last executing test programs: 1.580389061s ago: executing program 2 (id=726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'bridge0\x00', {0x9}, 0x7ff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x2010040, &(0x7f0000000000)={[{@name={'name', 0x3d, 'xattr'}}, {@name={'name', 0x3d, 'cpuacct'}}]}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0c0000000706050000000000000088356b8f000205000100d1"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000c200)=""/4099, 0x1003}, {&(0x7f000000bcc0)=""/58, 0x3a}, {&(0x7f00000005c0)=""/255, 0xff}], 0x3}, 0x2020) 1.5127359s ago: executing program 1 (id=727): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x18, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) 1.512061362s ago: executing program 1 (id=728): syz_usbip_server_init(0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'hsr0\x00'}) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x84000, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r1 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x6e20, 0x0, @mcast1}, 0x1c) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) socket(0x10, 0x3, 0x47ab) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f00000007c0)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000440)="b5321ced4e33e65e0806816f0624814aa627295f8231a6c6df4f616a2b84796c4505454abc57100cbf466a071db96596098388af12a0efa7810354dfd1562b7a7582278d959d2f05ec666e0af0e99756ea7d3982b877bed5f29391e8eaf557a3107da4c80bebff7df2cba90f93ca1699ff6572ba621f6c17d5823e2c553498817f2092c307c933055bfb8e342e396c34ec1ec92c4c1542f9500d72c6a0991ccb5c1e8fed68f0221cb301374c93065b24ad60510f3e38eedc2b75ea56ad085d1c8d5fa8dbef133699b87ee59b", 0xcc, 0x4, 0x0, 0x4, r1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x8, 0xfff8, r1, &(0x7f0000000680)="08ebd85498f64746ac5fbd08058f48da87a31d3f16ebc2f92dd6fe023de26d11b9d935512e9bc6e1a56e32af3a31f621aa2e5e24f6c1a844735c9c62e97dface77b1d27f8a39d44a1fdc31c4fe050daa0157dfb9f9fa7d77881acc8dbe64ab8cbe6ac1c856134e71d9a4fcc128245170f40af6e0bdbfa2c69f03610e766b9480a6e04e43cb13d33aa90d83243f35dd61f336f3ad5a501a4e14a81085867a3871c6ed0916d3fd2985c64f592182308caf6a6e265d931499506c3bb72df629d6d3178b414f945620e983d618fb93856a41caefb999370f20", 0xd7, 0x114, 0x0, 0x1, r1}]) syz_open_dev$sndctrl(0x0, 0x0, 0x801) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000580)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x100) sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f0000000080)=0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) 1.402848296s ago: executing program 0 (id=730): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="1b2388a84b83"], 0xffdd) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x106, &(0x7f0000000080)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0xd0, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "6f98777d0e35d2f658ed88d53526b1dc6e54977cb14f6640428fce61ddf00854c9df175eb5e89bd03867255a5f9850ff48e7d292f29a91320fe19035fcaadc0a8349b75a11b4289296ca94f67d70b76bd9336d6c04dc2097c223a51158328142223b84482e9420544faed75e2cebf9049df5989019df4625e3b3bd62c3bb013b185f8dfd55cb70e75aa22aebb6c5b0c07f8618ba3ffb6015ea550a5b8cbdbbfc"}}}}}}}, 0x0) 1.27219483s ago: executing program 0 (id=731): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x2, 0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000001c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000001480)=""/4096, 0x1000, 0x5, 0xb6, 0x9, 0x1ade12f3, 0xb9a0}}, 0x120) close(r2) rt_tgsigqueueinfo(0x0, 0x0, 0x400000a, &(0x7f0000000600)={0x81, 0x3, 0xfffff2bb}) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfffffffd, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x201, 0x0, 0x0, 0xe}}]}}}]}, 0x78}}, 0x0) tkill(r3, 0x3a) ptrace$getsig(0x4202, r3, 0x39, &(0x7f00000000c0)) r7 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r7, 0x0, 0x16, &(0x7f0000000040)=0xfe9, 0x4) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r9, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0x40, @tick=0x8, {0x2, 0x2}, {0xfe}, @result}], 0x1c) ptrace$poke(0x4, r8, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) 1.13329532s ago: executing program 0 (id=732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) 1.012900206s ago: executing program 0 (id=733): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="ad4300000000009c260821"], 0x14}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000000)={'gretap0\x00', r2, 0x80, 0x8, 0xfb44, 0xc, {{0x1d, 0x4, 0x0, 0x4, 0x74, 0x64, 0x0, 0x1, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @lsrr={0x83, 0x3, 0x4}, @timestamp_prespec={0x44, 0x14, 0x71, 0x3, 0x3, [{@local, 0x4}, {@multicast2, 0xffffff01}]}, @rr={0x7, 0x7, 0xfe, [@multicast1]}, @noop, @rr={0x7, 0x17, 0xd4, [@empty, @empty, @remote, @multicast2, @multicast1]}, @timestamp_addr={0x44, 0x14, 0xaf, 0x1, 0x1, [{@local, 0x4}, {@multicast1, 0x9}]}, @noop, @generic={0x0, 0x10, "34c701d7492dab57b006ccc3687d"}, @ra={0x94, 0x4}]}}}}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r7, r8, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000380), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r5, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xf48, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000580)={0x1, 0x0, 0x98, &(0x7f00000004c0)={0x3c39, 0x0, 0x12}}) 692.749754ms ago: executing program 2 (id=734): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x33}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="8e", 0x1}], 0x1, 0x0, 0xac05}}], 0x1, 0x4040) 691.847344ms ago: executing program 2 (id=735): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x27f8, 0xe, 0x39, 0x8, 0xf2, 0x0}) sched_getattr(r0, &(0x7f0000000080)={0x38}, 0x38, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x0, 0x2, 0x9, 0x82, 0x8, 0x17e3, 0x63, 0xea2, 0x6}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x12) sched_setattr(r0, &(0x7f0000000100)={0x38, 0x3, 0x44, 0x48c, 0xf, 0x400000000, 0x0, 0x6, 0x0, 0xf}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x52ce7a0c7ee2ffda}, {r1, 0x20a}], 0x2, 0xf6) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000180)=0x67) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) sched_getattr(r0, &(0x7f00000001c0)={0x38}, 0x38, 0x0) sched_setattr(r0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0xa, 0x8, 0x5, 0xb194, 0x6, 0x0, 0x544d}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x5, 0x20, 0x7fffffff, 0x0, 0x7f, 0x7, 0x8000000000000000, 0x8e8, 0x7c7}, 0x0) sched_getattr(r0, &(0x7f0000000280)={0x38}, 0x38, 0x0) r2 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x2) ioctl$CEC_ADAP_G_CAPS(r2, 0xc04c6100, &(0x7f0000000300)) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000380), 0x321500, 0x0) write$cgroup_type(r3, &(0x7f00000003c0), 0x9) sched_setattr(r0, &(0x7f0000000400)={0x38, 0x6, 0x14, 0x2, 0x1, 0x3, 0x2, 0x8, 0x4, 0x9}, 0x0) write$sndseq(r3, &(0x7f0000000440)=[{0x1, 0x3, 0x4, 0xfa, @tick=0xf1, {0x8e, 0x4}, {0x1, 0xd}, @control={0x7, 0x3, 0xddd}}, {0xf, 0xfa, 0x5e, 0xf, @time={0x2, 0xcae4}, {0x4, 0x9}, {0x8}, @note={0x8, 0x5, 0x4, 0x3, 0x5}}, {0x27, 0x87, 0x8, 0x3c, @time={0x0, 0x1}, {0x9, 0x2}, {0xa, 0x5}, @note={0xc5, 0x9, 0x8, 0x2, 0x4}}, {0xfa, 0x0, 0xb, 0xa, @tick=0x8, {0x0, 0x3f}, {0x1, 0x7}, @connect={{0xfd, 0x8}, {0x6, 0x7}}}, {0xa, 0x76, 0x5, 0x61, @tick=0x8, {0x5, 0x8}, {0x8, 0x40}, @addr={0xfa, 0xf8}}], 0x8c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000500)={0x28, 0x0, 0x2710, @host}, 0x10) bind$vsock_stream(r3, &(0x7f0000000540)={0x28, 0x0, 0x2710, @host}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) timer_create(0x7, &(0x7f0000000800)={0x0, 0x1a, 0x1, @thr={&(0x7f00000006c0)="f9ef06d5dc62e5fbdc8ad0048dee06566007869e8b012046b44830f75d0e31a73872", &(0x7f0000000700)="fa9646c25e354be50592e25772dc8db430195e371fdeffcdffaabda94f92a0bb903143d01352338183ef571726fd2bbbfb6dfd02b7ea37811ee909efe339284f68666531e6538028da6841e93c0f10c775c2f8beca1cf2cb5883c90f260ec50544f41ebb5648c4450425f2a381d3eaa56acb88ef77069aaaa4a4740347657bf6c61f3618a12387abe7d12acca4057e030f4e30343478d2aa626bf6bb9eed9de9bd7478ef781989c4bcabe744949fae43ed2ba3b7f0ac5700f73737890de4398e572b60aa7bfff43c2fd7e744722547824ed2df0ab50c3bff42c4f243"}}, &(0x7f0000000840)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r6, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x14c, r5, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xa8, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x46}, 0x8, 0x7, @device_a, 0x3ff, 0x4, 0xff}}, @measure_req={0x26, 0x88, {0x8, 0x6, 0x1, "88a1143d7d5125f4512f4e2e69eb310141978320e05d3e50f9656d68022c89cab07de869b977f47aed5e1f9399e2327e9ae508c620b0036f7e42a7f4fce9811a7cdfd67de4e697d538b5c6fe5a2811d65cbb0b9876d32dd4d1ca1093eb82275dc840fde3a15cd369f36a96fa19bb06d92dd22e10aee3012bc5f88ee35cf2c745cb6dd83df0"}}, @dsss={0x3, 0x1, 0x80}]}, @NL80211_ATTR_IE={0x8d, 0x2a, [@random_vendor={0xdd, 0x6d, "71301b4681163ac9d7de934cfa0facc2a3955c613b1f3650614dfbf40d9a470bfd8af625444a5d3d2ec1bd6c6cb52d8a657356b782b4397063af1430cda1b9ff15164c8be87338d792b427dcd6114574e1eed7e197de05324166ab88ea1b3be255f4f7787420d7f76faf39ccd3"}, @rann={0x7e, 0x15, {{0x0, 0x50}, 0x10, 0x0, @device_b, 0x8be, 0x2de7bd90, 0x7}}, @challenge={0x10, 0x1, 0xf8}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40}, 0x0) getpid() sendto$inet(r3, &(0x7f0000000ac0)="346aa00386cebab60d35ff3c9ee7ac51da51eb3f9ea447a8879aa396ca88dbafde4d80e0915023f16762175e1126ec43dd010bfe1f75afe499886cf64ee806eaf69c6ce93f711fa26c9134db53cd8afb6dae836fd3b14d77ae1e56d0466ffe4fb03dae650668609032451eaf9725c97bd6c0b1b8828ba09c393a126fee152ddb19be64a4edb79749ace40eae14e3eb63a35160a489fd713b5dcfdaba53438d9ef0271f9a03885ee6b65ec5d278bb1fc4a20678b5ba161ffde40a878315bf8cc2fb59295a31af19ab1313e755d426092d11b729552226c69f87c6a99954447d", 0xdf, 0x20000810, &(0x7f0000000bc0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), r3) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000d80)={0x5, 0x98e, &(0x7f0000000c40)="4f767da4c0ce755c9bf007e69660e80807ae9e42e4ef6c10194cc0bd56053a41c9e9a25227b30d440b3f7b6b2720a582f020e0d95a80770d05ef63e90abd639b388946923e8482b0ee83e6933a849e64000bfdd27120a35e89d27c2aa732b76802c396ecc9efff42fa444dfa2e8d81dfe514842a2120eaea37cc5ca61dba48f17dfc22da091bb8afa0c0c1b7a015222855e4c044814a2f680f57e596236f6296c720c538d51d5ede59e255383d122b703ae171e7f8a4752ccf7432e4d47de86fde04fe1e80669ed0d34e5432503f4d83b4e497ffc09d3f9e89b60313a317a101b5", &(0x7f0000000d40)="f278be2671221c9f78e239fc8c1f2138300569ba70b672b8bbf2b65542eba5", 0xe1, 0x1f}) 622.978818ms ago: executing program 2 (id=736): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x702, 0xe, 0x0, &(0x7f0000000380)="eb00140000000010000000000000", 0x0, 0x3d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x8, 0x4b, 0x66, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0x2, 0x0, 0xe7, {[@mss={0x2, 0x4, 0x2}, @md5sig={0x13, 0x12, "bfa31421efc561885fb30e4ab59fd468"}, @window={0x3, 0x3, 0x3}, @exp_fastopen={0xfe, 0x9, 0xf989, "2c7a51fa18"}, @nop]}}, {"f945f97a072d5cd26ffb12ffe2502d441c64d343c126be7ddc5afe56b011fab3dea3465d445d7c68122ee05ff1feecd54902a70c0e10a06e53ff164a81446f7e672c04c5ceda9840f4edfc04a3ef77cf3bcb7fe4b3ddf35e1c192123a5fa2f2542108bfcecb6a818522586ed9bcac117f88f33415c8027d50300c8909b6550f9e209a7470ec9a7081a0a71388d67a7a1181b1ec2eafd33dab76329a54b976364cbe7300992b664b044fa372f4606200f4fd8ffe820210234"}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="329425ed2754aaaaaaaaaa008100d70086dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRESHEX=r2, @ANYRES32=r3, @ANYRES8=r3], 0x0) 502.90267ms ago: executing program 1 (id=737): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000d40)={0x0, 0x32, 0x3, 0xf02a, 0x9}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0xc00, 0x0) getsockopt$bt_BT_SNDMTU(r9, 0x112, 0xc, &(0x7f0000000180)=0x5, &(0x7f00000001c0)=0x2) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) 502.554151ms ago: executing program 2 (id=738): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000180)={0x24, @short={0x2, 0x3, 0xaaa0}}, 0x14) ptrace(0x10, r2) (async) ptrace$peeksig(0x4209, r2, &(0x7f0000000180)={0x44, 0x1, 0x1}, &(0x7f0000001340)=[{}]) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000080)={r1, 0x0, 0x1, 0x0, 0x3}) 431.380869ms ago: executing program 2 (id=740): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRESDEC=r2], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4881}, 0x800) recvfrom(r3, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0x3, 0x8, 0x7, 0xe4, 0x2, 0xfc000000, 0x13, 0x4000bbf, 0x4a732f64, 0x1, 0x8, 0x11, 0x20000, 0x12a0, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x3fd, 0xfffffff6, 0x405, 0xa7, 0x7, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0x10a8ac, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x0, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fdf, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x0, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8001, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x9, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x5, 0x400, 0x8001, 0x5, 0xd3, 0x7, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0x9, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0x5, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xffffffff, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x240, 0x8ff, 0x1005, 0x1, 0x40004, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0x7, 0xfffffff7, 0x18, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x5, 0xf, 0xe, 0x1, 0x26d, 0x8, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = getpid() setpgid(r4, r5) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r7, @ANYRES16=r9, @ANYBLOB="f5af25bd7000000000000e00000008000300", @ANYRES32=r8, @ANYBLOB="eac3d379956c520407dfe4903da242cd4df555f58717f42b460708ae4b1a9ef869019cd4845d4cefb1b833e5ae1e88ab595f94af4147a6359c2008ba3e0f4e8818fa2ff26d14d5e973b1bb2a95ef5072959dbb345f6da30ab9a983c5d982d3aea7764c76b7311b7b201a747274e13555a4fc0000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) getsockname$packet(r6, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) socket$packet(0x11, 0x2, 0x300) 352.846135ms ago: executing program 1 (id=742): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$XFS_IOC_ERROR_CLEARALL(r1, 0x40085875) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x100) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000140)={0x2f, &(0x7f0000000080)=[{0x4, '\x00', @data=0xd3f4, 0xfffffffe}]}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r5}, &(0x7f0000000380)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r6) io_pgetevents(0x0, 0x200000c, 0x0, 0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={[0x6]}, 0x8}) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x888e}]}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x850}, 0x4040084) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x6d, r0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8e}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040) 259.522636ms ago: executing program 3 (id=743): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00e00095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000280)={0x0, "051f9a29fd70d6c420ad27dc44f87cd82489481664fa394e17bc4297c672b716", 0x1, 0x7, 0x2, 0x2000000, 0x0, 0x2}) r1 = timerfd_create(0x3, 0x80000) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0xc, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff7a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bind$xdp(r4, &(0x7f0000000580)={0x2c, 0x4, r5, 0x17, r6}, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000ffdbdf25060000ec07000400640101000800050064010102240007"], 0x48}, 0x1, 0x0, 0x0, 0x60008000}, 0x44) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000007"], 0x50) setresuid(0xffffffffffffffff, 0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="040028bd7000fddbdf250e01000008000b00e1b45abf"], 0x1c}}, 0x800) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000b00)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r9, @ANYBLOB="c51a5045ff15a623ae489b81cb5934692c7a3c4a4adb681bf8b537a64c8ec04d565c43b40a583600709fab6218b0572ade764c624c42c2e700ec7cec696a8e57158e3b5cc0c4b27a56f5b03e83c70a25ff037a0e6928cc1237260cf893fdaa5244f2df4098b7ceff421fe581478e7f69012cc585c034685b990f6936bfb6d9d3d6e5d8aa31649a0d2165279b84febf7b0f4d78a1999747011133f219582be867f7cf96e017313b115c9b071d3ae85fd16950c1e27b287a314ec25f11dc22fd0325f6", @ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r6, @ANYRESDEC=r1, @ANYRES64], 0x0, 0x0, 0x38, 0x0, 0x40f00, 0x2}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r8}, 0x8) unshare(0xe060400) r10 = gettid() socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(r10, &(0x7f0000000000)='ns/uts\x00') unshare(0x2c060000) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800104b3cdb", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 212.949546ms ago: executing program 3 (id=744): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='00'], 0x30}, 0x1, 0x0, 0x0, 0x18004}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x1c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@nested={0x5, 0xa5, 0x0, 0x1, [@generic="fb"]}]}, 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000400e379c7792eead5162e7f0953cbc73f5aa4082496", @ANYRES16=r1, @ANYBLOB="010000000000800000001a000000280022800414008004000080040000808341f1680200008014000080040000800400008004000080060021"], 