last executing test programs: 1.672885731s ago: executing program 0 (id=514): setns(0xc9, 0x40000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001280)={r2, 0x0, 0x25, 0x0, @val=@netkit}, 0x1c) mkdir(&(0x7f00000011c0)='./bus\x00', 0x10) chroot(&(0x7f0000001300)='./bus\x00') getcwd(&(0x7f0000001340)=""/181, 0xb5) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)={0x20, 0x0, 0x6a98047402e98331, 0x4070bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x28000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001600)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001640)={0x0, @rand_addr, @empty}, &(0x7f0000001680)=0xc) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000016c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000018c0)={'syztnl2\x00', &(0x7f0000001f00)={'tunl0\x00', 0x0, 0x40, 0x8, 0xfffffffb, 0x59, {{0x20, 0x4, 0x1, 0x6, 0x80, 0x65, 0x0, 0x8, 0x4, 0x0, @private=0xa010100, @loopback, {[@generic={0x7, 0x12, "99238f08405772c0572a7f232bae39ee"}, @rr={0x7, 0x13, 0xdb, [@local, @remote, @loopback, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x4, 0xac, 0x1, 0x9}, @generic={0x94, 0x7, "92c048c090"}, @noop, @ssrr={0x89, 0xb, 0xf4, [@private=0xa010102, @local]}, @ssrr={0x89, 0x7, 0x41, [@loopback]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0xa1, 0x3, 0x9, [{@empty, 0x40}, {@rand_addr=0x64010101, 0x9}, {@multicast1, 0x9}, {@private=0xa010102, 0x7}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001900)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001940)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="34000000100001042cbd70000080000000000000", @ANYRES32=r10, @ANYBLOB="018e00"], 0x34}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001a40)={@loopback, @local, 0x0}, &(0x7f0000001a80)=0xc) r12 = socket(0x10, 0x803, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000001ac0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)=@deltfilter={0x2c, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x1, 0xe}, {0xb, 0xffff}, {0x8, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0xffffff60}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001c80)={0x1a8, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x6880}, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000001400)='./md0\x00', 0x6180, 0x0) r15 = openat$md_node(0xffffffffffffff9c, &(0x7f0000001480)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r15, 0x40480923, &(0x7f00000014c0)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) ioctl$ADD_NEW_DISK(r15, 0x40140921, &(0x7f0000001ec0)={0x1, {0x1, 0x1}, 0x1, 0x6}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000012c0)={@cgroup=r1, r2, 0x2f, 0x0, 0x0, @void, @value=r2}, 0x20) 1.313146761s ago: executing program 0 (id=520): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0x20a201, 0x0) close(r7) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000e00)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000f80)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000fc0), 0x56) sendmsg$kcm(r6, &(0x7f0000001000)={&(0x7f0000001040)=@xdp={0x2c, 0x0, r8, 0x36}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001100)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000001140)="442ea407603a16ff", 0x300}], 0x2}, 0x20000085) 1.163281375s ago: executing program 0 (id=526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990007000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) 1.16320081s ago: executing program 0 (id=527): mkdirat(0xffffffffffffff9c, &(0x7f0000001140)='./proc\x00', 0x1a7) mount(0x0, &(0x7f0000001180)='./proc\x00', &(0x7f00000011c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000001200)='./proc/sys/net/ipv4/ping_group_range\x00', 0x800, 0x0) sendfile(r0, r0, 0x0, 0x5) 1.162929382s ago: executing program 0 (id=528): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000005c0)="d8001c000831cf64e59a180081064e81f782db44fd56170d", 0x18}], 0x1}, 0x8040) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000600)={r0, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0xdd) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/vmcoreinfo', 0x400, 0xe4) read$FUSE(r5, &(0x7f0000000800)={0x2020}, 0x2020) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r6, &(0x7f0000000740)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r7, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r7, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x501, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x11, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x5, 0x1, {0x22, 0x35e}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0xf0, 0x46}}}}}]}}]}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x48, r8, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @initial, {0x0, 0x95}}, @delba={0x3, 0x2, {{0x0, 0x1}, 0x1f, {0xbd, 0x6, @device_b}}}}}]}, 0x48}}, 0x0) 632.989576ms ago: executing program 3 (id=548): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f00001c7000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/keys\x00', 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$SG_IO(r1, 0x301, &(0x7f0000000080)={0x53, 0xfffffffffffffffd, 0x0, 0xad, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x21, 0x2, 0x0}) read$FUSE(r0, &(0x7f00000028c0)={0x2020}, 0x2020) 495.889253ms ago: executing program 3 (id=550): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 433.195264ms ago: executing program 3 (id=552): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000400)={0x60, 0x1, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0, 0x0, 0x7, 0x62, 0x19, 0x41, 0x1a}) 344.066117ms ago: executing program 1 (id=556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000fff534000480300001800b00010074617267657400002000028008000100534554000c00030000000000000004920800024000000001"], 0xfea1}}, 0x800) 343.94475ms ago: executing program 3 (id=557): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0x2b8, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 343.679693ms ago: executing program 3 (id=559): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@gettaction={0x30, 0x32, 0x89910f7975f42df, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}]}, 0x30}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000540)={0x8607}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r1, &(0x7f00000005c0)={0x2, 0x4e20, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000240)='.\x00', 0x60000526) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) 282.143944ms ago: executing program 2 (id=560): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./security\x00', &(0x7f00000001c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/ima/policy\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000240)={0x3, 0x20, 0x1}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x7b100f4f, 0xd, 0xe000, 0x12, 0x2, 0x0, 0x0, 0x100, 0x5}}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000380)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x44, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8db9}, {0x6, 0x11, 0x1}}]}, 0x44}}, 0x4000010) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x3a, 0x40, 0x0, 0x33fb8f1e734e4a0a) 281.310609ms ago: executing program 3 (id=561): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_80211_inject_frame(0x0, 0x0, 0x31) r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/wakeup_count', 0x0, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000800)='7', 0x1) keyctl$read(0xb, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000480)={0xe000001a}) pread64(r1, &(0x7f00000004c0)=""/115, 0x73, 0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x0, &(0x7f0000000580)}) close_range(r3, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000005c0), 0xad82, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000840)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000680)={0x0, 0x100000, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="017eab20ea35b6bee9fbec7441dbd881f1000000", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=""/203, 0xcb) openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x100, 0x80, 0x8}, 0x18) r9 = socket$inet6(0xa, 0x2, 0x3a) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e040e2720"], 0x7) sendmmsg$inet6(r9, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x80000008}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"], 0x18}}], 0x1, 0x40000000) 213.70099ms ago: executing program 1 (id=562): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x40000071, 0x0, 0x4}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 213.420399ms ago: executing program 1 (id=563): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ff0000000000000000000000851000000200000046000000000000009500007b00000000850000001800000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) sendmsg$BATADV_CMD_GET_MESH(r2, 0x0, 0x4008010) r5 = socket$unix(0x1, 0x1, 0x0) r6 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r6, 0x43403d05, &(0x7f0000000700)={0x5}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_open_dev$video(&(0x7f0000000280), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r11, 0xc040565f, &(0x7f0000000380)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000000b40)={0x2, @win={{0x4, 0x55b, 0x9, 0x7}, 0x8, 0x7, 0x0, 0xffff7eff, 0x0, 0x9}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000600)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000680)=[{&(0x7f00000006c0)='Z', 0x1}], 0x1}, 0x4) 124.307377ms ago: executing program 2 (id=564): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000800)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000840)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @local, 0x1}, {0xa, 0x4e22, 0x4, @loopback, 0x800000}, r1, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) (fail_nth: 4) 123.219337ms ago: executing program 2 (id=565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000180)={0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r2, 0x301}, 0x14}}, 0x0) 53.789153ms ago: executing program 2 (id=566): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0xa, 0x4000, 0x0, @mcast2, 0x80000008}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"], 0x18}}], 0x1, 0x40000000) 53.596566ms ago: executing program 1 (id=567): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004000000080000000100040018000000", @ANYRES32=0x0, @ANYBLOB="00e70400001e00"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"], 0x50) 51.737563ms ago: executing program 2 (id=568): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x804c}, 0x20004800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17713b77149883b86900000000000000001c00128009000100626f6e64000000000c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 9.208044ms ago: executing program 1 (id=569): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000800)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000840)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @local, 0x1}, {0xa, 0x4e22, 0x4, @loopback, 0x800000}, r1, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000340)={0x18, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) 8.944373ms ago: executing program 2 (id=570): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@gettaction={0x30, 0x32, 0x89910f7975f42df, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}]}, 0x30}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000540)={0x8607}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000580)='veth1_to_team\x00', 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x4e20, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x60000526) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) 275.681µs ago: executing program 0 (id=571): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000800)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000840)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x62, @local, 0x1}, {0xa, 0x4e22, 0x4, @loopback, 0x800000}, r1, 0x7}}, 0x48) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x68c}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000000c0)=[@ioring_restriction_register_op], 0x1) syz_io_uring_setup(0x45d2, &(0x7f0000000100)={0x0, 0x6253, 0x2, 0x2, 0x284}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) 0s ago: executing program 1 (id=572): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000580)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000040)={&(0x7f0000000c00)=[r2, r2, 0x0], 0x0, 0x4000015e}) r3 = syz_open_dev$dri(&(0x7f0000000640), 0x1ff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000680)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f00000006c0)={&(0x7f0000000700)=[r4], 0x0, 0x1}) r5 = dup(r0) setsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r5, 0x84, 0x83, &(0x7f0000000080)={0x0, 0x2}, 0x8) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000180)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000200)="13", 0x1}], 0x1}, 0x48043) r6 = dup(r0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000240)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) setsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(r6, 0x84, 0x85, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e21, 0xa2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, 0x7fffffff}, 0x90) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000800)=0x14) sendmsg$nl_route(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000c40)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x5000, 0x4204}}}}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r12, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2001}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_virt_wifi\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x8000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x8d, 