last executing test programs: 9.67722375s ago: executing program 2 (id=243): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x800400, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff0000000705810240"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x100) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) open(&(0x7f00000004c0)='./file0\x00', 0x1500, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 4.492412141s ago: executing program 3 (id=273): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) (async, rerun: 32) pipe(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_open_dev$media(&(0x7f0000000ac0), 0x3ff, 0x60080) (rerun: 64) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000001c00)={{0x80000000, 0x0, 0x1, [0x8, 0x7f]}, {0x80000000, 0x0, 0x2, [0xae, 0x3]}, 0x2, [0x1, 0x6]}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x50bd24, 0x25dfdbf8, {{}, {@void, @void, @void}}}, 0x14}}, 0x20008004) (async) close_range(r0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 32) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./dev\x00', &(0x7f00000000c0)='zonefs\x00', 0x23000400, 0x0) (rerun: 32) 4.353402413s ago: executing program 1 (id=275): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x8946, &(0x7f0000000100)) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfff, 0x40) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000080)={0x2336, 0x8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x23, 0x1}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f0000000000)) 3.904495952s ago: executing program 1 (id=276): r0 = io_uring_setup(0x10dd, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000440)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x307, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/error_log\x00', 0x0, 0x0) read(r3, &(0x7f0000000400)=""/256, 0x100) close_range(r0, 0xffffffffffffffff, 0x0) 3.506809535s ago: executing program 3 (id=278): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x80000, @dev={0xfe, 0x80, '\x00', 0x62}, 0x1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}, 0x200440b0) 3.232499491s ago: executing program 2 (id=279): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x14c) pwrite64(r0, &(0x7f00000003c0)="8c", 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0xa1) 3.222182981s ago: executing program 3 (id=280): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x20001000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000280)={@hyper, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r8, 0x7ac, &(0x7f0000000740)={0x0, 0x0, 0x6}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}]}}}]}, 0x3c}}, 0x2) fcntl$getownex(r5, 0x10, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.88560677s ago: executing program 2 (id=281): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0x0, 0x1000000}]}) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3eb, 0x100, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20000041}, 0x44040000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) 2.885290303s ago: executing program 1 (id=282): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) getpeername$packet(r0, 0x0, &(0x7f0000000840)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000000)='7', 0x1) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)='0', 0x1, 0xfffffffffffffffd) 2.684299777s ago: executing program 1 (id=283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet(0x2, 0x1, 0x8) bind$inet(r2, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r2, 0x5) setsockopt$inet_buf(r2, 0x0, 0x2b, &(0x7f0000000300), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000180), 0x142000, &(0x7f00000001c0)=ANY=[]) r3 = accept$inet(r2, 0x0, 0x0) read(r3, &(0x7f0000000100), 0x4) read(r3, &(0x7f0000000304), 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x8, 0xc0, 0x0, 0x6}, {0x8, 0x7, 0x0, 0x9}]}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000240)=0xd9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0xa4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0xc) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x7e) close_range(r4, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10, r0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000580)=@known='user.incfs.metadata\x00') ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x8000000100000f, 0x9, 0x0, 0x5, 0x4, 0x2, 0x87b, 0x2, 0x1, 0x1000000000000000, 0x4, 0x6, 0x7, 0x1, 0x3], 0x0, 0x8340}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.560570236s ago: executing program 3 (id=284): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl(r0, 0x3, &(0x7f0000000100)="17") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x3000008, &(0x7f00000003c0)=ANY=[@ANYBLOB='dyn,flock=strict']) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x5ecfb212) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaa00000000403a00fc000000000000000000000000000000ff02000000000000000000000000000101449068000059452392ae8147a7181e78f396d200006d0000000f4e0001fe880000000000000000000000000000000000000000f9c0ea55013a000c08680000000d0000"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) listen(r4, 0x7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffff272, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x403, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xb, 0x1, 0x0, 0x3, 0x1003, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0xffffffff, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x3, 0x5, 0xfffffc01, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0x4, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x7a, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}, @TCA_RATE={0x6, 0x5, {0x94, 0x66}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x80000, @dev={0xfe, 0x80, '\x00', 0x62}, 0x1}, 0x1c, 0x0}, 0x200440b0) 2.163572525s ago: executing program 3 (id=286): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0xd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x80000001, 0x4) get_mempolicy(0x0, 0x0, 0x8000000000000001, &(0x7f0000ffd000/0x3000)=nil, 0x3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file2\x00', 0x40, 0x23) open_by_handle_at(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000fb"], 0x402800) syz_emit_ethernet(0x34, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6b8b836832cfd4d288a8"}}}}}, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000300)}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo/4\x00') ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x4}]}, 0x5c}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x202340, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000080)) 2.162408181s ago: executing program 0 (id=287): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x2004, 0x101, 0x0, 'queue0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000104100004020000000000000000", @ANYRES32=0x0, @ANYBLOB="4b02040009a00600140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x20, 0x2000003}) open(&(0x7f0000000000)='./file0\x00', 0x14a600, 0x78e22799f4a46f8f) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, &(0x7f0000000180)='10', 0x2) sendmmsg$alg(r4, &(0x7f0000000600)=[{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000001040)=[@assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x20, 0x117, 0x2, 0x7, "4db20569177dd8"}], 0x38, 0x80}, {0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)="32b811423d2f947094deb7f1f8103264160d798504a0aee360d4d69b7834f2c26a23ccec", 0x24}], 0x1, 0x0, 0x0, 0x41}], 0x2, 0x4000800) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x7e7f0}]}, 0x3c}}, 0x4004000) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000014c0)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0x8, 0xff, 0x1, 0x1, 0x0, 0x5, 0xd, 0x9, 0x9, [0x5, 0x8, 0x3, 0x0, 0x4, 0x7, 0x1, 0x10000], [0x1, 0x3]}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0) r12 = fsmount(r6, 0x0, 0x0) openat$cgroup_pressure(r12, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) 1.885493466s ago: executing program 3 (id=288): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x800400, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff0000000705810240"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x100) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) open(&(0x7f00000004c0)='./file0\x00', 0x1500, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 1.757614071s ago: executing program 0 (id=289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) userfaultfd(0x800) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x48040) r5 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r5, 0x4068aea3, &(0x7f0000000000)={0xc7, 0x0, 0x1}) 1.648546184s ago: executing program 2 (id=290): socket$packet(0x11, 0x3, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:4\t\n', @ANYRESHEX=r1], 0xa) write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'wm\x00'}, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) 1.509310612s ago: executing program 1 (id=291): r0 = io_uring_setup(0x10dd, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000440)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x307, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/error_log\x00', 0x0, 0x0) read(r3, &(0x7f0000000400)=""/256, 0x100) close_range(r0, 0xffffffffffffffff, 0x0) 1.509042028s ago: executing program 2 (id=292): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth0_vlan\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) ftruncate(r4, 0x1000006) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'wg0\x00', @random="8271d9228327"}) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x1000000}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000b80)=@newtfilter={0x3c, 0x2c, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, r6, {0xfff2}, {0x0, 0xffff}, {0x300, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xa5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) 1.22173002s ago: executing program 0 (id=293): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x48, 0x2, 0xa, 0x102, 0x8, 0x7, 0xb3, 0x8, 0x4b1d, 0x4000000000000008, 0xb7, 0xec, 0x6, 0x1ff, 0xe6, 0xb286], 0x4, 0x383fc2}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r3, 0xc0045405, &(0x7f0000000080)=0x40) ioctl$KVM_RUN(r2, 0xae80, 0x0) 731.459499ms ago: executing program 0 (id=294): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0x3, 0x4) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x14f882) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) 502.818586ms ago: executing program 1 (id=295): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="b23d"], 0x0) r0 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RVERSION(r0, &(0x7f0000002200)=ANY=[], 0xfffffcd9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r2, 0xc080583d, &(0x7f0000000180)={0x0, 0x6, 0x5, 0x6, 0xff, 0x4, 0x7, 0x9}) r3 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x802) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x40040}, 0x4040) ioctl$OTPLOCK(r3, 0x125f, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x1080008, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x1000000}]}]}}, 0x0, 0x42}, 0x20) r6 = socket$inet_udp(0x2, 0x2, 0x0) write$P9_RREADLINK(r5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x1000003, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 349.558205ms ago: executing program 0 (id=296): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r5, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r7 = socket(0x1, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000d5540000080000ff0000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffb}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001400a59500000000000a6842c8000000", @ANYRES32=r9, @ANYBLOB="14000200ff0200000000000000000000000000010800080006070000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 185.585644ms ago: executing program 2 (id=297): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r0) pipe2(&(0x7f0000000500)={0x0, 0x0}, 0x0) write(r2, &(0x7f0000000014)="0500010001000000", 0x8) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000600)='trigger_packet', 0xe, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f00000000c0)={0x77359400}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = semget(0x1, 0x2, 0x1a) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000000)=[0x4, 0x2, 0x3ff, 0xfff9, 0x4]) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r6, 0xc0045103, &(0x7f0000000040)) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) 0s ago: executing program 0 (id=298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) syz_clone(0x400011, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x545c, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x2e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x13}}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r2, @ANYRES32=r0]) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r4, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) kernel console output (not intermixed with test programs): 2 family 0 port 6081 - 0 [ 136.695343][ T5904] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.695379][ T5904] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.695409][ T5904] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.695441][ T5904] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.695471][ T5904] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.695501][ T5904] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.695532][ T5904] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.058270][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.058294][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.394986][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.395012][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.805667][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.805692][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.030731][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.030752][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.163471][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.163498][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.023666][ T5930] process 'syz.0.8' launched './file2' with NULL argv: empty string added [ 139.041928][ T5925] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 139.052138][ T5930] comedi comedi0: Minor 660 is invalid! [ 139.277166][ T5937] netlink: 'syz.0.10': attribute type 1 has an invalid length. [ 139.277271][ T5937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10'. [ 139.541768][ T5933] Zero length message leads to an empty skb [ 139.559958][ T5840] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 139.732200][ T5840] usb 7-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 139.747627][ T5840] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 139.747675][ T5840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.808496][ T5935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 139.890995][ T5840] opticon 7-1:1.0: opticon converter detected [ 139.961602][ T5840] usb 7-1: opticon converter now attached to ttyUSB0 [ 140.011934][ T5947] program syz.1.14 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.854339][ T43] kauditd_printk_skb: 65 callbacks suppressed [ 140.854358][ T43] audit: type=1400 audit(1789177850.411:243): avc: denied { mount } for pid=5959 comm="syz.3.18" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 140.855332][ T43] audit: type=1400 audit(1789177850.411:244): avc: denied { search } for pid=5959 comm="syz.3.18" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 140.855516][ T43] audit: type=1400 audit(1789177850.411:245): avc: denied { read } for pid=5959 comm="syz.3.18" name="error_log" dev="tracefs" ino=787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 140.900887][ T43] audit: type=1400 audit(1789177850.451:246): avc: denied { open } for pid=5959 comm="syz.3.18" path="/2/trace/error_log" dev="tracefs" ino=787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 