0x44}}, 0x800) 212.518982ms ago: executing program 3 (id=745): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x10) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000000)={0x0, 0x16, 0x407, &(0x7f0000000700)={0x1b, "fd5a44512b7e1b0020ed2abb430100270000002d0500"}}) 153.059584ms ago: executing program 0 (id=746): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00e00095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 8) 152.916258ms ago: executing program 3 (id=747): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x20840, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) 54.96243ms ago: executing program 1 (id=748): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bdb000/0x3000)=nil, 0x3000, &(0x7f0000000040)='&\x00') mlock2(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 54.855171ms ago: executing program 3 (id=749): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x18, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0xfffffffffffffffc, 0x0, 0x4000801}, 0x800) 54.729338ms ago: executing program 3 (id=750): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000580)={0x1, 0x0, 0x98, &(0x7f00000004c0)={0x3c39, 0x0, 0x12}}) (fail_nth: 8) 54.490649ms ago: executing program 1 (id=751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) 0s ago: executing program 0 (id=752): r0 = socket$inet(0x2, 0x1, 0x2) accept4$inet(r0, &(0x7f0000000300)={0x2, 0x0, @private}, &(0x7f0000000340)=0x10, 0x80000) syz_emit_ethernet(0x3a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaa2aaa6cf6566994c681001000080045b4002800000000a3069078ac1414bbac0408004e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="501000009078"], 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000600), 0x189280, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c00010000b424d7d58bc8453e"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000000240)={0xa, 0x0, 0x2, {0x4000046, 0xffffffe6, 0xfffb, 0xf7168000}}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f00000001c0)=0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r4) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000640)={0x1f, 0x4, 0x1}, 0x6) syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffff462989a6ffb3ff86dd6000fcff00180601db80000010d8ffffbf000000000000aafe800000000000000000f996000000aa00004e22212a00b8e364ef631e399fe70c1fffb4b772319ac413c4b1b44b63fabc341b3483a970947bc1773be286ce0c40af766b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000907800001e020000"], 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) kernel console output (not intermixed with test programs): _from_user+0x2e/0xd0 [ 102.573138][ T6839] mtdchar_blkpg_ioctl+0xd7/0x250 [ 102.573166][ T6839] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 102.573207][ T6839] mtdchar_ioctl+0x1670/0x1fd0 [ 102.573233][ T6839] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 102.573255][ T6839] ? lock_acquire+0x1b1/0x370 [ 102.573285][ T6839] ? trace_contention_end+0x122/0x170 [ 102.573312][ T6839] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 102.573334][ T6839] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 102.573355][ T6839] ? __pfx___mutex_lock+0x10/0x10 [ 102.573444][ T6839] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 102.573463][ T6839] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 102.573484][ T6839] __x64_sys_ioctl+0x18e/0x210 [ 102.573501][ T6839] do_syscall_64+0x10b/0xf80 [ 102.573551][ T6839] ? clear_bhb_loop+0x40/0x90 [ 102.573573][ T6839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.573591][ T6839] RIP: 0033:0x7f525499ce59 [ 102.573606][ T6839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.573622][ T6839] RSP: 002b:00007f525587f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.573639][ T6839] RAX: ffffffffffffffda RBX: 00007f5254c15fa0 RCX: 00007f525499ce59 [ 102.573674][ T6839] RDX: 0000200000000580 RSI: 0000000000001269 RDI: 0000000000000004 [ 102.573684][ T6839] RBP: 00007f525587f090 R08: 0000000000000000 R09: 0000000000000000 [ 102.573694][ T6839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.573703][ T6839] R13: 00007f5254c16038 R14: 00007f5254c15fa0 R15: 00007ffdd69fd7c8 [ 102.573727][ T6839] [ 102.675197][ T5742] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 102.681372][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 102.684196][ T6842] netlink: 56 bytes leftover after parsing attributes in process `syz.1.328'. [ 102.855373][ T5742] usb 7-1: Using ep0 maxpacket: 32 [ 102.859352][ T5742] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 102.865810][ T5742] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 102.870194][ T5742] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 102.873562][ T5742] usb 7-1: Product: syz [ 102.875655][ T5742] usb 7-1: Manufacturer: ї [ 102.877626][ T5742] usb 7-1: SerialNumber: 鎀缧댈퇧¬߬涖勡时㩝⿈ﺐ摞쳬躸⚁ජ㢝˻Რ萆搌㌋䮥謣⢥ଣ䤑끝ᾟ씮䶞舵涋銬悢Ѝ￘鮐䅔埿Ϝ쳿醅嚛霮憚獛⒴✒傡梈랁騎ㄨ횲ʕ䌯䂫儔䈡췱页쥷㠴ฮ餋堶鹋y [ 102.892342][ T5742] usb 7-1: config 0 descriptor?? [ 102.898669][ T6818] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.903013][ T5742] hub 7-1:0.0: bad descriptor, ignoring hub [ 102.905686][ T5742] hub 7-1:0.0: probe with driver hub failed with error -5 [ 103.109128][ T40] audit: type=1400 audit(1778621637.193:452): avc: denied { read append } for pid=6851 comm="syz.3.332" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 103.112711][ T6852] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 103.120802][ T40] audit: type=1400 audit(1778621637.193:453): avc: denied { open } for pid=6851 comm="syz.3.332" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 103.132301][ T6852] macsec1: entered promiscuous mode [ 103.137109][ T6852] macsec1: entered allmulticast mode [ 103.216299][ T70] usb 7-1: USB disconnect, device number 15 [ 103.766447][ T6865] FAULT_INJECTION: forcing a failure. [ 103.766447][ T6865] name failslab, interval 1, probability 0, space 0, times 0 [ 103.775190][ T6865] CPU: 2 UID: 0 PID: 6865 Comm: syz.2.337 Not tainted syzkaller #0 PREEMPT(full) [ 103.775205][ T6865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.775212][ T6865] Call Trace: [ 103.775216][ T6865] [ 103.775221][ T6865] dump_stack_lvl+0x100/0x190 [ 103.775238][ T6865] should_fail_ex.cold+0x5/0xa [ 103.775253][ T6865] ? tomoyo_encode2+0xfb/0x3c0 [ 103.775281][ T6865] should_failslab+0xc2/0x120 [ 103.775293][ T6865] __kmalloc_noprof+0xe0/0x850 [ 103.775309][ T6865] ? d_absolute_path+0x136/0x1b0 [ 103.775322][ T6865] tomoyo_encode2+0xfb/0x3c0 [ 103.775338][ T6865] tomoyo_encode+0x29/0x50 [ 103.775352][ T6865] tomoyo_realpath_from_path+0x18c/0x690 [ 103.775370][ T6865] tomoyo_path_number_perm+0x23c/0x580 [ 103.775381][ T6865] ? tomoyo_path_number_perm+0x22e/0x580 [ 103.775395][ T6865] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 103.775421][ T6865] ? find_held_lock+0x2b/0x80 [ 103.775431][ T6865] ? __fget_files+0x215/0x3d0 [ 103.775443][ T6865] ? hook_file_ioctl_common+0x149/0x410 [ 103.775459][ T6865] ? __fget_files+0x215/0x3d0 [ 103.775474][ T6865] ? __fget_files+0x21f/0x3d0 [ 103.775489][ T6865] security_file_ioctl+0xd3/0x230 [ 103.775503][ T6865] __x64_sys_ioctl+0xb7/0x210 [ 103.775515][ T6865] do_syscall_64+0x10b/0xf80 [ 103.775529][ T6865] ? clear_bhb_loop+0x40/0x90 [ 103.775542][ T6865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.775553][ T6865] RIP: 0033:0x7fa931b9ce59 [ 103.775562][ T6865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.775573][ T6865] RSP: 002b:00007fa932ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.775584][ T6865] RAX: ffffffffffffffda RBX: 00007fa931e15fa0 RCX: 00007fa931b9ce59 [ 103.775590][ T6865] RDX: 0000000000000000 RSI: 0000000081484d11 RDI: 0000000000000004 [ 103.775596][ T6865] RBP: 00007fa932ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 103.775602][ T6865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.775608][ T6865] R13: 00007fa931e16038 R14: 00007fa931e15fa0 R15: 00007ffc77f7ff88 [ 103.775622][ T6865] [ 103.775689][ T6865] ERROR: Out of memory at tomoyo_realpath_from_path. [ 103.893397][ T6872] netlink: 32 bytes leftover after parsing attributes in process `syz.2.339'. [ 104.406651][ T70] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 104.471457][ T6886] xt_connbytes: Forcing CT accounting to be enabled [ 104.478204][ T6886] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.481783][ T6886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.345'. [ 104.585311][ T70] usb 6-1: Using ep0 maxpacket: 32 [ 104.595451][ T70] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 104.598391][ T70] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 104.601158][ T70] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 104.603977][ T70] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.607794][ T70] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 104.610860][ T70] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 104.614864][ T70] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 104.617784][ T70] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.624219][ T70] usb 6-1: config 0 descriptor?? [ 104.835868][ T70] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 105.034021][ T5742] usb 6-1: USB disconnect, device number 11 [ 105.051765][ T5742] usblp1: removed [ 105.166734][ T50] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 105.325232][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 105.329054][ T50] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 105.334668][ T50] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 105.339576][ T50] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 105.343044][ T50] usb 5-1: Product: syz [ 105.344813][ T50] usb 5-1: Manufacturer: syz [ 105.347114][ T50] usb 5-1: SerialNumber: syz [ 105.352917][ T50] usb 5-1: config 0 descriptor?? [ 105.356864][ T6896] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 105.361258][ T50] hub 5-1:0.0: bad descriptor, ignoring hub [ 105.363524][ T50] hub 5-1:0.0: probe with driver hub failed with error -5 [ 105.369022][ T50] chaoskey 5-1:0.0: Unable to register with hwrng [ 105.525252][ T70] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 105.603608][ T40] audit: type=1400 audit(1778621639.693:454): avc: denied { ioctl } for pid=6907 comm="syz.1.352" path="socket:[14207]" dev="sockfs" ino=14207 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.613497][ T40] audit: type=1400 audit(1778621639.693:455): avc: denied { bind } for pid=6907 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.621251][ T40] audit: type=1400 audit(1778621639.693:456): avc: denied { write } for pid=6907 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.665979][ T70] usb 7-1: device descriptor read/64, error -71 [ 105.875454][ T50] usb 5-1: USB disconnect, device number 14 [ 105.916024][ T70] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 106.045275][ T70] usb 7-1: device descriptor read/64, error -71 [ 106.118918][ T6916] FAULT_INJECTION: forcing a failure. [ 106.118918][ T6916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.123845][ T6916] CPU: 2 UID: 0 PID: 6916 Comm: syz.3.353 Not tainted syzkaller #0 PREEMPT(full) [ 106.123868][ T6916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.123885][ T6916] Call Trace: [ 106.123892][ T6916] [ 106.123899][ T6916] dump_stack_lvl+0x100/0x190 [ 106.123924][ T6916] should_fail_ex.cold+0x5/0xa [ 106.123941][ T6916] _copy_from_user+0x2e/0xd0 [ 106.123958][ T6916] vhost_dev_ioctl+0x810/0xe20 [ 106.124005][ T6916] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 106.124021][ T6916] vhost_net_ioctl+0x75f/0x1910 [ 106.124031][ T6916] ? do_vfs_ioctl+0x226/0x13e0 [ 106.124043][ T6916] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 106.124053][ T6916] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 106.124063][ T6916] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 106.124082][ T6916] ? __fget_files+0x215/0x3d0 [ 106.124094][ T6916] ? hook_file_ioctl_common+0x149/0x410 [ 106.124115][ T6916] ? selinux_file_ioctl+0xb6/0x290 [ 106.124130][ T6916] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 106.124142][ T6916] __x64_sys_ioctl+0x18e/0x210 [ 106.124154][ T6916] do_syscall_64+0x10b/0xf80 [ 106.124169][ T6916] ? clear_bhb_loop+0x40/0x90 [ 106.124181][ T6916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.124192][ T6916] RIP: 0033:0x7fa11bd9ce59 [ 106.124201][ T6916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.124212][ T6916] RSP: 002b:00007fa11cc53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.124223][ T6916] RAX: ffffffffffffffda RBX: 00007fa11c015fa0 RCX: 00007fa11bd9ce59 [ 106.124229][ T6916] RDX: 00002000000000c0 RSI: 000000004008af03 RDI: 0000000000000003 [ 106.124235][ T6916] RBP: 00007fa11cc53090 R08: 0000000000000000 R09: 0000000000000000 [ 106.124241][ T6916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.124247][ T6916] R13: 00007fa11c016038 R14: 00007fa11c015fa0 R15: 00007ffd99160918 [ 106.124261][ T6916] [ 106.187136][ T70] usb usb7-port1: attempt power cycle [ 106.217652][ T6919] netlink: 488 bytes leftover after parsing attributes in process `syz.3.354'. [ 106.220594][ T6919] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.354'. [ 106.255441][ T5835] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 106.425586][ T5835] usb 5-1: Using ep0 maxpacket: 32 [ 106.430347][ T5835] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 106.443269][ T5835] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 106.448872][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 106.452268][ T5835] usb 5-1: Product: syz [ 106.453991][ T5835] usb 5-1: Manufacturer: ї [ 106.456313][ T5835] usb 5-1: SerialNumber: 鎀缧댈퇧¬߬涖勡时㩝⿈ﺐ摞쳬躸⚁ජ㢝˻Რ萆搌㌋䮥謣⢥ଣ䤑끝ᾟ씮䶞舵涋銬悢Ѝ￘鮐䅔埿Ϝ쳿醅嚛霮憚獛⒴✒傡梈랁騎ㄨ횲ʕ䌯䂫儔䈡췱页쥷㠴ฮ餋堶鹋y [ 106.468971][ T5835] usb 5-1: config 0 descriptor?? [ 106.472023][ T6896] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 106.476441][ T5835] hub 5-1:0.0: bad descriptor, ignoring hub [ 106.479016][ T5835] hub 5-1:0.0: probe with driver hub failed with error -5 [ 106.535270][ T70] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 106.556057][ T70] usb 7-1: device descriptor read/8, error -71 [ 106.795694][ T50] usb 5-1: USB disconnect, device number 15 [ 106.815224][ T70] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 106.845758][ T70] usb 7-1: device descriptor read/8, error -71 [ 106.967006][ T70] usb usb7-port1: unable to enumerate USB device [ 107.782108][ T6958] netlink: 40 bytes leftover after parsing attributes in process `syz.1.363'. [ 107.828006][ T40] audit: type=1400 audit(1778621641.923:457): avc: denied { bind } for pid=6959 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.828827][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.364'. [ 107.835565][ T40] audit: type=1400 audit(1778621641.923:458): avc: denied { create } for pid=6959 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.843696][ T40] audit: type=1400 audit(1778621641.923:459): avc: denied { write } for pid=6959 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.983029][ T40] audit: type=1400 audit(1778621642.073:460): avc: denied { create } for pid=6971 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 107.983910][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.368'. [ 107.990660][ T40] audit: type=1400 audit(1778621642.073:461): avc: denied { write } for pid=6971 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 108.016665][ T6972] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6972 comm=syz.1.368 [ 108.133078][ T6972] veth3: entered allmulticast mode [ 108.169276][ T6972] bond0: (slave veth3): Enslaving as an active interface with an up link [ 108.191895][ T6973] bond0 (unregistering): (slave veth3): Releasing backup interface [ 108.196111][ T6973] bond0 (unregistering): Released all slaves [ 108.325586][ T39] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 108.337510][ T6980] IPVS: sed: FWM 3 0x00000003 - no destination available [ 108.337986][ T70] IPVS: starting estimator thread 0... [ 108.445298][ T6981] IPVS: using max 27 ests per chain, 64800 per kthread [ 108.464021][ T6985] xt_hashlimit: max too large, truncated to 1048576 [ 108.467642][ T40] audit: type=1400 audit(1778621642.553:462): avc: denied { name_bind } for pid=6984 comm="syz.2.373" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 108.474145][ T40] audit: type=1400 audit(1778621642.563:463): avc: denied { ioctl } for pid=6984 comm="syz.2.373" path="/dev/ptyq8" dev="devtmpfs" ino=135 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 108.505252][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 108.516129][ T39] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 108.522409][ T39] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 108.525441][ T39] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 108.528332][ T39] usb 5-1: Product: syz [ 108.529762][ T39] usb 5-1: Manufacturer: syz [ 108.531380][ T39] usb 5-1: SerialNumber: syz [ 108.534389][ T39] usb 5-1: config 0 descriptor?? [ 108.537588][ T6976] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 108.541866][ T39] hub 5-1:0.0: bad descriptor, ignoring hub [ 108.543790][ T39] hub 5-1:0.0: probe with driver hub failed with error -5 [ 108.547976][ T39] chaoskey 5-1:0.0: Unable to register with hwrng [ 108.597612][ T6989] 0x000000003c39-0x000000020000 : "" [ 108.606255][ T6989] ftl_cs: FTL header corrupt! [ 