0xffffffb9, 0x1a}, 0x9c) chdir(&(0x7f0000000280)='./cgroup\x00') creat(0x0, 0x24) kernel console output (not intermixed with test programs): 509][ T42] audit: type=1400 audit(1793304721.471:337): avc: denied { create } for pid=6051 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.010999][ T42] audit: type=1400 audit(1793304721.471:338): avc: denied { write } for pid=6051 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.024631][ T6054] netlink: 'syz.1.44': attribute type 2 has an invalid length. [ 50.038966][ T6054] syz.1.44 (6054): drop_caches: 2 [ 50.129038][ T42] audit: type=1400 audit(1793304721.591:339): avc: denied { create } for pid=6055 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.129639][ T42] audit: type=1400 audit(1793304721.591:340): avc: denied { ioctl } for pid=6055 comm="syz.3.45" path="socket:[8635]" dev="sockfs" ino=8635 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.177229][ T42] audit: type=1400 audit(1793304721.641:341): avc: denied { bind } for pid=6063 comm="syz.1.46" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.177687][ T42] audit: type=1400 audit(1793304721.641:342): avc: denied { name_bind } for pid=6063 comm="syz.1.46" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 50.177723][ T42] audit: type=1400 audit(1793304721.641:343): avc: denied { node_bind } for pid=6063 comm="syz.1.46" saddr=172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 50.180962][ T42] audit: type=1400 audit(1793304721.641:344): avc: denied { watch } for pid=6063 comm="syz.1.46" path="/syzcgroup/unified/syz1/syz1" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 50.285141][ T42] audit: type=1400 audit(1793304721.751:345): avc: denied { create } for pid=6077 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.337127][ T6091] FAULT_INJECTION: forcing a failure. [ 50.337127][ T6091] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.337163][ T6091] CPU: 1 UID: 0 PID: 6091 Comm: syz.0.55 Not tainted syzkaller #0 PREEMPT(full) [ 50.337175][ T6091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.337188][ T6091] Call Trace: [ 50.337192][ T6091] [ 50.337196][ T6091] dump_stack_lvl+0x100/0x190 [ 50.337223][ T6091] should_fail_ex.cold+0x5/0xa [ 50.337240][ T6091] strncpy_from_user+0x3b/0x2d0 [ 50.337259][ T6091] do_getname+0x78/0x390 [ 50.337274][ T6091] do_sys_openat2+0xc3/0x1d0 [ 50.337287][ T6091] ? __pfx_do_sys_openat2+0x10/0x10 [ 50.337299][ T6091] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 50.337319][ T6091] __x64_sys_openat+0x12d/0x210 [ 50.337332][ T6091] ? __pfx___x64_sys_openat+0x10/0x10 [ 50.337351][ T6091] do_syscall_64+0x123/0x790 [ 50.337367][ T6091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.337378][ T6091] RIP: 0033:0x7f491c35fd8e [ 50.337387][ T6091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 50.337397][ T6091] RSP: 002b:00007f491d2faea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 50.337408][ T6091] RAX: ffffffffffffffda RBX: 00007f491d2fd6c0 RCX: 00007f491c35fd8e [ 50.337415][ T6091] RDX: 0000000000000002 RSI: 00007f491c435eb2 RDI: ffffffffffffff9c [ 50.337421][ T6091] RBP: 00007f491c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 50.337427][ T6091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000036 [ 50.337433][ T6091] R13: 0000200000000780 R14: 0000000000000000 R15: 00007ffddcf88208 [ 50.337447][ T6091] [ 50.342036][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 50.342047][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 50.342182][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 50.343565][ T6093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=6093 comm=syz.3.56 [ 50.398086][ T6097] netlink: 224 bytes leftover after parsing attributes in process `syz.2.58'. [ 50.433198][ T6100] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 50.436888][ T6101] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 50.513186][ T6113] ======================================================= [ 50.513186][ T6113] WARNING: The mand mount option has been deprecated and [ 50.513186][ T6113] and is ignored by this kernel. Remove the mand [ 50.513186][ T6113] option from the mount to silence this warning. [ 50.513186][ T6113] ======================================================= [ 50.574159][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'. [ 50.724752][ T6138] ip_tables: iptables: counters copy to user failed while replacing table [ 50.739035][ T6138] team0 (unregistering): Port device team_slave_0 removed [ 50.745502][ T6138] team0 (unregistering): Port device team_slave_1 removed [ 50.839856][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 50.842183][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 50.927286][ T1166] IPVS: starting estimator thread 0... [ 50.937331][ T5571] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.014027][ T6165] IPVS: using max 46 ests per chain, 110400 per kthread [ 51.068705][ T6178] tipc: Trying to set illegal importance in message [ 51.084359][ T5571] usb 6-1: New USB device found: idVendor=0d8c, idProduct=0022, bcdDevice=0.00 [ 51.085223][ T5571] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.085235][ T5571] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 51.085252][ T5571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.089209][ T5571] usb 6-1: config 0 descriptor?? [ 51.105829][ T6188] FAULT_INJECTION: forcing a failure. [ 51.105829][ T6188] name fail_futex, interval 1, probability 0, space 0, times 1 [ 51.105847][ T6188] CPU: 2 UID: 0 PID: 6188 Comm: syz.0.82 Not tainted syzkaller #0 PREEMPT(full) [ 51.105858][ T6188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.105864][ T6188] Call Trace: [ 51.105868][ T6188] [ 51.105872][ T6188] dump_stack_lvl+0x100/0x190 [ 51.105894][ T6188] should_fail_ex.cold+0x5/0xa [ 51.105931][ T6188] get_futex_key+0x1c9/0x13e0 [ 51.105947][ T6188] ? __pfx_get_futex_key+0x10/0x10 [ 51.105982][ T6188] futex_wake+0xf4/0x5e0 [ 51.105999][ T6188] ? __pfx_futex_wake+0x10/0x10 [ 51.106016][ T6188] ? ksys_shmctl.constprop.0+0x19b/0x390 [ 51.106035][ T6188] do_futex+0x2b2/0x440 [ 51.106047][ T6188] ? __pfx_do_futex+0x10/0x10 [ 51.106063][ T6188] __x64_sys_futex+0x34f/0x4d0 [ 51.106079][ T6188] ? __pfx___x64_sys_futex+0x10/0x10 [ 51.106097][ T6188] do_syscall_64+0x123/0x790 [ 51.106109][ T6188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.106120][ T6188] RIP: 0033:0x7f491c39f559 [ 51.106129][ T6188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.106139][ T6188] RSP: 002b:00007f491d2fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 51.106149][ T6188] RAX: ffffffffffffffda RBX: 00007f491c625fa8 RCX: 00007f491c39f559 [ 51.106156][ T6188] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f491c625fac [ 51.106162][ T6188] RBP: 00007f491c625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 51.106168][ T6188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.106174][ T6188] R13: 00007f491c626038 R14: 00007ffddcf88120 R15: 00007ffddcf88208 [ 51.106189][ T6188] [ 51.124360][ T5792] Bluetooth: hci2: command tx timeout [ 51.124384][ T5792] Bluetooth: hci0: command tx timeout [ 51.124448][ T5783] Bluetooth: hci1: command tx timeout [ 51.132186][ T6194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.135158][ T5138] Bluetooth: hci3: command tx timeout [ 51.150814][ T6196] netlink: 'syz.2.86': attribute type 2 has an invalid length. [ 51.184418][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.185088][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.185673][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.186268][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.186861][ T6193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.187298][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.187817][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.188239][ T6193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.188779][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.189306][ T6193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.189725][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.190376][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.190973][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.191494][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.192064][ T6193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.192558][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.193077][ T6193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.193615][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.196243][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.196777][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.197783][ T6198] syz.2.87 uses obsolete (PF_INET,SOCK_PACKET) [ 51.198320][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.199304][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.200782][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.202656][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.203731][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.204360][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.204964][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.205482][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.206153][ T6193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.206433][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.207059][ T6193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.207517][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.207999][ T6193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.208576][ T6193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.209147][ T6193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.209689][ T6193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.210229][ T6193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.210799][ T6193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.211331][ T6193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.423898][ T5206] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.584313][ T5206] usb 5-1: New USB device found: idVendor=172f, idProduct=0501, bcdDevice=0.00 [ 51.585207][ T5206] usb 5-1: config 0 interface 0 has no altsetting 0 [ 51.585225][ T5206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.587218][ T5206] usb 5-1: config 0 descriptor?? [ 51.646924][ T6218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.647124][ T6218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.739830][ T6221] SELinux: policydb version 0 does not match my version range 15-35 [ 51.739955][ T6221] SELinux: failed to load policy [ 51.788726][ T6223] FAULT_INJECTION: forcing a failure. [ 51.788726][ T6223] name failslab, interval 1, probability 0, space 0, times 0 [ 51.788745][ T6223] CPU: 3 UID: 0 PID: 6223 Comm: syz.3.92 Not tainted syzkaller #0 PREEMPT(full) [ 51.788757][ T6223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.788763][ T6223] Call Trace: [ 51.788767][ T6223] [ 51.788772][ T6223] dump_stack_lvl+0x100/0x190 [ 51.788794][ T6223] should_fail_ex.cold+0x5/0xa [ 51.788810][ T6223] should_failslab+0xc2/0x120 [ 51.788822][ T6223] __kmalloc_noprof+0xfc/0x840 [ 51.788837][ T6223] ? __memcg_list_lru_alloc+0x429/0x6a0 [ 51.788850][ T6223] __memcg_list_lru_alloc+0x429/0x6a0 [ 51.788860][ T6223] ? xa_load+0x149/0x2c0 [ 51.788876][ T6223] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 51.788890][ T6223] ? rcu_read_unlock+0x17/0x60 [ 51.788907][ T6223] memcg_list_lru_alloc+0xdc/0x110 [ 51.788919][ T6223] __memcg_slab_post_alloc_hook+0x277/0x10b0 [ 51.788938][ T6223] ? kasan_save_track+0x14/0x30 [ 51.788949][ T6223] kmem_cache_alloc_lru_noprof+0x4f1/0x6a0 [ 51.788965][ T6223] ? __d_alloc+0x34/0xad0 [ 51.788992][ T6223] __d_alloc+0x34/0xad0 [ 51.789008][ T6223] d_alloc_pseudo+0x1c/0xc0 [ 51.789019][ T6223] alloc_file_pseudo_noaccount+0x118/0x290 [ 51.789036][ T6223] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 51.789057][ T6223] ? iput+0x35/0x40 [ 51.789078][ T6223] bdev_file_open_by_dev+0x13a/0x210 [ 51.789095][ T6223] setup_bdev_super+0x78/0x770 [ 51.789122][ T6223] get_tree_bdev_flags+0x363/0x620 [ 51.789132][ T6223] ? __pfx_ufs_fill_super+0x10/0x10 [ 51.789146][ T6223] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 51.789156][ T6223] ? cap_capable+0x107/0x430 [ 51.789170][ T6223] ? bpf_lsm_capable+0x9/0x10 [ 51.789180][ T6223] ? security_capable+0x80/0x260 [ 51.789194][ T6223] vfs_get_tree+0x92/0x320 [ 51.789208][ T6223] path_mount+0x7d0/0x2850 [ 51.789226][ T6223] ? __pfx_path_mount+0x10/0x10 [ 51.789240][ T6223] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.789252][ T6223] ? putname+0xb1/0x110 [ 51.789264][ T6223] ? kmem_cache_free+0x127/0x6c0 [ 51.789281][ T6223] ? __x64_sys_mount+0x293/0x310 [ 51.789295][ T6223] __x64_sys_mount+0x293/0x310 [ 51.789310][ T6223] ? __pfx___x64_sys_mount+0x10/0x10 [ 51.789328][ T6223] do_syscall_64+0x123/0x790 [ 51.789340][ T6223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.789351][ T6223] RIP: 0033:0x7fb787f9f559 [ 51.789361][ T6223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.789370][ T6223] RSP: 002b:00007fb788e51028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 51.789381][ T6223] RAX: ffffffffffffffda RBX: 00007fb788225fa0 RCX: 00007fb787f9f559 [ 51.789387][ T6223] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 0000200000000200 [ 51.789393][ T6223] RBP: 00007fb788036b20 R08: 0000000000000000 R09: 0000000000000000 [ 51.789399][ T6223] R10: 0000000000204009 R11: 0000000000000246 R12: 0000000000000000 [ 51.789405][ T6223] R13: 00007fb788226038 R14: 00007fb788225fa0 R15: 00007fff44ba5858 [ 51.789420][ T6223] [ 51.789441][ T6223] /dev/sr0: Can't open blockdev [ 51.796730][ T5206] usbhid 5-1:0.0: can't add hid device: -71 [ 51.796778][ T5206] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 51.801148][ T5206] usb 5-1: USB disconnect, device number 2 [ 51.948161][ T6234] bond1 (unregistering): Released all slaves [ 51.986296][ T6239] syzkaller0: entered promiscuous mode [ 51.986316][ T6239] syzkaller0: entered allmulticast mode [ 52.130573][ T6252] netlink: 'syz.3.102': attribute type 1 has an invalid length. [ 52.143566][ T6252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.152558][ T6255] lo: entered promiscuous mode [ 52.159569][ T6255] tunl0: entered promiscuous mode [ 52.160482][ T6255] gre0: entered promiscuous mode [ 52.169858][ T6255] gretap0: entered promiscuous mode [ 52.174324][ T6255] erspan0: entered promiscuous mode [ 52.180225][ T6255] ip_vti0: entered promiscuous mode [ 52.182225][ T6255] ip6_vti0: entered promiscuous mode [ 52.185822][ T6255] sit0: entered promiscuous mode [ 52.188724][ T6255] ip6tnl0: entered promiscuous mode [ 52.189913][ T6255] ip6gre0: entered promiscuous mode [ 52.195172][ T6255] syz_tun: entered promiscuous mode [ 52.197424][ T6255] ip6gretap0: entered promiscuous mode [ 52.199437][ T6255] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.199862][ T6255] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.200574][ T6255] bridge0: entered promiscuous mode [ 52.205542][ T6255] vcan0: entered promiscuous mode [ 52.209198][ T6255] bond0: entered promiscuous mode [ 52.209212][ T6255] bond_slave_0: entered promiscuous mode [ 52.209396][ T6255] bond_slave_1: entered promiscuous mode [ 52.213202][ T6255] team0: entered promiscuous mode [ 52.213212][ T6255] team_slave_0: entered promiscuous mode [ 52.213340][ T6255] team_slave_1: entered promiscuous mode [ 52.217463][ T6255] dummy0: entered promiscuous mode [ 52.225618][ T6255] nlmon0: entered promiscuous mode [ 52.226978][ T6255] batadv0: entered promiscuous mode [ 52.232392][ T6255] vxcan0: entered promiscuous mode [ 52.233285][ T6255] vxcan1: entered promiscuous mode [ 52.233729][ T6255] veth0: entered promiscuous mode [ 52.235787][ T6255] veth1: entered promiscuous mode [ 52.246945][ T6255] wg0: entered promiscuous mode [ 52.249466][ T6255] wg1: entered promiscuous mode [ 52.251740][ T6255] wg2: entered promiscuous mode [ 52.282771][ T6255] veth0_to_bridge: entered promiscuous mode [ 52.287932][ T6255] veth1_to_bridge: entered promiscuous mode [ 52.291255][ T6255] veth0_to_bond: entered promiscuous mode [ 52.294665][ T6255] veth1_to_bond: entered promiscuous mode [ 52.297626][ T6255] veth0_to_team: entered promiscuous mode [ 52.301510][ T6255] veth1_to_team: entered promiscuous mode [ 52.304372][ T6255] veth0_to_batadv: entered promiscuous mode [ 52.307153][ T6255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.307180][ T6255] batadv_slave_0: entered promiscuous mode [ 52.326853][ T6255] veth1_to_batadv: entered promiscuous mode [ 52.330288][ T6255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.330330][ T6255] batadv_slave_1: entered promiscuous mode [ 52.332362][ T6255] xfrm0: entered promiscuous mode [ 52.335265][ T6255] veth0_to_hsr: entered promiscuous mode [ 52.338431][ T6255] veth1_to_hsr: entered promiscuous mode [ 52.347679][ T6255] hsr0: entered promiscuous mode [ 52.351057][ T6255] veth1_virt_wifi: entered promiscuous mode [ 52.353489][ T6255] veth0_virt_wifi: entered promiscuous mode [ 52.360300][ T6255] virt_wifi0: entered promiscuous mode [ 52.371982][ T6255] vlan0: entered promiscuous mode [ 52.375605][ T6255] vlan1: entered promiscuous mode [ 52.378853][ T6255] macvlan0: entered promiscuous mode [ 52.381318][ T6255] macvlan1: entered promiscuous mode [ 52.382548][ T6255] ipvlan0: entered promiscuous mode [ 52.382669][ T6255] ipvlan1: entered promiscuous mode [ 52.390905][ T6255] macvtap0: entered promiscuous mode [ 52.392558][ T6255] macsec0: entered promiscuous mode [ 52.398362][ T6255] geneve0: entered promiscuous mode [ 52.402534][ T6255] geneve1: entered promiscuous mode [ 52.415457][ T6255] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 52.424097][ T6255] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 52.429182][ T6255] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 52.433772][ T6255] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 52.445662][ T6255] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 52.459853][ T6255] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 52.463146][ T6255] sit1: entered promiscuous mode [ 52.475061][ T6255] ip6erspan0: entered promiscuous mode [ 52.488243][ T6252] bond1: (slave geneve2): making interface the new active one [ 52.490041][ T6252] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 52.513991][ T5876] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.514017][ T5876] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.514034][ T5876] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.514051][ T5876] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.605510][ T6300] syzkaller0: entered promiscuous mode [ 52.605524][ T6300] syzkaller0: entered allmulticast mode [ 52.606313][ T6298] FAULT_INJECTION: forcing a failure. [ 52.606313][ T6298] name fail_futex, interval 1, probability 0, space 0, times 0 [ 52.606329][ T6298] CPU: 2 UID: 0 PID: 6298 Comm: syz.0.112 Not tainted syzkaller #0 PREEMPT(full) [ 52.606341][ T6298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.606347][ T6298] Call Trace: [ 52.606351][ T6298] [ 52.606356][ T6298] dump_stack_lvl+0x100/0x190 [ 52.606377][ T6298] should_fail_ex.cold+0x5/0xa [ 52.606394][ T6298] get_futex_key+0x1c9/0x13e0 [ 52.606407][ T6298] ? __pfx_get_futex_key+0x10/0x10 [ 52.606418][ T6298] ? __pfx___smp_call_single_queue+0x10/0x10 [ 52.606436][ T6298] futex_wait_setup+0x91/0x540 [ 52.606454][ T6298] __futex_wait+0x19f/0x360 [ 52.606469][ T6298] ? __pfx___futex_wait+0x10/0x10 [ 52.606482][ T6298] ? __pfx_try_to_wake_up+0x10/0x10 [ 52.606495][ T6298] ? futex_hash+0x311/0x400 [ 52.606506][ T6298] ? __pfx_futex_wake_mark+0x10/0x10 [ 52.606522][ T6298] ? find_held_lock+0x2b/0x80 [ 52.606533][ T6298] ? futex_wake+0x4ea/0x5e0 [ 52.606549][ T6298] futex_wait+0xe6/0x370 [ 52.606563][ T6298] ? __pfx_futex_wait+0x10/0x10 [ 52.606582][ T6298] ? ksys_shmctl.constprop.0+0x19b/0x390 [ 52.606600][ T6298] do_futex+0x265/0x440 [ 52.606612][ T6298] ? __pfx_do_futex+0x10/0x10 [ 52.606627][ T6298] __x64_sys_futex+0x34f/0x4d0 [ 52.606641][ T6298] ? __pfx___x64_sys_futex+0x10/0x10 [ 52.606657][ T6298] do_syscall_64+0x123/0x790 [ 52.606669][ T6298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.606681][ T6298] RIP: 0033:0x7f491c39f559 [ 52.606690][ T6298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.606700][ T6298] RSP: 002b:00007f491d2fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 52.606710][ T6298] RAX: ffffffffffffffda RBX: 00007f491c625fa8 RCX: 00007f491c39f559 [ 52.606717][ T6298] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f491c625fa8 [ 52.606723][ T6298] RBP: 00007f491c625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 52.606729][ T6298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.606734][ T6298] R13: 00007f491c626038 R14: 00007ffddcf88120 R15: 00007ffddcf88208 [ 52.606748][ T6298] [ 52.691994][ T6303] Bluetooth: MGMT ver 1.23 [ 52.692037][ T6303] Bluetooth: hci0: unsupported parameter 5134 [ 52.692048][ T6303] Bluetooth: hci0: unsupported parameter 1280 [ 52.692058][ T6303] Bluetooth: hci0: unsupported parameter 5134 [ 52.692068][ T6303] Bluetooth: hci0: unsupported parameter 1280 [ 52.844049][ T6278] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 52.943965][ T57] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 52.994847][ T6278] usb 5-1: New USB device found: idVendor=172f, idProduct=0501, bcdDevice=0.00 [ 52.995620][ T6278] usb 5-1: config 0 interface 0 has no altsetting 0 [ 52.995637][ T6278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.996955][ T6278] usb 5-1: config 0 descriptor?? [ 53.104659][ T57] usb 8-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 53.105566][ T57] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 53.105584][ T57] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 53.105612][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.114843][ T57] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 53.120102][ T57] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 53.201103][ T6278] usbhid 5-1:0.0: can't add hid device: -71 [ 53.201173][ T6278] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 53.202262][ T6278] usb 5-1: USB disconnect, device number 3 [ 53.204356][ T5792] Bluetooth: hci2: command tx timeout [ 53.204376][ T5792] Bluetooth: hci3: command tx timeout [ 53.204401][ T5783] Bluetooth: hci0: command tx timeout [ 53.204543][ T5138] Bluetooth: hci1: command tx timeout [ 53.464912][ T6303] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 53.465264][ T6303] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 53.465860][ T6303] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 53.674653][ T6302] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 53.676791][ T2250] usb 8-1: USB disconnect, device number 3 [ 53.688470][ T2250] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 53.690509][ T2250] spcp8x5 8-1:1.0: device disconnected [ 53.716002][ T34] usb 6-1: USB disconnect, device number 2 [ 53.959997][ T5876] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.982826][ T6320] Zero length message leads to an empty skb [ 54.007696][ T5876] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.087626][ T6330] netlink: 'syz.0.124': attribute type 16 has an invalid length. [ 54.087646][ T6330] netlink: 'syz.0.124': attribute type 17 has an invalid length. [ 54.090854][ T66] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.095943][ T66] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.097486][ T66] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.097828][ T5876] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.098707][ T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.099317][ T66] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.172107][ T5876] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.230475][ T6343] __nla_validate_parse: 10 callbacks suppressed [ 54.230488][ T6343] netlink: 224 bytes leftover after parsing attributes in process `syz.3.127'. [ 54.283434][ T5876] bridge_slave_1: left allmulticast mode [ 54.283471][ T5876] bridge_slave_1: left promiscuous mode [ 54.284311][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.294292][ T5876] bridge_slave_0: left allmulticast mode [ 54.294309][ T5876] bridge_slave_0: left promiscuous mode [ 54.294438][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.334189][ T5571] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 54.397403][ T5876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.403134][ T5876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.406125][ T5876] bond0 (unregistering): Released all slaves [ 54.428049][ T6331] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.476915][ T6362] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=61464 sclass=netlink_xfrm_socket pid=6362 comm=syz.0.134 [ 54.486927][ T5571] usb 7-1: New USB device found: idVendor=0d8c, idProduct=0022, bcdDevice=0.00 [ 54.489464][ T5571] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.489477][ T5571] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 54.489494][ T5571] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.496119][ T5571] usb 7-1: config 0 descriptor?? [ 54.575609][ T6370] netlink: 224 bytes leftover after parsing attributes in process `syz.0.136'. [ 54.613506][ T5494] 8021q: adding VLAN 0 to HW filter on device eth3 [ 54.633531][ T6374] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.686929][ T6374] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.790096][ T6374] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.893294][ T5876] hsr_slave_0: left promiscuous mode [ 54.896528][ T5876] hsr_slave_1: left promiscuous mode [ 54.897052][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.897070][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.898062][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.898072][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.903034][ T5876] veth1_macvtap: left promiscuous mode [ 54.903060][ T5876] veth0_macvtap: left promiscuous mode [ 54.903113][ T5876] veth1_vlan: left promiscuous mode [ 54.903149][ T5876] veth0_vlan: left promiscuous mode [ 55.040438][ T5876] team0 (unregistering): Port device team_slave_1 removed [ 55.049434][ T5876] team0 (unregistering): Port device team_slave_0 removed [ 55.053609][ T6407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.056186][ T6407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.114833][ T5494] 8021q: adding VLAN 0 to HW filter on device eth4 [ 55.127329][ T6374] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.131536][ T6331] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.131579][ T6331] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.131645][ T6331] bridge_slave_0: entered allmulticast mode [ 55.132400][ T6331] bridge_slave_0: entered promiscuous mode [ 55.133551][ T6331] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.133591][ T6331] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.135170][ T6331] bridge_slave_1: entered allmulticast mode [ 55.135858][ T6331] bridge_slave_1: entered promiscuous mode [ 55.166300][ T6331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.166329][ T6278] rxe_eth0 speed is unknown, defaulting to 1000 [ 55.167578][ T6331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.180670][ T6331] team0: Port device team_slave_0 added [ 55.185208][ T6331] team0: Port device team_slave_1 added [ 55.190774][ T42] kauditd_printk_skb: 103 callbacks suppressed [ 55.190786][ T42] audit: type=1400 audit(1793304726.651:449): avc: denied { write } for pid=6408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.201472][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.201486][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.201503][ T6331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.202919][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.202929][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.202946][ T6331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.234005][ T42] audit: type=1400 audit(1793304726.691:450): avc: denied { write } for pid=6411 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.245808][ T6331] hsr_slave_0: entered promiscuous mode [ 55.246393][ T6331] hsr_slave_1: entered promiscuous mode [ 55.246917][ T6331] debugfs: 'hsr0' already exists in 'hsr' [ 55.246929][ T6331] Cannot create hsr debugfs directory [ 55.260592][ T74] IPVS: starting estimator thread 0... [ 55.265467][ T42] audit: type=1400 audit(1793304726.731:451): avc: denied { read } for pid=6415 comm="syz.0.147" name="0:0:0:0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.265669][ T42] audit: type=1400 audit(1793304726.731:452): avc: denied { open } for pid=6415 comm="syz.0.147" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.265955][ T42] audit: type=1400 audit(1793304726.731:453): avc: denied { ioctl } for pid=6415 comm="syz.0.147" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=722 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.277424][ T6413] netlink: 224 bytes leftover after parsing attributes in process `syz.3.146'. [ 55.316710][ T6419] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 55.344707][ T6417] IPVS: using max 45 ests per chain, 108000 per kthread [ 55.427690][ T5876] IPVS: stop unused estimator thread 0... [ 55.447330][ T42] audit: type=1400 audit(1793304726.911:454): avc: denied { write } for pid=6427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.497329][ T42] audit: type=1400 audit(1793304726.961:455): avc: denied { write } for pid=6431 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.552604][ T5494] 8021q: adding VLAN 0 to HW filter on device eth2 [ 55.621179][ T42] audit: type=1400 audit(1793304727.081:456): avc: denied { write } for pid=6434 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.688671][ T42] audit: type=1400 audit(1793304727.151:457): avc: denied { write } for pid=6437 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.763500][ T42] audit: type=1400 audit(1793304727.221:458): avc: denied { write } for pid=6440 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.799335][ T6331] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.802063][ T6331] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.802487][ T6331] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.805688][ T6331] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.806188][ T6331] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.812641][ T6331] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.813266][ T6331] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.817337][ T6331] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.831439][ T6331] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.831487][ T6331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.831587][ T6331] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.831630][ T6331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.848353][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.849456][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.889317][ T6331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.900972][ T6331] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.907432][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.907484][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.912077][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.912144][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.155070][ T6331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.164026][ T5138] Bluetooth: hci1: command tx timeout [ 56.183046][ T6331] veth0_vlan: entered promiscuous mode [ 56.191079][ T6331] veth1_vlan: entered promiscuous mode [ 56.206784][ T6331] veth0_macvtap: entered promiscuous mode [ 56.209104][ T6331] veth1_macvtap: entered promiscuous mode [ 56.222113][ T6331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.227988][ T6331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.280653][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.280667][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.296744][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.296757][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.315455][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.315481][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.315497][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.315514][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.438510][ T6484] syzkaller0: entered promiscuous mode [ 56.438524][ T6484] syzkaller0: entered allmulticast mode [ 56.624104][ T5931] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 56.676758][ T6489] netlink: 224 bytes leftover after parsing attributes in process `syz.0.156'. [ 56.774667][ T5931] usb 6-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 56.778325][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.778338][ T5931] usb 6-1: Product: syz [ 56.778345][ T5931] usb 6-1: Manufacturer: syz [ 56.778352][ T5931] usb 6-1: SerialNumber: syz [ 56.784146][ T57] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 56.808655][ T5931] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 56.934556][ T57] usb 8-1: New USB device found: idVendor=172f, idProduct=0501, bcdDevice=0.00 [ 56.935552][ T57] usb 8-1: config 0 interface 0 has no altsetting 0 [ 56.935571][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.939142][ T57] usb 8-1: config 0 descriptor?? [ 57.115184][ T6278] usb 7-1: USB disconnect, device number 3 [ 57.147138][ T57] usbhid 8-1:0.0: can't add hid device: -71 [ 57.147188][ T57] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 57.148733][ T57] usb 8-1: USB disconnect, device number 4 [ 57.199894][ T6507] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 57.369863][ T6521] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 57.373674][ T6521] xt_recent: Need "+ip", "-ip" or "/" [ 57.733888][ T5939] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 57.905687][ T5939] usb 7-1: New USB device found: idVendor=0d8c, idProduct=0022, bcdDevice=0.00 [ 57.906582][ T5939] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.906594][ T5939] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 57.906612][ T5939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.911041][ T5939] usb 7-1: config 0 descriptor?? [ 57.968963][ T6278] nintendo 0005:057E:2017.0002: hidraw1: BLUETOOTH HID v80.00 Gamepad [syz0] on syz0 [ 58.083882][ T5931] usb 6-1: Service connection timeout for: 256 [ 58.083909][ T5931] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 58.101530][ T5931] ath9k_htc: Failed to initialize the device [ 58.106478][ T5931] usb 6-1: ath9k_htc: USB layer deinitialized [ 58.118665][ T6537] MTDSB: Device #1 doesn't appear to exist [ 58.118665][ T6537] [ 58.155384][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'. [ 58.158211][ T6556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13206 sclass=netlink_route_socket pid=6556 comm=syz.3.182 [ 58.241382][ T6569] bond2 (unregistering): Released all slaves [ 58.244319][ T5138] Bluetooth: hci1: command tx timeout [ 58.468106][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.468524][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.519835][ T6580] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 58.578788][ T6587] overlayfs: failed to resolve './file0/file2': -2 [ 58.831407][ T6597] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 58.831652][ T6597] CIFS: VFS: Malformed UNC in devname [ 59.092962][ T6615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.202'. [ 59.132255][ T6619] netlink: 'syz.3.204': attribute type 21 has an invalid length. [ 59.132269][ T6619] netlink: 156 bytes leftover after parsing attributes in process `syz.3.204'. [ 59.198107][ T6623] syzkaller0: entered promiscuous mode [ 59.198131][ T6623] syzkaller0: entered allmulticast mode [ 60.092630][ T6638] netlink: 'syz.3.211': attribute type 1 has an invalid length. [ 60.104977][ T6638] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.137757][ T6644] FAULT_INJECTION: forcing a failure. [ 60.137757][ T6644] name failslab, interval 1, probability 0, space 0, times 0 [ 60.137798][ T6644] CPU: 0 UID: 0 PID: 6644 Comm: syz.0.214 Tainted: G L syzkaller #0 PREEMPT(full) [ 60.137821][ T6644] Tainted: [L]=SOFTLOCKUP [ 60.137827][ T6644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.137842][ T6644] Call Trace: [ 60.137848][ T6644] [ 60.137855][ T6644] dump_stack_lvl+0x100/0x190 [ 60.137894][ T6644] should_fail_ex.cold+0x5/0xa [ 60.137944][ T6644] should_failslab+0xc2/0x120 [ 60.137965][ T6644] __kmalloc_noprof+0xfc/0x840 [ 60.137985][ T6644] ? rcu_is_watching+0x13/0xc0 [ 60.138003][ T6644] ? tomoyo_realpath_from_path+0xb6/0x690 [ 60.138026][ T6644] tomoyo_realpath_from_path+0xb6/0x690 [ 60.138048][ T6644] tomoyo_path_number_perm+0x23c/0x580 [ 60.138070][ T6644] ? tomoyo_path_number_perm+0x22e/0x580 [ 60.138089][ T6644] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 60.138121][ T6644] ? __lock_acquire+0x5c0/0x1f40 [ 60.138154][ T6644] ? __fget_files+0x34/0x3d0 [ 60.138169][ T6644] ? find_held_lock+0x2b/0x80 [ 60.138184][ T6644] ? hook_file_ioctl_common+0x140/0x440 [ 60.138207][ T6644] ? __fget_files+0x21f/0x3d0 [ 60.138230][ T6644] security_file_ioctl+0xd3/0x230 [ 60.138256][ T6644] __x64_sys_ioctl+0xb7/0x210 [ 60.138278][ T6644] do_syscall_64+0x123/0x790 [ 60.138302][ T6644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.138319][ T6644] RIP: 0033:0x7f491c39f559 [ 60.138332][ T6644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.138347][ T6644] RSP: 002b:00007f491d2fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.138363][ T6644] RAX: ffffffffffffffda RBX: 00007f491c625fa0 RCX: 00007f491c39f559 [ 60.138369][ T6644] RDX: 0000200000000bc0 RSI: 00000000c0347c03 RDI: 0000000000000003 [ 60.138378][ T6644] RBP: 00007f491d2fd090 R08: 0000000000000000 R09: 0000000000000000 [ 60.138387][ T6644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.138396][ T6644] R13: 00007f491c626038 R14: 00007f491c625fa0 R15: 00007ffddcf88208 [ 60.138420][ T6644] [ 60.138427][ T6644] ERROR: Out of memory at tomoyo_realpath_from_path. [ 60.324970][ T5138] Bluetooth: hci1: command tx timeout [ 60.447720][ T6664] netlink: 'syz.0.223': attribute type 1 has an invalid length. [ 60.459812][ T6664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.465716][ T5571] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 60.477820][ T6664] bond1: (slave geneve2): making interface the new active one [ 60.479553][ T6664] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 60.510567][ T1354] usb 7-1: USB disconnect, device number 4 [ 60.549683][ T6671] FAULT_INJECTION: forcing a failure. [ 60.549683][ T6671] name failslab, interval 1, probability 0, space 0, times 0 [ 60.549702][ T6671] CPU: 2 UID: 0 PID: 6671 Comm: syz.0.226 Tainted: G L syzkaller #0 PREEMPT(full) [ 60.549717][ T6671] Tainted: [L]=SOFTLOCKUP [ 60.549720][ T6671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.549726][ T6671] Call Trace: [ 60.549730][ T6671] [ 60.549734][ T6671] dump_stack_lvl+0x100/0x190 [ 60.549756][ T6671] should_fail_ex.cold+0x5/0xa [ 60.549772][ T6671] should_failslab+0xc2/0x120 [ 60.549785][ T6671] __kmalloc_noprof+0xfc/0x840 [ 60.549800][ T6671] ? tomoyo_encode2+0xfb/0x3c0 [ 60.549813][ T6671] tomoyo_encode2+0xfb/0x3c0 [ 60.549825][ T6671] tomoyo_encode+0x29/0x50 [ 60.549834][ T6671] tomoyo_realpath_from_path+0x18c/0x690 [ 60.549848][ T6671] tomoyo_path_number_perm+0x23c/0x580 [ 60.549862][ T6671] ? tomoyo_path_number_perm+0x22e/0x580 [ 60.549878][ T6671] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 60.549898][ T6671] ? __lock_acquire+0x5c0/0x1f40 [ 60.549940][ T6671] ? __fget_files+0x34/0x3d0 [ 60.549954][ T6671] ? find_held_lock+0x2b/0x80 [ 60.549964][ T6671] ? hook_file_ioctl_common+0x140/0x440 [ 60.549980][ T6671] ? __fget_files+0x21f/0x3d0 [ 60.549994][ T6671] security_file_ioctl+0xd3/0x230 [ 60.550011][ T6671] __x64_sys_ioctl+0xb7/0x210 [ 60.550028][ T6671] do_syscall_64+0x123/0x790 [ 60.550040][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.550051][ T6671] RIP: 0033:0x7f491c39f559 [ 60.550059][ T6671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.550070][ T6671] RSP: 002b:00007f491d2fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.550081][ T6671] RAX: ffffffffffffffda RBX: 00007f491c625fa0 RCX: 00007f491c39f559 [ 60.550088][ T6671] RDX: 0000200000000bc0 RSI: 00000000c0347c03 RDI: 0000000000000003 [ 60.550094][ T6671] RBP: 00007f491d2fd090 R08: 0000000000000000 R09: 0000000000000000 [ 60.550100][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.550105][ T6671] R13: 00007f491c626038 R14: 00007f491c625fa0 R15: 00007ffddcf88208 [ 60.550125][ T6671] [ 60.550136][ T6671] ERROR: Out of memory at tomoyo_realpath_from_path. [ 60.576173][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 60.576192][ T42] audit: type=1400 audit(1793304732.041:492): avc: denied { ioctl } for pid=6672 comm="syz.0.227" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13939 ioctlcmd=0xc018aa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.614593][ T5571] usb 8-1: New USB device found: idVendor=172f, idProduct=0501, bcdDevice=0.00 [ 60.615573][ T5571] usb 8-1: config 0 interface 0 has no altsetting 0 [ 60.615591][ T5571] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.617221][ T5571] usb 8-1: config 0 descriptor?? [ 60.660139][ T6673] netlink: 'syz.0.227': attribute type 4 has an invalid length. [ 60.660153][ T6673] netlink: 'syz.0.227': attribute type 5 has an invalid length. [ 60.660160][ T6673] netlink: 'syz.0.227': attribute type 1 has an invalid length. [ 60.660167][ T6673] netlink: 'syz.0.227': attribute type 4 has an invalid length. [ 60.660174][ T6673] netlink: 'syz.0.227': attribute type 5 has an invalid length. [ 60.660180][ T6673] netlink: 'syz.0.227': attribute type 1 has an invalid length. [ 60.660339][ T6673] iwpm_register_pid_cb: Could not find a matching request (seq = 830110067) [ 60.824765][ T6678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6678 comm=syz.0.229 [ 60.826405][ T5571] usbhid 8-1:0.0: can't add hid device: -71 [ 60.826505][ T5571] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 60.828409][ T5571] usb 8-1: USB disconnect, device number 5 [ 61.149715][ T42] audit: type=1400 audit(1793304732.611:493): avc: denied { append } for pid=6692 comm="syz.0.232" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.360135][ T42] audit: type=1400 audit(1793304732.821:494): avc: denied { relabelfrom } for pid=6694 comm="syz.3.