141.045512][ T43] audit: type=1400 audit(1789177850.611:247): avc: denied { create } for pid=5963 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.049473][ T43] audit: type=1400 audit(1789177850.611:248): avc: denied { getopt } for pid=5963 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.057968][ T43] audit: type=1400 audit(1789177850.631:249): avc: denied { setopt } for pid=5963 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.198642][ T43] audit: type=1400 audit(1789177850.761:250): avc: denied { unmount } for pid=5753 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 141.322661][ T5970] binder: BC_ACQUIRE_RESULT not supported [ 141.322677][ T5970] binder: 5967:5970 ioctl c0306201 2000000001c0 returned -22 [ 141.893867][ T43] audit: type=1400 audit(1789177851.451:251): avc: denied { create } for pid=5973 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.894675][ T43] audit: type=1400 audit(1789177851.451:252): avc: denied { connect } for pid=5973 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 142.193028][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 142.467332][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.498023][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.498050][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.498126][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.498161][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.540595][ T10] usb 8-1: config 0 descriptor?? [ 143.095278][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 143.135811][ T5995] FAULT_INJECTION: forcing a failure. [ 143.135811][ T5995] name failslab, interval 1, probability 0, space 0, times 1 [ 143.135907][ T5995] CPU: 3 UID: 0 PID: 5995 Comm: syz.1.28 Not tainted syzkaller #0 PREEMPT(full) [ 143.135927][ T5995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.135937][ T5995] Call Trace: [ 143.135943][ T5995] [ 143.135950][ T5995] dump_stack_lvl+0x100/0x190 [ 143.135989][ T5995] should_fail_ex.cold+0x5/0xa [ 143.136032][ T5995] should_failslab+0xc2/0x120 [ 143.136058][ T5995] kmem_cache_alloc_noprof+0x92/0x6a0 [ 143.136079][ T5995] ? alloc_empty_file+0x5b/0x1c0 [ 143.136109][ T5995] alloc_empty_file+0x5b/0x1c0 [ 143.136134][ T5995] path_openat+0xdb/0x2440 [ 143.136161][ T5995] ? __pfx_path_openat+0x10/0x10 [ 143.136192][ T5995] do_file_open+0x20e/0x430 [ 143.136248][ T5995] ? __pfx_do_file_open+0x10/0x10 [ 143.136290][ T5995] ? _raw_spin_unlock+0x28/0x50 [ 143.136312][ T5995] ? alloc_fd+0x471/0x7a0 [ 143.136344][ T5995] do_sys_openat2+0x10f/0x1e0 [ 143.136369][ T5995] ? __pfx_do_sys_openat2+0x10/0x10 [ 143.136394][ T5995] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 143.136421][ T5995] ? __fget_files+0x21f/0x3d0 [ 143.136447][ T5995] __x64_sys_openat+0x12d/0x210 [ 143.136473][ T5995] ? __pfx___x64_sys_openat+0x10/0x10 [ 143.136497][ T5995] ? ksys_write+0x1ac/0x250 [ 143.136525][ T5995] do_syscall_64+0x123/0x790 [ 143.136551][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.136571][ T5995] RIP: 0033:0x7fadf279e159 [ 143.136587][ T5995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.136604][ T5995] RSP: 002b:00007fadf36a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 143.136624][ T5995] RAX: ffffffffffffffda RBX: 00007fadf2a25fa0 RCX: 00007fadf279e159 [ 143.136636][ T5995] RDX: 0000000000000001 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 143.136648][ T5995] RBP: 00007fadf36a0090 R08: 0000000000000000 R09: 0000000000000000 [ 143.136659][ T5995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.136670][ T5995] R13: 00007fadf2a26038 R14: 00007fadf2a25fa0 R15: 00007ffd31e37938 [ 143.136696][ T5995] [ 143.944247][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 144.057861][ T6004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.438201][ T5148] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 144.613080][ T5148] usb 6-1: device descriptor read/64, error -71 [ 144.704021][ T5856] usb 8-1: USB disconnect, device number 2 [ 144.899917][ T5148] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 145.030370][ T5148] usb 6-1: device descriptor read/64, error -71 [ 145.108989][ T6027] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 145.143245][ T5148] usb usb6-port1: attempt power cycle [ 145.356103][ T58] usb 7-1: USB disconnect, device number 2 [ 145.376115][ T58] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 145.376831][ T58] opticon 7-1:1.0: device disconnected [ 145.506068][ T5148] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 145.581328][ T5148] usb 6-1: device descriptor read/8, error -71 [ 145.677569][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.677643][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.742492][ T6037] FAULT_INJECTION: forcing a failure. [ 145.742492][ T6037] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 145.742525][ T6037] CPU: 1 UID: 0 PID: 6037 Comm: syz.2.37 Not tainted syzkaller #0 PREEMPT(full) [ 145.742544][ T6037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.742554][ T6037] Call Trace: [ 145.742559][ T6037] [ 145.742566][ T6037] dump_stack_lvl+0x100/0x190 [ 145.742595][ T6037] should_fail_ex.cold+0x5/0xa [ 145.742619][ T6037] _copy_from_iter+0x1f4/0x1690 [ 145.742639][ T6037] ? __asan_memset+0x23/0x50 [ 145.742655][ T6037] ? __pfx__copy_from_iter+0x10/0x10 [ 145.742670][ T6037] ? __pfx___alloc_skb+0x10/0x10 [ 145.742696][ T6037] netlink_sendmsg+0x808/0xda0 [ 145.742717][ T6037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.742736][ T6037] ? selinux_socket_sendmsg+0x198/0x2f0 [ 145.742767][ T6037] ____sys_sendmsg+0xa4d/0xbe0 [ 145.742789][ T6037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.742808][ T6037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.742834][ T6037] ? lock_acquire+0x1d1/0x380 [ 145.742850][ T6037] ? get_pid_task+0x2a/0x250 [ 145.742875][ T6037] ___sys_sendmsg+0x190/0x1e0 [ 145.742899][ T6037] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.742923][ T6037] ? get_pid_task+0x106/0x250 [ 145.742983][ T6037] ? find_held_lock+0x2b/0x80 [ 145.743018][ T6037] __sys_sendmsg+0x160/0x210 [ 145.743038][ T6037] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.743068][ T6037] do_syscall_64+0x123/0x790 [ 145.743093][ T6037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.743111][ T6037] RIP: 0033:0x7fb0b6f9e159 [ 145.743125][ T6037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.743140][ T6037] RSP: 002b:00007fb0b7ee8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.743158][ T6037] RAX: ffffffffffffffda RBX: 00007fb0b7225fa0 RCX: 00007fb0b6f9e159 [ 145.743169][ T6037] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 145.743179][ T6037] RBP: 00007fb0b7ee8090 R08: 0000000000000000 R09: 0000000000000000 [ 145.743189][ T6037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.743199][ T6037] R13: 00007fb0b7226038 R14: 00007fb0b7225fa0 R15: 00007fff54859188 [ 145.743221][ T6037] [ 145.840587][ T5148] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 145.895297][ T5148] usb 6-1: device descriptor read/8, error -71 [ 145.910907][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 145.910927][ T43] audit: type=1400 audit(1789177855.471:279): avc: denied { bind } for pid=6038 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.910965][ T43] audit: type=1400 audit(1789177855.471:280): avc: denied { name_bind } for pid=6038 comm="syz.0.38" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 145.911000][ T43] audit: type=1400 audit(1789177855.471:281): avc: denied { node_bind } for pid=6038 comm="syz.0.38" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 145.917110][ T43] audit: type=1400 audit(1789177855.491:282): avc: denied { write } for pid=6038 comm="syz.0.38" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.946896][ T43] audit: type=1400 audit(1789177855.521:283): avc: denied { ioctl } for pid=6040 comm="syz.3.39" path="socket:[12324]" dev="sockfs" ino=12324 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.046534][ T5148] usb usb6-port1: unable to enumerate USB device [ 146.081422][ T6044] FAULT_INJECTION: forcing a failure. [ 146.081422][ T6044] name failslab, interval 1, probability 0, space 0, times 0 [ 146.081463][ T6044] CPU: 1 UID: 0 PID: 6044 Comm: syz.2.40 Not tainted syzkaller #0 PREEMPT(full) [ 146.081483][ T6044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.081492][ T6044] Call Trace: [ 146.081498][ T6044] [ 146.081505][ T6044] dump_stack_lvl+0x100/0x190 [ 146.081535][ T6044] should_fail_ex.cold+0x5/0xa [ 146.081558][ T6044] should_failslab+0xc2/0x120 [ 146.081578][ T6044] kmem_cache_alloc_noprof+0x92/0x6a0 [ 146.081597][ T6044] ? alloc_empty_file+0x5b/0x1c0 [ 146.081623][ T6044] alloc_empty_file+0x5b/0x1c0 [ 146.081645][ T6044] path_openat+0xdb/0x2440 [ 146.081667][ T6044] ? __pfx_path_openat+0x10/0x10 [ 146.081693][ T6044] do_file_open+0x20e/0x430 [ 146.081714][ T6044] ? __pfx_do_file_open+0x10/0x10 [ 146.081749][ T6044] ? _raw_spin_unlock+0x28/0x50 [ 146.081768][ T6044] ? alloc_fd+0x471/0x7a0 [ 146.081796][ T6044] do_sys_openat2+0x10f/0x1e0 [ 146.081818][ T6044] ? __pfx_do_sys_openat2+0x10/0x10 [ 146.081840][ T6044] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 146.081863][ T6044] ? __fget_files+0x21f/0x3d0 [ 146.081887][ T6044] __x64_sys_openat+0x12d/0x210 [ 146.081909][ T6044] ? __pfx___x64_sys_openat+0x10/0x10 [ 146.081930][ T6044] ? ksys_write+0x1ac/0x250 [ 146.081956][ T6044] do_syscall_64+0x123/0x790 [ 146.081981][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.081999][ T6044] RIP: 0033:0x7fb0b6f9e159 [ 146.082015][ T6044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.082031][ T6044] RSP: 002b:00007fb0b7ec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 146.082050][ T6044] RAX: ffffffffffffffda RBX: 00007fb0b7226090 RCX: 00007fb0b6f9e159 [ 146.082061][ T6044] RDX: 0000000000000001 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 146.082072][ T6044] RBP: 00007fb0b7ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 146.082082][ T6044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.082093][ T6044] R13: 00007fb0b7226128 R14: 00007fb0b7226090 R15: 00007fff54859188 [ 146.082120][ T6044] [ 146.169385][ T6048] FAULT_INJECTION: forcing a failure. [ 146.169385][ T6048] name failslab, interval 1, probability 0, space 0, times 0 [ 146.169428][ T6048] CPU: 0 UID: 0 PID: 6048 Comm: syz.0.41 Not tainted syzkaller #0 PREEMPT(full) [ 146.169449][ T6048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.169459][ T6048] Call Trace: [ 146.169468][ T6048] [ 146.169476][ T6048] dump_stack_lvl+0x100/0x190 [ 146.169510][ T6048] should_fail_ex.cold+0x5/0xa [ 146.169558][ T6048] should_failslab+0xc2/0x120 [ 146.169584][ T6048] __kmalloc_cache_noprof+0x91/0x6d0 [ 146.169613][ T6048] ? __request_module+0x2b7/0x6a0 [ 146.169641][ T6048] __request_module+0x2b7/0x6a0 [ 146.169666][ T6048] ? __pfx___request_module+0x10/0x10 [ 146.169689][ T6048] ? __might_fault+0xc5/0x140 [ 146.169722][ T6048] ? find_held_lock+0x2b/0x80 [ 146.169747][ T6048] ? __get_fs_type+0xd9/0x200 [ 146.169773][ T6048] ? __get_fs_type+0xd9/0x200 [ 146.169797][ T6048] ? find_filesystem+0xf7/0x130 [ 146.169826][ T6048] get_fs_type+0xd7/0x190 [ 146.169853][ T6048] __x64_sys_fsopen+0xca/0x220 [ 146.169873][ T6048] do_syscall_64+0x123/0x790 [ 146.169900][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.169919][ T6048] RIP: 0033:0x7f6949b9e159 [ 146.169934][ T6048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.169951][ T6048] RSP: 002b:00007f694a9a3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 146.169970][ T6048] RAX: ffffffffffffffda RBX: 00007f6949e25fa0 RCX: 00007f6949b9e159 [ 146.169983][ T6048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000340 [ 146.169993][ T6048] RBP: 00007f694a9a3090 R08: 0000000000000000 R09: 0000000000000000 [ 146.170003][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.170014][ T6048] R13: 00007f6949e26038 R14: 00007f6949e25fa0 R15: 00007fff4987c138 [ 146.170037][ T6048] [ 146.212800][ T43] audit: type=1400 audit(1789177855.771:284): avc: denied { bind } for pid=6046 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.236638][ T6047] Bluetooth: MGMT ver 1.23 [ 146.237270][ T43] audit: type=1400 audit(1789177855.811:285): avc: denied { write } for pid=6046 comm="syz.3.42" path="socket:[10547]" dev="sockfs" ino=10547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.237876][ T6047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.42'. [ 146.265126][ T6047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.42'. [ 146.323717][ T6047] No buffer was provided with the request [ 146.419391][ T43] audit: type=1400 audit(1789177855.991:286): avc: denied { map_read map_write } for pid=6052 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 146.493925][ T43] audit: type=1400 audit(1789177856.051:287): avc: denied { write } for pid=6049 comm="syz.2.43" name="dlm" dev="configfs" ino=3096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 146.494004][ T43] audit: type=1400 audit(1789177856.051:288): avc: denied { add_name } for pid=6049 comm="syz.2.43" name="cluster" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 146.652955][ T6055] netlink: 'syz.3.45': attribute type 3 has an invalid length. [ 147.326797][ T6065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.47'. [ 147.326900][ T6065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.47'. [ 148.354567][ T5856] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 148.574508][ T5856] usb 6-1: Using ep0 maxpacket: 16 [ 148.576819][ T5856] usb 6-1: New USB device found, idVendor=1608, idProduct=030e, bcdDevice=ed.b8 [ 148.591562][ T5856] usb 6-1: config 82 has an invalid interface number: 68 but max is 2 [ 148.591587][ T5856] usb 6-1: config 82 contains an unexpected descriptor of type 0x2, skipping [ 148.591603][ T5856] usb 6-1: config 82 has an invalid interface number: 67 but max is 2 [ 148.591619][ T5856] usb 6-1: config 82 has an invalid interface number: 202 but max is 2 [ 148.591634][ T5856] usb 6-1: config 82 has no interface number 0 [ 148.591648][ T5856] usb 6-1: config 82 has no interface number 1 [ 148.591661][ T5856] usb 6-1: config 82 has no interface number 2 [ 148.591714][ T5856] usb 6-1: config 82 interface 68 altsetting 129 has a duplicate endpoint with address 0x8, skipping [ 148.591733][ T5856] usb 6-1: config 82 interface 68 altsetting 129 has a duplicate endpoint with address 0x8, skipping [ 148.591752][ T5856] usb 6-1: config 82 interface 68 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 148.591769][ T5856] usb 6-1: config 82 interface 68 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 148.591786][ T5856] usb 6-1: config 82 interface 68 altsetting 129 endpoint 0x6 has invalid maxpacket 120, setting to 64 [ 148.591807][ T5856] usb 6-1: config 82 interface 68 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 148.591825][ T5856] usb 6-1: config 82 interface 68 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 148.591850][ T5856] usb 6-1: config 82 interface 68 altsetting 129 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 148.591891][ T5856] usb 6-1: config 82 interface 202 altsetting 4 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 148.591912][ T5856] usb 6-1: config 82 interface 68 has no altsetting 0 [ 148.591926][ T5856] usb 6-1: config 82 interface 67 has no altsetting 0 [ 148.591941][ T5856] usb 6-1: config 82 interface 202 has no altsetting 0 [ 148.623018][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.623045][ T5856] usb 6-1: Product: ᝖䏁ċ§Ħâš²ëŒìŸ”â żë¨ċž˘àĦŸáŒ¨ïœäŠ”êĴ蒚ċ­‡ë•­ÓŽèıœ²ċŻĉ£ˆċİá¤¤ï³œâ¸³ìş›ê–•ëŽ‹è¤ìĤ§ĉ‰°ì‚‡ï­•çˆı웛룈îğ´à¤‰àµ‘àı§î–á‘è›˘è¤‹äÈµîŻ¤ĉ‹ƒï¤“鰆磔íˆħ⁨阞éğäĞ›êı‰ĉ‰éœ°çŠ‘˜ìĵÚĞç–ĥšŻç­‹âıŽŸìŻï‰§ç´Ĵâĵš´ï… [ 148.623068][ T5856] usb 6-1: Manufacturer: Ş [ 148.623079][ T5856] usb 6-1: SerialNumber: ™ċ•™î‡„ä¨ħí–œà²¤äŽŻï˜ç“İêżĞ젅쨖폕ċŻ²ĉ…Ÿĉµ“ċž‰ì¸ëĞ”ìŻ“ïĞ䤔佉Ħ¸ċ–ˆè…“癍ëĵŽîˆ—ç„šĉ£³ì­áĤ“ê¤ıéĤŽï²ĉž‹ïĤ´â„ ĉŽƒê²¸ĉ‡ş¤‚êż…ê‘°ë™ä¤’ĉşħàĦê’µµìŻĵí‰Ğêğšëż¨—ċżá–›çğ‘êżŠè´îК猲럛ꜰᒓᒟá½ħĉµ”ç­Ÿé˘¨ċħâ„¤é§…ä’­ [ 149.010356][ T5856] io_ti 6-1:82.68: required endpoints missing [ 149.016739][ T5856] io_ti 6-1:82.67: required endpoints missing [ 149.069300][ T5856] io_ti 6-1:82.202: required endpoints missing [ 149.101358][ T5856] usb 6-1: USB disconnect, device number 6 [ 150.238118][ T6105] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 150.238369][ T6105] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 150.238404][ T6105] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 150.238420][ T6105] UDF-fs: Scanning with blocksize 512 failed [ 150.264031][ T6105] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 150.264234][ T6105] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 150.264257][ T6105] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 150.264275][ T6105] UDF-fs: Scanning with blocksize 1024 failed [ 150.264972][ T6105] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 150.265090][ T6105] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 150.265114][ T6105] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 150.265129][ T6105] UDF-fs: Scanning with blocksize 2048 failed [ 150.265625][ T6105] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 150.265728][ T6105] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 150.265748][ T6105] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 150.265762][ T6105] UDF-fs: Scanning with blocksize 4096 failed [ 150.265772][ T6105] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 150.554064][ T6113] FAULT_INJECTION: forcing a failure. [ 150.554064][ T6113] name failslab, interval 1, probability 0, space 0, times 0 [ 150.554095][ T6113] CPU: 2 UID: 0 PID: 6113 Comm: syz.3.61 Not tainted syzkaller #0 PREEMPT(full) [ 150.554115][ T6113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.554126][ T6113] Call Trace: [ 150.554132][ T6113] [ 150.554139][ T6113] dump_stack_lvl+0x100/0x190 [ 150.554170][ T6113] should_fail_ex.cold+0x5/0xa [ 150.554197][ T6113] should_failslab+0xc2/0x120 [ 150.554219][ T6113] kmem_cache_alloc_noprof+0x92/0x6a0 [ 150.554239][ T6113] ? do_getname+0x35/0x390 [ 150.554269][ T6113] do_getname+0x35/0x390 [ 150.554295][ T6113] __x64_sys_symlink+0x66/0xb0 [ 150.554318][ T6113] do_syscall_64+0x123/0x790 [ 150.554343][ T6113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.554361][ T6113] RIP: 0033:0x7f0a4059e159 [ 150.554375][ T6113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.554390][ T6113] RSP: 002b:00007f0a414e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 150.554408][ T6113] RAX: ffffffffffffffda RBX: 00007f0a40825fa0 RCX: 00007f0a4059e159 [ 150.554419][ T6113] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000001400 [ 150.554429][ T6113] RBP: 00007f0a414e4090 R08: 0000000000000000 R09: 0000000000000000 [ 150.554439][ T6113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.554449][ T6113] R13: 00007f0a40826038 R14: 00007f0a40825fa0 R15: 00007ffc7c53ca78 [ 150.554473][ T6113] [ 151.166504][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 151.166522][ T43] audit: type=1400 audit(1789177860.721:313): avc: denied { setopt } for pid=6121 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.187060][ T43] audit: type=1400 audit(1789177860.751:314): avc: denied { create } for pid=6114 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 151.187663][ T43] audit: type=1400 audit(1789177860.751:315): avc: denied { ioctl } for pid=6114 comm="syz.0.62" path="socket:[12424]" dev="sockfs" ino=12424 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 151.325345][ T43] audit: type=1400 audit(1789177860.881:316): avc: denied { unlink } for pid=6119 comm="syz.3.63" name="#1" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 151.348208][ T43] audit: type=1400 audit(1789177860.911:317): avc: denied { mount } for pid=6119 comm="syz.3.63" name="/" dev="overlay" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 151.369904][ T43] audit: type=1400 audit(1789177860.941:318): avc: denied { ioctl } for pid=6121 comm="syz.1.65" path="socket:[11518]" dev="sockfs" ino=11518 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.374280][ T43] audit: type=1400 audit(1789177860.941:319): avc: denied { write } for pid=6121 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.374343][ T43] audit: type=1400 audit(1789177860.941:320): avc: denied { nlmsg_write } for pid=6121 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.460403][ T43] audit: type=1400 audit(1789177861.021:321): avc: denied { create } for pid=6126 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 151.460457][ T43] audit: type=1400 audit(1789177861.021:322): avc: denied { write } for pid=6126 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 152.830463][ T5835] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 152.887308][ T6151] program syz.0.73 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.887761][ T6151] program syz.0.73 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.084796][ T6157] PKCS7: Unsupported SignerInfo version [ 153.093446][ T5835] usb 7-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 153.094682][ T5835] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 153.094716][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.149304][ T6149] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 153.151598][ T5835] opticon 7-1:1.0: opticon converter detected [ 153.244813][ T5835] usb 7-1: opticon converter now attached to ttyUSB0 [ 153.382974][ T6159] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 153.518816][ T6159] FAULT_INJECTION: forcing a failure. [ 153.518816][ T6159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.518861][ T6159] CPU: 3 UID: 0 PID: 6159 Comm: syz.1.76 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.518886][ T6159] Tainted: [L]=SOFTLOCKUP [ 153.518893][ T6159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.518904][ T6159] Call Trace: [ 153.518910][ T6159] [ 153.518917][ T6159] dump_stack_lvl+0x100/0x190 [ 153.518949][ T6159] should_fail_ex.cold+0x5/0xa [ 153.518976][ T6159] _copy_from_user+0x2e/0xd0 [ 153.518997][ T6159] drm_ioctl+0x520/0xc60 [ 153.519024][ T6159] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 153.519050][ T6159] ? __pfx_drm_ioctl+0x10/0x10 [ 153.519069][ T6159] ? __fget_files+0x34/0x3d0 [ 153.519101][ T6159] ? selinux_file_ioctl+0x13b/0x290 [ 153.519120][ T6159] ? selinux_file_ioctl+0xb6/0x290 [ 153.519140][ T6159] ? __pfx_drm_ioctl+0x10/0x10 [ 153.519162][ T6159] __x64_sys_ioctl+0x18e/0x210 [ 153.519179][ T6159] do_syscall_64+0x123/0x790 [ 153.519204][ T6159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.519300][ T6159] RIP: 0033:0x7fadf279e159 [ 153.519318][ T6159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.519335][ T6159] RSP: 002b:00007fadf36a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.519352][ T6159] RAX: ffffffffffffffda RBX: 00007fadf2a25fa0 RCX: 00007fadf279e159 [ 153.519362][ T6159] RDX: 0000200000000040 RSI: 00000000c02064b2 RDI: 0000000000000006 [ 153.519374][ T6159] RBP: 00007fadf36a0090 R08: 0000000000000000 R09: 0000000000000000 [ 153.519382][ T6159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.519429][ T6159] R13: 00007fadf2a26038 R14: 00007fadf2a25fa0 R15: 00007ffd31e37938 [ 153.519453][ T6159] [ 154.324695][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.79'. [ 154.324718][ T6170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.79'. [ 155.084952][ T6182] input: syz0 as /devices/virtual/input/input6 [ 155.174286][ T6183] FAULT_INJECTION: forcing a failure. [ 155.174286][ T6183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.174322][ T6183] CPU: 3 UID: 0 PID: 6183 Comm: syz.3.81 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.174347][ T6183] Tainted: [L]=SOFTLOCKUP [ 155.174354][ T6183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.174364][ T6183] Call Trace: [ 155.174371][ T6183] [ 155.174378][ T6183] dump_stack_lvl+0x100/0x190 [ 155.174411][ T6183] should_fail_ex.cold+0x5/0xa [ 155.174438][ T6183] _copy_from_user+0x2e/0xd0 [ 155.174457][ T6183] input_event_from_user+0x123/0x310 [ 155.174486][ T6183] ? __pfx_input_event_from_user+0x10/0x10 [ 155.174512][ T6183] ? __pfx___might_resched+0x10/0x10 [ 155.174530][ T6183] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 155.174552][ T6183] ? input_event+0x93/0xb0 [ 155.174579][ T6183] uinput_write+0xac8/0x10e0 [ 155.174604][ T6183] ? avc_policy_seqno+0x9/0x20 [ 155.174628][ T6183] ? __pfx_uinput_write+0x10/0x10 [ 155.174649][ T6183] ? bpf_lsm_file_permission+0x9/0x10 [ 155.174671][ T6183] ? security_file_permission+0x76/0x210 [ 155.174694][ T6183] ? rw_verify_area+0xce/0x6d0 [ 155.174724][ T6183] vfs_write+0x2aa/0x1050 [ 155.174742][ T6183] ? __pfx_uinput_write+0x10/0x10 [ 155.174759][ T6183] ? lock_acquire+0x1d1/0x380 [ 155.174777][ T6183] ? __fget_files+0x34/0x3d0 [ 155.174799][ T6183] ? __pfx_vfs_write+0x10/0x10 [ 155.174815][ T6183] ? find_held_lock+0x2b/0x80 [ 155.174839][ T6183] ? __fget_files+0x215/0x3d0 [ 155.174860][ T6183] ? __fget_files+0x215/0x3d0 [ 155.174885][ T6183] ? __fget_files+0x21f/0x3d0 [ 155.174914][ T6183] ksys_write+0x1f8/0x250 [ 155.174931][ T6183] ? __pfx_ksys_write+0x10/0x10 [ 155.174957][ T6183] do_syscall_64+0x123/0x790 [ 155.174983][ T6183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.175002][ T6183] RIP: 0033:0x7f0a4059e159 [ 155.175017][ T6183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.175033][ T6183] RSP: 002b:00007f0a414c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 155.175051][ T6183] RAX: ffffffffffffffda RBX: 00007f0a40826090 RCX: 00007f0a4059e159 [ 155.175063][ T6183] RDX: 000000000000045c RSI: 0000200000000a40 RDI: 0000000000000003 [ 155.175073][ T6183] RBP: 00007f0a414c3090 R08: 0000000000000000 R09: 0000000000000000 [ 155.175084][ T6183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.175093][ T6183] R13: 00007f0a40826128 R14: 00007f0a40826090 R15: 00007ffc7c53ca78 [ 155.175119][ T6183] [ 156.102479][ T6187] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 156.102527][ T6187] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 156.547119][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 156.547140][ T43] audit: type=1400 audit(1789177865.844:333): avc: denied { read write } for pid=6191 comm="syz.1.87" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 156.548084][ T43] audit: type=1400 audit(1789177865.844:334): avc: denied { ioctl open } for pid=6191 comm="syz.1.87" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 156.653216][ T6194] netlink: 76 bytes leftover after parsing attributes in process `syz.3.88'. [ 156.653304][ T6199] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 156.747835][ T6196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.268527][ T6202] netlink: 'syz.0.90': attribute type 1 has an invalid length. [ 157.401224][ T6202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.441507][ T6202] netlink: 'syz.0.90': attribute type 10 has an invalid length. [ 157.441531][ T6202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.90'. [ 157.443604][ T6202] dummy0: entered promiscuous mode [ 157.605025][ T43] audit: type=1400 audit(1789177866.826:335): avc: denied { getopt } for pid=6201 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.798121][ T43] audit: type=1400 audit(1789177866.892:336): avc: denied { create } for pid=6211 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 157.798307][ T43] audit: type=1400 audit(1789177866.985:337): avc: denied { connect } for pid=6211 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 157.798354][ T43] audit: type=1400 audit(1789177866.985:338): avc: denied { ioctl } for pid=6211 comm="syz.1.93" path="socket:[10759]" dev="sockfs" ino=10759 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 157.798466][ T43] audit: type=1400 audit(1789177866.985:339): avc: denied { create } for pid=6211 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.867918][ T6212] netlink: 44 bytes leftover after parsing attributes in process `syz.1.93'. [ 157.868091][ T43] audit: type=1400 audit(1789177867.070:340): avc: denied { write } for pid=6211 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.868139][ T43] audit: type=1400 audit(1789177867.070:341): avc: denied { nlmsg_write } for pid=6211 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.869340][ T6212] netlink: 36 bytes leftover after parsing attributes in process `syz.1.93'. [ 158.068545][ T43] audit: type=1400 audit(1789177867.257:342): avc: denied { read } for pid=6214 comm="syz.0.94" name="rtc0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 158.252339][ T6215] FAULT_INJECTION: forcing a failure. [ 158.252339][ T6215] name failslab, interval 1, probability 0, space 0, times 0 [ 158.252376][ T6215] CPU: 0 UID: 0 PID: 6215 Comm: syz.0.94 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.252399][ T6215] Tainted: [L]=SOFTLOCKUP [ 158.252405][ T6215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.252415][ T6215] Call Trace: [ 158.252421][ T6215] [ 158.252428][ T6215] dump_stack_lvl+0x100/0x190 [ 158.252458][ T6215] should_fail_ex.cold+0x5/0xa [ 158.252484][ T6215] should_failslab+0xc2/0x120 [ 158.252510][ T6215] __kmalloc_noprof+0xfc/0x840 [ 158.252532][ T6215] ? rcu_is_watching+0x13/0xc0 [ 158.252557][ T6215] ? tomoyo_realpath_from_path+0xb6/0x690 [ 158.252585][ T6215] tomoyo_realpath_from_path+0xb6/0x690 [ 158.252613][ T6215] tomoyo_path_number_perm+0x23c/0x580 [ 158.252640][ T6215] ? tomoyo_path_number_perm+0x22e/0x580 [ 158.252671][ T6215] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 158.252713][ T6215] ? __lock_acquire+0x5c0/0x1f40 [ 158.252744][ T6215] ? __fget_files+0x34/0x3d0 [ 158.252766][ T6215] ? find_held_lock+0x2b/0x80 [ 158.252788][ T6215] ? hook_file_ioctl_common+0x140/0x440 [ 158.252822][ T6215] ? __fget_files+0x21f/0x3d0 [ 158.252850][ T6215] security_file_ioctl+0xd3/0x230 [ 158.252874][ T6215] __x64_sys_ioctl+0xb7/0x210 [ 158.252896][ T6215] do_syscall_64+0x123/0x790 [ 158.252923][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.252943][ T6215] RIP: 0033:0x7f6949b9e159 [ 158.252958][ T6215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.252974][ T6215] RSP: 002b:00007f694a9a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.252992][ T6215] RAX: ffffffffffffffda RBX: 00007f6949e25fa0 RCX: 00007f6949b9e159 [ 158.253006][ T6215] RDX: 0000200000000000 RSI: 000000004028700f RDI: 0000000000000003 [ 158.253018][ T6215] RBP: 00007f694a9a3090 R08: 0000000000000000 R09: 0000000000000000 [ 158.253030][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.253042][ T6215] R13: 00007f6949e26038 R14: 00007f6949e25fa0 R15: 00007fff4987c138 [ 158.253066][ T6215] [ 158.253074][ T6215] ERROR: Out of memory at tomoyo_realpath_from_path. [ 158.255213][ T6214] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 158.273703][ T5856] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 158.274919][ T5856] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 158.276081][ T5856] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 158.298506][ T5856] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 158.298533][ T5856] rtc rtc0: __rtc_set_alarm: err=-22 [ 158.730784][ T6218] Line length is too long: Should be less than 4094 [ 159.110719][ T9] usb 7-1: USB disconnect, device number 3 [ 159.162379][ T9] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 159.163001][ T9] opticon 7-1:1.0: device disconnected [ 159.759539][ T6230] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 160.162104][ T3399] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 160.202464][ T5856] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 160.209152][ T5856] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 160.210249][ T5856] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 160.211343][ T5856] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 160.211367][ T5856] rtc rtc0: __rtc_set_alarm: err=-22 [ 160.307430][ T3399] usb 7-1: device descriptor read/64, error -71 [ 160.564568][ T3399] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 160.704418][ T3399] usb 7-1: device descriptor read/64, error -71 [ 160.866182][ T3399] usb usb7-port1: attempt power cycle [ 161.281701][ T3399] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 161.303783][ T3399] usb 7-1: device descriptor read/8, error -71 [ 161.334997][ T58] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 161.521428][ T58] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 161.522374][ T58] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 161.522402][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.529000][ T6244] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 161.559239][ T3399] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 161.559779][ T58] opticon 6-1:1.0: opticon converter detected [ 161.589503][ T3399] usb 7-1: device descriptor read/8, error -71 [ 161.593091][ T58] usb 6-1: opticon converter now attached to ttyUSB0 [ 161.698608][ T3399] usb usb7-port1: unable to enumerate USB device [ 161.782208][ T6250] gretap0: entered promiscuous mode [ 161.784320][ T6250] macvlan2: entered promiscuous mode [ 161.831910][ T6250] gretap0: left promiscuous mode [ 163.516429][ T43] kauditd_printk_skb: 23 callbacks suppressed [ 163.516450][ T43] audit: type=1400 audit(1789177872.357:355): avc: denied { read } for pid=6261 comm="syz.2.111" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 163.516496][ T43] audit: type=1400 audit(1789177872.357:356): avc: denied { open } for pid=6261 comm="syz.2.111" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 163.516534][ T43] audit: type=1400 audit(1789177872.366:357): avc: denied { ioctl } for pid=6261 comm="syz.2.111" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x4d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 163.519071][ T5756] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 163.519100][ T5756] CPU: 2 UID: 0 PID: 5756 Comm: kworker/u34:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.519131][ T5756] Tainted: [L]=SOFTLOCKUP [ 163.519139][ T5756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.519153][ T5756] Workqueue: hci2 hci_rx_work [ 163.519181][ T5756] Call Trace: [ 163.519189][ T5756] [ 163.519197][ T5756] dump_stack_lvl+0x100/0x190 [ 163.519229][ T5756] sysfs_warn_dup.cold+0x1c/0x28 [ 163.519264][ T5756] sysfs_create_dir_ns+0x24b/0x2b0 [ 163.519293][ T5756] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 163.519320][ T5756] ? find_held_lock+0x2b/0x80 [ 163.519352][ T5756] ? kobject_add_internal+0x25f/0x930 [ 163.519399][ T5756] ? kobject_add_internal+0x25f/0x930 [ 163.519440][ T5756] ? do_raw_spin_unlock+0x145/0x1e0 [ 163.519471][ T5756] kobject_add_internal+0x2c8/0x930 [ 163.519514][ T5756] kobject_add+0x16a/0x1e0 [ 163.519536][ T5756] ? __pfx_kobject_add+0x10/0x10 [ 163.519555][ T5756] ? class_to_subsys+0x10f/0x150 [ 163.519590][ T5756] ? kobject_put+0xb9/0x640 [ 163.519620][ T5756] ? _raw_spin_unlock+0x28/0x50 [ 163.519652][ T5756] device_add+0x294/0x1970 [ 163.519680][ T5756] ? __pfx_dev_set_name+0x10/0x10 [ 163.519712][ T5756] ? __pfx_device_add+0x10/0x10 [ 163.519742][ T5756] ? mgmt_send_event_skb+0x2fb/0x460 [ 163.519778][ T5756] hci_conn_add_sysfs+0x1a3/0x260 [ 163.519808][ T5756] le_conn_complete_evt+0x122f/0x2130 [ 163.519843][ T5756] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 163.519865][ T5756] ? hci_event_packet+0x186/0xcd0 [ 163.519896][ T6262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.111'. [ 163.519896][ T5756] hci_le_conn_complete_evt+0x23c/0x3a0 [ 163.519930][ T5756] ? skb_pull_data+0x15f/0x1e0 [ 163.520157][ T5756] hci_le_meta_evt+0x34a/0x5f0 [ 163.520191][ T5756] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 163.520223][ T5756] hci_event_packet+0x51c/0xcd0 [ 163.520247][ T5756] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 163.520275][ T5756] ? __pfx_hci_event_packet+0x10/0x10 [ 163.520306][ T5756] ? lockdep_hardirqs_on+0x7d/0x110 [ 163.520341][ T5756] hci_rx_work+0x451/0xfc0 [ 163.520378][ T5756] process_one_work+0xac7/0x1b10 [ 163.520428][ T5756] ? __pfx_process_one_work+0x10/0x10 [ 163.520465][ T5756] ? lock_acquire+0x1d1/0x380 [ 163.520499][ T5756] ? __pfx_hci_rx_work+0x10/0x10 [ 163.520536][ T5756] worker_thread+0x5ef/0xe50 [ 163.520582][ T5756] ? kthread+0x13a/0x450 [ 163.520610][ T5756] ? __pfx_worker_thread+0x10/0x10 [ 163.520641][ T5756] kthread+0x373/0x450 [ 163.520671][ T5756] ? __pfx_kthread+0x10/0x10 [ 163.520703][ T5756] ret_from_fork+0x730/0xd60 [ 163.520729][ T5756] ? __pfx_ret_from_fork+0x10/0x10 [ 163.520779][ T5756] ? __switch_to+0x800/0x10f0 [ 163.520811][ T5756] ? __pfx_kthread+0x10/0x10 [ 163.520844][ T5756] ret_from_fork_asm+0x1a/0x30 [ 163.521034][ T5756] [ 163.523665][ T5756] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 163.523726][ T5756] Bluetooth: hci2: failed to register connection device [ 164.053708][ T43] audit: type=1400 audit(1789177872.834:358): avc: denied { read write } for pid=5757 comm="syz-executor" name="loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.053768][ T43] audit: type=1400 audit(1789177872.834:359): avc: denied { open } for pid=5757 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.053859][ T43] audit: type=1400 audit(1789177872.834:360): avc: denied { ioctl } for pid=5757 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.174641][ T43] audit: type=1400 audit(1789177872.974:361): avc: denied { setopt } for pid=6253 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 164.190009][ T43] audit: type=1400 audit(1789177872.974:362): avc: denied { getopt } for pid=6253 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 164.315296][ T43] audit: type=1400 audit(1789177873.096:363): avc: denied { mounton } for pid=6268 comm="syz.2.113" path="/19/proc" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 164.594387][ T43] audit: type=1400 audit(1789177873.377:364): avc: denied { create } for pid=6273 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 164.745791][ T6213] syz.1.93 (6213) used greatest stack depth: 18968 bytes left [ 164.908433][ T6275] syzkaller1: entered promiscuous mode [ 164.908457][ T6275] syzkaller1: entered allmulticast mode [ 165.973098][ T6298] netlink: 80 bytes leftover after parsing attributes in process `syz.3.123'. [ 166.099731][ T6302] syz.2.125 uses obsolete (PF_INET,SOCK_PACKET) [ 166.778710][ T6309] xt_IDLETIMER: timeout value is too big [ 167.620229][ T5148] usb 6-1: USB disconnect, device number 7 [ 167.742446][ T5148] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 167.743023][ T5148] opticon 6-1:1.0: device disconnected [ 167.963205][ T6334] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 167.963348][ T6334] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 168.020339][ T6335] syzkaller1: entered promiscuous mode [ 168.020365][ T6335] syzkaller1: entered allmulticast mode [ 168.156792][ T6337] netlink: 52 bytes leftover after parsing attributes in process `syz.1.139'. [ 168.455377][ T6342] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.504571][ T5148] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 168.737363][ T5148] usb 7-1: Using ep0 maxpacket: 16 [ 168.755135][ T5148] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 168.762371][ T5148] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.762410][ T5148] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.762436][ T5148] usb 7-1: config 0 interface 0 has no altsetting 0 [ 168.762471][ T5148] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.773886][ T6350] FAULT_INJECTION: forcing a failure. [ 168.773886][ T6350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.773917][ T6350] CPU: 1 UID: 0 PID: 6350 Comm: syz.1.145 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.773938][ T6350] Tainted: [L]=SOFTLOCKUP [ 168.773944][ T6350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.773953][ T6350] Call Trace: [ 168.773958][ T6350] [ 168.773965][ T6350] dump_stack_lvl+0x100/0x190 [ 168.773993][ T6350] should_fail_ex.cold+0x5/0xa [ 168.774016][ T6350] strncpy_from_user+0x3b/0x2d0 [ 168.774037][ T6350] do_getname+0x78/0x390 [ 168.774062][ T6350] __x64_sys_symlinkat+0x7c/0xe0 [ 168.774085][ T6350] do_syscall_64+0x123/0x790 [ 168.774108][ T6350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.774124][ T6350] RIP: 0033:0x7fadf279e159 [ 168.774137][ T6350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.774151][ T6350] RSP: 002b:00007fadf36a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 168.774167][ T6350] RAX: ffffffffffffffda RBX: 00007fadf2a25fa0 RCX: 00007fadf279e159 [ 168.774177][ T6350] RDX: 0000200000001800 RSI: ffffffffffffff9c RDI: 0000200000001700 [ 168.774187][ T6350] RBP: 00007fadf36a0090 R08: 0000000000000000 R09: 0000000000000000 [ 168.774196][ T6350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.774205][ T6350] R13: 00007fadf2a26038 R14: 00007fadf2a25fa0 R15: 00007ffd31e37938 [ 168.774226][ T6350] [ 168.853112][ T6352] ip6t_REJECT: ECHOREPLY is not supported [ 168.939940][ T5148] usb 7-1: config 0 descriptor?? [ 168.967133][ T43] kauditd_printk_skb: 35 callbacks suppressed [ 168.967172][ T43] audit: type=1400 audit(1789177877.457:400): avc: denied { read } for pid=6351 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 169.158052][ T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 169.319452][ T26] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 169.320798][ T26] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 169.320837][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.335707][ T6348] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 169.337106][ T26] opticon 5-1:1.0: opticon converter detected [ 169.338804][ T26] usb 5-1: opticon converter now attached to ttyUSB0 [ 169.431276][ T6360] CUSE: info not properly terminated [ 169.590290][ T5148] hid-multitouch 0003:0EEF:72C4.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 169.633595][ T6362] FAULT_INJECTION: forcing a failure. [ 169.633595][ T6362] name failslab, interval 1, probability 0, space 0, times 0 [ 169.633636][ T6362] CPU: 2 UID: 0 PID: 6362 Comm: syz.1.149 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.633659][ T6362] Tainted: [L]=SOFTLOCKUP [ 169.633666][ T6362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.633676][ T6362] Call Trace: [ 169.633683][ T6362] [ 169.633691][ T6362] dump_stack_lvl+0x100/0x190 [ 169.633719][ T6362] should_fail_ex.cold+0x5/0xa [ 169.633744][ T6362] should_failslab+0xc2/0x120 [ 169.633767][ T6362] kmem_cache_alloc_noprof+0x92/0x6a0 [ 169.633788][ T6362] ? alloc_empty_file+0x5b/0x1c0 [ 169.633816][ T6362] alloc_empty_file+0x5b/0x1c0 [ 169.633837][ T6362] path_openat+0xdb/0x2440 [ 169.633862][ T6362] ? __pfx_path_openat+0x10/0x10 [ 169.633891][ T6362] do_file_open+0x20e/0x430 [ 169.633914][ T6362] ? __pfx_do_file_open+0x10/0x10 [ 169.633952][ T6362] ? _raw_spin_unlock+0x28/0x50 [ 169.633970][ T6362] ? alloc_fd+0x471/0x7a0 [ 169.633999][ T6362] do_sys_openat2+0x10f/0x1e0 [ 169.634025][ T6362] ? __pfx_do_sys_openat2+0x10/0x10 [ 169.634048][ T6362] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 169.634071][ T6362] ? __fget_files+0x21f/0x3d0 [ 169.634095][ T6362] __x64_sys_openat+0x12d/0x210 [ 169.634119][ T6362] ? __pfx___x64_sys_openat+0x10/0x10 [ 169.634141][ T6362] ? ksys_write+0x1ac/0x250 [ 169.634167][ T6362] do_syscall_64+0x123/0x790 [ 169.634192][ T6362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.634207][ T6362] RIP: 0033:0x7fadf279e159 [ 169.634222][ T6362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.634238][ T6362] RSP: 002b:00007fadf36a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 169.634258][ T6362] RAX: ffffffffffffffda RBX: 00007fadf2a25fa0 RCX: 00007fadf279e159 [ 169.634270][ T6362] RDX: 0000000000000001 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 169.634281][ T6362] RBP: 00007fadf36a0090 R08: 0000000000000000 R09: 0000000000000000 [ 169.634292][ T6362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.634302][ T6362] R13: 00007fadf2a26038 R14: 00007fadf2a25fa0 R15: 00007ffd31e37938 [ 169.634324][ T6362] [ 169.859184][ T5856] usb 7-1: USB disconnect, device number 8 [ 170.067338][ T6363] fido_id[6363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory [ 170.345510][ T43] audit: type=1400 audit(1789177878.758:401): avc: denied { mount } for pid=6371 comm="syz.1.152" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 170.425921][ T43] audit: type=1400 audit(1789177878.823:402): avc: denied { connect } for pid=6375 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 170.474075][ T43] audit: type=1400 audit(1789177878.861:403): avc: denied { name_connect } for pid=6375 comm="syz.3.153" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 170.633161][ T43] audit: type=1400 audit(1789177879.029:404): avc: denied { unmount } for pid=5754 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 170.959680][ T43] audit: type=1400 audit(1789177879.329:405): avc: denied { watch } for pid=6384 comm="syz.1.157" path="/34" dev="tmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 170.960900][ T43] audit: type=1400 audit(1789177879.329:406): avc: denied { watch_reads } for pid=6384 comm="syz.1.157" path="/34" dev="tmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 171.215035][ T43] audit: type=1400 audit(1789177879.563:407): avc: denied { setopt } for pid=6388 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 171.243537][ T6389] warning: `syz.1.159' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 171.346036][ T43] audit: type=1400 audit(1789177879.684:408): avc: denied { allowed } for pid=6390 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 171.788128][ T43] audit: type=1400 audit(1789177880.096:409): avc: denied { prog_load } for pid=6399 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 171.850996][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'. [ 172.303547][ T6411] IPVS: length: 194 != 8 [ 172.445202][ T6410] netlink: 36 bytes leftover after parsing attributes in process `syz.1.169'. [ 172.736831][ T58] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 172.925891][ T58] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 172.925927][ T58] usb 6-1: too many configurations: 248, using maximum allowed: 8 [ 172.927003][ T58] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 172.927025][ T58] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.927039][ T58] usb 6-1: config 0 has no interfaces? [ 172.928477][ T58] usb 6-1: config index 1 descriptor too short (expected 28277, got 36) [ 172.928504][ T58] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.928518][ T58] usb 6-1: config 0 has no interfaces? [ 172.956452][ T58] usb 6-1: config index 2 descriptor too short (expected 28277, got 36) [ 172.956482][ T58] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.956498][ T58] usb 6-1: config 0 has no interfaces? [ 172.986277][ T58] usb 6-1: config index 3 descriptor too short (expected 28277, got 36) [ 172.986303][ T58] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.986317][ T58] usb 6-1: config 0 has no interfaces? [ 172.990888][ T6425] xt_hashlimit: invalid interval [ 173.015619][ T58] usb 6-1: config index 4 descriptor too short (expected 28277, got 36) [ 173.015645][ T58] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.015660][ T58] usb 6-1: config 0 has no interfaces? [ 173.048492][ T58] usb 6-1: config index 5 descriptor too short (expected 28277, got 36) [ 173.048516][ T58] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.048528][ T58] usb 6-1: config 0 has no interfaces? [ 173.092760][ T58] usb 6-1: config index 6 descriptor too short (expected 28277, got 36) [ 173.092787][ T58] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.092801][ T58] usb 6-1: config 0 has no interfaces? [ 173.132737][ T58] usb 6-1: config index 7 descriptor too short (expected 28277, got 36) [ 173.132771][ T58] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.132787][ T58] usb 6-1: config 0 has no interfaces? [ 