108.864520][ T6996] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 109.075981][ T70] usb 5-1: USB disconnect, device number 16 [ 109.386250][ T40] audit: type=1400 audit(1778621643.483:464): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 109.405310][ T70] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 109.483382][ T40] audit: type=1400 audit(1778621643.573:465): avc: denied { ioctl } for pid=7001 comm="syz.1.378" path="socket:[14759]" dev="sockfs" ino=14759 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.565328][ T70] usb 5-1: Using ep0 maxpacket: 32 [ 109.569111][ T70] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 109.575576][ T70] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 109.578906][ T70] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 109.581908][ T70] usb 5-1: Product: syz [ 109.583357][ T70] usb 5-1: Manufacturer: ї [ 109.584776][ T70] usb 5-1: SerialNumber: 鎀缧댈퇧¬߬涖勡时㩝⿈ﺐ摞쳬躸⚁ජ㢝˻Რ萆搌㌋䮥謣⢥ଣ䤑끝ᾟ씮䶞舵涋銬悢Ѝ￘鮐䅔埿Ϝ쳿醅嚛霮憚獛⒴✒傡梈랁騎ㄨ횲ʕ䌯䂫儔䈡췱页쥷㠴ฮ餋堶鹋y [ 109.597144][ T70] usb 5-1: config 0 descriptor?? [ 109.600525][ T6976] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 109.604299][ T70] hub 5-1:0.0: bad descriptor, ignoring hub [ 109.607646][ T70] hub 5-1:0.0: probe with driver hub failed with error -5 [ 109.925448][ T70] usb 5-1: USB disconnect, device number 17 [ 110.349157][ T7012] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 110.351907][ T7012] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.357430][ T7012] vhci_hcd vhci_hcd.0: Device attached [ 110.403708][ T7017] FAULT_INJECTION: forcing a failure. [ 110.403708][ T7017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.409248][ T7017] CPU: 2 UID: 0 PID: 7017 Comm: syz.2.383 Not tainted syzkaller #0 PREEMPT(full) [ 110.409270][ T7017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.409281][ T7017] Call Trace: [ 110.409287][ T7017] [ 110.409293][ T7017] dump_stack_lvl+0x100/0x190 [ 110.409318][ T7017] should_fail_ex.cold+0x5/0xa [ 110.409342][ T7017] _copy_from_user+0x2e/0xd0 [ 110.409369][ T7017] move_addr_to_kernel+0x65/0x170 [ 110.409434][ T7017] copy_msghdr_from_user+0x417/0x4f0 [ 110.409459][ T7017] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 110.409485][ T7017] ? rcu_is_watching+0x12/0xc0 [ 110.409513][ T7017] ? ___sys_sendmsg+0x19d/0x1e0 [ 110.409556][ T7017] ? kfree+0x1dd/0x6c0 [ 110.409584][ T7017] ___sys_sendmsg+0x106/0x1e0 [ 110.409610][ T7017] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.409655][ T7017] ? __pfx___might_resched+0x10/0x10 [ 110.409684][ T7017] __sys_sendmmsg+0x205/0x430 [ 110.409706][ T7017] ? __pfx___sys_sendmmsg+0x10/0x10 [ 110.409731][ T7017] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 110.409766][ T7017] ? fput+0x79/0x100 [ 110.409796][ T7017] ? ksys_write+0x1ac/0x250 [ 110.409817][ T7017] ? __pfx_ksys_write+0x10/0x10 [ 110.409840][ T7017] __x64_sys_sendmmsg+0x9c/0x100 [ 110.409858][ T7017] ? lockdep_hardirqs_on+0x78/0x100 [ 110.409882][ T7017] do_syscall_64+0x10b/0xf80 [ 110.409905][ T7017] ? clear_bhb_loop+0x40/0x90 [ 110.409927][ T7017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.409945][ T7017] RIP: 0033:0x7fa931b9ce59 [ 110.409961][ T7017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.409978][ T7017] RSP: 002b:00007fa932ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 110.409995][ T7017] RAX: ffffffffffffffda RBX: 00007fa931e15fa0 RCX: 00007fa931b9ce59 [ 110.410007][ T7017] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 110.410019][ T7017] RBP: 00007fa932ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 110.410028][ T7017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.410038][ T7017] R13: 00007fa931e16038 R14: 00007fa931e15fa0 R15: 00007ffc77f7ff88 [ 110.410062][ T7017] [ 110.558610][ T7019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.385'. [ 110.578352][ T40] audit: type=1400 audit(1778621644.673:466): avc: denied { ioctl } for pid=7018 comm="syz.2.385" path="socket:[14777]" dev="sockfs" ino=14777 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 110.605410][ T50] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 110.607891][ T5742] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 110.765426][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 110.770730][ T40] audit: type=1400 audit(1778621644.863:467): avc: denied { load_policy } for pid=7011 comm="syz.0.382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 110.770857][ T7012] SELinux: policydb version -183817602 does not match my version range 15-35 [ 110.786942][ T7012] SELinux: failed to load policy [ 110.797328][ T50] usb 5-1: unable to get BOS descriptor or descriptor too short [ 110.800383][ T50] usb 5-1: no configurations [ 110.802223][ T50] usb 5-1: can't read configurations, error -22 [ 110.804444][ T7013] vhci_hcd: connection closed [ 110.812078][ T136] vhci_hcd vhci_hcd.0: stop threads [ 110.815754][ T136] vhci_hcd vhci_hcd.0: release socket [ 110.818960][ T136] vhci_hcd vhci_hcd.0: disconnect device [ 110.855399][ T5742] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 111.095248][ T5821] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 111.257111][ T5821] usb 6-1: Using ep0 maxpacket: 32 [ 111.283368][ T5821] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 111.290217][ T5821] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 111.301174][ T5821] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 111.308264][ T5821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.317216][ T5821] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 111.325064][ T5821] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 111.336746][ T5821] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 111.341638][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.349082][ T5821] usb 6-1: config 0 descriptor?? [ 111.402013][ T7032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7032 comm=syz.0.389 [ 111.559807][ T5821] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 111.758820][ T70] usb 6-1: USB disconnect, device number 12 [ 111.765555][ T70] usblp1: removed [ 111.975225][ T6261] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 112.125225][ T6261] usb 7-1: Using ep0 maxpacket: 32 [ 112.128806][ T6261] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 112.133601][ T6261] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 112.137050][ T6261] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 112.139811][ T6261] usb 7-1: Product: syz [ 112.141159][ T6261] usb 7-1: Manufacturer: syz [ 112.142707][ T6261] usb 7-1: SerialNumber: syz [ 112.145458][ T6261] usb 7-1: config 0 descriptor?? [ 112.147528][ T7034] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 112.150864][ T6261] hub 7-1:0.0: bad descriptor, ignoring hub [ 112.152822][ T6261] hub 7-1:0.0: probe with driver hub failed with error -5 [ 112.156379][ T6261] chaoskey 7-1:0.0: Unable to register with hwrng [ 112.312110][ T40] audit: type=1400 audit(1778621646.403:468): avc: denied { setopt } for pid=7035 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.360430][ T7042] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.455779][ T7056] netlink: 32 bytes leftover after parsing attributes in process `syz.0.396'. [ 112.464466][ T7054] erspan1: entered allmulticast mode [ 112.624219][ T7061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7061 comm=syz.3.399 [ 112.677048][ T1477] usb 7-1: USB disconnect, device number 20 [ 112.998276][ T1477] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 113.147559][ T1477] usb 7-1: Using ep0 maxpacket: 32 [ 113.158670][ T1477] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 113.174978][ T1477] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 113.178334][ T1477] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 113.181086][ T1477] usb 7-1: Product: syz [ 113.182563][ T1477] usb 7-1: Manufacturer: ї [ 113.184018][ T1477] usb 7-1: SerialNumber: 鎀缧댈퇧¬߬涖勡时㩝⿈ﺐ摞쳬躸⚁ජ㢝˻Რ萆搌㌋䮥謣⢥ଣ䤑끝ᾟ씮䶞舵涋銬悢Ѝ￘鮐䅔埿Ϝ쳿醅嚛霮憚獛⒴✒傡梈랁騎ㄨ횲ʕ䌯䂫儔䈡췱页쥷㠴ฮ餋堶鹋y [ 113.192932][ T1477] usb 7-1: config 0 descriptor?? [ 113.195044][ T7034] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.201570][ T1477] hub 7-1:0.0: bad descriptor, ignoring hub [ 113.203493][ T1477] hub 7-1:0.0: probe with driver hub failed with error -5 [ 113.432930][ T40] audit: type=1400 audit(1778621647.523:469): avc: denied { write } for pid=7064 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 113.473072][ T40] audit: type=1400 audit(1778621647.563:470): avc: denied { listen } for pid=7070 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.481728][ T40] audit: type=1400 audit(1778621647.563:471): avc: denied { connect } for pid=7070 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.505432][ T5835] usb 7-1: USB disconnect, device number 21 [ 113.509718][ T7075] netlink: 'syz.1.404': attribute type 3 has an invalid length. [ 113.511115][ T40] audit: type=1400 audit(1778621647.603:472): avc: denied { read } for pid=7064 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.512971][ T7075] netlink: 'syz.1.404': attribute type 1 has an invalid length. [ 113.524049][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'. [ 113.529424][ T40] audit: type=1400 audit(1778621647.623:473): avc: denied { sqpoll } for pid=7074 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 113.539464][ T7075] fuse: Bad value for 'user_id' [ 113.541610][ T7075] fuse: Bad value for 'user_id' [ 113.645279][ T5742] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 113.704148][ T40] audit: type=1400 audit(1778621647.793:474): avc: denied { create } for pid=7074 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 113.711717][ T40] audit: type=1400 audit(1778621647.803:475): avc: denied { setopt } for pid=7074 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 113.718258][ T40] audit: type=1400 audit(1778621647.803:476): avc: denied { listen } for pid=7074 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 113.827241][ T7101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.835491][ T5742] usb 5-1: Using ep0 maxpacket: 32 [ 113.838356][ T5742] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 113.841029][ T5742] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 113.843888][ T5742] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 113.847144][ T5742] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.852309][ T5742] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 113.856390][ T5742] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 113.865060][ T5742] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 113.868305][ T5742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.872243][ T5742] usb 5-1: config 0 descriptor?? [ 114.083728][ T5742] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 114.205380][ T70] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 114.257719][ T40] audit: type=1400 audit(1778621648.343:477): avc: denied { append } for pid=7132 comm="syz.3.409" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.272348][ T40] audit: type=1400 audit(1778621648.353:478): avc: denied { map } for pid=7132 comm="syz.3.409" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.290383][ T6261] usb 5-1: USB disconnect, device number 20 [ 114.299015][ T6261] usblp1: removed [ 114.365875][ T70] usb 6-1: device descriptor read/64, error -71 [ 114.431688][ T40] audit: type=1400 audit(1778621648.523:479): avc: denied { ioctl } for pid=7132 comm="syz.3.409" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0xae42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.541101][ T7137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7137 comm=syz.3.410 [ 114.605312][ T70] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 114.745274][ T70] usb 6-1: device descriptor read/64, error -71 [ 114.866400][ T70] usb usb6-port1: attempt power cycle [ 115.225278][ T70] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 115.248695][ T70] usb 6-1: device descriptor read/8, error -71 [ 115.495276][ T70] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 115.526074][ T70] usb 6-1: device descriptor read/8, error -71 [ 115.646178][ T70] usb usb6-port1: unable to enumerate USB device [ 116.123881][ T7155] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 116.189555][ T7160] comedi comedi3: comedi_config --init_data is deprecated [ 116.495261][ T5835] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 116.645192][ T5835] usb 5-1: Using ep0 maxpacket: 32 [ 116.649032][ T5835] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 116.652059][ T5835] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 116.654844][ T5835] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 116.657961][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 116.661028][ T5835] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 116.664073][ T5835] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 116.668789][ T5835] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 116.671644][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.676154][ T5835] usb 5-1: config 0 descriptor?? [ 116.884080][ T5835] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 116.942455][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.420'. [ 117.036093][ T7171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7171 comm=syz.2.422 [ 117.085711][ T5835] usb 5-1: USB disconnect, device number 21 [ 117.098408][ T5835] usblp1: removed [ 117.620448][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'. [ 117.630063][ T7176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.424'. [ 117.870495][ T7190] xt_HMARK: spi-set and port-set can't be combined [ 117.914699][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 118.113850][ T7202] netlink: 4376 bytes leftover after parsing attributes in process `syz.0.434'. [ 118.117328][ T7202] netlink: 4376 bytes leftover after parsing attributes in process `syz.0.434'. [ 118.136041][ T846] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 118.215257][ T39] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 118.237120][ T7204] netlink: 20 bytes leftover after parsing attributes in process `syz.0.435'. [ 118.240387][ T7204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.435'. [ 118.265312][ T846] usb 7-1: device descriptor read/64, error -71 [ 118.375243][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 118.380100][ T39] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 118.383644][ T39] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 118.387204][ T39] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 118.391019][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 118.394612][ T39] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 118.398373][ T39] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 118.403269][ T39] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 118.406563][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.411695][ T39] usb 6-1: config 0 descriptor?? [ 118.416852][ T7210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7210 comm=syz.0.436 [ 118.515331][ T846] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 118.620016][ T39] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 118.665287][ T846] usb 7-1: device descriptor read/64, error -71 [ 118.739808][ T7223] netlink: 'syz.3.443': attribute type 12 has an invalid length. [ 118.776460][ T846] usb usb7-port1: attempt power cycle [ 118.791521][ T7227] ip6t_srh: unknown srh invflags 51E8 [ 118.823002][ T5884] usb 6-1: USB disconnect, device number 17 [ 118.828463][ T5884] usblp1: removed [ 119.115267][ T846] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 119.135689][ T846] usb 7-1: device descriptor read/8, error -71 [ 119.330961][ T7237] IPVS: sed: FWM 3 0x00000003 - no destination available [ 119.369252][ T7241] dlm: no locking on control device [ 119.375810][ T846] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 119.396363][ T846] usb 7-1: device descriptor read/8, error -71 [ 119.505507][ T846] usb usb7-port1: unable to enumerate USB device [ 119.637002][ T7255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7255 comm=syz.0.457 [ 120.348851][ T7257] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 120.443016][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 120.443027][ T40] audit: type=1400 audit(1778621654.533:490): avc: denied { getopt } for pid=7258 comm="syz.0.459" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.688496][ T7269] FAULT_INJECTION: forcing a failure. [ 120.688496][ T7269] name failslab, interval 1, probability 0, space 0, times 0 [ 120.694943][ T7269] CPU: 1 UID: 0 PID: 7269 Comm: syz.0.463 Not tainted syzkaller #0 PREEMPT(full) [ 120.694966][ T7269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.694977][ T7269] Call Trace: [ 120.694985][ T7269] [ 120.694999][ T7269] dump_stack_lvl+0x100/0x190 [ 120.695026][ T7269] should_fail_ex.cold+0x5/0xa [ 120.695050][ T7269] should_failslab+0xc2/0x120 [ 120.695071][ T7269] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 120.695095][ T7269] ? skb_clone+0x190/0x400 [ 120.695130][ T7269] skb_clone+0x190/0x400 [ 120.695151][ T7269] dev_queue_xmit_nit+0x255/0xa60 [ 120.695176][ T7269] dev_hard_start_xmit+0x2fc/0x7a0 [ 120.695202][ T7269] __dev_queue_xmit+0x1baa/0x4950 [ 120.695235][ T7269] ? __pfx___dev_queue_xmit+0x10/0x10 [ 120.695273][ T7269] ? rcu_is_watching+0x12/0xc0 [ 120.695301][ T7269] ? __asan_memcpy+0x3c/0x60 [ 120.695326][ T7269] ? __asan_memcpy+0x3c/0x60 [ 120.695350][ T7269] ? __skb_clone+0x570/0x760 [ 120.695381][ T7269] netlink_deliver_tap+0xa4d/0xcc0 [ 120.695445][ T7269] netlink_unicast+0x62b/0x850 [ 120.695471][ T7269] ? __pfx_netlink_unicast+0x10/0x10 [ 120.695492][ T7269] ? __build_skb_around+0x278/0x390 [ 120.695522][ T7269] netlink_sendmsg+0x8b0/0xda0 [ 120.695549][ T7269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.695573][ T7269] ? __mutex_lock+0x26d/0x1b10 [ 120.695604][ T7269] sock_sendmsg+0x35b/0x3d0 [ 120.695626][ T7269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.695647][ T7269] ? __pfx_sock_sendmsg+0x10/0x10 [ 120.695681][ T7269] splice_to_socket+0xb4c/0x11b0 [ 120.695719][ T7269] ? __pfx_splice_to_socket+0x10/0x10 [ 120.695745][ T7269] ? inode_has_perm+0x16d/0x1d0 [ 120.695786][ T7269] ? bpf_lsm_file_permission+0x9/0x10 [ 120.695814][ T7269] ? security_file_permission+0x76/0x210 [ 120.695839][ T7269] ? rw_verify_area+0xce/0x6d0 [ 120.695856][ T7269] ? __pfx_splice_to_socket+0x10/0x10 [ 120.695879][ T7269] do_splice+0x109c/0x1fd0 [ 120.695901][ T7269] ? __lock_acquire+0x4a5/0x2630 [ 120.695929][ T7269] ? __pfx_do_splice+0x10/0x10 [ 120.695950][ T7269] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 120.695974][ T7269] ? find_held_lock+0x2b/0x80 [ 120.695999][ T7269] __do_splice+0x33b/0x370 [ 120.696025][ T7269] ? __pfx___do_splice+0x10/0x10 [ 120.696056][ T7269] __x64_sys_splice+0x187/0x250 [ 120.696083][ T7269] do_syscall_64+0x10b/0xf80 [ 120.696106][ T7269] ? clear_bhb_loop+0x40/0x90 [ 120.696144][ T7269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.696162][ T7269] RIP: 0033:0x7f1a86b9ce59 [ 120.696178][ T7269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.696195][ T7269] RSP: 002b:00007f1a87a90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 120.696213][ T7269] RAX: ffffffffffffffda RBX: 00007f1a86e16090 RCX: 00007f1a86b9ce59 [ 120.696224][ T7269] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 120.696234][ T7269] RBP: 00007f1a87a90090 R08: 000000000004ffe2 R09: 0000000000000000 [ 120.696244][ T7269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.696254][ T7269] R13: 00007f1a86e16128 R14: 00007f1a86e16090 R15: 00007ffc9ea9b048 [ 120.696278][ T7269] [ 120.933752][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.464'. [ 120.967424][ T7271] bond2: entered promiscuous mode [ 120.969100][ T7271] bond2: entered allmulticast mode [ 121.503991][ T7280] FAULT_INJECTION: forcing a failure. [ 121.503991][ T7280] name failslab, interval 1, probability 0, space 0, times 0 [ 121.509176][ T7280] CPU: 1 UID: 0 PID: 7280 Comm: syz.2.468 Not tainted syzkaller #0 PREEMPT(full) [ 121.509190][ T7280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.509197][ T7280] Call Trace: [ 121.509201][ T7280] [ 121.509205][ T7280] dump_stack_lvl+0x100/0x190 [ 121.509222][ T7280] should_fail_ex.cold+0x5/0xa [ 121.509237][ T7280] should_failslab+0xc2/0x120 [ 121.509248][ T7280] __kmalloc_node_noprof+0xe6/0x850 [ 121.509264][ T7280] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 121.509280][ T7280] __vmalloc_node_range_noprof+0x409/0x1630 [ 121.509298][ T7280] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 121.509315][ T7280] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 121.509328][ T7280] ? find_held_lock+0x2b/0x80 [ 121.509338][ T7280] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 121.509355][ T7280] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 121.509397][ T7280] ? avc_has_perm_noaudit+0x145/0x3b0 [ 121.509422][ T7280] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 121.509438][ T7280] __vmalloc_node_noprof+0xad/0xf0 [ 121.509451][ T7280] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 121.509466][ T7280] __vmalloc_noprof+0xa3/0x120 [ 121.509479][ T7280] ? __pfx___vmalloc_noprof+0x10/0x10 [ 121.509493][ T7280] ? rcu_is_watching+0x12/0xc0 [ 121.509508][ T7280] ? cap_capable+0x10b/0x440 [ 121.509521][ T7280] bpf_prog_alloc_no_stats+0x59/0x630 [ 121.509533][ T7280] ? security_capable+0x80/0x260 [ 121.509546][ T7280] bpf_prog_alloc+0x3b/0x200 [ 121.509557][ T7280] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 121.509571][ T7280] bpf_prog_load+0x48c/0x2b30 [ 121.509589][ T7280] ? __pfx_bpf_prog_load+0x10/0x10 [ 121.509606][ T7280] ? avc_has_perm_noaudit+0x145/0x3b0 [ 121.509624][ T7280] ? avc_has_perm+0x135/0x1e0 [ 121.509639][ T7280] ? selinux_bpf+0xfb/0x150 [ 121.509651][ T7280] __sys_bpf+0x223a/0x4b90 [ 121.509662][ T7280] ? __pfx___sys_bpf+0x10/0x10 [ 121.509671][ T7280] ? proc_fail_nth_write+0x9f/0x220 [ 121.509683][ T7280] ? find_held_lock+0x2b/0x80 [ 121.509699][ T7280] ? find_held_lock+0x2b/0x80 [ 121.509709][ T7280] ? ksys_write+0x190/0x250 [ 121.509720][ T7280] ? ksys_write+0x190/0x250 [ 121.509733][ T7280] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 121.509748][ T7280] ? vfs_write+0x3/0x1070 [ 121.509758][ T7280] ? __fget_files+0x215/0x3d0 [ 121.509777][ T7280] ? fput+0x79/0x100 [ 121.509791][ T7280] ? ksys_write+0x1ac/0x250 [ 121.509802][ T7280] ? __pfx_ksys_write+0x10/0x10 [ 121.509815][ T7280] __x64_sys_bpf+0x7b/0xc0 [ 121.509825][ T7280] ? lockdep_hardirqs_on+0x78/0x100 [ 121.509839][ T7280] do_syscall_64+0x10b/0xf80 [ 121.509852][ T7280] ? clear_bhb_loop+0x40/0x90 [ 121.509865][ T7280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.509876][ T7280] RIP: 0033:0x7fa931b9ce59 [ 121.509885][ T7280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.509895][ T7280] RSP: 002b:00007fa932ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.509905][ T7280] RAX: ffffffffffffffda RBX: 00007fa931e15fa0 RCX: 00007fa931b9ce59 [ 121.509912][ T7280] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 121.509918][ T7280] RBP: 00007fa932ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 121.509924][ T7280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.509930][ T7280] R13: 00007fa931e16038 R14: 00007fa931e15fa0 R15: 00007ffc77f7ff88 [ 121.509942][ T7280] [ 121.509948][ T7280] syz.2.468: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 121.528662][ T6261] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 121.530658][ T40] audit: type=1400 audit(1778621655.603:491): avc: denied { read write } for pid=7281 comm="syz.0.469" name="uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 121.532258][ T6261] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 121.533463][ T40] audit: type=1400 audit(1778621655.613:492): avc: denied { open } for pid=7281 comm="syz.0.469" path="/dev/uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 121.535644][ T7280] ,cpuset=/,mems_allowed=0-1 [ 121.535669][ T7280] CPU: 2 UID: 0 PID: 7280 Comm: syz.2.468 Not tainted syzkaller #0 PREEMPT(full) [ 121.535682][ T7280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.535688][ T7280] Call Trace: [ 121.535691][ T7280] [ 121.535696][ T7280] dump_stack_lvl+0x100/0x190 [ 121.535714][ T7280] warn_alloc.cold+0x95/0x1c1 [ 121.535726][ T7280] ? __pfx_warn_alloc+0x10/0x10 [ 121.535741][ T7280] ? lockdep_hardirqs_on+0x78/0x100 [ 121.535755][ T7280] ? dump_stack_lvl+0x17c/0x190 [ 121.535768][ T7280] ? trace_kmalloc+0xe3/0x110 [ 121.535779][ T7280] ? __kasan_kmalloc+0x8a/0xb0 [ 121.535797][ T7280] ? __kmalloc_node_noprof+0x324/0x850 [ 121.535812][ T7280] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 121.535829][ T7280] __vmalloc_node_range_noprof+0x1394/0x1630 [ 121.535847][ T7280] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 121.535864][ T7280] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 121.535877][ T7280] ? find_held_lock+0x2b/0x80 [ 121.535887][ T7280] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 121.535904][ T7280] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 121.535927][ T7280] ? avc_has_perm_noaudit+0x145/0x3b0 [ 121.535944][ T7280] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 121.535957][ T7280] __vmalloc_node_noprof+0xad/0xf0 [ 121.535970][ T7280] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 121.535984][ T7280] __vmalloc_noprof+0xa3/0x120 [ 121.535997][ T7280] ? __pfx___vmalloc_noprof+0x10/0x10 [ 121.536012][ T7280] ? rcu_is_watching+0x12/0xc0 [ 121.536028][ T7280] ? cap_capable+0x10b/0x440 [ 121.536040][ T7280] bpf_prog_alloc_no_stats+0x59/0x630 [ 121.536052][ T7280] ? security_capable+0x80/0x260 [ 121.536064][ T7280] bpf_prog_alloc+0x3b/0x200 [ 121.536076][ T7280] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 121.536090][ T7280] bpf_prog_load+0x48c/0x2b30 [ 121.536109][ T7280] ? __pfx_bpf_prog_load+0x10/0x10 [ 121.536125][ T7280] ? avc_has_perm_noaudit+0x145/0x3b0 [ 121.536143][ T7280] ? avc_has_perm+0x135/0x1e0 [ 121.536158][ T7280] ? selinux_bpf+0xfb/0x150 [ 121.536171][ T7280] __sys_bpf+0x223a/0x4b90 [ 121.536182][ T7280] ? __pfx___sys_bpf+0x10/0x10 [ 121.536191][ T7280] ? proc_fail_nth_write+0x9f/0x220 [ 121.536203][ T7280] ? find_held_lock+0x2b/0x80 [ 121.536215][ T7280] ? find_held_lock+0x2b/0x80 [ 121.536224][ T7280] ? ksys_write+0x190/0x250 [ 121.536236][ T7280] ? ksys_write+0x190/0x250 [ 121.536249][ T7280] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 121.536263][ T7280] ? vfs_write+0x3/0x1070 [ 121.536274][ T7280] ? __fget_files+0x215/0x3d0 [ 121.536293][ T7280] ? fput+0x79/0x100 [ 121.536307][ T7280] ? ksys_write+0x1ac/0x250 [ 121.536318][ T7280] ? __pfx_ksys_write+0x10/0x10 [ 121.536331][ T7280] __x64_sys_bpf+0x7b/0xc0 [ 121.536341][ T7280] ? lockdep_hardirqs_on+0x78/0x100 [ 121.536355][ T7280] do_syscall_64+0x10b/0xf80 [ 121.536369][ T7280] ? clear_bhb_loop+0x40/0x90 [ 121.536382][ T7280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.536392][ T7280] RIP: 0033:0x7fa931b9ce59 [ 121.536402][ T7280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.536412][ T7280] RSP: 002b:00007fa932ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.536421][ T7280] RAX: ffffffffffffffda RBX: 00007fa931e15fa0 RCX: 00007fa931b9ce59 [ 121.536428][ T7280] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 121.536434][ T7280] RBP: 00007fa932ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 121.536440][ T7280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.536446][ T7280] R13: 00007fa931e16038 R14: 00007fa931e15fa0 R15: 00007ffc77f7ff88 [ 121.536459][ T7280] [ 121.536463][ T7280] Mem-Info: [ 121.536589][ T6261] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 121.536613][ T6261] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 121.536632][ T6261] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 121.536650][ T6261] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 121.536668][ T6261] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 121.536688][ T6261] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 121.536708][ T6261] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 121.536727][ T6261] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 121.541130][ T6261] hid-generic 0006:0004:0009.0002: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 121.541317][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'. [ 121.542734][ T7280] active_anon:112 inactive_anon:25741 isolated_anon:0 [ 121.542734][ T7280] active_file:582 inactive_file:26618 isolated_file:0 [ 121.542734][ T7280] unevictable:1768 dirty:98 writeback:0 [ 121.542734][ T7280] slab_reclaimable:7851 slab_unreclaimable:72489 [ 121.542734][ T7280] mapped:24729 shmem:18765 pagetables:3498 [ 121.542734][ T7280] sec_pagetables:300 bounce:0 [ 121.542734][ T7280] kernel_misc_reclaimable:0 [ 121.542734][ T7280] free:451732 free_pcp:19090 free_cma:0 [ 121.542764][ T7280] Node 0 active_anon:388kB inactive_anon:102964kB active_file:56kB inactive_file:106256kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98916kB dirty:392kB writeback:0kB shmem:71520kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13056kB pagetables:4588kB sec_pagetables:1184kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 121.587809][ T7284] fido_id[7284]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 121.588897][ T7280] Node 1 active_anon:60kB inactive_anon:0kB active_file:2272kB inactive_file:216kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:9404kB sec_pagetables:16kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 121.915009][ T7280] Node 0 DMA free:14928kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:288kB local_pcp:92kB free_cma:0kB [ 121.930740][ T7280] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 121.933888][ T7280] Node 0 DMA32 free:192816kB boost:0kB min:27480kB low:34348kB high:41216kB reserved_highatomic:0KB free_highatomic:0KB active_anon:440kB inactive_anon:102956kB active_file:256kB inactive_file:106272kB unevictable:3536kB writepending:392kB zspages:0kB present:2080628kB managed:1260864kB mlocked:0kB bounce:0kB free_pcp:41136kB local_pcp:2292kB free_cma:0kB [ 121.948136][ T7280] lowmem_reserve[]: 0 0 0 0 0 [ 121.950263][ T7280] Node 1 Normal free:1599196kB boost:0kB min:39756kB low:49692kB high:59628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60kB inactive_anon:0kB active_file:2272kB inactive_file:216kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:33680kB local_pcp:12420kB free_cma:0kB [ 121.964820][ T7280] lowmem_reserve[]: 0 0 0 0 0 [ 121.967061][ T7280] Node 0 DMA: 10*4kB (UM) 11*8kB (UM) 13*16kB (UM) 14*32kB (UM) 11*64kB (UM) 9*128kB (UM) 8*256kB (UM) 6*512kB (UM) 5*1024kB (UM) 1*2048kB (U) 0*4096kB = 14928kB [ 121.974252][ T7280] Node 0 DMA32: 2028*4kB (UME) 1180*8kB (UME) 564*16kB (UME) 315*32kB (UME) 148*64kB (UME) 72*128kB (UME) 37*256kB (UME) 32*512kB (UM) 17*1024kB (UM) 16*2048kB (U) 15*4096kB (U) = 192816kB [ 121.981405][ T7280] Node 1 Normal: 374*4kB (UME) 353*8kB (UME) 342*16kB (UME) 322*32kB (UME) 314*64kB (UME) 296*128kB (UME) 274*256kB (UME) 260*512kB (UME) 225*1024kB (UM) 11*2048kB (UME) 260*4096kB (UM) = 1599232kB [ 121.987568][ T7280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 121.990373][ T7280] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 121.993155][ T7280] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 121.996165][ T7280] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 121.999005][ T7280] 46014 total pagecache pages [ 122.000438][ T7280] 0 pages in swap cache [ 122.001752][ T7280] Free swap = 124996kB [ 122.003062][ T7280] Total swap = 124996kB [ 122.004399][ T7280] 1048443 pages RAM [ 122.006448][ T7280] 0 pages HighMem/MovableOnly [ 122.008084][ T7280] 283916 pages reserved [ 122.009504][ T7280] 0 pages cma reserved [ 122.092610][ T7294] netlink: 'syz.0.474': attribute type 1 has an invalid length. [ 122.095997][ T7294] netlink: 56 bytes leftover after parsing attributes in process `syz.0.474'. [ 122.295303][ T5462] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 122.390693][ T40] audit: type=1400 audit(1778621656.483:493): avc: denied { getopt } for pid=7300 comm="syz.1.