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 61.360199][ T42] audit: type=1400 audit(1793304732.821:495): avc: denied { relabelto } for pid=6694 comm="syz.3.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 61.386046][ T6259] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 61.534639][ T6259] usb 5-1: Using ep0 maxpacket: 32 [ 61.535685][ T6259] usb 5-1: New USB device found: idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 61.536490][ T6259] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 61.536503][ T6259] usb 5-1: config 0 has no interface number 0 [ 61.536520][ T6259] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 61.536531][ T6259] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 61.536542][ T6259] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 61.536555][ T6259] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 61.536567][ T6259] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 61.538150][ T6259] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.538161][ T6259] usb 5-1: Product: syz [ 61.538173][ T6259] usb 5-1: Manufacturer: syz [ 61.538180][ T6259] usb 5-1: SerialNumber: syz [ 61.539661][ T6259] usb 5-1: config 0 descriptor?? [ 61.540643][ T6693] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 61.543498][ T6259] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.119/input/input5 [ 61.554818][ T42] audit: type=1400 audit(1793304733.011:496): avc: denied { read } for pid=5175 comm="acpid" name="mouse2" dev="devtmpfs" ino=2895 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.554846][ T42] audit: type=1400 audit(1793304733.011:497): avc: denied { open } for pid=5175 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2895 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.554931][ T42] audit: type=1400 audit(1793304733.021:498): avc: denied { ioctl } for pid=5175 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2895 ioctlcmd=0x80604520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.664346][ T5939] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 61.744932][ T42] audit: type=1400 audit(1793304733.211:499): avc: denied { read write } for pid=6692 comm="syz.0.232" name="event4" dev="devtmpfs" ino=2896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.745272][ T42] audit: type=1400 audit(1793304733.211:500): avc: denied { open } for pid=6692 comm="syz.0.232" path="/dev/input/event4" dev="devtmpfs" ino=2896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.814572][ T5939] usb 8-1: New USB device found: idVendor=0d8c, idProduct=0022, bcdDevice=0.00 [ 61.815529][ T5939] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.815541][ T5939] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 61.815558][ T5939] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.816881][ T5939] usb 8-1: config 0 descriptor?? [ 61.826898][ T42] audit: type=1400 audit(1793304733.291:501): avc: denied { connect } for pid=6692 comm="syz.0.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 61.838018][ T6700] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 61.838137][ T6700] block device autoloading is deprecated and will be removed. [ 61.840301][ T6693] usb 1-1: USB disconnect, device number 2 [ 61.931812][ T6260] usb 5-1: USB disconnect, device number 4 [ 62.084070][ T6278] nintendo 0005:057E:2017.0002: Failed to get joycon info; ret=-110 [ 62.084093][ T6278] nintendo 0005:057E:2017.0002: Failed to retrieve controller info; ret=-110 [ 62.084116][ T6278] nintendo 0005:057E:2017.0002: Failed to initialize controller; ret=-110 [ 62.105315][ T6278] nintendo 0005:057E:2017.0002: probe - fail = -110 [ 62.105381][ T6278] nintendo 0005:057E:2017.0002: probe with driver nintendo failed with error -110 [ 62.149879][ T6717] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 4, id = 0 [ 62.150055][ T6716] IPVS: stopping backup sync thread 6717 ... [ 62.257363][ T6726] openvswitch: netlink: ct_state flags 05000001 unsupported [ 62.299702][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 62.373096][ T6733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.375285][ T6733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.404884][ T5138] Bluetooth: hci1: command tx timeout [ 62.520270][ T6745] FAULT_INJECTION: forcing a failure. [ 62.520270][ T6745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.520315][ T6745] CPU: 3 UID: 0 PID: 6745 Comm: syz.0.253 Tainted: G L syzkaller #0 PREEMPT(full) [ 62.520336][ T6745] Tainted: [L]=SOFTLOCKUP [ 62.520341][ T6745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.520358][ T6745] Call Trace: [ 62.520364][ T6745] [ 62.520370][ T6745] dump_stack_lvl+0x100/0x190 [ 62.520409][ T6745] should_fail_ex.cold+0x5/0xa [ 62.520433][ T6745] _copy_to_user+0x32/0xd0 [ 62.520459][ T6745] simple_read_from_buffer+0xcb/0x170 [ 62.520480][ T6745] proc_fail_nth_read+0x1af/0x230 [ 62.520500][ T6745] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 62.520521][ T6745] ? rw_verify_area+0xce/0x6d0 [ 62.520541][ T6745] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 62.520560][ T6745] vfs_read+0x1e4/0xb40 [ 62.520583][ T6745] ? lock_acquire+0x1d1/0x380 [ 62.520603][ T6745] ? __fget_files+0x34/0x3d0 [ 62.520619][ T6745] ? __pfx_vfs_read+0x10/0x10 [ 62.520639][ T6745] ? find_held_lock+0x2b/0x80 [ 62.520656][ T6745] ? __fget_files+0x215/0x3d0 [ 62.520678][ T6745] ? __fget_files+0x21f/0x3d0 [ 62.520702][ T6745] ksys_read+0x12a/0x250 [ 62.520717][ T6745] ? __pfx_ksys_read+0x10/0x10 [ 62.520738][ T6745] do_syscall_64+0x123/0x790 [ 62.520762][ T6745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.520777][ T6745] RIP: 0033:0x7f491c35fd8e [ 62.520790][ T6745] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 62.520803][ T6745] RSP: 002b:00007f491d2fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.520820][ T6745] RAX: ffffffffffffffda RBX: 00007f491d2fd6c0 RCX: 00007f491c35fd8e [ 62.520830][ T6745] RDX: 000000000000000f RSI: 00007f491d2fd0a0 RDI: 0000000000000004 [ 62.520839][ T6745] RBP: 00007f491d2fd090 R08: 0000000000000000 R09: 0000000000000000 [ 62.520848][ T6745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.520857][ T6745] R13: 00007f491c626038 R14: 00007f491c625fa0 R15: 00007ffddcf88208 [ 62.520879][ T6745] [ 62.578563][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.255'. [ 62.634122][ T6754] FAULT_INJECTION: forcing a failure. [ 62.634122][ T6754] name failslab, interval 1, probability 0, space 0, times 0 [ 62.634191][ T6754] CPU: 1 UID: 0 PID: 6754 Comm: syz.0.257 Tainted: G L syzkaller #0 PREEMPT(full) [ 62.634207][ T6754] Tainted: [L]=SOFTLOCKUP [ 62.634211][ T6754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.634217][ T6754] Call Trace: [ 62.634221][ T6754] [ 62.634226][ T6754] dump_stack_lvl+0x100/0x190 [ 62.634247][ T6754] should_fail_ex.cold+0x5/0xa [ 62.634263][ T6754] should_failslab+0xc2/0x120 [ 62.634276][ T6754] __kmalloc_node_noprof+0xff/0x870 [ 62.634290][ T6754] ? __get_vm_area_node+0x1ff/0x350 [ 62.634319][ T6754] ? __get_vm_area_node+0x22b/0x350 [ 62.634335][ T6754] ? __vmalloc_node_range_noprof+0x424/0x1440 [ 62.634348][ T6754] __vmalloc_node_range_noprof+0x424/0x1440 [ 62.634364][ T6754] ? xt_counters_alloc+0x4c/0x70 [ 62.634388][ T6754] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 62.634400][ T6754] ? kasan_quarantine_put+0x104/0x240 [ 62.634418][ T6754] ? xt_counters_alloc+0x4c/0x70 [ 62.634433][ T6754] __vmalloc_node_noprof+0xad/0xf0 [ 62.634443][ T6754] ? xt_counters_alloc+0x4c/0x70 [ 62.634460][ T6754] xt_counters_alloc+0x4c/0x70 [ 62.634475][ T6754] __do_replace+0x97/0x990 [ 62.634495][ T6754] ? __pfx___do_replace+0x10/0x10 [ 62.634515][ T6754] do_ip6t_set_ctl+0xa5f/0xd00 [ 62.634524][ T6754] ? nf_sockopt_find.isra.0+0x222/0x290 [ 62.634539][ T6754] ? nf_sockopt_find.isra.0+0x222/0x290 [ 62.634554][ T6754] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 62.634564][ T6754] ? __mutex_unlock_slowpath+0x35d/0x930 [ 62.634577][ T6754] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 62.634594][ T6754] ? nf_sockopt_find.isra.0+0x222/0x290 [ 62.634609][ T6754] nf_setsockopt+0x8d/0xf0 [ 62.634625][ T6754] ipv6_setsockopt+0x135/0x170 [ 62.634636][ T6754] rawv6_setsockopt+0xee/0x5a0 [ 62.634652][ T6754] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 62.634667][ T6754] ? selinux_socket_setsockopt+0x6a/0x80 [ 62.634679][ T6754] ? sock_common_setsockopt+0x2e/0xf0 [ 62.634698][ T6754] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 62.634717][ T6754] do_sock_setsockopt+0xf3/0x1d0 [ 62.634736][ T6754] __sys_setsockopt+0x195/0x220 [ 62.634763][ T6754] __x64_sys_setsockopt+0xbd/0x160 [ 62.634779][ T6754] ? do_syscall_64+0xae/0x790 [ 62.634794][ T6754] ? lockdep_hardirqs_on+0x7d/0x110 [ 62.634804][ T6754] do_syscall_64+0x123/0x790 [ 62.634816][ T6754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.634827][ T6754] RIP: 0033:0x7f491c39f559 [ 62.634836][ T6754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.634847][ T6754] RSP: 002b:00007f491d2fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 62.634858][ T6754] RAX: ffffffffffffffda RBX: 00007f491c625fa0 RCX: 00007f491c39f559 [ 62.634865][ T6754] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 62.634871][ T6754] RBP: 00007f491d2fd090 R08: 00000000000003e8 R09: 0000000000000000 [ 62.634877][ T6754] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 62.634883][ T6754] R13: 00007f491c626038 R14: 00007f491c625fa0 R15: 00007ffddcf88208 [ 62.634897][ T6754] [ 62.635129][ T6754] syz.0.257: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 62.635282][ T6754] CPU: 1 UID: 0 PID: 6754 Comm: syz.0.257 Tainted: G L syzkaller #0 PREEMPT(full) [ 62.635297][ T6754] Tainted: [L]=SOFTLOCKUP [ 62.635301][ T6754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.635307][ T6754] Call Trace: [ 62.635311][ T6754] [ 62.635315][ T6754] dump_stack_lvl+0x100/0x190 [ 62.635333][ T6754] warn_alloc.cold+0x9e/0xb2 [ 62.635345][ T6754] ? __pfx_warn_alloc+0x10/0x10 [ 62.635359][ T6754] ? dump_stack_lvl+0x17c/0x190 [ 62.635375][ T6754] ? rcu_is_watching+0x13/0xc0 [ 62.635387][ T6754] ? __kasan_kmalloc+0x8a/0xb0 [ 62.635417][ T6754] ? __kmalloc_node_noprof+0x360/0x870 [ 62.635431][ T6754] ? __get_vm_area_node+0x1ff/0x350 [ 62.635446][ T6754] ? __get_vm_area_node+0x22b/0x350 [ 62.635461][ T6754] ? __vmalloc_node_range_noprof+0x424/0x1440 [ 62.635475][ T6754] __vmalloc_node_range_noprof+0x107c/0x1440 [ 62.635491][ T6754] ? xt_counters_alloc+0x4c/0x70 [ 62.635510][ T6754] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 62.635521][ T6754] ? kasan_quarantine_put+0x104/0x240 [ 62.635540][ T6754] ? xt_counters_alloc+0x4c/0x70 [ 62.635554][ T6754] __vmalloc_node_noprof+0xad/0xf0 [ 62.635565][ T6754] ? xt_counters_alloc+0x4c/0x70 [ 62.635581][ T6754] xt_counters_alloc+0x4c/0x70 [ 62.635597][ T6754] __do_replace+0x97/0x990 [ 62.635616][ T6754] ? __pfx___do_replace+0x10/0x10 [ 62.635634][ T6754] do_ip6t_set_ctl+0xa5f/0xd00 [ 62.635644][ T6754] ? nf_sockopt_find.isra.0+0x222/0x290 [ 62.635659][ T6754] ? nf_sockopt_find.isra.0+0x222/0x290 [ 62.635674][ T6754] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 62.635684][ T6754] ? __mutex_unlock_slowpath+0x35d/0x930 [ 62.635696][ T6754] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 62.635712][ T6754] ? nf_sockopt_find.isra.0+0x222/0x290 [ 62.635728][ T6754] nf_setsockopt+0x8d/0xf0 [ 62.635743][ T6754] ipv6_setsockopt+0x135/0x170 [ 62.635754][ T6754] rawv6_setsockopt+0xee/0x5a0 [ 62.635769][ T6754] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 62.635784][ T6754] ? selinux_socket_setsockopt+0x6a/0x80 [ 62.635794][ T6754] ? sock_common_setsockopt+0x2e/0xf0 [ 62.635807][ T6754] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 62.635821][ T6754] do_sock_setsockopt+0xf3/0x1d0 [ 62.635836][ T6754] __sys_setsockopt+0x195/0x220 [ 62.635849][ T6754] __x64_sys_setsockopt+0xbd/0x160 [ 62.635859][ T6754] ? do_syscall_64+0xae/0x790 [ 62.635869][ T6754] ? lockdep_hardirqs_on+0x7d/0x110 [ 62.635878][ T6754] do_syscall_64+0x123/0x790 [ 62.635889][ T6754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.635900][ T6754] RIP: 0033:0x7f491c39f559 [ 62.635908][ T6754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.635918][ T6754] RSP: 002b:00007f491d2fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 62.635928][ T6754] RAX: ffffffffffffffda RBX: 00007f491c625fa0 RCX: 00007f491c39f559 [ 62.635934][ T6754] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 62.635940][ T6754] RBP: 00007f491d2fd090 R08: 00000000000003e8 R09: 0000000000000000 [ 62.635946][ T6754] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 62.635952][ T6754] R13: 00007f491c626038 R14: 00007f491c625fa0 R15: 00007ffddcf88208 [ 62.635966][ T6754] [ 62.636044][ T6754] Mem-Info: [ 62.636056][ T6754] active_anon:8463 inactive_anon:0 isolated_anon:0 [ 62.636056][ T6754] active_file:0 inactive_file:58186 isolated_file:0 [ 62.636056][ T6754] unevictable:1000 dirty:2167 writeback:0 [ 62.636056][ T6754] slab_reclaimable:7675 slab_unreclaimable:67762 [ 62.636056][ T6754] mapped:24999 shmem:1564 pagetables:1431 [ 62.636056][ T6754] sec_pagetables:296 bounce:0 [ 62.636056][ T6754] kernel_misc_reclaimable:0 [ 62.636056][ T6754] free:455032 free_pcp:14230 free_cma:0 [ 62.636082][ T6754] Node 0 active_anon:33852kB inactive_anon:0kB active_file:0kB inactive_file:232536kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:99996kB dirty:8652kB writeback:0kB shmem:4256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14112kB pagetables:5524kB sec_pagetables:1184kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 62.636109][ T6754] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 62.636700][ T6754] Node 0 DMA free:15112kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:128kB free_cma:0kB [ 62.636735][ T6754] lowmem_reserve[]: 0 1202 1202 1202 1202 [ 62.636755][ T6754] Node 0 DMA32 free:164944kB boost:0kB min:27068kB low:33832kB high:40596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:33852kB inactive_anon:0kB active_file:0kB inactive_file:232536kB unevictable:2000kB writepending:8652kB zspages:0kB present:2080628kB managed:1230944kB mlocked:0kB bounce:0kB free_pcp:52304kB local_pcp:11672kB free_cma:0kB [ 62.636786][ T6754] lowmem_reserve[]: 0 0 0 0 0 [ 62.636804][ T6754] Node 1 Normal free:1640072kB boost:0kB min:40168kB low:50208kB high:60248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:2000kB writepending:16kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:4336kB local_pcp:144kB free_cma:0kB [ 62.636834][ T6754] lowmem_reserve[]: 0 0 0 0 0 [ 62.636852][ T6754] Node 0 DMA: 2*4kB (U) 2*8kB (U) 5*16kB (U) 5*32kB (UM) 4*64kB (U) 2*128kB (UM) 2*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 2*4096kB (U) = 15112kB [ 62.636939][ T6754] Node 0 DMA32: 2*4kB (ME) 862*8kB (UE) 544*16kB (UME) 372*32kB (UME) 137*64kB (UME) 80*128kB (UME) 50*256kB (UME) 42*512kB (UME) 28*1024kB (UM) 5*2048kB (UME) 11*4096kB (UM) = 164792kB [ 62.637026][ T6754] Node 1 Normal: 4*4kB (UM) 5*8kB (U) 13*16kB (UM) 12*32kB (UM) 10*64kB (UM) 9*128kB (UM) 3*256kB (U) 5*512kB (UM) 0*1024kB 2*2048kB (UM) 398*4096kB (UM) = 1640072kB [ 62.637109][ T6754] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 62.637117][ T6754] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 62.637128][ T6754] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 62.637136][ T6754] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 62.637145][ T6754] 59746 total pagecache pages [ 62.637149][ T6754] 0 pages in swap cache [ 62.637153][ T6754] Free swap = 124996kB [ 62.637157][ T6754] Total swap = 124996kB [ 62.637161][ T6754] 1048443 pages RAM [ 62.637164][ T6754] 0 pages HighMem/MovableOnly [ 62.637168][ T6754] 291397 pages reserved [ 62.637172][ T6754] 0 pages cma reserved [ 62.667346][ T6756] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 62.853568][ T6763] raw_sendmsg: syz.0.261 forgot to set AF_INET. Fix it! [ 63.004846][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 63.029773][ T6772] warning: `syz.0.265' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 63.142708][ T6784] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 63.190310][ T6786] netlink: 32 bytes leftover after parsing attributes in process `syz.0.272'. [ 63.456481][ T6260] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 63.603871][ T6260] usb 5-1: device descriptor read/64, error -71 [ 63.873948][ T6260] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 64.003942][ T6260] usb 5-1: device descriptor read/64, error -71 [ 64.114557][ T6260] usb usb5-port1: attempt power cycle [ 64.441525][ T5931] usb 8-1: USB disconnect, device number 6 [ 64.460356][ T6811] FAULT_INJECTION: forcing a failure. [ 64.460356][ T6811] name failslab, interval 1, probability 0, space 0, times 0 [ 64.460375][ T6811] CPU: 1 UID: 0 PID: 6811 Comm: syz.3.282 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.460390][ T6811] Tainted: [L]=SOFTLOCKUP [ 64.460394][ T6811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.460400][ T6811] Call Trace: [ 64.460404][ T6811] [ 64.460409][ T6811] dump_stack_lvl+0x100/0x190 [ 64.460430][ T6811] should_fail_ex.cold+0x5/0xa [ 64.460447][ T6811] should_failslab+0xc2/0x120 [ 64.460459][ T6811] __kmalloc_noprof+0xfc/0x840 [ 64.460473][ T6811] ? net_generic+0xea/0x2a0 [ 64.460484][ T6811] ? do_replace_table+0x4b8/0x750 [ 64.460498][ T6811] do_replace_table+0x4b8/0x750 [ 64.460508][ T6811] ? xt_find_table_lock+0x137/0x520 [ 64.460521][ T6811] xt_replace_table+0x2e/0x130 [ 64.460531][ T6811] ? xt_request_find_table_lock+0x48/0xf0 [ 64.460543][ T6811] __do_replace+0x1cf/0x990 [ 64.460563][ T6811] ? __pfx___do_replace+0x10/0x10 [ 64.460582][ T6811] do_ip6t_set_ctl+0xa5f/0xd00 [ 64.460592][ T6811] ? nf_sockopt_find.isra.0+0x222/0x290 [ 64.460606][ T6811] ? nf_sockopt_find.isra.0+0x222/0x290 [ 64.460622][ T6811] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 64.460632][ T6811] ? __mutex_unlock_slowpath+0x35d/0x930 [ 64.460645][ T6811] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 64.460662][ T6811] ? nf_sockopt_find.isra.0+0x222/0x290 [ 64.460678][ T6811] nf_setsockopt+0x8d/0xf0 [ 64.460693][ T6811] ipv6_setsockopt+0x135/0x170 [ 64.460706][ T6811] rawv6_setsockopt+0xee/0x5a0 [ 64.460721][ T6811] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 64.460736][ T6811] ? selinux_socket_setsockopt+0x6a/0x80 [ 64.460747][ T6811] ? sock_common_setsockopt+0x2e/0xf0 [ 64.460761][ T6811] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 64.460775][ T6811] do_sock_setsockopt+0xf3/0x1d0 [ 64.460790][ T6811] __sys_setsockopt+0x195/0x220 [ 64.460803][ T6811] __x64_sys_setsockopt+0xbd/0x160 [ 64.460814][ T6811] ? do_syscall_64+0xae/0x790 [ 64.460824][ T6811] ? lockdep_hardirqs_on+0x7d/0x110 [ 64.460834][ T6811] do_syscall_64+0x123/0x790 [ 64.460845][ T6811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.460856][ T6811] RIP: 0033:0x7fb787f9f559 [ 64.460865][ T6811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.460875][ T6811] RSP: 002b:00007fb788e51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 64.460886][ T6811] RAX: ffffffffffffffda RBX: 00007fb788225fa0 RCX: 00007fb787f9f559 [ 64.460893][ T6811] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 64.460899][ T6811] RBP: 00007fb788e51090 R08: 00000000000003e8 R09: 0000000000000000 [ 64.460906][ T6811] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000002 [ 64.460912][ T6811] R13: 00007fb788226038 R14: 00007fb788225fa0 R15: 00007fff44ba5858 [ 64.460926][ T6811] [ 64.464117][ T6260] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 64.492672][ T6815] netlink: 'syz.3.284': attribute type 32 has an invalid length. [ 64.492690][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.284'. [ 64.505412][ T6260] usb 5-1: device descriptor read/8, error -71 [ 64.559067][ T6826] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 64.743887][ T6260] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 64.764339][ T6260] usb 5-1: device descriptor read/8, error -71 [ 64.883925][ T34] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 64.884380][ T6260] usb usb5-port1: unable to enumerate USB device [ 65.034666][ T34] usb 8-1: New USB device found: idVendor=0d8c, idProduct=0022, bcdDevice=0.00 [ 65.035970][ T34] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.035990][ T34] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 65.036019][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.038896][ T34] usb 8-1: config 0 descriptor?? [ 65.475460][ T6850] CacheFiles: Failed to register: -95 [ 65.511415][ T6852] fuse: Bad value for 'group_id' [ 65.511435][ T6852] fuse: Bad value for 'group_id' [ 65.594131][ T6857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.594445][ T6857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.874466][ T6878] Cannot find add_set index 0 as target [ 66.014325][ T6884] ip6gre1: entered promiscuous mode [ 66.014346][ T6884] ip6gre1: entered allmulticast mode [ 66.017131][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 66.017331][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 66.020217][ T6884] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 66.054152][ T6260] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 66.148253][ T6888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.150165][ T6888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.216996][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'. [ 66.411217][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 66.411234][ T42] audit: type=1400 audit(1793304737.871:523): avc: denied { watch watch_reads } for pid=6901 comm="syz.0.318" path="pipe:[15191]" dev="pipefs" ino=15191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 66.474154][ T6260] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 66.516640][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 66.642504][ T42] audit: type=1400 audit(1793304738.101:524): avc: denied { connect } for pid=6920 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.695544][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 66.695557][ T6931] netlink: 24 bytes leftover after parsing attributes in process `syz.2.332'. [ 66.707859][ T6928] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 66.725214][ C1] Illegal XDP return value 16128 on prog (id 105) dev veth1, expect packet loss! [ 66.747495][ T6936] FAULT_INJECTION: forcing a failure. [ 66.747495][ T6936] name failslab, interval 1, probability 0, space 0, times 0 [ 66.747522][ T6936] CPU: 1 UID: 0 PID: 6936 Comm: syz.2.336 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.747544][ T6936] Tainted: [L]=SOFTLOCKUP [ 66.747548][ T6936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.747563][ T6936] Call Trace: [ 66.747567][ T6936] [ 66.747572][ T6936] dump_stack_lvl+0x100/0x190 [ 66.747601][ T6936] should_fail_ex.cold+0x5/0xa [ 66.747619][ T6936] should_failslab+0xc2/0x120 [ 66.747635][ T6936] kmem_cache_alloc_noprof+0x92/0x6a0 [ 66.747651][ T6936] ? seq_open+0x55/0x170 [ 66.747664][ T6936] seq_open+0x55/0x170 [ 66.747675][ T6936] kernfs_fop_open+0x695/0x10f0 [ 66.747688][ T6936] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 66.747707][ T6936] do_dentry_open+0x674/0x1470 [ 66.747717][ T6936] ? __pfx_kernfs_fop_open+0x10/0x10 [ 66.747730][ T6936] vfs_open_consume+0xcc/0x460 [ 66.747746][ T6936] path_openat+0x1547/0x23f0 [ 66.747761][ T6936] ? __pfx_path_openat+0x10/0x10 [ 66.747778][ T6936] do_file_open+0x20e/0x430 [ 66.747792][ T6936] ? __pfx_do_file_open+0x10/0x10 [ 66.747815][ T6936] ? _raw_spin_unlock+0x28/0x50 [ 66.747833][ T6936] ? alloc_fd+0x471/0x7a0 [ 66.747850][ T6936] do_sys_openat2+0x163/0x1d0 [ 66.747863][ T6936] ? __pfx_do_sys_openat2+0x10/0x10 [ 66.747876][ T6936] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 66.747891][ T6936] __x64_sys_openat+0x12d/0x210 [ 66.747905][ T6936] ? __pfx___x64_sys_openat+0x10/0x10 [ 66.747923][ T6936] do_syscall_64+0x123/0x790 [ 66.747936][ T6936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.747947][ T6936] RIP: 0033:0x7f74e859f559 [ 66.747956][ T6936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.747966][ T6936] RSP: 002b:00007f74e67f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 66.747977][ T6936] RAX: ffffffffffffffda RBX: 00007f74e8825fa0 RCX: 00007f74e859f559 [ 66.747984][ T6936] RDX: 0000000000000001 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 66.747990][ T6936] RBP: 00007f74e8636b20 R08: 0000000000000000 R09: 0000000000000000 [ 66.747996][ T6936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.748002][ T6936] R13: 00007f74e8826038 R14: 00007f74e8825fa0 R15: 00007ffec0cf5268 [ 66.748017][ T6936] [ 66.756697][ T42] audit: type=1400 audit(1793304738.221:525): avc: denied { mount } for pid=6934 comm="syz.2.336" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.824746][ T6945] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 66.860179][ T42] audit: type=1400 audit(1793304738.321:526): avc: denied { map } for pid=6948 comm="syz.1.341" path="socket:[13283]" dev="sockfs" ino=13283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 66.894096][ T6260] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 66.922057][ T6955] netlink: 36 bytes leftover after parsing attributes in process `syz.1.343'. [ 66.935079][ T6957] FAULT_INJECTION: forcing a failure. [ 66.935079][ T6957] name failslab, interval 1, probability 0, space 0, times 0 [ 66.935100][ T6957] CPU: 1 UID: 0 PID: 6957 Comm: syz.0.345 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.935115][ T6957] Tainted: [L]=SOFTLOCKUP [ 66.935119][ T6957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.935125][ T6957] Call Trace: [ 66.935129][ T6957] [ 66.935133][ T6957] dump_stack_lvl+0x100/0x190 [ 66.935155][ T6957] should_fail_ex.cold+0x5/0xa [ 66.935171][ T6957] should_failslab+0xc2/0x120 [ 66.935184][ T6957] kmem_cache_alloc_noprof+0x92/0x6a0 [ 66.935200][ T6957] ? alloc_empty_file+0x5b/0x1c0 [ 66.935217][ T6957] alloc_empty_file+0x5b/0x1c0 [ 66.935231][ T6957] alloc_file_clone+0x5a/0x100 [ 66.935245][ T6957] create_pipe_files+0x3e8/0x930 [ 66.935258][ T6957] do_pipe2+0xbd/0x1e0 [ 66.935270][ T6957] ? __pfx_do_pipe2+0x10/0x10 [ 66.935282][ T6957] ? __pfx___x64_sys_futex+0x10/0x10 [ 