d380b27eb75b4b6 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d7c47eef7d922914 3e1b648213b5dff5 2f7c5a4b47fdeb0b 01a6c780adfedea3 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8b404d2a2d0ce049 a352ffd8e61449e5 f34be5337b57c8b3 2a4c5b7c53562bcf ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f9b75850f83b4b48 15a3a118772c683c 7af05fc89688e35f 0c794a5ef6325cdb ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88805808a580 RSI=ffffffff81ff305e RDI=ffff88805808a580 RBP=ffff88806a543cc0 RSP=ffffc90023ed7550 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed100b011763 R13=0000000000000003 R14=ffffed100d4a8799 R15=0000000000000001 RIP=ffffffff81ff3064 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b32e23ffc CR3=000000000eb96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c66b5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc3492c06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc3492c06 00007fffc3492c0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c65e35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c65e35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c65e357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c65e35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c65ff2600 00007f4c65ff25e0 00007f4c65ff25e8 00007f4c65ff2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c65ff25f8 00007f4c65ff25c8 00007f4c65ff2600 00007f4c65ff25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000