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.449144][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'. [ 122.455241][ T50] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 122.457829][ T5462] usb 7-1: Using ep0 maxpacket: 32 [ 122.462481][ T5462] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 122.468623][ T5462] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 122.472471][ T5462] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 122.475900][ T5462] usb 7-1: Product: syz [ 122.477957][ T5462] usb 7-1: Manufacturer: syz [ 122.479900][ T5462] usb 7-1: SerialNumber: syz [ 122.484773][ T5462] usb 7-1: config 0 descriptor?? [ 122.487771][ T7292] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 122.491202][ T5462] hub 7-1:0.0: bad descriptor, ignoring hub [ 122.493168][ T5462] hub 7-1:0.0: probe with driver hub failed with error -5 [ 122.496947][ T5462] chaoskey 7-1:0.0: Unable to register with hwrng [ 122.625249][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 122.628088][ T50] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 122.633530][ T50] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 122.637584][ T50] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 122.640998][ T50] usb 5-1: Product: syz [ 122.642877][ T50] usb 5-1: Manufacturer: syz [ 122.644872][ T50] usb 5-1: SerialNumber: syz [ 122.650669][ T50] usb 5-1: config 0 descriptor?? [ 122.654266][ T7297] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 122.658434][ T50] hub 5-1:0.0: bad descriptor, ignoring hub [ 122.660409][ T50] hub 5-1:0.0: probe with driver hub failed with error -5 [ 122.664135][ T50] chaoskey 5-1:0.0: Unable to register with hwrng [ 122.815500][ T6261] usb 7-1: USB disconnect, device number 26 [ 122.965548][ T1477] usb 5-1: USB disconnect, device number 22 [ 123.145428][ T6261] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 123.295265][ T1477] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 123.299325][ T6261] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 123.302223][ T6261] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.304829][ T6261] usb 7-1: Product: syz [ 123.306225][ T6261] usb 7-1: Manufacturer: syz [ 123.307794][ T6261] usb 7-1: SerialNumber: syz [ 123.317941][ T7304] capability: warning: `syz.1.478' uses deprecated v2 capabilities in a way that may be insecure [ 123.449557][ T1477] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 123.452619][ T1477] usb 5-1: can't read configurations, error -71 [ 123.539554][ T6261] rtl8150 7-1:1.0: couldn't reset the device [ 123.541658][ T6261] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 123.547668][ T6261] usb 7-1: USB disconnect, device number 27 [ 123.595237][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 123.745219][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 123.748527][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 123.753989][ T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 123.757329][ T9] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 123.760696][ T9] usb 6-1: Product: syz [ 123.762421][ T9] usb 6-1: Manufacturer: syz [ 123.764083][ T9] usb 6-1: SerialNumber: syz [ 123.767719][ T9] usb 6-1: config 0 descriptor?? [ 123.770187][ T7307] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 123.773881][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 123.776504][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 123.781016][ T9] chaoskey 6-1:0.0: Unable to register with hwrng [ 124.035591][ T7311] tc action pedit 'at' offset 46 out of bounds [ 124.046957][ T7313] nbd: must specify an index to disconnect [ 124.049867][ T40] audit: type=1400 audit(1778621658.143:494): avc: denied { append } for pid=7312 comm="syz.2.482" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.056014][ T7313] loop9: detected capacity change from 0 to 524287999 [ 124.068508][ T7313] buffer_io_error: 10 callbacks suppressed [ 124.068519][ T7313] Buffer I/O error on dev loop9, logical block 0, async page read [ 124.073320][ T7313] Buffer I/O error on dev loop9, logical block 0, async page read [ 124.075977][ T7313] Buffer I/O error on dev loop9, logical block 0, async page read [ 124.078549][ T7313] Buffer I/O error on dev loop9, logical block 0, async page read [ 124.081012][ T7313] Buffer I/O error on dev loop9, logical block 0, async page read [ 124.083623][ T7313] Buffer I/O error on dev loop9, logical block 0, async page read [ 124.086253][ T7313] Buffer I/O error on dev loop9, logical block 0, async page read [ 124.088685][ T7313] Buffer I/O error on dev loop9, logical block 0, async page read [ 124.091224][ T7313] ldm_validate_partition_table(): Disk read failed. [ 124.093261][ T7313] Buffer I/O error on dev loop9, logical block 0, async page read [ 124.096088][ T7313] Buffer I/O error on dev loop9, logical block 0, async page read [ 124.098919][ T7313] Dev loop9: unable to read RDB block 0 [ 124.101455][ T7313] loop9: unable to read partition table [ 124.102063][ T40] audit: type=1400 audit(1778621658.193:495): avc: denied { ioctl } for pid=7312 comm="syz.2.482" path="socket:[15989]" dev="sockfs" ino=15989 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 124.103398][ T7313] loop_reread_partitions: partition scan of loop9 (3x) failed (rc=-5) [ 124.207131][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.484'. [ 124.285448][ T5835] usb 6-1: USB disconnect, device number 18 [ 124.578678][ T7333] netlink: 99 bytes leftover after parsing attributes in process `syz.2.491'. [ 124.615334][ T5835] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 124.699631][ T40] audit: type=1400 audit(1778621658.793:496): avc: denied { ioctl } for pid=7335 comm="syz.2.492" path="pid:[4026532863]" dev="nsfs" ino=4026532863 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 124.785421][ T5835] usb 6-1: Using ep0 maxpacket: 32 [ 124.789129][ T5835] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 124.794056][ T5835] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 124.796966][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 124.799535][ T5835] usb 6-1: Product: syz [ 124.800866][ T5835] usb 6-1: Manufacturer: ї [ 124.802475][ T5835] usb 6-1: SerialNumber: 鎀缧댈퇧¬߬涖勡时㩝⿈ﺐ摞쳬躸⚁ජ㢝˻Რ萆搌㌋䮥謣⢥ଣ䤑끝ᾟ씮䶞舵涋銬悢Ѝ￘鮐䅔埿Ϝ쳿醅嚛霮憚獛⒴✒傡梈랁騎ㄨ횲ʕ䌯䂫儔䈡췱页쥷㠴ฮ餋堶鹋y [ 124.812158][ T5835] usb 6-1: config 0 descriptor?? [ 124.814325][ T7307] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 124.822425][ T5835] hub 6-1:0.0: bad descriptor, ignoring hub [ 124.824538][ T5835] hub 6-1:0.0: probe with driver hub failed with error -5 [ 124.925685][ T40] audit: type=1400 audit(1778621659.023:497): avc: denied { lock } for pid=7343 comm="syz.2.496" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 125.125848][ T3389] usb 6-1: USB disconnect, device number 19 [ 125.163809][ T40] audit: type=1400 audit(1778621659.253:498): avc: denied { cmd } for pid=7365 comm="syz.2.506" path="socket:[16189]" dev="sockfs" ino=16189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 125.425304][ T9] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 125.565369][ T9] usb 7-1: device descriptor read/64, error -71 [ 125.610323][ T7371] FAULT_INJECTION: forcing a failure. [ 125.610323][ T7371] name failslab, interval 1, probability 0, space 0, times 0 [ 125.614405][ T7371] CPU: 2 UID: 0 PID: 7371 Comm: syz.1.508 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.614423][ T7371] Tainted: [L]=SOFTLOCKUP [ 125.614427][ T7371] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.614433][ T7371] Call Trace: [ 125.614438][ T7371] [ 125.614443][ T7371] dump_stack_lvl+0x100/0x190 [ 125.614485][ T7371] should_fail_ex.cold+0x5/0xa [ 125.614506][ T7371] should_failslab+0xc2/0x120 [ 125.614523][ T7371] __kmalloc_cache_noprof+0x7a/0x6f0 [ 125.614543][ T7371] ? allocate_partition+0x190/0x2a0 [ 125.614575][ T7371] allocate_partition+0x190/0x2a0 [ 125.614596][ T7371] ? cred_has_capability.isra.0+0x186/0x300 [ 125.614622][ T7371] mtd_add_partition+0x1bc/0x660 [ 125.614649][ T7371] ? __pfx_mtd_add_partition+0x10/0x10 [ 125.614668][ T7371] ? __might_fault+0xc5/0x140 [ 125.614692][ T7371] ? __might_fault+0xc5/0x140 [ 125.614724][ T7371] mtdchar_blkpg_ioctl+0x207/0x250 [ 125.614744][ T7371] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 125.614784][ T7371] mtdchar_ioctl+0x1670/0x1fd0 [ 125.614809][ T7371] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 125.614830][ T7371] ? lock_acquire+0x1b1/0x370 [ 125.614857][ T7371] ? trace_contention_end+0x122/0x170 [ 125.614882][ T7371] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 125.614905][ T7371] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 125.614925][ T7371] ? __pfx___mutex_lock+0x10/0x10 [ 125.615018][ T7371] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 125.615038][ T7371] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 125.615059][ T7371] __x64_sys_ioctl+0x18e/0x210 [ 125.615077][ T7371] do_syscall_64+0x10b/0xf80 [ 125.615146][ T7371] ? clear_bhb_loop+0x40/0x90 [ 125.615167][ T7371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.615185][ T7371] RIP: 0033:0x7f525499ce59 [ 125.615201][ T7371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.615218][ T7371] RSP: 002b:00007f525587f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.615234][ T7371] RAX: ffffffffffffffda RBX: 00007f5254c15fa0 RCX: 00007f525499ce59 [ 125.615245][ T7371] RDX: 0000200000000580 RSI: 0000000000001269 RDI: 0000000000000004 [ 125.615254][ T7371] RBP: 00007f525587f090 R08: 0000000000000000 R09: 0000000000000000 [ 125.615263][ T7371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.615271][ T7371] R13: 00007f5254c16038 R14: 00007f5254c15fa0 R15: 00007ffdd69fd7c8 [ 125.615296][ T7371] [ 125.708425][ T7371] memory allocation error while creating partitions for "mtdram test device" [ 125.742204][ T40] audit: type=1400 audit(1778621659.833:499): avc: denied { create } for pid=7373 comm="syz.1.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 125.749390][ T40] audit: type=1400 audit(1778621659.833:500): avc: denied { write } for pid=7373 comm="syz.1.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 125.815342][ T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 125.827932][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.510'. [ 125.965417][ T9] usb 7-1: device descriptor read/64, error -71 [ 126.085832][ T9] usb usb7-port1: attempt power cycle [ 126.455366][ T9] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 126.476135][ T9] usb 7-1: device descriptor read/8, error -71 [ 126.735297][ T9] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 126.767178][ T9] usb 7-1: device descriptor read/8, error -71 [ 126.886879][ T9] usb usb7-port1: unable to enumerate USB device [ 127.017091][ T7396] FAULT_INJECTION: forcing a failure. [ 127.017091][ T7396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.023715][ T7396] CPU: 1 UID: 0 PID: 7396 Comm: syz.1.518 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.023742][ T7396] Tainted: [L]=SOFTLOCKUP [ 127.023747][ T7396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.023757][ T7396] Call Trace: [ 127.023764][ T7396] [ 127.023770][ T7396] dump_stack_lvl+0x100/0x190 [ 127.023797][ T7396] should_fail_ex.cold+0x5/0xa [ 127.023820][ T7396] _copy_to_user+0x32/0xd0 [ 127.023846][ T7396] simple_read_from_buffer+0xcb/0x170 [ 127.023868][ T7396] proc_fail_nth_read+0x1af/0x230 [ 127.023886][ T7396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.023905][ T7396] ? rw_verify_area+0xce/0x6d0 [ 127.023921][ T7396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.023938][ T7396] vfs_read+0x1e4/0xb30 [ 127.023959][ T7396] ? __pfx_vfs_read+0x10/0x10 [ 127.023976][ T7396] ? __fget_files+0x215/0x3d0 [ 127.024003][ T7396] ? __fget_files+0x21f/0x3d0 [ 127.024027][ T7396] ksys_read+0x12a/0x250 [ 127.024045][ T7396] ? __pfx_ksys_read+0x10/0x10 [ 127.024063][ T7396] ? rcu_is_watching+0x12/0xc0 [ 127.024090][ T7396] do_syscall_64+0x10b/0xf80 [ 127.024112][ T7396] ? clear_bhb_loop+0x40/0x90 [ 127.024131][ T7396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.024146][ T7396] RIP: 0033:0x7f525495d68e [ 127.024160][ T7396] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 127.024175][ T7396] RSP: 002b:00007f525587efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.024191][ T7396] RAX: ffffffffffffffda RBX: 00007f525587f6c0 RCX: 00007f525495d68e [ 127.024201][ T7396] RDX: 000000000000000f RSI: 00007f525587f0a0 RDI: 0000000000000005 [ 127.024210][ T7396] RBP: 00007f525587f090 R08: 0000000000000000 R09: 0000000000000000 [ 127.024220][ T7396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.024229][ T7396] R13: 00007f5254c16038 R14: 00007f5254c15fa0 R15: 00007ffdd69fd7c8 [ 127.024251][ T7396] [ 127.128850][ T40] audit: type=1400 audit(1778621661.223:501): avc: denied { lock } for pid=7398 comm="syz.1.519" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 127.191275][ T7399] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.194769][ T7399] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.213685][ T40] audit: type=1400 audit(1778621661.303:502): avc: denied { write } for pid=7398 comm="syz.1.519" path="socket:[15181]" dev="sockfs" ino=15181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 127.258226][ T7399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.266691][ T7399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.331815][ T1189] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.335596][ T1189] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.341048][ T1189] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.344857][ T1189] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.510081][ T7407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.521'. [ 128.331128][ T7413] bond3: option downdelay: invalid value (18446744073709551615) [ 128.334409][ T7413] bond3: option downdelay: allowed values 0 - 2147483647 [ 128.343172][ T7413] bond3 (unregistering): Released all slaves [ 128.643291][ T40] audit: type=1400 audit(1778621662.733:503): avc: denied { setopt } for pid=7429 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.644471][ T7430] IPVS: sed: FWM 3 0x00000003 - no destination available [ 128.745548][ T40] audit: type=1400 audit(1778621662.833:504): avc: denied { bind } for pid=7439 comm="syz.2.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.790759][ T7444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'. [ 128.829161][ T7446] IPVS: sed: FWM 3 0x00000003 - no destination available [ 128.872239][ T40] audit: type=1400 audit(1778621662.963:505): avc: denied { getopt } for pid=7447 comm="syz.2.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.903403][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'. [ 128.910914][ T7450] sit1: entered allmulticast mode [ 129.791242][ T7470] netlink: 'syz.1.546': attribute type 1 has an invalid length. [ 129.802161][ T7470] bond0: entered promiscuous mode [ 129.803938][ T7470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.810631][ T7470] netlink: 3 bytes leftover after parsing attributes in process `syz.1.546'. [ 129.819552][ T7470] bond0: (slave bridge1): making interface the new active one [ 129.822067][ T7470] bridge1: entered promiscuous mode [ 129.824749][ T7470] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 129.830100][ T40] audit: type=1400 audit(1778621663.923:506): avc: denied { write } for pid=7469 comm="syz.1.546" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 129.871447][ T7474] netlink: 'syz.3.547': attribute type 1 has an invalid length. [ 129.894740][ T7474] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.906933][ T7474] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 130.040858][ T7485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.550'. [ 130.407068][ T7513] tc action pedit offset must be on 32 bit boundaries [ 130.407925][ T7514] netlink: 64 bytes leftover after parsing attributes in process `syz.2.560'. [ 130.431157][ T40] audit: type=1326 audit(1778621664.523:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.2.560" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa931b9ce59 code=0x0 [ 130.667013][ T7522] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 130.710970][ T40] audit: type=1400 audit(1778621664.803:508): avc: denied { read } for pid=7523 comm="syz.0.564" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 130.879432][ T7530] netlink: 'syz.0.566': attribute type 1 has an invalid length. [ 130.900091][ T7530] bond1: entered promiscuous mode [ 130.902716][ T7530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.942551][ T7530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.566'. [ 130.949559][ T7530] bond1: entered allmulticast mode [ 130.969185][ T7530] bond1: (slave bridge2): making interface the new active one [ 130.972352][ T7530] bridge2: entered promiscuous mode [ 130.974817][ T7530] bridge2: entered allmulticast mode [ 130.981605][ T7530] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 130.984319][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 130.984332][ T40] audit: type=1400 audit(1778621665.073:514): avc: denied { read } for pid=7536 comm="syz.1.567" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 130.997716][ T40] audit: type=1400 audit(1778621665.073:515): avc: denied { open } for pid=7536 comm="syz.1.567" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 131.007831][ T40] audit: type=1400 audit(1778621665.073:516): avc: denied { ioctl } for pid=7536 comm="syz.1.567" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 131.009188][ T7538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.048055][ T7543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.568'. [ 131.126388][ T7550] MINIX-fs: blocksize too small for device [ 131.246460][ T40] audit: type=1400 audit(1778621665.343:517): avc: denied { create } for pid=7560 comm="syz.1.