173.132814][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.147642][ T58] usb 6-1: config 0 descriptor?? [ 173.157513][ T6428] netlink: 'syz.2.175': attribute type 1 has an invalid length. [ 173.157536][ T6428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.175'. [ 173.479008][ T58] usb 6-1: string descriptor 0 read error: -71 [ 173.479993][ T58] usb 6-1: USB disconnect, device number 8 [ 174.074055][ T6439] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 174.601803][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 174.601825][ T43] audit: type=1400 audit(1789177882.735:426): avc: denied { write } for pid=6445 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 174.603711][ T6448] FAULT_INJECTION: forcing a failure. [ 174.603711][ T6448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.603744][ T6448] CPU: 2 UID: 0 PID: 6448 Comm: syz.1.183 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.603771][ T6448] Tainted: [L]=SOFTLOCKUP [ 174.603779][ T6448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.603792][ T6448] Call Trace: [ 174.603822][ T6448] [ 174.603831][ T6448] dump_stack_lvl+0x100/0x190 [ 174.603869][ T6448] should_fail_ex.cold+0x5/0xa [ 174.603901][ T6448] _copy_to_user+0x32/0xd0 [ 174.603927][ T6448] simple_read_from_buffer+0xcb/0x170 [ 174.603958][ T6448] proc_fail_nth_read+0x1af/0x230 [ 174.603986][ T6448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.604014][ T6448] ? rw_verify_area+0xce/0x6d0 [ 174.604045][ T6448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.608738][ T6448] vfs_read+0x1e4/0xb40 [ 174.608782][ T6448] ? lock_acquire+0x1d1/0x380 [ 174.608804][ T6448] ? __fget_files+0x34/0x3d0 [ 174.608828][ T6448] ? __pfx_vfs_read+0x10/0x10 [ 174.608844][ T6448] ? find_held_lock+0x2b/0x80 [ 174.608869][ T6448] ? __fget_files+0x215/0x3d0 [ 174.608903][ T6448] ? __fget_files+0x21f/0x3d0 [ 174.608927][ T6448] ksys_read+0x12a/0x250 [ 174.608943][ T6448] ? __pfx_ksys_read+0x10/0x10 [ 174.608968][ T6448] do_syscall_64+0x123/0x790 [ 174.609001][ T6448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.609023][ T6448] RIP: 0033:0x7fadf275e98e [ 174.609044][ T6448] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 174.609064][ T6448] RSP: 002b:00007fadf369ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.609087][ T6448] RAX: ffffffffffffffda RBX: 00007fadf36a06c0 RCX: 00007fadf275e98e [ 174.609101][ T6448] RDX: 000000000000000f RSI: 00007fadf36a00a0 RDI: 0000000000000006 [ 174.609114][ T6448] RBP: 00007fadf36a0090 R08: 0000000000000000 R09: 0000000000000000 [ 174.609126][ T6448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.609139][ T6448] R13: 00007fadf2a26038 R14: 00007fadf2a25fa0 R15: 00007ffd31e37938 [ 174.609168][ T6448] [ 175.262841][ T26] usb 5-1: USB disconnect, device number 2 [ 175.268416][ T26] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 175.268940][ T26] opticon 5-1:1.0: device disconnected [ 175.327532][ T6463] FAULT_INJECTION: forcing a failure. [ 175.327532][ T6463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.327572][ T6463] CPU: 2 UID: 0 PID: 6463 Comm: syz.1.188 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.327606][ T6463] Tainted: [L]=SOFTLOCKUP [ 175.327614][ T6463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.327667][ T6463] Call Trace: [ 175.327676][ T6463] [ 175.327686][ T6463] dump_stack_lvl+0x100/0x190 [ 175.327726][ T6463] should_fail_ex.cold+0x5/0xa [ 175.327758][ T6463] strncpy_from_user+0x3b/0x2d0 [ 175.327788][ T6463] do_getname+0x78/0x390 [ 175.327832][ T6463] user_path_at+0x26/0x60 [ 175.327858][ T6463] __x64_sys_mount+0x1fb/0x310 [ 175.327893][ T6463] ? __pfx___x64_sys_mount+0x10/0x10 [ 175.327934][ T6463] do_syscall_64+0x123/0x790 [ 175.328126][ T6463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.328149][ T6463] RIP: 0033:0x7fadf279e159 [ 175.328167][ T6463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.328183][ T6463] RSP: 002b:00007fadf36a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 175.328204][ T6463] RAX: ffffffffffffffda RBX: 00007fadf2a25fa0 RCX: 00007fadf279e159 [ 175.328216][ T6463] RDX: 0000200000004500 RSI: 0000200000000240 RDI: 0000000000000000 [ 175.328226][ T6463] RBP: 00007fadf36a0090 R08: 0000200000000300 R09: 0000000000000000 [ 175.328236][ T6463] R10: 0000000000000c00 R11: 0000000000000246 R12: 0000000000000001 [ 175.328247][ T6463] R13: 00007fadf2a26038 R14: 00007fadf2a25fa0 R15: 00007ffd31e37938 [ 175.328269][ T6463] [ 175.347684][ T43] audit: type=1400 audit(1789177883.390:427): avc: denied { create } for pid=6460 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.528430][ T43] audit: type=1400 audit(1789177883.577:428): avc: denied { ioctl } for pid=6465 comm="syz.2.190" path="socket:[12845]" dev="sockfs" ino=12845 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 175.541852][ T6469] Mount JFS Failure: -22 [ 175.541870][ T6469] jfs_mount failed w/return code = -22 [ 175.556509][ T43] audit: type=1400 audit(1789177883.624:429): avc: denied { read } for pid=6465 comm="syz.2.190" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 175.556891][ T43] audit: type=1400 audit(1789177883.624:430): avc: denied { open } for pid=6465 comm="syz.2.190" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 175.557391][ T43] audit: type=1400 audit(1789177883.624:431): avc: denied { ioctl } for pid=6465 comm="syz.2.190" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 175.563097][ T6473] netlink: zone id is out of range [ 175.563145][ T6473] netlink: zone id is out of range [ 175.563152][ T6473] netlink: zone id is out of range [ 175.563157][ T6473] netlink: zone id is out of range [ 175.563355][ T6473] netlink: zone id is out of range [ 175.563379][ T6473] netlink: zone id is out of range [ 175.652612][ T6475] ======================================================= [ 175.652612][ T6475] WARNING: The mand mount option has been deprecated and [ 175.652612][ T6475] and is ignored by this kernel. Remove the mand [ 175.652612][ T6475] option from the mount to silence this warning. [ 175.652612][ T6475] ======================================================= [ 175.652898][ T6475] overlayfs: missing 'lowerdir' [ 175.706621][ T6469] FAULT_INJECTION: forcing a failure. [ 175.706621][ T6469] name failslab, interval 1, probability 0, space 0, times 0 [ 175.706669][ T6469] CPU: 1 UID: 0 PID: 6469 Comm: syz.1.191 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.706708][ T6469] Tainted: [L]=SOFTLOCKUP [ 175.706718][ T6469] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.706734][ T6469] Call Trace: [ 175.706743][ T6469] [ 175.706752][ T6469] dump_stack_lvl+0x100/0x190 [ 175.706798][ T6469] should_fail_ex.cold+0x5/0xa [ 175.706837][ T6469] should_failslab+0xc2/0x120 [ 175.706872][ T6469] kmem_cache_alloc_noprof+0x92/0x6a0 [ 175.706903][ T6469] ? security_file_alloc+0x34/0x2c0 [ 175.706944][ T6469] security_file_alloc+0x34/0x2c0 [ 175.706977][ T6469] init_file+0x95/0x480 [ 175.707013][ T6469] alloc_empty_file+0x79/0x1c0 [ 175.707049][ T6469] path_openat+0xdb/0x2440 [ 175.707088][ T6469] ? __pfx_path_openat+0x10/0x10 [ 175.707131][ T6469] do_file_open+0x20e/0x430 [ 175.707166][ T6469] ? __pfx_do_file_open+0x10/0x10 [ 175.707225][ T6469] ? _raw_spin_unlock+0x28/0x50 [ 175.707266][ T6469] ? alloc_fd+0x471/0x7a0 [ 175.707312][ T6469] do_sys_openat2+0x10f/0x1e0 [ 175.707351][ T6469] ? __pfx_do_sys_openat2+0x10/0x10 [ 175.707399][ T6469] __x64_sys_openat+0x12d/0x210 [ 175.707473][ T6469] ? __pfx___x64_sys_openat+0x10/0x10 [ 175.707526][ T6469] do_syscall_64+0x123/0x790 [ 175.707568][ T6469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.707599][ T6469] RIP: 0033:0x7fadf279e159 [ 175.707623][ T6469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.707647][ T6469] RSP: 002b:00007fadf36a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 175.707675][ T6469] RAX: ffffffffffffffda RBX: 00007fadf2a25fa0 RCX: 00007fadf279e159 [ 175.707693][ T6469] RDX: 0000000000008000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 175.707710][ T6469] RBP: 00007fadf283503b R08: 0000000000000000 R09: 0000000000000000 [ 175.707726][ T6469] R10: 00000000000001f7 R11: 0000000000000246 R12: 0000000000000000 [ 175.707741][ T6469] R13: 00007fadf2a26038 R14: 00007fadf2a25fa0 R15: 00007ffd31e37938 [ 175.707776][ T6469] [ 175.734348][ T6467] macvtap1: entered promiscuous mode [ 175.737186][ T6467] vlan1: entered promiscuous mode [ 175.747382][ T6467] team0: Device macvtap1 failed to register rx_handler [ 175.868503][ T6467] vlan1: left promiscuous mode [ 176.291349][ T6489] FAULT_INJECTION: forcing a failure. [ 176.291349][ T6489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.291390][ T6489] CPU: 2 UID: 0 PID: 6489 Comm: syz.3.195 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.291419][ T6489] Tainted: [L]=SOFTLOCKUP [ 176.291427][ T6489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.291438][ T6489] Call Trace: [ 176.291446][ T6489] [ 176.291454][ T6489] dump_stack_lvl+0x100/0x190 [ 176.291492][ T6489] should_fail_ex.cold+0x5/0xa [ 176.291522][ T6489] _copy_to_user+0x32/0xd0 [ 176.291547][ T6489] simple_read_from_buffer+0xcb/0x170 [ 176.291576][ T6489] proc_fail_nth_read+0x1af/0x230 [ 176.291601][ T6489] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.291629][ T6489] ? rw_verify_area+0xce/0x6d0 [ 176.291659][ T6489] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.291682][ T6489] vfs_read+0x1e4/0xb40 [ 176.291704][ T6489] ? lock_acquire+0x1d1/0x380 [ 176.291726][ T6489] ? __fget_files+0x34/0x3d0 [ 176.291749][ T6489] ? __pfx_vfs_read+0x10/0x10 [ 176.291767][ T6489] ? find_held_lock+0x2b/0x80 [ 176.291795][ T6489] ? __fget_files+0x215/0x3d0 [ 176.291852][ T6489] ? __fget_files+0x21f/0x3d0 [ 176.291882][ T6489] ksys_read+0x12a/0x250 [ 176.291901][ T6489] ? __pfx_ksys_read+0x10/0x10 [ 176.291929][ T6489] do_syscall_64+0x123/0x790 [ 176.291959][ T6489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.291979][ T6489] RIP: 0033:0x7f0a4055e98e [ 176.291996][ T6489] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 176.292015][ T6489] RSP: 002b:00007f0a414e3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.292036][ T6489] RAX: ffffffffffffffda RBX: 00007f0a414e46c0 RCX: 00007f0a4055e98e [ 176.292049][ T6489] RDX: 000000000000000f RSI: 00007f0a414e40a0 RDI: 0000000000000004 [ 176.292105][ T6489] RBP: 00007f0a414e4090 R08: 0000000000000000 R09: 0000000000000000 [ 176.292118][ T6489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.292130][ T6489] R13: 00007f0a40826038 R14: 00007f0a40825fa0 R15: 00007ffc7c53ca78 [ 176.292160][ T6489] [ 176.483661][ T43] audit: type=1400 audit(1789177884.494:432): avc: denied { map } for pid=6490 comm="syz.1.196" path="socket:[13327]" dev="sockfs" ino=13327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 176.483902][ T43] audit: type=1400 audit(1789177884.494:433): avc: denied { read } for pid=6490 comm="syz.1.196" path="socket:[13327]" dev="sockfs" ino=13327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 176.639454][ T6498] qnx6: unable to set blocksize [ 176.861807][ T43] audit: type=1400 audit(1789177884.831:434): avc: denied { load_policy } for pid=6499 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 176.904619][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 176.909388][ T6500] SELinux: common does not define every permission it declares [ 176.909864][ T6500] SELinux: failed to load policy [ 177.065636][ T31] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 177.069088][ T31] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 177.069132][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.098094][ T6496] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 177.100176][ T31] opticon 5-1:1.0: opticon converter detected [ 177.121715][ T31] usb 5-1: opticon converter now attached to ttyUSB0 [ 177.534587][ T6518] FAULT_INJECTION: forcing a failure. [ 177.534587][ T6518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.534618][ T6518] CPU: 0 UID: 0 PID: 6518 Comm: syz.3.205 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.534640][ T6518] Tainted: [L]=SOFTLOCKUP [ 177.534646][ T6518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.534656][ T6518] Call Trace: [ 177.534663][ T6518] [ 177.534669][ T6518] dump_stack_lvl+0x100/0x190 [ 177.534698][ T6518] should_fail_ex.cold+0x5/0xa [ 177.534740][ T6518] _copy_from_iter+0x1f4/0x1690 [ 177.534762][ T6518] ? _copy_from_iter+0x350/0x1690 [ 177.534780][ T6518] ? _copy_from_iter+0x270/0x1690 [ 177.534802][ T6518] ? __pfx__copy_from_iter+0x10/0x10 [ 177.534822][ T6518] ? __pfx__copy_from_iter+0x10/0x10 [ 177.534843][ T6518] copy_page_from_iter+0x238/0x300 [ 177.534862][ T6518] skb_copy_datagram_from_iter+0x399/0x720 [ 177.534898][ T6518] tun_get_user+0x1866/0x3cc0 [ 177.534925][ T6518] ? __lock_acquire+0x5c0/0x1f40 [ 177.534943][ T6518] ? __pfx_tun_get_user+0x10/0x10 [ 177.534963][ T6518] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 177.534995][ T6518] ? find_held_lock+0x2b/0x80 [ 177.535020][ T6518] ? tun_get+0x191/0x370 [ 177.535036][ T6518] ? tun_get+0x191/0x370 [ 177.535060][ T6518] tun_chr_write_iter+0xdc/0x200 [ 177.535083][ T6518] vfs_write+0x6af/0x1050 [ 177.535102][ T6518] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 177.535125][ T6518] ? __pfx_vfs_write+0x10/0x10 [ 177.535141][ T6518] ? find_held_lock+0x2b/0x80 [ 177.535182][ T6518] ksys_write+0x12a/0x250 [ 177.535199][ T6518] ? __pfx_ksys_write+0x10/0x10 [ 177.535225][ T6518] do_syscall_64+0x123/0x790 [ 177.535253][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.535271][ T6518] RIP: 0033:0x7f0a4055e98e [ 177.535292][ T6518] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 177.535307][ T6518] RSP: 002b:00007f0a414c2fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 177.535324][ T6518] RAX: ffffffffffffffda RBX: 00007f0a414c36c0 RCX: 00007f0a4055e98e [ 177.535334][ T6518] RDX: 000000000000fef3 RSI: 0000200000000200 RDI: 00000000000000c8 [ 177.535345][ T6518] RBP: 00007f0a414c3090 R08: 0000000000000000 R09: 0000000000000000 [ 177.535355][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.535365][ T6518] R13: 00007f0a40826128 R14: 00007f0a40826090 R15: 00007ffc7c53ca78 [ 177.535388][ T6518] [ 178.269671][ T6531] batman_adv: batadv0: Adding interface: veth0 [ 178.269689][ T6531] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.269716][ T6531] batman_adv: batadv0: Interface activated: veth0 [ 178.326187][ T6528] netlink: 20 bytes leftover after parsing attributes in process `syz.3.209'. [ 178.326216][ T6528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.326235][ T6528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.354243][ T6528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.354270][ T6528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.374727][ T6528] batman_adv: batadv0: Interface deactivated: veth0 [ 178.374753][ T6528] batman_adv: batadv0: Removing interface: veth0 [ 178.400570][ T43] audit: type=1400 audit(1789177886.282:435): avc: denied { append } for pid=6532 comm="syz.2.211" name="btrfs-control" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 179.201444][ T6551] netlink: 'syz.2.213': attribute type 1 has an invalid length. [ 179.344584][ T6556] ip_tables: iptables: counters copy to user failed while replacing table [ 179.582667][ T6561] jffs2: notice: (6561) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 179.994054][ T6569] FAULT_INJECTION: forcing a failure. [ 179.994054][ T6569] name failslab, interval 1, probability 0, space 0, times 0 [ 179.994091][ T6569] CPU: 1 UID: 0 PID: 6569 Comm: syz.3.218 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.994118][ T6569] Tainted: [L]=SOFTLOCKUP [ 179.994127][ T6569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.994139][ T6569] Call Trace: [ 179.994147][ T6569] [ 179.994155][ T6569] dump_stack_lvl+0x100/0x190 [ 179.994191][ T6569] should_fail_ex.cold+0x5/0xa [ 179.994219][ T6569] should_failslab+0xc2/0x120 [ 179.994242][ T6569] __kmalloc_cache_noprof+0x91/0x6d0 [ 179.994282][ T6569] ? loopback_open+0x9f6/0x13d0 [ 179.994309][ T6569] loopback_open+0x9f6/0x13d0 [ 179.994333][ T6569] snd_pcm_open_substream+0xa76/0x1850 [ 179.994361][ T6569] ? __pfx_kasan_disable_current+0x10/0x10 [ 179.994381][ T6569] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 179.994405][ T6569] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 179.994428][ T6569] ? snd_pcm_oss_open+0x5c5/0x1380 [ 179.994453][ T6569] snd_pcm_oss_open+0x715/0x1380 [ 179.994481][ T6569] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 179.994505][ T6569] ? __pfx_default_wake_function+0x10/0x10 [ 179.994526][ T6569] ? __lock_acquire+0x5c0/0x1f40 [ 179.994550][ T6569] ? do_raw_spin_lock+0x128/0x260 [ 179.994571][ T6569] ? soundcore_open+0x231/0x5a0 [ 179.994591][ T6569] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 179.994613][ T6569] soundcore_open+0x2e3/0x5a0 [ 179.994634][ T6569] ? __pfx_soundcore_open+0x10/0x10 [ 179.994653][ T6569] chrdev_open+0x234/0x6a0 [ 179.994717][ T6569] ? __pfx_chrdev_open+0x10/0x10 [ 179.994750][ T6569] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 179.994782][ T6569] do_dentry_open+0x6ab/0x14d0 [ 179.994803][ T6569] ? __pfx_chrdev_open+0x10/0x10 [ 179.994830][ T6569] vfs_open+0x82/0x3f0 [ 179.994858][ T6569] path_openat+0x19fa/0x2440 [ 179.994886][ T6569] ? __pfx_path_openat+0x10/0x10 [ 179.994919][ T6569] do_file_open+0x20e/0x430 [ 179.994946][ T6569] ? __pfx_do_file_open+0x10/0x10 [ 179.994989][ T6569] ? _raw_spin_unlock+0x28/0x50 [ 179.995010][ T6569] ? alloc_fd+0x471/0x7a0 [ 179.995042][ T6569] do_sys_openat2+0x10f/0x1e0 [ 179.995063][ T6569] ? __pfx_do_sys_openat2+0x10/0x10 [ 179.995093][ T6569] __x64_sys_openat+0x12d/0x210 [ 179.995115][ T6569] ? __pfx___x64_sys_openat+0x10/0x10 [ 179.995147][ T6569] do_syscall_64+0x123/0x790 [ 179.995173][ T6569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.995191][ T6569] RIP: 0033:0x7f0a4059e159 [ 179.995208][ T6569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.995224][ T6569] RSP: 002b:00007f0a414e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 179.995242][ T6569] RAX: ffffffffffffffda RBX: 00007f0a40825fa0 RCX: 00007f0a4059e159 [ 179.995344][ T6569] RDX: 00000000000a6f81 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 179.995358][ T6569] RBP: 00007f0a4063503b R08: 0000000000000000 R09: 0000000000000000 [ 179.995368][ T6569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.995378][ T6569] R13: 00007f0a40826038 R14: 00007f0a40825fa0 R15: 00007ffc7c53ca78 [ 179.995403][ T6569] [ 180.086916][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 180.086938][ T43] audit: type=1400 audit(1789177887.835:450): avc: denied { write } for pid=6572 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.093173][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 180.164370][ T43] audit: type=1400 audit(1789177887.938:451): avc: denied { write } for pid=6574 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 180.276315][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 180.277192][ T9] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 180.278202][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.278226][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.278244][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 180.278286][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.280472][ T9] usb 7-1: config 0 descriptor?? [ 180.491059][ T43] audit: type=1400 audit(1789177888.247:452): avc: denied { watch watch_reads } for pid=6577 comm="syz.1.220" path="/proc/145/task" dev="proc" ino=13549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 180.535457][ T6566] jffs2: notice: (6566) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 180.543736][ T43] audit: type=1400 audit(1789177888.294:453): avc: denied { add_name } for pid=6564 comm="syz.2.216" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.577078][ T43] audit: type=1400 audit(1789177888.322:454): avc: denied { create } for pid=6564 comm="syz.2.216" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 180.724661][ T43] audit: type=1400 audit(1789177888.462:455): avc: denied { map } for pid=6580 comm="syz.3.221" path="socket:[11174]" dev="sockfs" ino=11174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 180.827208][ T6587] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 180.841132][ T43] audit: type=1400 audit(1789177888.565:456): avc: denied { read } for pid=6580 comm="syz.3.221" laddr=::ffff:127.0.0.1 lport=55303 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.084014][ T6593] FAULT_INJECTION: forcing a failure. [ 181.084014][ T6593] name failslab, interval 1, probability 0, space 0, times 0 [ 181.099616][ T6593] CPU: 3 UID: 0 PID: 6593 Comm: syz.1.223 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.099655][ T6593] Tainted: [L]=SOFTLOCKUP [ 181.099664][ T6593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.099679][ T6593] Call Trace: [ 181.099686][ T6593] [ 181.099694][ T6593] dump_stack_lvl+0x100/0x190 [ 181.099732][ T6593] should_fail_ex.cold+0x5/0xa [ 181.099768][ T6593] should_failslab+0xc2/0x120 [ 181.099795][ T6593] __kmalloc_cache_noprof+0x91/0x6d0 [ 181.099826][ T6593] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 181.099861][ T6593] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 181.099893][ T6593] ? rcu_is_watching+0x13/0xc0 [ 181.099923][ T6593] ? trace_contention_end+0x126/0x160 [ 181.099948][ T6593] ? __mutex_lock+0x26c/0x1bd0 [ 181.099977][ T6593] ? snd_pcm_oss_sync+0x243/0x840 [ 181.100005][ T6593] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 181.100066][ T6593] ? __pfx___mutex_lock+0x10/0x10 [ 181.100108][ T6593] ? __fsnotify_parent+0x2b4/0xd00 [ 181.100151][ T6593] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 181.100178][ T6593] snd_pcm_oss_sync+0x265/0x840 [ 181.100203][ T6593] snd_pcm_oss_release+0x238/0x300 [ 181.100226][ T6593] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 181.100253][ T6593] __fput+0x3ff/0xb50 [ 181.100285][ T6593] task_work_run+0x150/0x240 [ 181.100313][ T6593] ? __pfx_task_work_run+0x10/0x10 [ 181.100337][ T6593] ? __x64_sys_openat+0x12d/0x210 [ 181.100371][ T6593] exit_to_user_mode_loop+0x1d8/0x700 [ 181.100394][ T6593] ? rcu_is_watching+0x13/0xc0 [ 181.100418][ T6593] do_syscall_64+0x661/0x790 [ 181.100445][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.100466][ T6593] RIP: 0033:0x7fadf279e159 [ 181.100483][ T6593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.100501][ T6593] RSP: 002b:00007fadf36a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 181.100542][ T6593] RAX: ffffffffffffffea RBX: 00007fadf2a25fa0 RCX: 00007fadf279e159 [ 181.100560][ T6593] RDX: 00000000000a6f81 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 181.100576][ T6593] RBP: 00007fadf283503b R08: 0000000000000000 R09: 0000000000000000 [ 181.100591][ T6593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.100602][ T6593] R13: 00007fadf2a26038 R14: 00007fadf2a25fa0 R15: 00007ffd31e37938 [ 181.100632][ T6593] [ 181.161119][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 181.161213][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 181.163004][ T9] usb 7-1: USB disconnect, device number 9 [ 181.534152][ T6597] syzkaller0: entered promiscuous mode [ 181.534177][ T6597] syzkaller0: entered allmulticast mode [ 181.707766][ T43] audit: type=1400 audit(1789177889.388:457): avc: denied { map } for pid=6598 comm="syz.3.226" path="/proc/167/task/168/syscall" dev="proc" ino=13565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 181.709687][ T43] audit: type=1400 audit(1789177889.388:458): avc: denied { mmap_zero } for pid=6598 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 181.996573][ T6605] xt_TCPMSS: Only works on TCP SYN packets [ 181.998816][ T43] audit: type=1400 audit(1789177889.650:459): avc: denied { listen } for pid=6604 comm="syz.3.229" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 182.059623][ T6605] Bluetooth: hci0: unsupported parameter 255 [ 182.059730][ T6605] Bluetooth: hci0: unsupported parameter 255 [ 182.611775][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 182.752823][ T6616] FAULT_INJECTION: forcing a failure. [ 182.752823][ T6616] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 182.752862][ T6616] CPU: 3 UID: 0 PID: 6616 Comm: syz.1.232 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.752884][ T6616] Tainted: [L]=SOFTLOCKUP [ 182.752891][ T6616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.752900][ T6616] Call Trace: [ 182.752905][ T6616] [ 182.752912][ T6616] dump_stack_lvl+0x100/0x190 [ 182.752943][ T6616] should_fail_ex.cold+0x5/0xa [ 182.752963][ T6616] ? prepare_alloc_pages+0x16d/0x5b0 [ 182.752984][ T6616] should_fail_alloc_page+0xeb/0x140 [ 182.753005][ T6616] prepare_alloc_pages+0x1f0/0x5b0 [ 182.753025][ T6616] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 182.753052][ T6616] ? prepare_alloc_pages+0x191/0x5b0 [ 182.753068][ T6616] ? is_bpf_text_address+0x94/0x1a0 [ 182.753090][ T6616] ? rcu_is_watching+0x13/0xc0 [ 182.753112][ T6616] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 182.753137][ T6616] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 182.753164][ T6616] ? stack_trace_save+0x8e/0xc0 [ 182.753187][ T6616] ? __pfx_stack_trace_save+0x10/0x10 [ 182.753207][ T6616] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 182.753230][ T6616] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 182.753252][ T6616] ? is_bpf_text_address+0x94/0x1a0 [ 182.753274][ T6616] ? kasan_save_track+0x14/0x30 [ 182.753290][ T6616] ? __kasan_slab_alloc+0x89/0x90 [ 182.753306][ T6616] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 182.753345][ T6616] ? alloc_vmap_area+0x640/0x2bb0 [ 182.753360][ T6616] ? __get_vm_area_node+0x1ed/0x350 [ 182.753377][ T6616] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 182.753399][ T6616] ? __vmalloc_node_noprof+0xad/0xf0 [ 182.753416][ T6616] ? __vmalloc_noprof+0xa3/0x120 [ 182.753432][ T6616] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 182.753449][ T6616] ? bpf_prog_alloc+0x3b/0x200 [ 182.753464][ T6616] ? bpf_prog_load+0x49e/0x2a80 [ 182.753482][ T6616] ? __sys_bpf+0x1f46/0x4a30 [ 182.753494][ T6616] ? __x64_sys_bpf+0xce/0x140 [ 182.753507][ T6616] ? do_syscall_64+0x123/0x790 [ 182.753527][ T6616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.753548][ T6616] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 182.753575][ T6616] ? policy_nodemask+0xed/0x4f0 [ 182.753597][ T6616] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 182.753631][ T6616] __kasan_populate_vmalloc+0xf0/0x210 [ 182.753650][ T6616] alloc_vmap_area+0x95d/0x2bb0 [ 182.753672][ T6616] ? kasan_save_track+0x14/0x30 [ 182.753687][ T6616] ? __kasan_kmalloc+0xaa/0xb0 [ 182.753702][ T6616] ? __pfx_alloc_vmap_area+0x10/0x10 [ 182.753719][ T6616] ? __get_vm_area_node+0x124/0x350 [ 182.753739][ T6616] __get_vm_area_node+0x1ed/0x350 [ 182.753759][ T6616] __vmalloc_node_range_noprof+0x268/0x1420 [ 182.753778][ T6616] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 182.753798][ T6616] ? up_write+0x2dc/0x5b0 [ 182.753818][ T6616] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 182.753836][ T6616] ? lock_acquire+0x1d1/0x380 [ 182.753852][ T6616] ? find_held_lock+0x2b/0x80 [ 182.753872][ T6616] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 182.753890][ T6616] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 182.753976][ T6616] ? avc_has_perm_noaudit+0x145/0x3b0 [ 182.753999][ T6616] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 182.754019][ T6616] __vmalloc_node_noprof+0xad/0xf0 [ 182.754040][ T6616] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 182.754061][ T6616] __vmalloc_noprof+0xa3/0x120 [ 182.754081][ T6616] ? __pfx___vmalloc_noprof+0x10/0x10 [ 182.754102][ T6616] ? rcu_is_watching+0x13/0xc0 [ 182.754123][ T6616] ? cap_capable+0x107/0x430 [ 182.754149][ T6616] bpf_prog_alloc_no_stats+0x59/0x690 [ 182.754168][ T6616] ? security_capable+0x80/0x260 [ 182.754193][ T6616] bpf_prog_alloc+0x3b/0x200 [ 182.754210][ T6616] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 182.754230][ T6616] bpf_prog_load+0x49e/0x2a80 [ 182.754256][ T6616] ? __pfx_bpf_prog_load+0x10/0x10 [ 182.754295][ T6616] __sys_bpf+0x1f46/0x4a30 [ 182.754316][ T6616] ? __pfx___sys_bpf+0x10/0x10 [ 182.754330][ T6616] ? find_held_lock+0x2b/0x80 [ 182.754353][ T6616] ? get_pid_task+0xfc/0x250 [ 182.754375][ T6616] ? get_pid_task+0xfc/0x250 [ 182.754402][ T6616] ? find_held_lock+0x2b/0x80 [ 182.754437][ T6616] ? rcu_read_lock_any_held+0x6a/0x90 [ 182.754462][ T6616] ? find_held_lock+0x2b/0x80 [ 182.754484][ T6616] ? ksys_write+0x190/0x250 [ 182.754500][ T6616] ? ksys_write+0x190/0x250 [ 182.754518][ T6616] ? lock_acquire+0x1d1/0x380 [ 182.754549][ T6616] ? fput+0x7c/0x100 [ 182.754569][ T6616] ? ksys_write+0x1ac/0x250 [ 182.754586][ T6616] ? __x64_sys_bpf+0xce/0x140 [ 182.754601][ T6616] __x64_sys_bpf+0xce/0x140 [ 182.754619][ T6616] ? do_syscall_64+0xae/0x790 [ 182.754639][ T6616] do_syscall_64+0x123/0x790 [ 182.754661][ T6616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.754678][ T6616] RIP: 0033:0x7fadf279e159 [ 182.754696][ T6616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.754711][ T6616] RSP: 002b:00007fadf36a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.754730][ T6616] RAX: ffffffffffffffda RBX: 00007fadf2a25fa0 RCX: 00007fadf279e159 [ 182.754741][ T6616] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 182.754750][ T6616] RBP: 00007fadf36a0090 R08: 0000000000000000 R09: 0000000000000000 [ 182.754760][ T6616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.754769][ T6616] R13: 00007fadf2a26038 R14: 00007fadf2a25fa0 R15: 00007ffd31e37938 [ 182.754791][ T6616] [ 182.755252][ T6616] syz.1.232: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 182.755373][ T6616] CPU: 3 UID: 0 PID: 6616 Comm: syz.1.232 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.755396][ T6616] Tainted: [L]=SOFTLOCKUP [ 182.755403][ T6616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.755413][ T6616] Call Trace: [ 182.755419][ T6616] [ 182.755426][ T6616] dump_stack_lvl+0x100/0x190 [ 182.755460][ T6616] warn_alloc.cold+0x9e/0xb2 [ 182.755479][ T6616] ? __pfx_warn_alloc+0x10/0x10 [ 182.755503][ T6616] ? lockdep_hardirqs_on+0x7d/0x110 [ 182.755526][ T6616] ? __get_vm_area_node+0x2f0/0x350 [ 182.755550][ T6616] ? __get_vm_area_node+0x22b/0x350 [ 182.755587][ T6616] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 182.755612][ T6616] ? up_write+0x2dc/0x5b0 [ 182.755635][ T6616] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 182.755656][ T6616] ? lock_acquire+0x1d1/0x380 [ 182.755673][ T6616] ? find_held_lock+0x2b/0x80 [ 182.755695][ T6616] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 182.755715][ T6616] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 182.755739][ T6616] ? avc_has_perm_noaudit+0x145/0x3b0 [ 182.755761][ T6616] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 182.755780][ T6616] __vmalloc_node_noprof+0xad/0xf0 [ 182.755800][ T6616] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 182.755821][ T6616] __vmalloc_noprof+0xa3/0x120 [ 182.755924][ T6616] ? __pfx___vmalloc_noprof+0x10/0x10 [ 182.755949][ T6616] ? rcu_is_watching+0x13/0xc0 [ 182.755972][ T6616] ? cap_capable+0x107/0x430 [ 182.755999][ T6616] bpf_prog_alloc_no_stats+0x59/0x690 [ 182.756020][ T6616] ? security_capable+0x80/0x260 [ 182.756111][ T6616] bpf_prog_alloc+0x3b/0x200 [ 182.756131][ T6616] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 182.756152][ T6616] bpf_prog_load+0x49e/0x2a80 [ 182.756179][ T6616] ? __pfx_bpf_prog_load+0x10/0x10 [ 182.756218][ T6616] __sys_bpf+0x1f46/0x4a30 [ 182.756240][ T6616] ? __pfx___sys_bpf+0x10/0x10 [ 182.756255][ T6616] ? find_held_lock+0x2b/0x80 [ 182.756281][ T6616] ? get_pid_task+0xfc/0x250 [ 182.756301][ T6616] ? get_pid_task+0xfc/0x250 [ 182.756329][ T6616] ? find_held_lock+0x2b/0x80 [ 182.756355][ T6616] ? rcu_read_lock_any_held+0x6a/0x90 [ 182.756409][ T6616] ? find_held_lock+0x2b/0x80 [ 182.756433][ T6616] ? ksys_write+0x190/0x250 [ 182.756451][ T6616] ? ksys_write+0x190/0x250 [ 182.756469][ T6616] ? lock_acquire+0x1d1/0x380 [ 182.756504][ T6616] ? fput+0x7c/0x100 [ 182.756529][ T6616] ? ksys_write+0x1ac/0x250 [ 182.756551][ T6616] ? __x64_sys_bpf+0xce/0x140 [ 182.756569][ T6616] __x64_sys_bpf+0xce/0x140 [ 182.756590][ T6616] ? do_syscall_64+0xae/0x790 [ 182.756617][ T6616] do_syscall_64+0x123/0x790 [ 182.756644][ T6616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.756667][ T6616] RIP: 0033:0x7fadf279e159 [ 182.756687][ T6616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.756706][ T6616] RSP: 002b:00007fadf36a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.756729][ T6616] RAX: ffffffffffffffda RBX: 00007fadf2a25fa0 RCX: 00007fadf279e159 [ 182.756743][ T6616] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 182.756755][ T6616] RBP: 00007fadf36a0090 R08: 0000000000000000 R09: 0000000000000000 [ 182.756768][ T6616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.756781][ T6616] R13: 00007fadf2a26038 R14: 00007fadf2a25fa0 R15: 00007ffd31e37938 [ 182.756810][ T6616] [ 182.774832][ T6616] Mem-Info: [ 182.774851][ T6616] active_anon:9391 inactive_anon:50 isolated_anon:0 [ 182.774851][ T6616] active_file:1555 inactive_file:60075 isolated_file:0 [ 182.774851][ T6616] unevictable:1000 dirty:303 writeback:0 [ 182.774851][ T6616] slab_reclaimable:8879 slab_unreclaimable:65671 [ 182.774851][ T6616] mapped:25110 shmem:1559 pagetables:1239 [ 182.774851][ T6616] sec_pagetables:298 bounce:0 [ 182.774851][ T6616] kernel_misc_reclaimable:0 [ 182.774851][ T6616] free:460422 free_pcp:11235 free_cma:0 [ 182.774888][ T6616] Node 0 active_anon:37560kB inactive_anon:200kB active_file:6220kB inactive_file:221396kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:100120kB dirty:920kB writeback:0kB shmem:4232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13280kB pagetables:4760kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 182.774927][ T6616] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:18904kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:320kB dirty:292kB writeback:0kB shmem:2004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 182.774962][ T6616] Node 0 DMA free:13168kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:8kB free_cma:0kB [ 182.775003][ T6616] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 182.775028][ T6616] Node 0 DMA32 free:205464kB boost:0kB min:27360kB low:34200kB high:41040kB reserved_highatomic:0kB free_highatomic:0kB active_anon:37560kB inactive_anon:200kB active_file:6220kB inactive_file:219580kB unevictable:2000kB writepending:920kB zspages:0kB present:2080628kB managed:1252920kB mlocked:0kB bounce:0kB free_pcp:34772kB local_pcp:3912kB free_cma:0kB [ 182.775068][ T6616] lowmem_reserve[]: 0 0 0 0 0 [ 182.775091][ T6616] Node 1 Normal free:1623056kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:18904kB unevictable:2000kB writepending:292kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:10044kB local_pcp:0kB free_cma:0kB [ 182.775130][ T6616] lowmem_reserve[]: 0 0 0 0 0 [ 182.775152][ T6616] Node 0 DMA: 16*4kB (UM) 14*8kB (UM) 12*16kB (UME) 14*32kB (UME) 15*64kB (UME) 9*128kB (UME) 8*256kB (UME) 4*512kB (ME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 13168kB [ 182.775265][ T6616] Node 0 DMA32: 1687*4kB (UME) 1243*8kB (UME) 770*16kB (UME) 368*32kB (UME) 363*64kB (UME) 109*128kB (UME) 114*256kB (UME) 74*512kB (ME) 35*1024kB (M) 10*2048kB (UM) 1*4096kB (U) = 205460kB [ 182.775370][ T6616] Node 1 Normal: 588*4kB (UME) 146*8kB (UM) 117*16kB (UME) 124*32kB (UME) 106*64kB (UME) 68*128kB (UME) 45*256kB (UME) 39*512kB (UME) 22*1024kB (UM) 14*2048kB (ME) 370*4096kB (UM) = 1623056kB [ 182.775537][ T6616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.775578][ T6616] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 182.775590][ T6616] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.775602][ T6616] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 182.775615][ T6616] 63185 total pagecache pages [ 182.775620][ T6616] 0 pages in swap cache [ 182.775625][ T6616] Free swap = 124996kB [ 182.775631][ T6616] Total swap = 124996kB [ 182.775637][ T6616] 1048443 pages RAM [ 182.775642][ T6616] 0 pages HighMem/MovableOnly [ 182.775647][ T6616] 285903 pages reserved [ 182.775652][ T6616] 0 pages cma reserved [ 182.796310][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 182.827749][ T9] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 182.829791][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.829832][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.829859][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 182.829905][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.832630][ T9] usb 7-1: config 0 descriptor?? [ 183.135393][ T31] usb 5-1: USB disconnect, device number 3 [ 183.138528][ T31] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 183.139120][ T31] opticon 5-1:1.0: device disconnected [ 183.385165][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0004/input/input8 [ 183.646854][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0004/input/input9 [ 183.687981][ T6622] openvswitch: netlink: Missing key (keys=40, expected=100) [ 183.786951][ T9] kye 0003:0458:5011.0004: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 183.874085][ T9] usb 7-1: USB disconnect, device number 10 [ 184.452473][ T6640] fido_id[6640]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/7-1/report_descriptor': No such file or directory [ 185.440320][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 185.440342][ T43] audit: type=1400 audit(1789177892.879:467): avc: denied { create } for pid=6663 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.440849][ T43] audit: type=1400 audit(1789177892.879:468): avc: denied { write } for pid=6663 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.443710][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 185.533251][ T6669] FAULT_INJECTION: forcing a failure. [ 185.533251][ T6669] name failslab, interval 1, probability 0, space 0, times 0 [ 185.533286][ T6669] CPU: 0 UID: 0 PID: 6669 Comm: syz.0.247 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.533312][ T6669] Tainted: [L]=SOFTLOCKUP [ 185.533375][ T6669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.533386][ T6669] Call Trace: [ 185.533394][ T6669] [ 185.533402][ T6669] dump_stack_lvl+0x100/0x190 [ 185.533437][ T6669] should_fail_ex.cold+0x5/0xa [ 185.533464][ T6669] should_failslab+0xc2/0x120 [ 185.533489][ T6669] __kmalloc_noprof+0xfc/0x840 [ 185.533508][ T6669] ? rcu_is_watching+0x13/0xc0 [ 185.533533][ T6669] ? tomoyo_realpath_from_path+0xb6/0x690 [ 185.533562][ T6669] tomoyo_realpath_from_path+0xb6/0x690 [ 185.533590][ T6669] tomoyo_mount_acl+0x1b6/0x8b0 [ 185.533608][ T6669] ? is_bpf_text_address+0x8a/0x1a0 [ 185.533640][ T6669] ? is_bpf_text_address+0x8a/0x1a0 [ 185.533701][ T6669] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 185.533735][ T6669] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 185.533755][ T6669] ? kernel_text_address+0x8d/0x100 [ 185.533784][ T6669] ? unwind_get_return_address+0x59/0xa0 [ 185.533811][ T6669] ? arch_stack_walk+0xa6/0xf0 [ 185.533838][ T6669] ? __lock_acquire+0x5c0/0x1f40 [ 185.533870][ T6669] ? tomoyo_mount_permission+0x1f6/0x460 [ 185.533894][ T6669] ? tomoyo_domain+0xb2/0x150 [ 185.533917][ T6669] ? tomoyo_profile+0x47/0x60 [ 185.533945][ T6669] tomoyo_mount_permission+0x214/0x460 [ 185.533966][ T6669] ? tomoyo_mount_permission+0x1f6/0x460 [ 185.533988][ T6669] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 185.534026][ T6669] security_sb_mount+0xdd/0x270 [ 185.534057][ T6669] path_mount+0x158/0x24c0 [ 185.534090][ T6669] ? __pfx_path_mount+0x10/0x10 [ 185.534115][ T6669] ? lockdep_hardirqs_on+0x7d/0x110 [ 185.534139][ T6669] ? putname+0xb1/0x110 [ 185.534158][ T6669] ? kmem_cache_free+0x127/0x6c0 [ 185.534189][ T6669] ? __x64_sys_mount+0x293/0x310 [ 185.534290][ T6669] __x64_sys_mount+0x293/0x310 [ 185.534319][ T6669] ? __pfx___x64_sys_mount+0x10/0x10 [ 185.534356][ T6669] do_syscall_64+0x123/0x790 [ 185.534384][ T6669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.534405][ T6669] RIP: 0033:0x7f6949b9e159 [ 185.534422][ T6669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.534437][ T6669] RSP: 002b:00007f694a9a3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 185.534456][ T6669] RAX: ffffffffffffffda RBX: 00007f6949e25fa0 RCX: 00007f6949b9e159 [ 185.534469][ T6669] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000000 [ 185.534479][ T6669] RBP: 00007f694a9a3090 R08: 0000200000000000 R09: 0000000000000000 [ 185.534489][ T6669] R10: 0000000001084022 R11: 0000000000000246 R12: 0000000000000001 [ 185.534499][ T6669] R13: 00007f6949e26038 R14: 00007f6949e25fa0 R15: 00007fff4987c138 [ 185.534522][ T6669] [ 185.534628][ T6669] ERROR: Out of memory at tomoyo_realpath_from_path. [ 185.534865][ T43] audit: type=1400 audit(1789177892.973:469): avc: denied { mount } for pid=6668 comm="syz.0.247" name="/" dev="hugetlbfs" ino=13625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 185.584955][ T43] audit: type=1400 audit(1789177893.001:470): avc: denied { unmount } for pid=5764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 185.606946][ T9] usb 7-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 185.607919][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 185.607951][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.611154][ T6657] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 185.612927][ T9] opticon 7-1:1.0: opticon converter detected [ 185.621717][ T9] usb 7-1: opticon converter now attached to ttyUSB0 [ 186.026196][ T6681] tipc: Started in network mode [ 186.026223][ T6681] tipc: Node identity 1000001, cluster identity 4497 [ 186.026237][ T6681] tipc: Node number set to 16777217 [ 186.127348][ T43] audit: type=1400 audit(1789177893.506:471): avc: denied { ioctl } for pid=6677 comm="syz.3.251" path="/dev/usbmon0" dev="devtmpfs" ino=736 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 186.193307][ T6679] tipc: New replicast peer: 127.0.0.1 [ 186.206432][ T6679] tipc: Enabled bearer , priority 10 [ 186.340323][ T43] audit: type=1400 audit(1789177893.712:472): avc: denied { write } for pid=6683 comm="syz.1.252" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 186.423541][ T43] audit: type=1400 audit(1789177893.796:473): avc: denied { write } for pid=6683 comm="syz.1.252" name="/" dev="9p" ino=76573331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.426425][ T43] audit: type=1400 audit(1789177893.796:474): avc: denied { add_name } for pid=6683 comm="syz.1.252" name="cpuset.effective_mems" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.426484][ T43] audit: type=1400 audit(1789177893.796:475): avc: denied { create } for pid=6683 comm="syz.1.252" name="cpuset.effective_mems" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 186.426530][ T43] audit: type=1400 audit(1789177893.796:476): avc: denied { associate } for pid=6683 comm="syz.1.252" name="cpuset.effective_mems" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 186.722661][ T6688] FAULT_INJECTION: forcing a failure. [ 186.722661][ T6688] name failslab, interval 1, probability 0, space 0, times 0 [ 186.722695][ T6688] CPU: 3 UID: 0 PID: 6688 Comm: syz.0.253 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.722720][ T6688] Tainted: [L]=SOFTLOCKUP [ 186.722727][ T6688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.722737][ T6688] Call Trace: [ 186.722743][ T6688] [ 186.722750][ T6688] dump_stack_lvl+0x100/0x190 [ 186.722782][ T6688] should_fail_ex.cold+0x5/0xa [ 186.722808][ T6688] should_failslab+0xc2/0x120 [ 186.722832][ T6688] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 186.722852][ T6688] ? __alloc_skb+0x5b7/0x710 [ 186.722874][ T6688] ? __alloc_skb+0x140/0x710 [ 186.722895][ T6688] __alloc_skb+0x140/0x710 [ 186.722914][ T6688] ? __alloc_skb+0x5b7/0x710 [ 186.722932][ T6688] ? __pfx___alloc_skb+0x10/0x10 [ 186.722958][ T6688] netlink_ack+0x117/0xb80 [ 186.722984][ T6688] netlink_rcv_skb+0x333/0x420 [ 186.723004][ T6688] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 186.723049][ T6688] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.723077][ T6688] ? netlink_deliver_tap+0x1ae/0xcc0 [ 186.723112][ T6688] netlink_unicast+0x585/0x850 [ 186.723134][ T6688] ? __pfx_netlink_unicast+0x10/0x10 [ 186.723160][ T6688] netlink_sendmsg+0x8b0/0xda0 [ 186.723184][ T6688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.723213][ T6688] ? selinux_socket_sendmsg+0x198/0x2f0 [ 186.723246][ T6688] ____sys_sendmsg+0xa4d/0xbe0 [ 186.723269][ T6688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.723291][ T6688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.723321][ T6688] ? lock_acquire+0x1d1/0x380 [ 186.723340][ T6688] ? get_pid_task+0x2a/0x250 [ 186.723367][ T6688] ___sys_sendmsg+0x190/0x1e0 [ 186.723394][ T6688] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.723420][ T6688] ? get_pid_task+0x106/0x250 [ 186.723451][ T6688] ? find_held_lock+0x2b/0x80 [ 186.723491][ T6688] __sys_sendmsg+0x160/0x210 [ 186.723511][ T6688] ? __pfx___sys_sendmsg+0x10/0x10 [ 186.723547][ T6688] do_syscall_64+0x123/0x790 [ 186.723573][ T6688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.723593][ T6688] RIP: 0033:0x7f6949b9e159 [ 186.723608][ T6688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.723624][ T6688] RSP: 002b:00007f694a9a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.723644][ T6688] RAX: ffffffffffffffda RBX: 00007f6949e25fa0 RCX: 00007f6949b9e159 [ 186.723655][ T6688] RDX: 0000000004000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 186.723666][ T6688] RBP: 00007f694a9a3090 R08: 0000000000000000 R09: 0000000000000000 [ 186.723676][ T6688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.723687][ T6688] R13: 00007f6949e26038 R14: 00007f6949e25fa0 R15: 00007fff4987c138 [ 186.723713][ T6688] [ 187.176975][ T6694] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 187.211559][ T6696] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 187.568405][ T6700] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 187.568442][ T6700] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.575828][ T6700] vhci_hcd vhci_hcd.0: Device attached [ 187.628904][ T6700] hugetlbfs: Unknown parameter 'us·quota_inode_hardlimit' [ 187.817461][ T6702] vhci_hcd: connection closed [ 187.854222][ T5828] vhci_hcd vhci_hcd.3: stop threads [ 187.855320][ T5828] vhci_hcd vhci_hcd.3: release socket [ 187.856247][ T5828] vhci_hcd vhci_hcd.3: disconnect device [ 187.889711][ T31] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 187.890707][ T31] usb 43-1: enqueue for inactive port 0 [ 187.966379][ T31] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 188.202995][ T6708] bond0: option slaves: interface -v does not exist! [ 188.636381][ T6711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.275605][ T6730] input: syz0 as /devices/virtual/input/input10 [ 189.849693][ T6735] xt_CT: No such helper "snmp_trap" [ 190.024460][ T6740] FAULT_INJECTION: forcing a failure. [ 190.024460][ T6740] name failslab, interval 1, probability 0, space 0, times 0 [ 190.024498][ T6740] CPU: 3 UID: 0 PID: 6740 Comm: syz.3.269 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.024523][ T6740] Tainted: [L]=SOFTLOCKUP [ 190.024529][ T6740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.024538][ T6740] Call Trace: [ 190.024545][ T6740] [ 190.024552][ T6740] dump_stack_lvl+0x100/0x190 [ 190.024584][ T6740] should_fail_ex.cold+0x5/0xa [ 190.024608][ T6740] should_failslab+0xc2/0x120 [ 190.024631][ T6740] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 190.024654][ T6740] ? key_alloc+0x423/0x1310 [ 190.024679][ T6740] kmemdup_noprof+0x29/0x60 [ 190.024709][ T6740] key_alloc+0x423/0x1310 [ 190.024734][ T6740] ? __kmalloc_noprof+0x350/0x840 [ 190.024752][ T6740] ? __pfx_key_alloc+0x10/0x10 [ 190.024775][ T6740] ? hook_cred_prepare+0x177/0x370 [ 190.024800][ T6740] keyring_alloc+0x44/0xc0 [ 190.024825][ T6740] lookup_user_key+0x9b8/0x1300 [ 190.024846][ T6740] ? __pfx_lookup_user_key+0x10/0x10 [ 190.024862][ T6740] ? do_futex+0x190/0x440 [ 190.024887][ T6740] ? __pfx_do_futex+0x10/0x10 [ 190.024914][ T6740] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 190.024947][ T6740] ? fput+0x7c/0x100 [ 190.024969][ T6740] ? __pfx___x64_sys_futex+0x10/0x10 [ 190.024995][ T6740] keyctl_keyring_move+0x48/0x150 [ 190.025022][ T6740] __do_sys_keyctl+0x21d/0x5a0 [ 190.025050][ T6740] do_syscall_64+0x123/0x790 [ 190.025077][ T6740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.025097][ T6740] RIP: 0033:0x7f0a4059e159 [ 190.025122][ T6740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.025141][ T6740] RSP: 002b:00007f0a414e4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 190.025161][ T6740] RAX: ffffffffffffffda RBX: 00007f0a40825fa0 RCX: 00007f0a4059e159 [ 190.025174][ T6740] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 000000000000001e [ 190.025185][ T6740] RBP: 00007f0a4063503b R08: 0000000000000000 R09: 0000000000000000 [ 190.025196][ T6740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.025207][ T6740] R13: 00007f0a40826038 R14: 00007f0a40825fa0 R15: 00007ffc7c53ca78 [ 190.025232][ T6740] [ 190.155852][ T6745] FAULT_INJECTION: forcing a failure. [ 190.155852][ T6745] name failslab, interval 1, probability 0, space 0, times 0 [ 190.155885][ T6745] CPU: 1 UID: 0 PID: 6745 Comm: syz.0.271 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.155911][ T6745] Tainted: [L]=SOFTLOCKUP [ 190.155918][ T6745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.155928][ T6745] Call Trace: [ 190.155935][ T6745] [ 190.155942][ T6745] dump_stack_lvl+0x100/0x190 [ 190.155973][ T6745] should_fail_ex.cold+0x5/0xa [ 190.177130][ T6745] should_failslab+0xc2/0x120 [ 190.177170][ T6745] __kmalloc_noprof+0xfc/0x840 [ 190.177193][ T6745] ? rcu_is_watching+0x13/0xc0 [ 190.177225][ T6745] ? tomoyo_realpath_from_path+0xb6/0x690 [ 190.177262][ T6745] tomoyo_realpath_from_path+0xb6/0x690 [ 190.177299][ T6745] tomoyo_path_number_perm+0x23c/0x580 [ 190.177335][ T6745] ? tomoyo_path_number_perm+0x22e/0x580 [ 190.177374][ T6745] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 190.177412][ T6745] ? check_prev_add+0xfe/0xe60 [ 190.177435][ T6745] ? check_prev_add+0xfe/0xe60 [ 190.177466][ T6745] ? __lock_acquire+0x5c0/0x1f40 [ 190.177511][ T6745] ? current_check_access_path+0x262/0x420 [ 190.177547][ T6745] ? __pfx_current_check_access_path+0x10/0x10 [ 190.177583][ T6745] ? d_alloc_parallel+0x9f6/0x14c0 [ 190.177618][ T6745] tomoyo_path_mknod+0x164/0x190 [ 190.177650][ T6745] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 190.177685][ T6745] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 190.177719][ T6745] security_path_mknod+0x161/0x300 [ 190.177755][ T6745] may_o_create+0x30/0x3a0 [ 190.177797][ T6745] lookup_open+0xe35/0x1990 [ 190.177847][ T6745] path_openat+0xa2c/0x2440 [ 190.177882][ T6745] ? __pfx_path_openat+0x10/0x10 [ 190.177922][ T6745] do_file_open+0x20e/0x430 [ 190.177955][ T6745] ? __pfx_do_file_open+0x10/0x10 [ 190.178010][ T6745] ? _raw_spin_unlock+0x28/0x50 [ 190.178038][ T6745] ? alloc_fd+0x471/0x7a0 [ 190.178087][ T6745] do_sys_openat2+0x10f/0x1e0 [ 190.178121][ T6745] ? __pfx_do_sys_openat2+0x10/0x10 [ 190.178155][ T6745] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 190.178189][ T6745] ? __fget_files+0x21f/0x3d0 [ 190.178225][ T6745] __x64_sys_openat+0x12d/0x210 [ 190.178255][ T6745] ? __pfx___x64_sys_openat+0x10/0x10 [ 190.178278][ T6745] ? ksys_write+0x1ac/0x250 [ 190.178306][ T6745] do_syscall_64+0x123/0x790 [ 190.178334][ T6745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.178353][ T6745] RIP: 0033:0x7f6949b9e159 [ 190.178370][ T6745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.178388][ T6745] RSP: 002b:00007f694a9a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 190.178407][ T6745] RAX: ffffffffffffffda RBX: 00007f6949e25fa0 RCX: 00007f6949b9e159 [ 190.178419][ T6745] RDX: 00000000001cb842 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 190.178431][ T6745] RBP: 00007f694a9a3090 R08: 0000000000000000 R09: 0000000000000000 [ 190.178443][ T6745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.178454][ T6745] R13: 00007f6949e26038 R14: 00007f6949e25fa0 R15: 00007fff4987c138 [ 190.178481][ T6745] [ 190.191158][ T6745] ERROR: Out of memory at tomoyo_realpath_from_path. [ 190.534968][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 190.576303][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 190.578085][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 190.593715][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 190.619961][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 190.648089][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 190.653663][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 190.722044][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 190.798013][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 190.805679][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 190.894208][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 190.942548][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 190.943948][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 190.979433][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 190.980543][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 190.985971][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 190.992618][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 191.044618][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 191.073605][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 191.077783][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 191.081242][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 191.096603][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 191.112864][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 191.120369][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 191.129588][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 191.141393][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 191.153416][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 191.157849][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 191.167888][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 191.171042][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 191.172512][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 191.186858][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 191.192180][ T6751] zonefs (nbd3) ERROR: Not a zoned block device [ 191.515449][ T5902] usb 7-1: USB disconnect, device number 11 [ 191.521928][ T5902] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 191.563580][ T5902] opticon 7-1:1.0: device disconnected [ 192.065513][ T6777] FAULT_INJECTION: forcing a failure. [ 192.065513][ T6777] name failslab, interval 1, probability 0, space 0, times 0 [ 192.065554][ T6777] CPU: 1 UID: 0 PID: 6777 Comm: syz.1.282 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.065583][ T6777] Tainted: [L]=SOFTLOCKUP [ 192.065591][ T6777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.065603][ T6777] Call Trace: [ 192.065610][ T6777] [ 192.065619][ T6777] dump_stack_lvl+0x100/0x190 [ 192.065655][ T6777] should_fail_ex.cold+0x5/0xa [ 192.065686][ T6777] should_failslab+0xc2/0x120 [ 192.065711][ T6777] __kmalloc_noprof+0xfc/0x840 [ 192.065734][ T6777] ? lsm_blob_alloc+0x68/0x90 [ 192.065767][ T6777] lsm_blob_alloc+0x68/0x90 [ 192.065798][ T6777] security_prepare_creds+0x2d/0x290 [ 192.065824][ T6777] prepare_creds+0x5d6/0x950 [ 192.065847][ T6777] join_session_keyring+0x17/0x350 [ 192.065869][ T6777] lookup_user_key+0xbf9/0x1300 [ 192.065892][ T6777] ? __pfx_lookup_user_key+0x10/0x10 [ 192.065917][ T6777] ? lock_acquire+0x1d1/0x380 [ 192.065941][ T6777] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 192.065986][ T6777] __do_sys_add_key+0x2a6/0x460 [ 192.066016][ T6777] ? __pfx___do_sys_add_key+0x10/0x10 [ 192.066050][ T6777] do_syscall_64+0x123/0x790 [ 192.066078][ T6777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.066097][ T6777] RIP: 0033:0x7fadf279e159 [ 192.066114][ T6777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.066133][ T6777] RSP: 002b:00007fadf36a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 192.066154][ T6777] RAX: ffffffffffffffda RBX: 00007fadf2a25fa0 RCX: 00007fadf279e159 [ 192.066168][ T6777] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 192.066181][ T6777] RBP: 00007fadf283503b R08: fffffffffffffffd R09: 0000000000000000 [ 192.066194][ T6777] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 192.066206][ T6777] R13: 00007fadf2a26038 R14: 00007fadf2a25fa0 R15: 00007ffd31e37938 [ 192.066234][ T6777] [ 192.557057][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 192.557078][ T43] audit: type=1400 audit(1789177899.532:491): avc: denied { map } for pid=6780 comm="syz.1.283" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 192.620844][ T6785] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 192.621554][ T43] audit: type=1400 audit(1789177899.598:492): avc: denied { unmount } for pid=5753 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 192.860457][ T6798] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 193.245086][ T5902] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 193.404644][ T5902] usb 8-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 193.406029][ T5902] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 193.406078][ T5902] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.413364][ T6804] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 193.422059][ T5902] opticon 8-1:1.0: opticon converter detected [ 193.454474][ T5902] usb 8-1: opticon converter now attached to ttyUSB0 [ 194.708589][ T5148] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 194.868964][ T5148] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 194.870972][ T5148] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 194.871009][ T5148] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 194.871033][ T5148] usb 6-1: config 0 interface 0 has no altsetting 0 [ 194.895403][ T5148] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 194.895521][ T5148] usb 6-1: Product: syz [ 194.895540][ T5148] usb 6-1: Manufacturer: syz [ 194.895552][ T5148] usb 6-1: SerialNumber: syz [ 194.924584][ T5148] usb 6-1: config 0 descriptor?? [ 194.932032][ T6826] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 194.999640][ T5148] usb 6-1: selecting invalid altsetting 0 [ 195.016259][ T6837] syzkaller0: entered promiscuous mode [ 195.016352][ T6837] syzkaller0: entered allmulticast mode [ 195.122138][ T6832] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.298/6832 [ 195.122159][ T6832] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 195.122198][ T6832] CPU: 0 UID: 0 PID: 6832 Comm: syz.0.298 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.122229][ T6832] Tainted: [L]=SOFTLOCKUP [ 195.122235][ T6832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.122244][ T6832] Call Trace: [ 195.122249][ T6832] [ 195.122255][ T6832] dump_stack_lvl+0x100/0x190 [ 195.122279][ T6832] check_preemption_disabled+0xd2/0xe0 [ 195.122302][ T6832] ? tun_queue_purge+0x1ee/0x340 [ 195.122316][ T6832] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 195.122337][ T6832] ? tun_queue_purge+0x1ee/0x340 [ 195.122350][ T6832] trace_kfree_skb+0x18b/0x230 [ 195.122371][ T6832] sk_skb_reason_drop+0xb7/0x1b0 [ 195.122389][ T6832] tun_queue_purge+0x1ee/0x340 [ 195.122407][ T6832] __tun_detach+0xb70/0x1850 [ 195.122426][ T6832] ? __pfx_tun_chr_close+0x10/0x10 [ 195.122440][ T6832] ? __pfx_tun_chr_fasync+0x10/0x10 [ 195.122459][ T6832] tun_chr_close+0xc2/0x220 [ 195.122475][ T6832] ? __pfx_tun_chr_close+0x10/0x10 [ 195.122492][ T6832] __fput+0x3ff/0xb50 [ 195.122524][ T6832] task_work_run+0x150/0x240 [ 195.122547][ T6832] ? __pfx_task_work_run+0x10/0x10 [ 195.122574][ T6832] exit_to_user_mode_loop+0x1d8/0x700 [ 195.122593][ T6832] ? rcu_is_watching+0x13/0xc0 [ 195.122614][ T6832] do_syscall_64+0x661/0x790 [ 195.122637][ T6832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.122655][ T6832] RIP: 0033:0x7f6949b9e159 [ 195.122670][ T6832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.122685][ T6832] RSP: 002b:00007fff4987c298 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 195.122703][ T6832] RAX: 0000000000000000 RBX: 00007f6949e27da0 RCX: 00007f6949b9e159 [ 195.122713][ T6832] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 195.122723][ T6832] RBP: 00007f6949e27da0 R08: 0000000000000006 R09: 0000000000000000 [ 195.122733][ T6832] R10: 00000000003ffcc8 R11: 0000000000000246 R12: 000000000002efb8 [ 195.122744][ T6832] R13: 00007f6949e2609c R14: 000000000002ed6d R15: 00007f6949e26090 [ 195.122769][ T6832] [ 195.126474][ T6832] BUG: using smp_processor_id() in preemptible [00000000] code: syz.0.298/6832 [ 195.126495][ T6832] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 195.126595][ T6832] CPU: 0 UID: 0 PID: 6832 Comm: syz.0.298 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.126617][ T6832] Tainted: [L]=SOFTLOCKUP [ 195.126624][ T6832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.126634][ T6832] Call Trace: [ 195.126640][ T6832] [ 195.126648][ T6832] dump_stack_lvl+0x100/0x190 [ 195.126677][ T6832] check_preemption_disabled+0xd2/0xe0 [ 195.126705][ T6832] ? tun_queue_purge+0x1ee/0x340 [ 195.126738][ T6832] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 195.126765][ T6832] ? tun_queue_purge+0x1ee/0x340 [ 195.126783][ T6832] trace_kfree_skb+0x18b/0x230 [ 195.126810][ T6832] sk_skb_reason_drop+0xb7/0x1b0 [ 195.126834][ T6832] tun_queue_purge+0x1ee/0x340 [ 195.126859][ T6832] __tun_detach+0xb70/0x1850 [ 195.126886][ T6832] ? __pfx_tun_chr_close+0x10/0x10 [ 195.126904][ T6832] ? __pfx_tun_chr_fasync+0x10/0x10 [ 195.126929][ T6832] tun_chr_close+0xc2/0x220 [ 195.126946][ T6832] ? __pfx_tun_chr_close+0x10/0x10 [ 195.126963][ T6832] __fput+0x3ff/0xb50 [ 195.126992][ T6832] task_work_run+0x150/0x240 [ 195.127021][ T6832] ? __pfx_task_work_run+0x10/0x10 [ 195.127057][ T6832] exit_to_user_mode_loop+0x1d8/0x700 [ 195.127079][ T6832] ? rcu_is_watching+0x13/0xc0 [ 195.127106][ T6832] do_syscall_64+0x661/0x790 [ 195.127142][ T6832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.127161][ T6832] RIP: 0033:0x7f6949b9e159 [ 195.127178][ T6832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.127195][ T6832] RSP: 002b:00007fff4987c298 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 195.127213][ T6832] RAX: 0000000000000000 RBX: 00007f6949e27da0 RCX: 00007f6949b9e159 [ 195.127225][ T6832] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 195.127235][ T6832] RBP: 00007f6949e27da0 R08: 0000000000000006 R09: 0000000000000000 [ 195.127246][ T6832] R10: 00000000003ffcc8 R11: 0000000000000246 R12: 000000000002efb8 [ 195.127257][ T6832] R13: 00007f6949e2609c R14: 000000000002ed6d R15: 00007f6949e26090 [ 195.127285][ T6832] [ 195.236651][ T6826] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 195.237283][ T6826] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 195.237802][ T6826] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 195.269753][ T6826] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 195.283684][ T6826] netlink: 88 bytes leftover after parsing attributes in process `syz.1.295'. [ 195.300291][ T43] audit: type=1400 audit(1789177902.087:493): avc: denied { write } for pid=6825 comm="syz.1.295" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 195.441717][ T5148] usb 6-1: USB disconnect, device number 9 [ 197.188877][ C1] tipc: RX(1000001): key[1] is activated [ 199.236917][ T5148] usb 8-1: USB disconnect, device number 3 [ 199.247705][ T5148] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 199.248341][ T5148] opticon 8-1:1.0: device disconnected