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 131.266077][ T7562] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 131.267949][ T40] audit: type=1400 audit(1778621665.363:518): avc: denied { map } for pid=7565 comm="syz.2.578" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 131.278707][ T40] audit: type=1400 audit(1778621665.363:519): avc: denied { read write } for pid=7565 comm="syz.2.578" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 131.288327][ T40] audit: type=1400 audit(1778621665.363:520): avc: denied { mount } for pid=7560 comm="syz.1.576" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 131.289536][ T7562] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 131.302237][ T136] Bluetooth: hci4: Frame reassembly failed (-84) [ 131.401309][ T40] audit: type=1400 audit(1778621665.493:521): avc: denied { map } for pid=7572 comm="syz.2.581" path="socket:[17163]" dev="sockfs" ino=17163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 131.675302][ T3389] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 131.825370][ T3389] usb 7-1: Using ep0 maxpacket: 32 [ 131.829814][ T3389] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 131.833558][ T3389] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 131.837552][ T3389] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 131.841493][ T3389] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 131.845837][ T3389] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 131.850125][ T3389] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 131.855909][ T3389] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 131.859877][ T3389] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.865882][ T3389] usb 7-1: config 0 descriptor?? [ 132.074074][ T3389] usblp 7-1:0.0: usblp1: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 132.278512][ T9] usb 7-1: USB disconnect, device number 32 [ 132.284389][ T9] usblp1: removed [ 132.349268][ T7579] netlink: 'syz.2.584': attribute type 1 has an invalid length. [ 132.775301][ T39] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 132.935272][ T39] usb 7-1: Using ep0 maxpacket: 32 [ 132.938662][ T39] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 132.941415][ T39] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 132.944168][ T39] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 132.947362][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 132.950388][ T39] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 132.953400][ T39] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 132.957722][ T39] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 132.960547][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.964616][ T39] usb 7-1: config 0 descriptor?? [ 133.173899][ T39] usblp 7-1:0.0: usblp1: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 133.316281][ T5749] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 133.382443][ T7586] netlink: 'syz.2.586': attribute type 1 has an invalid length. [ 133.384982][ T7586] netlink: 280 bytes leftover after parsing attributes in process `syz.2.586'. [ 133.446768][ T5742] usb 7-1: USB disconnect, device number 33 [ 133.451937][ T5742] usblp1: removed [ 133.864141][ T7604] FAULT_INJECTION: forcing a failure. [ 133.864141][ T7604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.872799][ T7604] CPU: 1 UID: 0 PID: 7604 Comm: syz.1.593 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.872827][ T7604] Tainted: [L]=SOFTLOCKUP [ 133.872833][ T7604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.872842][ T7604] Call Trace: [ 133.872849][ T7604] [ 133.872856][ T7604] dump_stack_lvl+0x100/0x190 [ 133.872881][ T7604] should_fail_ex.cold+0x5/0xa [ 133.872904][ T7604] _copy_from_user+0x2e/0xd0 [ 133.872929][ T7604] kstrtouint_from_user+0xd6/0x1d0 [ 133.872947][ T7604] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 133.872965][ T7604] ? __lock_acquire+0x4a5/0x2630 [ 133.872990][ T7604] ? lock_acquire+0x1b1/0x370 [ 133.873015][ T7604] proc_fail_nth_write+0x83/0x220 [ 133.873033][ T7604] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 133.873058][ T7604] vfs_write+0x2aa/0x1070 [ 133.873077][ T7604] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 133.873097][ T7604] ? __pfx_vfs_write+0x10/0x10 [ 133.873114][ T7604] ? __fget_files+0x215/0x3d0 [ 133.873139][ T7604] ? __fget_files+0x21f/0x3d0 [ 133.873165][ T7604] ksys_write+0x12a/0x250 [ 133.873182][ T7604] ? __pfx_ksys_write+0x10/0x10 [ 133.873226][ T7604] ? rcu_is_watching+0x12/0xc0 [ 133.873271][ T7604] do_syscall_64+0x10b/0xf80 [ 133.873293][ T7604] ? clear_bhb_loop+0x40/0x90 [ 133.873313][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.873330][ T7604] RIP: 0033:0x7f525495d68e [ 133.873344][ T7604] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 133.873359][ T7604] RSP: 002b:00007f525585dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.873376][ T7604] RAX: ffffffffffffffda RBX: 00007f525585e6c0 RCX: 00007f525495d68e [ 133.873385][ T7604] RDX: 0000000000000001 RSI: 00007f525585e0a0 RDI: 0000000000000007 [ 133.873395][ T7604] RBP: 00007f525585e090 R08: 0000000000000000 R09: 0000000000000000 [ 133.873404][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.873413][ T7604] R13: 00007f5254c16128 R14: 00007f5254c16090 R15: 00007ffdd69fd7c8 [ 133.873436][ T7604] [ 134.083946][ T40] audit: type=1326 audit(1778621668.173:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="syz.1.596" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f525499ce59 code=0x0 [ 134.216191][ T7613] FAULT_INJECTION: forcing a failure. [ 134.216191][ T7613] name failslab, interval 1, probability 0, space 0, times 0 [ 134.220208][ T7613] CPU: 2 UID: 0 PID: 7613 Comm: syz.3.597 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.220225][ T7613] Tainted: [L]=SOFTLOCKUP [ 134.220229][ T7613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.220235][ T7613] Call Trace: [ 134.220240][ T7613] [ 134.220244][ T7613] dump_stack_lvl+0x100/0x190 [ 134.220262][ T7613] should_fail_ex.cold+0x5/0xa [ 134.220277][ T7613] should_failslab+0xc2/0x120 [ 134.220288][ T7613] __kmalloc_node_noprof+0xe6/0x850 [ 134.220304][ T7613] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 134.220321][ T7613] __vmalloc_node_range_noprof+0x409/0x1630 [ 134.220339][ T7613] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 134.220355][ T7613] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 134.220369][ T7613] ? find_held_lock+0x2b/0x80 [ 134.220379][ T7613] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 134.220396][ T7613] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 134.220414][ T7613] ? avc_has_perm_noaudit+0x145/0x3b0 [ 134.220431][ T7613] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 134.220443][ T7613] __vmalloc_node_noprof+0xad/0xf0 [ 134.220456][ T7613] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 134.220470][ T7613] __vmalloc_noprof+0xa3/0x120 [ 134.220483][ T7613] ? __pfx___vmalloc_noprof+0x10/0x10 [ 134.220497][ T7613] ? rcu_is_watching+0x12/0xc0 [ 134.220518][ T7613] ? cap_capable+0x10b/0x440 [ 134.220530][ T7613] bpf_prog_alloc_no_stats+0x59/0x630 [ 134.220542][ T7613] ? security_capable+0x80/0x260 [ 134.220554][ T7613] bpf_prog_alloc+0x3b/0x200 [ 134.220566][ T7613] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.220579][ T7613] bpf_prog_load+0x48c/0x2b30 [ 134.220597][ T7613] ? __pfx_bpf_prog_load+0x10/0x10 [ 134.220613][ T7613] ? avc_has_perm_noaudit+0x145/0x3b0 [ 134.220631][ T7613] ? avc_has_perm+0x135/0x1e0 [ 134.220646][ T7613] ? selinux_bpf+0xfb/0x150 [ 134.220659][ T7613] __sys_bpf+0x223a/0x4b90 [ 134.220670][ T7613] ? __pfx___sys_bpf+0x10/0x10 [ 134.220679][ T7613] ? proc_fail_nth_write+0x9f/0x220 [ 134.220690][ T7613] ? find_held_lock+0x2b/0x80 [ 134.220702][ T7613] ? find_held_lock+0x2b/0x80 [ 134.220711][ T7613] ? ksys_write+0x190/0x250 [ 134.220722][ T7613] ? ksys_write+0x190/0x250 [ 134.220735][ T7613] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 134.220750][ T7613] ? vfs_write+0x3/0x1070 [ 134.220760][ T7613] ? __fget_files+0x215/0x3d0 [ 134.220779][ T7613] ? fput+0x79/0x100 [ 134.220793][ T7613] ? ksys_write+0x1ac/0x250 [ 134.220804][ T7613] ? __pfx_ksys_write+0x10/0x10 [ 134.220817][ T7613] __x64_sys_bpf+0x7b/0xc0 [ 134.220826][ T7613] ? lockdep_hardirqs_on+0x78/0x100 [ 134.220841][ T7613] do_syscall_64+0x10b/0xf80 [ 134.220854][ T7613] ? clear_bhb_loop+0x40/0x90 [ 134.220866][ T7613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.220877][ T7613] RIP: 0033:0x7fa11bd9ce59 [ 134.220886][ T7613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.220896][ T7613] RSP: 002b:00007fa11cc53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.220906][ T7613] RAX: ffffffffffffffda RBX: 00007fa11c015fa0 RCX: 00007fa11bd9ce59 [ 134.220913][ T7613] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 134.220919][ T7613] RBP: 00007fa11cc53090 R08: 0000000000000000 R09: 0000000000000000 [ 134.220925][ T7613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.220931][ T7613] R13: 00007fa11c016038 R14: 00007fa11c015fa0 R15: 00007ffd99160918 [ 134.220943][ T7613] [ 134.220948][ T7613] syz.3.597: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset= [ 134.346828][ T39] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 134.346837][ T7613] /,mems_allowed=0-1 [ 134.357791][ T7613] CPU: 3 UID: 0 PID: 7613 Comm: syz.3.597 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.357818][ T7613] Tainted: [L]=SOFTLOCKUP [ 134.357823][ T7613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.357834][ T7613] Call Trace: [ 134.357841][ T7613] [ 134.357848][ T7613] dump_stack_lvl+0x100/0x190 [ 134.357874][ T7613] warn_alloc.cold+0x95/0x1c1 [ 134.357894][ T7613] ? __pfx_warn_alloc+0x10/0x10 [ 134.357919][ T7613] ? lockdep_hardirqs_on+0x78/0x100 [ 134.357943][ T7613] ? dump_stack_lvl+0x17c/0x190 [ 134.357965][ T7613] ? trace_kmalloc+0xe3/0x110 [ 134.357984][ T7613] ? __kasan_kmalloc+0x8a/0xb0 [ 134.358012][ T7613] ? __kmalloc_node_noprof+0x324/0x850 [ 134.358052][ T7613] ? __vmalloc_node_range_noprof+0x409/0x1630 [ 134.358082][ T7613] __vmalloc_node_range_noprof+0x1394/0x1630 [ 134.358113][ T7613] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 134.358144][ T7613] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 134.358166][ T7613] ? find_held_lock+0x2b/0x80 [ 134.358182][ T7613] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 134.358210][ T7613] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 134.358241][ T7613] ? avc_has_perm_noaudit+0x145/0x3b0 [ 134.358270][ T7613] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 134.358291][ T7613] __vmalloc_node_noprof+0xad/0xf0 [ 134.358313][ T7613] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 134.358338][ T7613] __vmalloc_noprof+0xa3/0x120 [ 134.358360][ T7613] ? __pfx___vmalloc_noprof+0x10/0x10 [ 134.358384][ T7613] ? rcu_is_watching+0x12/0xc0 [ 134.358411][ T7613] ? cap_capable+0x10b/0x440 [ 134.358432][ T7613] bpf_prog_alloc_no_stats+0x59/0x630 [ 134.358460][ T7613] ? security_capable+0x80/0x260 [ 134.358481][ T7613] bpf_prog_alloc+0x3b/0x200 [ 134.358500][ T7613] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.358523][ T7613] bpf_prog_load+0x48c/0x2b30 [ 134.358556][ T7613] ? __pfx_bpf_prog_load+0x10/0x10 [ 134.358582][ T7613] ? avc_has_perm_noaudit+0x145/0x3b0 [ 134.358613][ T7613] ? avc_has_perm+0x135/0x1e0 [ 134.358639][ T7613] ? selinux_bpf+0xfb/0x150 [ 134.358661][ T7613] __sys_bpf+0x223a/0x4b90 [ 134.358680][ T7613] ? __pfx___sys_bpf+0x10/0x10 [ 134.358695][ T7613] ? proc_fail_nth_write+0x9f/0x220 [ 134.358713][ T7613] ? find_held_lock+0x2b/0x80 [ 134.358734][ T7613] ? find_held_lock+0x2b/0x80 [ 134.358750][ T7613] ? ksys_write+0x190/0x250 [ 134.358769][ T7613] ? ksys_write+0x190/0x250 [ 134.358791][ T7613] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 134.358814][ T7613] ? vfs_write+0x3/0x1070 [ 134.358832][ T7613] ? __fget_files+0x215/0x3d0 [ 134.358867][ T7613] ? fput+0x79/0x100 [ 134.358889][ T7613] ? ksys_write+0x1ac/0x250 [ 134.358908][ T7613] ? __pfx_ksys_write+0x10/0x10 [ 134.358931][ T7613] __x64_sys_bpf+0x7b/0xc0 [ 134.358947][ T7613] ? lockdep_hardirqs_on+0x78/0x100 [ 134.358970][ T7613] do_syscall_64+0x10b/0xf80 [ 134.358993][ T7613] ? clear_bhb_loop+0x40/0x90 [ 134.359013][ T7613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.359031][ T7613] RIP: 0033:0x7fa11bd9ce59 [ 134.359046][ T7613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.359063][ T7613] RSP: 002b:00007fa11cc53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.359079][ T7613] RAX: ffffffffffffffda RBX: 00007fa11c015fa0 RCX: 00007fa11bd9ce59 [ 134.359090][ T7613] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 134.359100][ T7613] RBP: 00007fa11cc53090 R08: 0000000000000000 R09: 0000000000000000 [ 134.359110][ T7613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.359119][ T7613] R13: 00007fa11c016038 R14: 00007fa11c015fa0 R15: 00007ffd99160918 [ 134.359143][ T7613] [ 134.359189][ T7613] Mem-Info: [ 134.505303][ T39] usb 7-1: Using ep0 maxpacket: 32 [ 134.512230][ T7613] active_anon:143 inactive_anon:25738 isolated_anon:0 [ 134.512230][ T7613] active_file:1677 inactive_file:26634 isolated_file:0 [ 134.512230][ T7613] unevictable:1768 dirty:73 writeback:0 [ 134.512230][ T7613] slab_reclaimable:7927 slab_unreclaimable:72250 [ 134.512230][ T7613] mapped:24797 shmem:18781 pagetables:3534 [ 134.512230][ T7613] sec_pagetables:300 bounce:0 [ 134.512230][ T7613] kernel_misc_reclaimable:0 [ 134.512230][ T7613] free:457765 free_pcp:11640 free_cma:0 [ 134.527385][ T7613] Node 0 active_anon:512kB inactive_anon:102952kB active_file:4436kB inactive_file:106320kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:99188kB dirty:292kB writeback:0kB shmem:71584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13152kB pagetables:4764kB sec_pagetables:1184kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 134.539033][ T7613] Node 1 active_anon:60kB inactive_anon:0kB active_file:2272kB inactive_file:216kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:9372kB sec_pagetables:16kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 134.550323][ T7613] Node 0 DMA free:14928kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:320kB local_pcp:68kB free_cma:0kB [ 134.560468][ T39] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 134.563721][ T7613] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 134.565816][ T7613] Node 0 DMA32 free:213120kB boost:0kB min:27480kB low:34348kB high:41216kB reserved_highatomic:0KB free_highatomic:0KB active_anon:512kB inactive_anon:102952kB active_file:4436kB inactive_file:106320kB unevictable:3536kB writepending:292kB zspages:12kB present:2080628kB managed:1260864kB mlocked:0kB bounce:0kB free_pcp:16548kB local_pcp:6696kB free_cma:0kB [ 134.576493][ T7613] lowmem_reserve[]: 0 0 0 0 0 [ 134.578358][ T7613] Node 1 Normal free:1603012kB boost:0kB min:39756kB low:49692kB high:59628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60kB inactive_anon:0kB active_file:2272kB inactive_file:216kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:29936kB local_pcp:11664kB free_cma:0kB [ 134.588713][ T7613] lowmem_reserve[]: 0 0 0 0 0 [ 134.590552][ T7613] Node 0 DMA: 10*4kB (UM) 11*8kB (UM) 13*16kB (UM) 14*32kB (UM) 11*64kB (UM) 9*128kB (UM) 8*256kB (UM) 6*512kB (UM) 5*1024kB (UM) 1*2048kB (U) 0*4096kB = 14928kB [ 134.598070][ T39] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 134.601004][ T39] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 134.603659][ T39] usb 7-1: Product: syz [ 134.605045][ T39] usb 7-1: Manufacturer: syz [ 134.605292][ T7613] Node 0 DMA32: 1722*4kB (UME) 1309*8kB (UME) 571*16kB (UME) 418*32kB (UME) [ 134.606746][ T39] usb 7-1: SerialNumber: syz [ 134.606749][ T7613] 217*64kB (UME) 87*128kB (UME) 45*256kB (UME) 35*512kB (UM) 20*1024kB (UM) 22*2048kB (UM) 13*4096kB (UM) = 213120kB [ 134.615442][ T39] usb 7-1: config 0 descriptor?? [ 134.617056][ T7613] Node 1 Normal: 373*4kB (UME) 354*8kB (UME) 346*16kB (UME) 322*32kB (UME) 312*64kB (UME) 296*128kB (UME) 275*256kB (UME) 259*512kB (UME) 229*1024kB (UM) 11*2048kB (UME) 260*4096kB (UM) = 1603012kB [ 134.619676][ T7608] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 134.626866][ T7613] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.630412][ T39] hub 7-1:0.0: bad descriptor, ignoring hub [ 134.633421][ T7613] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.635529][ T39] hub 7-1:0.0: probe with driver hub failed with error -5 [ 134.637970][ T39] chaoskey 7-1:0.0: Unable to register with hwrng [ 134.639417][ T7613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.639433][ T7613] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.639448][ T7613] 47088 total pagecache pages [ 134.639461][ T7613] 0 pages in swap cache [ 134.656801][ T7613] Free swap = 124996kB [ 134.658141][ T7613] Total swap = 124996kB [ 134.659464][ T7613] 1048443 pages RAM [ 134.660681][ T7613] 0 pages HighMem/MovableOnly [ 134.662377][ T7613] 283916 pages reserved [ 134.663711][ T7613] 0 pages cma reserved [ 134.968935][ T7626] netlink: 'syz.1.603': attribute type 1 has an invalid length. [ 134.982927][ T7626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.988374][ T40] audit: type=1400 audit(1778621669.083:523): avc: denied { mounton } for pid=7625 comm="syz.1.603" path="/proc/473/cgroup" dev="proc" ino=18275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 135.007283][ T7626] bond1: (slave veth5): Enslaving as an active interface with a down link [ 135.016557][ T7626] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 135.019003][ T7626] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 135.158771][ T70] usb 7-1: USB disconnect, device number 34 [ 135.496402][ T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 135.637403][ T7655] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 135.665510][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 135.668907][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 135.673857][ T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 135.676812][ T9] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 135.679435][ T9] usb 7-1: Product: syz [ 135.680786][ T9] usb 7-1: Manufacturer: ї [ 135.682282][ T9] usb 7-1: SerialNumber: 鎀缧댈퇧¬߬涖勡时㩝⿈ﺐ摞쳬躸⚁ජ㢝˻Რ萆搌㌋䮥謣⢥ଣ䤑끝ᾟ씮䶞舵涋銬悢Ѝ￘鮐䅔埿Ϝ쳿醅嚛霮憚獛⒴✒傡梈랁騎ㄨ횲ʕ䌯䂫儔䈡췱页쥷㠴ฮ餋堶鹋y [ 135.694383][ T9] usb 7-1: config 0 descriptor?? [ 135.696521][ T7608] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.699396][ T9] hub 7-1:0.0: bad descriptor, ignoring hub [ 135.701354][ T9] hub 7-1:0.0: probe with driver hub failed with error -5 [ 135.799504][ T7663] syz_tun: entered allmulticast mode [ 136.005949][ T9] usb 7-1: USB disconnect, device number 35 [ 136.627945][ T7662] syz_tun: left allmulticast mode [ 136.844456][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'. [ 137.305204][ T7689] netlink: 'syz.1.624': attribute type 1 has an invalid length. [ 137.308597][ T7689] netlink: 96 bytes leftover after parsing attributes in process `syz.1.624'. [ 137.312418][ T7689] netlink: 'syz.1.624': attribute type 1 has an invalid length. [ 137.315791][ T7689] netlink: 'syz.1.624': attribute type 8 has an invalid length. [ 137.319090][ T7689] netlink: 582 bytes leftover after parsing attributes in process `syz.1.624'. [ 137.322930][ T7689] netlink: 1 bytes leftover after parsing attributes in process `syz.1.624'. [ 137.334850][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 137.334863][ T40] audit: type=1326 audit(1778621671.423:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.1.624" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525499ce59 code=0x7ffc0000 [ 137.348796][ T40] audit: type=1326 audit(1778621671.423:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.1.624" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525499ce59 code=0x7ffc0000 [ 137.357874][ T40] audit: type=1326 audit(1778621671.423:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.1.624" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525499ce59 code=0x7ffc0000 [ 137.365576][ T40] audit: type=1326 audit(1778621671.423:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.1.624" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f525499ce59 code=0x7ffc0000 [ 137.366430][ T7689] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 137.372768][ T40] audit: type=1326 audit(1778621671.423:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.1.624" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525499ce59 code=0x7ffc0000 [ 137.372796][ T40] audit: type=1326 audit(1778621671.453:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.1.624" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525499ce59 code=0x7ffc0000 [ 137.372816][ T40] audit: type=1326 audit(1778621671.453:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.1.624" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525499ce59 code=0x7ffc0000 [ 137.372836][ T40] audit: type=1326 audit(1778621671.453:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.1.624" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525499ce59 code=0x7ffc0000 [ 137.372856][ T40] audit: type=1326 audit(1778621671.453:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.1.624" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525499ce59 code=0x7ffc0000 [ 137.372877][ T40] audit: type=1326 audit(1778621671.453:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.1.624" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f525499ce59 code=0x7ffc0000 [ 137.465794][ T5749] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 137.666903][ T7700] IPVS: sed: FWM 3 0x00000003 - no destination available [ 137.743582][ T7703] FAULT_INJECTION: forcing a failure. [ 137.743582][ T7703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.751975][ T7703] CPU: 3 UID: 0 PID: 7703 Comm: syz.0.629 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.752001][ T7703] Tainted: [L]=SOFTLOCKUP [ 137.752006][ T7703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.752015][ T7703] Call Trace: [ 137.752021][ T7703] [ 137.752027][ T7703] dump_stack_lvl+0x100/0x190 [ 137.752066][ T7703] should_fail_ex.cold+0x5/0xa [ 137.752091][ T7703] _copy_to_user+0x32/0xd0 [ 137.752127][ T7703] simple_read_from_buffer+0xcb/0x170 [ 137.752152][ T7703] proc_fail_nth_read+0x1af/0x230 [ 137.752172][ T7703] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 137.752193][ T7703] ? rw_verify_area+0xce/0x6d0 [ 137.752209][ T7703] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 137.752228][ T7703] vfs_read+0x1e4/0xb30 [ 137.752247][ T7703] ? __pfx_vfs_read+0x10/0x10 [ 137.752260][ T7703] ? __fget_files+0x215/0x3d0 [ 137.752276][ T7703] ? __fget_files+0x21f/0x3d0 [ 137.752293][ T7703] ksys_read+0x12a/0x250 [ 137.752304][ T7703] ? __pfx_ksys_read+0x10/0x10 [ 137.752316][ T7703] ? rcu_is_watching+0x12/0xc0 [ 137.752334][ T7703] do_syscall_64+0x10b/0xf80 [ 137.752386][ T7703] ? clear_bhb_loop+0x40/0x90 [ 137.752399][ T7703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.752410][ T7703] RIP: 0033:0x7f1a86b5d68e [ 137.752419][ T7703] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 137.752430][ T7703] RSP: 002b:00007f1a87a8ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 137.752440][ T7703] RAX: ffffffffffffffda RBX: 00007f1a87a906c0 RCX: 00007f1a86b5d68e [ 137.752447][ T7703] RDX: 000000000000000f RSI: 00007f1a87a900a0 RDI: 0000000000000007 [ 137.752454][ T7703] RBP: 00007f1a87a90090 R08: 0000000000000000 R09: 0000000000000000 [ 137.752460][ T7703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.752466][ T7703] R13: 00007f1a86e16128 R14: 00007f1a86e16090 R15: 00007ffc9ea9b048 [ 137.752479][ T7703] [ 137.826593][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.294130][ T7741] kvm: pic: non byte write [ 139.157658][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.655'. [ 139.221875][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.655'. [ 139.299728][ T7786] overlayfs: failed to resolve '/0H_': -2 [ 139.306534][ T7786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.656'. [ 139.668307][ T7793] btrfs: Unknown parameter '9DV;ƛJm' [ 139.725873][ T7796] tc action pedit 'at' offset 46 out of bounds [ 139.815269][ T3389] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 139.867247][ T7800] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 139.870238][ T7800] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 139.888345][ T7800] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 139.896050][ T7800] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 139.898101][ T7800] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 139.902565][ T7800] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 139.906568][ T7800] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 139.908530][ T7800] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 139.912474][ T7800] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 139.916514][ T7800] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 139.918463][ T7800] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 139.922496][ T7800] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 139.929044][ T7805] netlink: 'syz.2.664': attribute type 39 has an invalid length. [ 139.975399][ T3389] usb 6-1: Using ep0 maxpacket: 32 [ 139.980000][ T3389] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 139.983575][ T3389] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 139.990199][ T3389] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 139.993529][ T3389] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.996849][ T3389] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 140.000036][ T3389] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 140.004095][ T3389] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 140.006954][ T3389] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.010884][ T3389] usb 6-1: config 0 descriptor?? [ 140.213971][ T7817] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7817 comm=syz.3.669 [ 140.218990][ T7815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.668'. [ 140.219734][ T7817] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7817 comm=syz.3.669 [ 140.222968][ T3389] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 140.223122][ T7815] fuse: Bad value for 'fd' [ 140.327573][ T7821] 0x000000003c39-0x000000020000 : "" [ 140.329315][ T7821] FAULT_INJECTION: forcing a failure. [ 140.329315][ T7821] name failslab, interval 1, probability 0, space 0, times 0 [ 140.333265][ T7821] CPU: 2 UID: 0 PID: 7821 Comm: syz.3.671 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.333280][ T7821] Tainted: [L]=SOFTLOCKUP [ 140.333284][ T7821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.333290][ T7821] Call Trace: [ 140.333295][ T7821] [ 140.333300][ T7821] dump_stack_lvl+0x100/0x190 [ 140.333316][ T7821] should_fail_ex.cold+0x5/0xa [ 140.333331][ T7821] should_failslab+0xc2/0x120 [ 140.333344][ T7821] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 140.333361][ T7821] ? kvasprintf_const+0x66/0x1a0 [ 140.333380][ T7821] kvasprintf+0xbc/0x150 [ 140.333395][ T7821] ? __pfx_kvasprintf+0x10/0x10 [ 140.333413][ T7821] ? idr_alloc_u32+0x22b/0x320 [ 140.333431][ T7821] kvasprintf_const+0x66/0x1a0 [ 140.333448][ T7821] kobject_set_name_vargs+0x5a/0x140 [ 140.333459][ T7821] dev_set_name+0xc7/0x100 [ 140.333472][ T7821] ? __pfx_dev_set_name+0x10/0x10 [ 140.333486][ T7821] ? idr_alloc+0xdd/0x130 [ 140.333499][ T7821] ? __pfx_idr_alloc+0x10/0x10 [ 140.333515][ T7821] ? add_mtd_device+0x7c7/0x17a0 [ 140.333526][ T7821] add_mtd_device+0x88c/0x17a0 [ 140.333539][ T7821] ? __pfx_add_mtd_device+0x10/0x10 [ 140.333553][ T7821] mtd_add_partition+0x30a/0x660 [ 140.333565][ T7821] ? __pfx_mtd_add_partition+0x10/0x10 [ 140.333576][ T7821] ? __might_fault+0xc5/0x140 [ 140.333592][ T7821] ? __might_fault+0xc5/0x140 [ 140.333611][ T7821] mtdchar_blkpg_ioctl+0x207/0x250 [ 140.333624][ T7821] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 140.333648][ T7821] mtdchar_ioctl+0x1670/0x1fd0 [ 140.333662][ T7821] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 140.333679][ T7821] ? lock_acquire+0x1b1/0x370 [ 140.333696][ T7821] ? trace_contention_end+0x122/0x170 [ 140.333712][ T7821] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 140.333726][ T7821] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 140.333738][ T7821] ? __pfx___mutex_lock+0x10/0x10 [ 140.333798][ T7821] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 140.333810][ T7821] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 140.333824][ T7821] __x64_sys_ioctl+0x18e/0x210 [ 140.333836][ T7821] do_syscall_64+0x10b/0xf80 [ 140.333850][ T7821] ? clear_bhb_loop+0x40/0x90 [ 140.333863][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.333874][ T7821] RIP: 0033:0x7fa11bd9ce59 [ 140.333884][ T7821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.333894][ T7821] RSP: 002b:00007fa11cc53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.333904][ T7821] RAX: ffffffffffffffda RBX: 00007fa11c015fa0 RCX: 00007fa11bd9ce59 [ 140.333911][ T7821] RDX: 0000200000000580 RSI: 0000000000001269 RDI: 0000000000000004 [ 140.333917][ T7821] RBP: 00007fa11cc53090 R08: 0000000000000000 R09: 0000000000000000 [ 140.333923][ T7821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.333929][ T7821] R13: 00007fa11c016038 R14: 00007fa11c015fa0 R15: 00007ffd99160918 [ 140.333948][ T7821] [ 140.421210][ T9] usb 6-1: USB disconnect, device number 20 [ 140.433279][ T9] usblp1: removed [ 140.483982][ T7830] xfrm0 speed is unknown, defaulting to 1000 [ 140.486677][ T7830] xfrm0 speed is unknown, defaulting to 1000 [ 140.490223][ T7830] xfrm0 speed is unknown, defaulting to 1000 [ 140.492742][ T7830] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 140.499671][ T7830] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 140.505169][ T7830] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 140.509610][ T7830] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 140.512724][ T7833] FAULT_INJECTION: forcing a failure. [ 140.512724][ T7833] name failslab, interval 1, probability 0, space 0, times 0 [ 140.516954][ T7830] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 140.520345][ T7833] CPU: 3 UID: 0 PID: 7833 Comm: syz.0.675 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.520364][ T7833] Tainted: [L]=SOFTLOCKUP [ 140.520368][ T7833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.520376][ T7833] Call Trace: [ 140.520380][ T7833] [ 140.520384][ T7833] dump_stack_lvl+0x100/0x190 [ 140.520401][ T7833] should_fail_ex.cold+0x5/0xa [ 140.520416][ T7833] should_failslab+0xc2/0x120 [ 140.520429][ T7833] __kmalloc_cache_noprof+0x7a/0x6f0 [ 140.520443][ T7833] ? vhost_iotlb_add_range_ctx+0xf0/0xa80 [ 140.520516][ T7833] vhost_iotlb_add_range_ctx+0xf0/0xa80 [ 140.520530][ T7833] ? __kasan_kmalloc+0xaa/0xb0 [ 140.520548][ T7833] vhost_dev_ioctl+0x907/0xe20 [ 140.520561][ T7833] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 140.520578][ T7833] vhost_net_ioctl+0x75f/0x1910 [ 140.520588][ T7833] ? do_vfs_ioctl+0x226/0x13e0 [ 140.520600][ T7833] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 140.520611][ T7833] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 140.520620][ T7833] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 140.520643][ T7833] ? __fget_files+0x215/0x3d0 [ 140.520656][ T7833] ? hook_file_ioctl_common+0x149/0x410 [ 140.520676][ T7833] ? selinux_file_ioctl+0xb6/0x290 [ 140.520691][ T7833] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 140.520702][ T7833] __x64_sys_ioctl+0x18e/0x210 [ 140.520713][ T7833] do_syscall_64+0x10b/0xf80 [ 140.520727][ T7833] ? clear_bhb_loop+0x40/0x90 [ 140.520740][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.520751][ T7833] RIP: 0033:0x7f1a86b9ce59 [ 140.520760][ T7833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.520770][ T7833] RSP: 002b:00007f1a87ab1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.520781][ T7833] RAX: ffffffffffffffda RBX: 00007f1a86e15fa0 RCX: 00007f1a86b9ce59 [ 140.520788][ T7833] RDX: 00002000000000c0 RSI: 000000004008af03 RDI: 0000000000000003 [ 140.520794][ T7833] RBP: 00007f1a87ab1090 R08: 0000000000000000 R09: 0000000000000000 [ 140.520800][ T7833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.520806][ T7833] R13: 00007f1a86e16038 R14: 00007f1a86e15fa0 R15: 00007ffc9ea9b048 [ 140.520819][ T7833] [ 140.534744][ T7830] xfrm0 speed is unknown, defaulting to 1000 [ 140.542104][ T7835] sit1: entered allmulticast mode [ 140.628147][ T7830] xfrm0 speed is unknown, defaulting to 1000 [ 140.631844][ T7830] xfrm0 speed is unknown, defaulting to 1000 [ 140.634678][ T7830] xfrm0 speed is unknown, defaulting to 1000 [ 141.393046][ T7837] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 141.395465][ T7837] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.398178][ T7837] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.400813][ T7837] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.444025][ T7857] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 142.565797][ T7906] IPVS: sed: FWM 3 0x00000003 - no destination available [ 142.755378][ T5749] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.485278][ T5749] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.485619][ T62] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.485681][ T5754] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.828120][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 143.828132][ T40] audit: type=1400 audit(1778621677.923:600): avc: denied { read } for pid=7934 comm="syz.1.703" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 143.918827][ T7933] netlink: 'syz.0.702': attribute type 5 has an invalid length. [ 143.966994][ T7933] netlink: 'syz.0.702': attribute type 5 has an invalid length. [ 143.977285][ T7945] netlink: 'syz.2.707': attribute type 2 has an invalid length. [ 144.075297][ T40] audit: type=1326 audit(1778621678.163:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.0.708" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a86b9ce59 code=0x0 [ 144.125227][ T3389] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 144.277237][ T3389] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 144.285619][ T3389] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 144.290510][ T3389] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.298258][ T3389] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 144.302014][ T3389] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 144.305535][ T3389] usb 6-1: Product: syz [ 144.307485][ T3389] usb 6-1: Manufacturer: syz [ 144.309801][ T3389] usb 6-1: SerialNumber: syz [ 144.518832][ T3389] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xb0000) [ 144.637009][ T1132] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 144.639867][ T1132] ata1: failed to read log page 10h (errno=-5) [ 144.642437][ T1132] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 144.645940][ T1132] ata1.00: irq_stat 0x41000000 [ 144.648171][ T1132] ata1.00: failed command: READ FPDMA QUEUED [ 144.650712][ T1132] ata1.00: cmd 60/80:70:6e:31:01/05:00:00:00:00/40 tag 14 ncq dma 720896 in [ 144.650712][ T1132] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 144.657877][ T1132] ata1.00: status: { DRDY } [ 144.659751][ T1132] ata1.00: failed command: READ FPDMA QUEUED [ 144.662333][ T1132] ata1.00: cmd 60/78:78:ee:36:01/06:00:00:00:00/40 tag 15 ncq dma 847872 in [ 144.662333][ T1132] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 144.669366][ T1132] ata1.00: status: { DRDY } [ 144.672562][ T1132] ata1.00: configured for UDMA/100 [ 144.675217][ T1132] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 144.678444][ T1132] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 144.681404][ T1132] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 144.684804][ T1132] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 31 6e 00 05 80 00 [ 144.688559][ T1132] blk_print_req_error: 10 callbacks suppressed [ 144.688572][ T1132] I/O error, dev sda, sector 78190 op 0x0:(READ) flags 0x80700 phys_seg 88 prio class 2 [ 144.695444][ T1132] sd 0:0:0:0: [sda] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 144.699785][ T1132] sd 0:0:0:0: [sda] tag#15 Sense Key : Aborted Command [current] [ 144.703047][ T1132] sd 0:0:0:0: [sda] tag#15 Add. Sense: No additional sense information [ 144.706691][ T1132] sd 0:0:0:0: [sda] tag#15 CDB: Read(10) 28 00 00 01 36 ee 00 06 78 00 [ 144.710067][ T1132] I/O error, dev sda, sector 79598 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 144.713254][ T1132] ata1: EH complete [ 144.741483][ T7941] netlink: 'syz.1.705': attribute type 5 has an invalid length. [ 144.743483][ T40] audit: type=1400 audit(1778621678.833:602): avc: denied { listen } for pid=7940 comm="syz.1.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 144.832719][ T7975] ipt_rpfilter: unknown options [ 144.835376][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.849501][ T7975] syzkaller0: entered promiscuous mode [ 144.851731][ T7975] syzkaller0: entered allmulticast mode [ 144.921217][ T40] audit: type=1400 audit(1778621679.013:603): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 145.270621][ T40] audit: type=1400 audit(1778621679.363:604): avc: denied { nlmsg_read } for pid=7993 comm="syz.1.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.275749][ T7994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.725'. [ 145.279622][ T7996] cgroup: name respecified [ 145.307678][ T40] audit: type=1400 audit(1778621679.403:605): avc: denied { bind } for pid=7997 comm="syz.1.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 145.329395][ T8000] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 145.331497][ T8000] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 145.335768][ T8000] vhci_hcd vhci_hcd.0: Device attached [ 145.380621][ T8004] IPVS: sed: FWM 3 0x00000003 - no destination available [ 145.555393][ T62] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.555419][ T5749] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.565609][ T5749] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.575376][ T3389] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 145.589114][ T9] hid_parser_main: 7 callbacks suppressed [ 145.589133][ T9] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 145.594817][ T9] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 145.598289][ T9] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 145.601103][ T9] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 145.603418][ T9] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 145.606058][ T9] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 145.608485][ T9] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 145.610884][ T9] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 145.613242][ T9] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 145.615885][ T9] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 145.620135][ T8014] netem: change failed [ 145.642404][ T9] hid-generic 0005:00B6:0009.0003: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 145.685017][ T8016] fido_id[8016]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 145.811393][ T8020] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 146.176437][ T40] audit: type=1400 audit(1778621680.273:606): avc: denied { create } for pid=8025 comm="syz.2.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 146.183105][ T40] audit: type=1400 audit(1778621680.273:607): avc: denied { ioctl } for pid=8025 comm="syz.2.735" path="socket:[19881]" dev="sockfs" ino=19881 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 146.194609][ T8001] vhci_hcd: connection reset by peer [ 146.199319][ T1189] vhci_hcd vhci_hcd.1: stop threads [ 146.201164][ T1189] vhci_hcd vhci_hcd.1: release socket [ 146.206731][ T1189] vhci_hcd vhci_hcd.1: disconnect device [ 146.603742][ T8044] xfrm0 speed is unknown, defaulting to 1000 [ 146.686939][ T8056] FAULT_INJECTION: forcing a failure. [ 146.686939][ T8056] name failslab, interval 1, probability 0, space 0, times 0 [ 146.692175][ T8056] CPU: 1 UID: 0 PID: 8056 Comm: syz.0.746 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.692203][ T8056] Tainted: [L]=SOFTLOCKUP [ 146.692209][ T8056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.692219][ T8056] Call Trace: [ 146.692226][ T8056] [ 146.692233][ T8056] dump_stack_lvl+0x100/0x190 [ 146.692275][ T8056] should_fail_ex.cold+0x5/0xa [ 146.692299][ T8056] should_failslab+0xc2/0x120 [ 146.692319][ T8056] __kmalloc_cache_noprof+0x7a/0x6f0 [ 146.692344][ T8056] ? bpf_prog_alloc_no_stats+0x161/0x630 [ 146.692365][ T8056] ? rcu_is_watching+0x12/0xc0 [ 146.692396][ T8056] bpf_prog_alloc_no_stats+0x161/0x630 [ 146.692419][ T8056] bpf_prog_alloc+0x3b/0x200 [ 146.692440][ T8056] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 146.692465][ T8056] bpf_prog_load+0x48c/0x2b30 [ 146.692497][ T8056] ? __pfx_bpf_prog_load+0x10/0x10 [ 146.692524][ T8056] ? avc_has_perm_noaudit+0x145/0x3b0 [ 146.692567][ T8056] ? avc_has_perm+0x135/0x1e0 [ 146.692595][ T8056] ? selinux_bpf+0xfb/0x150 [ 146.692618][ T8056] __sys_bpf+0x223a/0x4b90 [ 146.692638][ T8056] ? __pfx___sys_bpf+0x10/0x10 [ 146.692653][ T8056] ? proc_fail_nth_write+0x9f/0x220 [ 146.692672][ T8056] ? find_held_lock+0x2b/0x80 [ 146.692694][ T8056] ? find_held_lock+0x2b/0x80 [ 146.692710][ T8056] ? ksys_write+0x190/0x250 [ 146.692730][ T8056] ? ksys_write+0x190/0x250 [ 146.692752][ T8056] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 146.692823][ T8056] ? vfs_write+0x3/0x1070 [ 146.692842][ T8056] ? __fget_files+0x215/0x3d0 [ 146.692874][ T8056] ? fput+0x79/0x100 [ 146.692898][ T8056] ? ksys_write+0x1ac/0x250 [ 146.692916][ T8056] ? __pfx_ksys_write+0x10/0x10 [ 146.692940][ T8056] __x64_sys_bpf+0x7b/0xc0 [ 146.692956][ T8056] ? lockdep_hardirqs_on+0x78/0x100 [ 146.692980][ T8056] do_syscall_64+0x10b/0xf80 [ 146.693054][ T8056] ? clear_bhb_loop+0x40/0x90 [ 146.693077][ T8056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.693094][ T8056] RIP: 0033:0x7f1a86b9ce59 [ 146.693110][ T8056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.693126][ T8056] RSP: 002b:00007f1a87ab1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.693143][ T8056] RAX: ffffffffffffffda RBX: 00007f1a86e15fa0 RCX: 00007f1a86b9ce59 [ 146.693154][ T8056] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 146.693164][ T8056] RBP: 00007f1a87ab1090 R08: 0000000000000000 R09: 0000000000000000 [ 146.693173][ T8056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.693183][ T8056] R13: 00007f1a86e16038 R14: 00007f1a86e15fa0 R15: 00007ffc9ea9b048 [ 146.693206][ T8056] [ 146.869514][ T8066] 0x000000003c39-0x000000020000 : "" [ 146.872845][ T8066] FAULT_INJECTION: forcing a failure. [ 146.872845][ T8066] name failslab, interval 1, probability 0, space 0, times 0 [ 146.884464][ T40] audit: type=1400 audit(1778621680.973:608): avc: denied { ioctl } for pid=8068 comm="syz.0.752" path="/dev/input/event1" dev="devtmpfs" ino=942 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 146.884658][ T8066] CPU: 3 UID: 0 PID: 8066 Comm: syz.3.750 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.884681][ T8066] Tainted: [L]=SOFTLOCKUP [ 146.884687][ T8066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.884696][ T8066] Call Trace: [ 146.884702][ T8066] [ 146.884708][ T8066] dump_stack_lvl+0x100/0x190 [ 146.884733][ T8066] should_fail_ex.cold+0x5/0xa [ 146.884757][ T8066] should_failslab+0xc2/0x120 [ 146.884775][ T8066] __kmalloc_cache_noprof+0x7a/0x6f0 [ 146.884798][ T8066] ? device_add+0xd3a/0x1950 [ 146.884816][ T8066] ? __pfx___debug_object_init+0x10/0x10 [ 146.884839][ T8066] ? do_raw_spin_lock+0x128/0x260 [ 146.884868][ T8066] device_add+0xd3a/0x1950 [ 146.884886][ T8066] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 146.884906][ T8066] ? lockdep_init_map_type+0x5c/0x250 [ 146.884928][ T8066] ? __pfx_device_add+0x10/0x10 [ 146.884945][ T8066] ? lockdep_init_map_type+0x5c/0x250 [ 146.884967][ T8066] ? __init_waitqueue_head+0xca/0x150 [ 146.884998][ T8066] add_mtd_device+0x928/0x17a0 [ 146.885048][ T8066] ? __pfx_add_mtd_device+0x10/0x10 [ 146.885071][ T8066] mtd_add_partition+0x30a/0x660 [ 146.885092][ T8066] ? __pfx_mtd_add_partition+0x10/0x10 [ 146.885109][ T8066] ? __might_fault+0xc5/0x140 [ 146.885148][ T8066] ? __might_fault+0xc5/0x140 [ 146.885181][ T8066] mtdchar_blkpg_ioctl+0x207/0x250 [ 146.885201][ T8066] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 146.885242][ T8066] mtdchar_ioctl+0x1670/0x1fd0 [ 146.885267][ T8066] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 146.885288][ T8066] ? lock_acquire+0x1b1/0x370 [ 146.885314][ T8066] ? trace_contention_end+0x122/0x170 [ 146.885340][ T8066] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 146.885360][ T8066] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 146.885381][ T8066] ? __pfx___mutex_lock+0x10/0x10 [ 146.885424][ T8066] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 146.885445][ T8066] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 146.885468][ T8066] __x64_sys_ioctl+0x18e/0x210 [ 146.885489][ T8066] do_syscall_64+0x10b/0xf80 [ 146.885511][ T8066] ? clear_bhb_loop+0x40/0x90 [ 146.885532][ T8066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.885548][ T8066] RIP: 0033:0x7fa11bd9ce59 [ 146.885564][ T8066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.885581][ T8066] RSP: 002b:00007fa11cc53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.885604][ T8066] RAX: ffffffffffffffda RBX: 00007fa11c015fa0 RCX: 00007fa11bd9ce59 [ 146.885615][ T8066] RDX: 0000200000000580 RSI: 0000000000001269 RDI: 0000000000000004 [ 146.885625][ T8066] RBP: 00007fa11cc53090 R08: 0000000000000000 R09: 0000000000000000 [ 146.885635][ T8066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.885644][ T8066] R13: 00007fa11c016038 R14: 00007fa11c015fa0 R15: 00007ffd99160918 [ 146.885669][ T8066] [ 146.886196][ T8066] ------------[ cut here ]------------ [ 146.920581][ T5749] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.921900][ T8066] !list_empty(&mtd->part.node) [ 146.921908][ T8066] WARNING: drivers/mtd/mtdpart.c:38 at release_mtd_partition+0x71/0x90, CPU#3: syz.3.750/8066 [ 146.921931][ T8066] Modules linked in: [ 146.997726][ T8066] CPU: 3 UID: 0 PID: 8066 Comm: syz.3.750 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.997745][ T8066] Tainted: [L]=SOFTLOCKUP [ 146.997749][ T8066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.997756][ T8066] RIP: 0010:release_mtd_partition+0x71/0x90 [ 146.997772][ T8066] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1e 48 8b 7b 38 e8 ff 0b d7 fb 48 89 df 5b 5d e9 f5 0b d7 fb e8 10 20 75 fb 90 <0f> 0b 90 eb c2 e8 a5 de e2 fb eb db 48 89 ef e8 9b de e2 fb eb a5 [ 146.997783][ T8066] RSP: 0018:ffffc9000713f818 EFLAGS: 00010293 [ 146.997793][ T8066] RAX: 0000000000000000 RBX: ffff88802b6c3000 RCX: ffffffff8b858117 [ 146.997801][ T8066] RDX: ffff88803097a500 RSI: ffffffff869386d0 RDI: ffff88802b6c3000 [ 146.997807][ T8066] RBP: ffff88802b6c36a8 R08: 0000000000000001 R09: 0000000000000001 [ 146.997814][ T8066] R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000000 [ 146.997820][ T8066] R13: dffffc0000000000 R14: ffff888059cedde0 R15: 0000000000000000 [ 146.997827][ T8066] FS: 00007fa11cc536c0(0000) GS:ffff8880d6672000(0000) knlGS:0000000000000000 [ 146.997850][ T8066] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.997860][ T8066] CR2: 00007fa11cc32d58 CR3: 00000000621b5000 CR4: 0000000000352ef0 [ 146.997867][ T8066] Call Trace: [ 146.997871][ T8066] [ 146.997876][ T8066] mtd_release+0xa0/0xd0 [ 146.997889][ T8066] ? __pfx_mtd_release+0x10/0x10 [ 146.997902][ T8066] device_release+0xd2/0x270 [ 146.997917][ T8066] kobject_put+0x1f7/0x640 [ 146.997936][ T8066] put_device+0x1f/0x30 [ 146.997949][ T8066] add_mtd_device+0xbd7/0x17a0 [ 146.997963][ T8066] ? __pfx_add_mtd_device+0x10/0x10 [ 146.997976][ T8066] mtd_add_partition+0x30a/0x660 [ 146.997990][ T8066] ? __pfx_mtd_add_partition+0x10/0x10 [ 146.998002][ T8066] ? __might_fault+0xc5/0x140 [ 146.998017][ T8066] ? __might_fault+0xc5/0x140 [ 146.998038][ T8066] mtdchar_blkpg_ioctl+0x207/0x250 [ 146.998051][ T8066] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 146.998073][ T8066] mtdchar_ioctl+0x1670/0x1fd0 [ 146.998089][ T8066] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 146.998103][ T8066] ? lock_acquire+0x1b1/0x370 [ 146.998120][ T8066] ? trace_contention_end+0x122/0x170 [ 146.998136][ T8066] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 146.998150][ T8066] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 146.998163][ T8066] ? __pfx___mutex_lock+0x10/0x10 [ 146.998187][ T8066] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 146.998200][ T8066] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 146.998215][ T8066] __x64_sys_ioctl+0x18e/0x210 [ 146.998227][ T8066] do_syscall_64+0x10b/0xf80 [ 146.998242][ T8066] ? clear_bhb_loop+0x40/0x90 [ 146.998256][ T8066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.998267][ T8066] RIP: 0033:0x7fa11bd9ce59 [ 146.998277][ T8066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.998287][ T8066] RSP: 002b:00007fa11cc53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.998298][ T8066] RAX: ffffffffffffffda RBX: 00007fa11c015fa0 RCX: 00007fa11bd9ce59 [ 146.998305][ T8066] RDX: 0000200000000580 RSI: 0000000000001269 RDI: 0000000000000004 [ 146.998311][ T8066] RBP: 00007fa11cc53090 R08: 0000000000000000 R09: 0000000000000000 [ 146.998318][ T8066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.998324][ T8066] R13: 00007fa11c016038 R14: 00007fa11c015fa0 R15: 00007ffd99160918 [ 146.998337][ T8066] [ 146.998343][ T8066] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 146.998351][ T8066] CPU: 3 UID: 0 PID: 8066 Comm: syz.3.750 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.998364][ T8066] Tainted: [L]=SOFTLOCKUP [ 146.998368][ T8066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.998374][ T8066] Call Trace: [ 146.998378][ T8066] [ 146.998381][ T8066] dump_stack_lvl+0x100/0x190 [ 146.998395][ T8066] vpanic+0x552/0x970 [ 146.998405][ T8066] ? __pfx_vpanic+0x10/0x10 [ 146.998419][ T8066] panic+0xd1/0xe0 [ 146.998428][ T8066] ? __pfx_panic+0x10/0x10 [ 146.998442][ T8066] ? check_panic_on_warn+0x1f/0x90 [ 146.998456][ T8066] check_panic_on_warn.cold+0x19/0x34 [ 146.998468][ T8066] ? release_mtd_partition+0x71/0x90 [ 146.998479][ T8066] __warn.cold+0x191/0x328 [ 146.998491][ T8066] __report_bug+0x296/0x3d0 [ 146.998504][ T8066] ? release_mtd_partition+0x71/0x90 [ 146.998517][ T8066] ? __pfx___report_bug+0x10/0x10 [ 146.998534][ T8066] ? dump_stack_lvl+0x16c/0x190 [ 146.998545][ T8066] ? dump_stack_lvl+0x176/0x190 [ 146.998561][ T8066] ? delete_node+0x20a/0x8f0 [ 146.998573][ T8066] ? release_mtd_partition+0x71/0x90 [ 146.998585][ T8066] report_bug+0xb2/0x220 [ 146.998603][ T8066] ? release_mtd_partition+0x71/0x90 [ 146.998615][ T8066] handle_bug+0x16a/0x2a0 [ 146.998631][ T8066] exc_invalid_op+0x17/0x50 [ 146.998648][ T8066] asm_exc_invalid_op+0x1a/0x20 [ 146.998658][ T8066] RIP: 0010:release_mtd_partition+0x71/0x90 [ 146.998670][ T8066] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1e 48 8b 7b 38 e8 ff 0b d7 fb 48 89 df 5b 5d e9 f5 0b d7 fb e8 10 20 75 fb 90 <0f> 0b 90 eb c2 e8 a5 de e2 fb eb db 48 89 ef e8 9b de e2 fb eb a5 [ 146.998681][ T8066] RSP: 0018:ffffc9000713f818 EFLAGS: 00010293 [ 146.998688][ T8066] RAX: 0000000000000000 RBX: ffff88802b6c3000 RCX: ffffffff8b858117 [ 146.998695][ T8066] RDX: ffff88803097a500 RSI: ffffffff869386d0 RDI: ffff88802b6c3000 [ 146.998701][ T8066] RBP: ffff88802b6c36a8 R08: 0000000000000001 R09: 0000000000000001 [ 146.998708][ T8066] R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000000 [ 146.998714][ T8066] R13: dffffc0000000000 R14: ffff888059cedde0 R15: 0000000000000000 [ 146.998723][ T8066] ? delete_node+0x417/0x8f0 [ 146.998734][ T8066] ? release_mtd_partition+0x70/0x90 [ 146.998748][ T8066] ? release_mtd_partition+0x70/0x90 [ 146.998759][ T8066] mtd_release+0xa0/0xd0 [ 146.998772][ T8066] ? __pfx_mtd_release+0x10/0x10 [ 146.998784][ T8066] device_release+0xd2/0x270 [ 146.998798][ T8066] kobject_put+0x1f7/0x640 [ 146.998815][ T8066] put_device+0x1f/0x30 [ 146.998828][ T8066] add_mtd_device+0xbd7/0x17a0 [ 146.998841][ T8066] ? __pfx_add_mtd_device+0x10/0x10 [ 146.998854][ T8066] mtd_add_partition+0x30a/0x660 [ 146.998867][ T8066] ? __pfx_mtd_add_partition+0x10/0x10 [ 146.998879][ T8066] ? __might_fault+0xc5/0x140 [ 146.998894][ T8066] ? __might_fault+0xc5/0x140 [ 146.998914][ T8066] mtdchar_blkpg_ioctl+0x207/0x250 [ 146.998926][ T8066] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 146.998949][ T8066] mtdchar_ioctl+0x1670/0x1fd0 [ 146.998963][ T8066] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 146.998977][ T8066] ? lock_acquire+0x1b1/0x370 [ 146.998993][ T8066] ? trace_contention_end+0x122/0x170 [ 146.999009][ T8066] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 146.999023][ T8066] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 146.999035][ T8066] ? __pfx___mutex_lock+0x10/0x10 [ 146.999058][ T8066] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 146.999070][ T8066] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 146.999085][ T8066] __x64_sys_ioctl+0x18e/0x210 [ 146.999096][ T8066] do_syscall_64+0x10b/0xf80 [ 146.999110][ T8066] ? clear_bhb_loop+0x40/0x90 [ 146.999123][ T8066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.999134][ T8066] RIP: 0033:0x7fa11bd9ce59 [ 146.999142][ T8066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.999152][ T8066] RSP: 002b:00007fa11cc53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.999161][ T8066] RAX: ffffffffffffffda RBX: 00007fa11c015fa0 RCX: 00007fa11bd9ce59 [ 146.999168][ T8066] RDX: 0000200000000580 RSI: 0000000000001269 RDI: 0000000000000004 [ 146.999174][ T8066] RBP: 00007fa11cc53090 R08: 0000000000000000 R09: 0000000000000000 [ 146.999180][ T8066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.999187][ T8066] R13: 00007fa11c016038 R14: 00007fa11c015fa0 R15: 00007ffd99160918 [ 146.999199][ T8066] [ 147.000536][ T8066] Kernel Offset: disabled