66.935295][ T6957] ? ksys_write+0x1ac/0x250 [ 66.935308][ T6957] __x64_sys_pipe2+0x54/0x80 [ 66.935321][ T6957] do_syscall_64+0x123/0x790 [ 66.935333][ T6957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.935343][ T6957] RIP: 0033:0x7f491c39f559 [ 66.935353][ T6957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.935363][ T6957] RSP: 002b:00007f491d2fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 66.935374][ T6957] RAX: ffffffffffffffda RBX: 00007f491c625fa0 RCX: 00007f491c39f559 [ 66.935380][ T6957] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 66.935386][ T6957] RBP: 00007f491c436b20 R08: 0000000000000000 R09: 0000000000000000 [ 66.935392][ T6957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.935398][ T6957] R13: 00007f491c626038 R14: 00007f491c625fa0 R15: 00007ffddcf88208 [ 66.935413][ T6957] [ 66.996164][ T6961] vlan0: entered promiscuous mode [ 66.996190][ T6961] e1000 0000:00:07.0 eth0: entered promiscuous mode [ 67.044034][ T5571] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 67.046760][ T42] audit: type=1400 audit(1793304738.511:527): avc: denied { map } for pid=6960 comm="syz.1.347" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 67.133401][ T6966] syz.1.349 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 67.174008][ T57] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 67.194954][ T5571] usb 7-1: New USB device found: idVendor=0d8c, idProduct=0022, bcdDevice=0.00 [ 67.195786][ T5571] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.195799][ T5571] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 67.195816][ T5571] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.197097][ T5571] usb 7-1: config 0 descriptor?? [ 67.324716][ T57] usb 5-1: New USB device found: idVendor=28de, idProduct=1205, bcdDevice=0.00 [ 67.325687][ T57] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 67.325710][ T57] usb 5-1: config 0 interface 0 has no altsetting 0 [ 67.325734][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.328572][ T57] usb 5-1: config 0 descriptor?? [ 67.329383][ T6957] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 67.477669][ T6978] __nla_validate_parse: 1 callbacks suppressed [ 67.477727][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.354'. [ 67.540958][ T57] usbhid 5-1:0.0: can't add hid device: -71 [ 67.541013][ T57] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 67.543108][ T57] usb 5-1: USB disconnect, device number 9 [ 67.667117][ T6260] usb 8-1: USB disconnect, device number 7 [ 68.036343][ T6981] overlayfs: failed to resolve './file0/file1/file2': -2 [ 68.079486][ T6987] overlayfs: failed to resolve './bus': -2 [ 68.136342][ T6994] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 68.138212][ T6997] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 68.150448][ T7000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.150647][ T7000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.153917][ T7000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.154121][ T7000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.205679][ T42] audit: type=1400 audit(1793304739.671:528): avc: denied { setopt } for pid=7008 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.259776][ T42] audit: type=1400 audit(1793304739.721:529): avc: denied { connect } for pid=7008 comm="syz.0.367" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.260507][ T42] audit: type=1400 audit(1793304739.721:530): avc: denied { name_bind } for pid=7013 comm="syz.3.368" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 68.260717][ T42] audit: type=1400 audit(1793304739.721:531): avc: denied { node_bind } for pid=7013 comm="syz.3.368" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 68.278510][ T7014] bond0: no command found in slaves file - use +ifname or -ifname [ 68.279266][ T7014] xt_CT: You must specify a L4 protocol and not use inversions on it [ 68.765787][ T7024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.371'. [ 68.765809][ T7024] netlink: 'syz.1.371': attribute type 7 has an invalid length. [ 68.765816][ T7024] netlink: 'syz.1.371': attribute type 8 has an invalid length. [ 68.765822][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 68.768933][ T7024] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 68.771584][ T7024] geneve1: entered promiscuous mode [ 68.772444][ T7024] erspan0: entered promiscuous mode [ 68.829582][ T42] audit: type=1400 audit(1793304740.291:532): avc: denied { write } for pid=7029 comm="syz.1.374" name="loop8" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.909839][ T7038] FAULT_INJECTION: forcing a failure. [ 68.909839][ T7038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.909858][ T7038] CPU: 1 UID: 0 PID: 7038 Comm: syz.1.378 Tainted: G L syzkaller #0 PREEMPT(full) [ 68.909895][ T7038] Tainted: [L]=SOFTLOCKUP [ 68.909900][ T7038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.909907][ T7038] Call Trace: [ 68.909911][ T7038] [ 68.909915][ T7038] dump_stack_lvl+0x100/0x190 [ 68.909937][ T7038] should_fail_ex.cold+0x5/0xa [ 68.909954][ T7038] _copy_to_user+0x32/0xd0 [ 68.909968][ T7038] simple_read_from_buffer+0xcb/0x170 [ 68.909982][ T7038] proc_fail_nth_read+0x1af/0x230 [ 68.909996][ T7038] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 68.910010][ T7038] ? rw_verify_area+0xce/0x6d0 [ 68.910024][ T7038] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 68.910037][ T7038] vfs_read+0x1e4/0xb40 [ 68.910054][ T7038] ? lock_acquire+0x1d1/0x380 [ 68.910068][ T7038] ? __fget_files+0x34/0x3d0 [ 68.910080][ T7038] ? __pfx_vfs_read+0x10/0x10 [ 68.910095][ T7038] ? find_held_lock+0x2b/0x80 [ 68.910106][ T7038] ? __fget_files+0x215/0x3d0 [ 68.910121][ T7038] ? __fget_files+0x21f/0x3d0 [ 68.910136][ T7038] ksys_read+0x12a/0x250 [ 68.910146][ T7038] ? __pfx_ksys_read+0x10/0x10 [ 68.910159][ T7038] do_syscall_64+0x123/0x790 [ 68.910171][ T7038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.910182][ T7038] RIP: 0033:0x7f0ebf35fd8e [ 68.910191][ T7038] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 68.910201][ T7038] RSP: 002b:00007f0ec01f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.910213][ T7038] RAX: ffffffffffffffda RBX: 00007f0ec01f76c0 RCX: 00007f0ebf35fd8e [ 68.910219][ T7038] RDX: 000000000000000f RSI: 00007f0ec01f70a0 RDI: 0000000000000004 [ 68.910225][ T7038] RBP: 00007f0ec01f7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.910231][ T7038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.910237][ T7038] R13: 00007f0ebf626038 R14: 00007f0ebf625fa0 R15: 00007ffcb3d44b08 [ 68.910251][ T7038] [ 69.105279][ T7051] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 69.105301][ T7051] CIFS mount error: No usable UNC path provided in device string! [ 69.105301][ T7051] [ 69.105431][ T7051] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 69.134129][ T6260] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 69.214033][ T7057] netlink: 'syz.1.385': attribute type 1 has an invalid length. [ 69.223554][ T7057] bond1: entered promiscuous mode [ 69.223715][ T7057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.232009][ T7057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=7057 comm=syz.1.385 [ 69.239225][ T7057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.239543][ T7057] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 69.239558][ T7057] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 69.242667][ T7057] bond1: (slave xfrm1): making interface the new active one [ 69.242683][ T7057] xfrm1: entered promiscuous mode [ 69.256606][ T7057] xfrm1: left promiscuous mode [ 69.286269][ T7009] ceph: No mds server is up or the cluster is laggy [ 69.309344][ T6260] usb 8-1: New USB device found: idVendor=0d8c, idProduct=0022, bcdDevice=0.00 [ 69.313967][ T6260] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.313984][ T6260] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 69.314012][ T6260] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.318568][ T6260] usb 8-1: config 0 descriptor?? [ 69.636752][ T7068] netlink: 36 bytes leftover after parsing attributes in process `syz.1.389'. [ 69.764059][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 69.798042][ T74] Bluetooth: hci4: Frame reassembly failed (-84) [ 69.814318][ T41] usb 7-1: USB disconnect, device number 5 [ 69.833636][ T7090] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 69.843385][ T7092] fuse: Bad value for 'fd' [ 69.875671][ T7095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.875861][ T7095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.909379][ T7097] FAULT_INJECTION: forcing a failure. [ 69.909379][ T7097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.909399][ T7097] CPU: 0 UID: 0 PID: 7097 Comm: syz.2.399 Tainted: G L syzkaller #0 PREEMPT(full) [ 69.909414][ T7097] Tainted: [L]=SOFTLOCKUP [ 69.909418][ T7097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.909424][ T7097] Call Trace: [ 69.909428][ T7097] [ 69.909433][ T7097] dump_stack_lvl+0x100/0x190 [ 69.909455][ T7097] should_fail_ex.cold+0x5/0xa [ 69.909471][ T7097] _copy_from_user+0x2e/0xd0 [ 69.909484][ T7097] copy_msghdr_from_user+0x9f/0x4c0 [ 69.909510][ T7097] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 69.909527][ T7097] ? _kstrtoull+0x144/0x200 [ 69.909541][ T7097] ? __pfx__kstrtoull+0x10/0x10 [ 69.909558][ T7097] ___sys_sendmsg+0x106/0x1e0 [ 69.909573][ T7097] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.909593][ T7097] ? __fget_files+0x34/0x3d0 [ 69.909615][ T7097] __sys_sendmmsg+0x20c/0x440 [ 69.909629][ T7097] ? __pfx___sys_sendmmsg+0x10/0x10 [ 69.909640][ T7097] ? ksys_write+0x190/0x250 [ 69.909660][ T7097] ? fput+0x7c/0x100 [ 69.909672][ T7097] ? ksys_write+0x1ac/0x250 [ 69.909681][ T7097] ? __pfx_ksys_write+0x10/0x10 [ 69.909693][ T7097] __x64_sys_sendmmsg+0x9c/0x100 [ 69.909704][ T7097] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.909715][ T7097] do_syscall_64+0x123/0x790 [ 69.909726][ T7097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.909737][ T7097] RIP: 0033:0x7f74e859f559 [ 69.909746][ T7097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.909757][ T7097] RSP: 002b:00007f74e67f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 69.909767][ T7097] RAX: ffffffffffffffda RBX: 00007f74e8825fa0 RCX: 00007f74e859f559 [ 69.909774][ T7097] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 69.909780][ T7097] RBP: 00007f74e67f6090 R08: 0000000000000000 R09: 0000000000000000 [ 69.909786][ T7097] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.909792][ T7097] R13: 00007f74e8826038 R14: 00007f74e8825fa0 R15: 00007ffec0cf5268 [ 69.909806][ T7097] [ 70.792297][ T7122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.792489][ T7122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.843016][ T7126] netlink: 'syz.2.407': attribute type 3 has an invalid length. [ 70.843029][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 70.868311][ T7128] Cannot find add_set index 0 as target [ 70.990446][ T7138] CIFS: iocharset name too long [ 71.000021][ T7138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=7138 comm=syz.2.413 [ 71.001837][ T7138] CIFS: iocharset name too long [ 71.004358][ T7138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=7138 comm=syz.2.413 [ 71.029230][ T7142] netlink: 666 bytes leftover after parsing attributes in process `syz.2.414'. [ 71.031380][ T7142] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 71.206651][ T1448] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.206699][ T1448] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.217431][ T24] cfg80211: failed to load regulatory.db [ 71.334424][ T7163] Cannot find add_set index 0 as target [ 71.367280][ T7167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.367646][ T7167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.381909][ T7167] jffs2: notice: (7167) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 71.400012][ T7172] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 71.613317][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 71.613328][ T42] audit: type=1400 audit(1793304743.071:552): avc: denied { create } for pid=7178 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.613351][ T42] audit: type=1400 audit(1793304743.071:553): avc: denied { create } for pid=7178 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.613880][ T42] audit: type=1400 audit(1793304743.071:554): avc: denied { getopt } for pid=7178 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.614194][ T42] audit: type=1400 audit(1793304743.081:555): avc: denied { read } for pid=7178 comm="syz.2.427" name="usbmon7" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 71.615364][ T42] audit: type=1400 audit(1793304743.081:556): avc: denied { open } for pid=7178 comm="syz.2.427" path="/dev/usbmon7" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 71.667008][ T42] audit: type=1400 audit(1793304743.131:557): avc: denied { bind } for pid=7178 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.667491][ T42] audit: type=1400 audit(1793304743.131:558): avc: denied { listen } for pid=7178 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.668103][ T42] audit: type=1400 audit(1793304743.131:559): avc: denied { accept } for pid=7178 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.720185][ T42] audit: type=1400 audit(1793304743.181:560): avc: denied { connect } for pid=7178 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.771743][ T42] audit: type=1400 audit(1793304743.231:561): avc: denied { connect } for pid=7178 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 71.844743][ T5138] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 71.890729][ T34] usb 8-1: USB disconnect, device number 8 [ 71.908279][ T7189] FAULT_INJECTION: forcing a failure. [ 71.908279][ T7189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.908297][ T7189] CPU: 0 UID: 0 PID: 7189 Comm: syz.3.429 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.908311][ T7189] Tainted: [L]=SOFTLOCKUP [ 71.908315][ T7189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.908321][ T7189] Call Trace: [ 71.908325][ T7189] [ 71.908329][ T7189] dump_stack_lvl+0x100/0x190 [ 71.908387][ T7189] should_fail_ex.cold+0x5/0xa [ 71.908416][ T7189] _copy_from_iter+0x1f4/0x16c0 [ 71.908439][ T7189] ? __pfx__copy_from_iter+0x10/0x10 [ 71.908454][ T7189] ? lock_acquire+0x1d1/0x380 [ 71.908474][ T7189] ? avc_has_perm_noaudit+0x56/0x470 [ 71.908487][ T7189] ? find_held_lock+0x2b/0x80 [ 71.908500][ T7189] ping_common_sendmsg+0xc4/0x2e0 [ 71.908530][ T7189] ping_v6_sendmsg+0x1fa/0x1600 [ 71.908541][ T7189] ? avc_has_perm_noaudit+0x145/0x470 [ 71.908555][ T7189] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 71.908565][ T7189] ? __lock_acquire+0x5c0/0x1f40 [ 71.908584][ T7189] ? reacquire_held_locks+0xdd/0x1f0 [ 71.908598][ T7189] ? release_sock+0x21/0x280 [ 71.908624][ T7189] ? inet_autobind+0x145/0x1a0 [ 71.908637][ T7189] ? lockdep_hardirqs_on+0x7d/0x110 [ 71.908654][ T7189] ? inet_autobind+0x145/0x1a0 [ 71.908663][ T7189] ? __local_bh_enable_ip+0xa5/0x120 [ 71.908676][ T7189] ? inet_autobind+0x14a/0x1a0 [ 71.908685][ T7189] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 71.908696][ T7189] inet_sendmsg+0x11c/0x140 [ 71.908709][ T7189] ____sys_sendmsg+0xa23/0xc30 [ 71.908723][ T7189] ? __pfx_inet_sendmsg+0x10/0x10 [ 71.908736][ T7189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.908751][ T7189] ? _kstrtoull+0x144/0x200 [ 71.908771][ T7189] ? __pfx__kstrtoull+0x10/0x10 [ 71.908788][ T7189] ___sys_sendmsg+0x190/0x1e0 [ 71.908803][ T7189] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.908823][ T7189] ? __fget_files+0x34/0x3d0 [ 71.908851][ T7189] __sys_sendmmsg+0x20c/0x440 [ 71.908864][ T7189] ? __pfx___sys_sendmmsg+0x10/0x10 [ 71.908875][ T7189] ? ksys_write+0x190/0x250 [ 71.908894][ T7189] ? fput+0x7c/0x100 [ 71.908906][ T7189] ? ksys_write+0x1ac/0x250 [ 71.908915][ T7189] ? __pfx_ksys_write+0x10/0x10 [ 71.908927][ T7189] __x64_sys_sendmmsg+0x9c/0x100 [ 71.908938][ T7189] ? lockdep_hardirqs_on+0x7d/0x110 [ 71.908948][ T7189] do_syscall_64+0x123/0x790 [ 71.908961][ T7189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.908976][ T7189] RIP: 0033:0x7fb787f9f559 [ 71.908989][ T7189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.909002][ T7189] RSP: 002b:00007fb788e51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 71.909026][ T7189] RAX: ffffffffffffffda RBX: 00007fb788225fa0 RCX: 00007fb787f9f559 [ 71.909035][ T7189] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 71.909042][ T7189] RBP: 00007fb788e51090 R08: 0000000000000000 R09: 0000000000000000 [ 71.909048][ T7189] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.909054][ T7189] R13: 00007fb788226038 R14: 00007fb788225fa0 R15: 00007fff44ba5858 [ 71.909068][ T7189] [ 72.114086][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 72.152698][ T7199] Cannot find add_set index 0 as target [ 72.220922][ T7203] ip6erspan0: entered allmulticast mode [ 72.274420][ T24] usb 5-1: New USB device found: idVendor=0d8c, idProduct=0022, bcdDevice=0.00 [ 72.275217][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.275229][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 72.275246][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.276788][ T24] usb 5-1: config 0 descriptor?? [ 72.703915][ T6260] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 72.854535][ T6260] usb 7-1: New USB device found: idVendor=0d8c, idProduct=0022, bcdDevice=0.00 [ 72.855408][ T6260] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.855420][ T6260] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 72.855437][ T6260] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.856746][ T6260] usb 7-1: config 0 descriptor?? [ 72.863966][ T5571] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 72.963646][ T7228] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 73.024565][ T5571] usb 8-1: New USB device found: idVendor=172f, idProduct=0501, bcdDevice=0.00 [ 73.025492][ T5571] usb 8-1: config 0 interface 0 has no altsetting 0 [ 73.025509][ T5571] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.026672][ T5571] usb 8-1: config 0 descriptor?? [ 73.216500][ T7245] Line length is too long: Should be less than 4094 [ 73.217066][ T7245] TC_ACT_REPEAT abuse ? [ 73.235750][ T5571] usbhid 8-1:0.0: can't add hid device: -71 [ 73.235802][ T5571] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 73.236803][ T5571] usb 8-1: USB disconnect, device number 9 [ 73.306016][ T7247] netlink: 'syz.1.449': attribute type 1 has an invalid length. [ 73.315541][ T7247] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.327385][ T7247] bond2: (slave geneve2): making interface the new active one [ 73.328445][ T7247] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 73.411512][ T7255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.411717][ T7255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.593763][ T7263] syzkaller1: entered promiscuous mode [ 73.593778][ T7263] syzkaller1: entered allmulticast mode [ 73.675150][ T7269] syzkaller0: entered promiscuous mode [ 73.675165][ T7269] syzkaller0: entered allmulticast mode [ 73.949541][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.464'. [ 74.037754][ T7312] syzkaller0: entered promiscuous mode [ 74.037768][ T7312] syzkaller0: entered allmulticast mode [ 74.333950][ T41] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 74.484471][ T41] usb 8-1: New USB device found: idVendor=172f, idProduct=0501, bcdDevice=0.00 [ 74.485472][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 74.485499][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.487786][ T41] usb 8-1: config 0 descriptor?? [ 74.536623][ T7335] x_tables: duplicate underflow at hook 2 [ 74.692698][ T41] usbhid 8-1:0.0: can't add hid device: -71 [ 74.692749][ T41] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 74.694090][ T41] usb 8-1: USB disconnect, device number 10 [ 74.793317][ T7345] netlink: 956 bytes leftover after parsing attributes in process `syz.1.479'. [ 74.826381][ T7347] team0: No ports can be present during mode change [ 74.856193][ T7349] syzkaller0: entered promiscuous mode [ 74.856227][ T7349] syzkaller0: entered allmulticast mode [ 74.877568][ T24] usb 5-1: USB disconnect, device number 10 [ 74.938369][ T7353] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 74.949586][ T7353] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.995934][ T7358] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.485'. [ 75.002640][ T7359] UBIFS error (pid: 7359): cannot open "ubi0:testvol", error -19 [ 75.042526][ T7362] Cannot find add_set index 0 as target [ 75.159086][ T7375] syzkaller0: entered promiscuous mode [ 75.159099][ T7375] syzkaller0: entered allmulticast mode [ 75.238145][ T7380] FAULT_INJECTION: forcing a failure. [ 75.238145][ T7380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.238176][ T7380] CPU: 1 UID: 0 PID: 7380 Comm: syz.1.495 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.238191][ T7380] Tainted: [L]=SOFTLOCKUP [ 75.238195][ T7380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.238208][ T7380] Call Trace: [ 75.238212][ T7380] [ 75.238216][ T7380] dump_stack_lvl+0x100/0x190 [ 75.238244][ T7380] should_fail_ex.cold+0x5/0xa [ 75.238260][ T7380] _copy_from_user+0x2e/0xd0 [ 75.238278][ T7380] ucma_write+0x123/0x330 [ 75.238304][ T7380] ? __pfx_ucma_write+0x10/0x10 [ 75.238318][ T7380] ? bpf_lsm_file_permission+0x9/0x10 [ 75.238332][ T7380] ? security_file_permission+0x76/0x210 [ 75.238343][ T7380] ? rw_verify_area+0xce/0x6d0 [ 75.238360][ T7380] vfs_write+0x2aa/0x1050 [ 75.238370][ T7380] ? __pfx_ucma_write+0x10/0x10 [ 75.238383][ T7380] ? lock_acquire+0x1d1/0x380 [ 75.238397][ T7380] ? __fget_files+0x34/0x3d0 [ 75.238409][ T7380] ? __pfx_vfs_write+0x10/0x10 [ 75.238418][ T7380] ? find_held_lock+0x2b/0x80 [ 75.238428][ T7380] ? __fget_files+0x215/0x3d0 [ 75.238440][ T7380] ? __fget_files+0x215/0x3d0 [ 75.238454][ T7380] ? __fget_files+0x21f/0x3d0 [ 75.238469][ T7380] ksys_write+0x1f8/0x250 [ 75.238479][ T7380] ? __pfx_ksys_write+0x10/0x10 [ 75.238492][ T7380] do_syscall_64+0x123/0x790 [ 75.238508][ T7380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.238519][ T7380] RIP: 0033:0x7f0ebf39f559 [ 75.238528][ T7380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.238538][ T7380] RSP: 002b:00007f0ec01f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.238550][ T7380] RAX: ffffffffffffffda RBX: 00007f0ebf625fa0 RCX: 00007f0ebf39f559 [ 75.238556][ T7380] RDX: 0000000000000018 RSI: 0000200000000340 RDI: 0000000000000003 [ 75.238563][ T7380] RBP: 00007f0ec01f7090 R08: 0000000000000000 R09: 0000000000000000 [ 75.238569][ T7380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.238575][ T7380] R13: 00007f0ebf626038 R14: 00007f0ebf625fa0 R15: 00007ffcb3d44b08 [ 75.238589][ T7380] [ 75.264556][ T7386] netlink: zone id is out of range [ 75.264617][ T7386] netlink: zone id is out of range [ 75.264623][ T7386] netlink: zone id is out of range [ 75.264629][ T7386] netlink: zone id is out of range [ 75.264635][ T7386] netlink: zone id is out of range [ 75.264640][ T7386] netlink: zone id is out of range [ 75.264643][ T7386] netlink: zone id is out of range [ 75.264647][ T7386] netlink: zone id is out of range [ 75.264651][ T7386] netlink: zone id is out of range [ 75.264654][ T7386] netlink: zone id is out of range [ 75.348070][ T7394] x_tables: duplicate underflow at hook 1 [ 75.467746][ T5889] usb 7-1: USB disconnect, device number 6 [ 75.478799][ T7403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.479131][ T7403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.540410][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 75.548778][ T7411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.553347][ T7414] syzkaller0: entered promiscuous mode [ 75.553358][ T7414] syzkaller0: entered allmulticast mode [ 75.634066][ T7420] netlink: 'syz.2.510': attribute type 1 has an invalid length. [ 75.643787][ T7420] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.650005][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'. [ 75.650016][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'. [ 75.650040][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'. [ 75.659382][ T7420] bond2: (slave geneve2): making interface the new active one [ 75.660220][ T7420] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 75.681310][ T7425] loop7: detected capacity change from 0 to 7 [ 75.684405][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.684489][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.686168][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.686206][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.688012][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.688045][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.688548][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.688579][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.688819][ T7427] Cannot find add_set index 0 as target [ 75.688913][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.688941][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.689051][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.689079][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.689144][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.689170][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.689190][ T7425] ldm_validate_partition_table(): Disk read failed. [ 75.689243][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.689268][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.689329][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.689354][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.689418][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.689481][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 75.689574][ T7425] Dev loop7: unable to read RDB block 0 [ 75.690217][ T7425] loop7: unable to read partition table [ 75.690300][ T7425] loop7: partition table beyond EOD, truncated [ 75.693540][ T7425] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 75.695935][ T5876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.695987][ T5876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.696005][ T5876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.696022][ T5876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.734807][ T7431] SELinux: policydb magic number 0x19 does not match expected magic number 0xf97cff8c [ 75.734848][ T7431] SELinux: failed to load policy [ 75.788941][ T7440] FAULT_INJECTION: forcing a failure. [ 75.788941][ T7440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.788960][ T7440] CPU: 0 UID: 0 PID: 7440 Comm: syz.2.517 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.788974][ T7440] Tainted: [L]=SOFTLOCKUP [ 75.788979][ T7440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.788985][ T7440] Call Trace: [ 75.788988][ T7440] [ 75.788993][ T7440] dump_stack_lvl+0x100/0x190 [ 75.789015][ T7440] should_fail_ex.cold+0x5/0xa [ 75.789031][ T7440] _copy_from_user+0x2e/0xd0 [ 75.789044][ T7440] ucma_destroy_id+0xb6/0x2a0 [ 75.789061][ T7440] ? __pfx_ucma_destroy_id+0x10/0x10 [ 75.789080][ T7440] ? __pfx_ucma_destroy_id+0x10/0x10 [ 75.789096][ T7440] ucma_write+0x1f6/0x330 [ 75.789110][ T7440] ? __pfx_ucma_write+0x10/0x10 [ 75.789124][ T7440] ? bpf_lsm_file_permission+0x9/0x10 [ 75.789139][ T7440] ? security_file_permission+0x76/0x210 [ 75.789150][ T7440] ? rw_verify_area+0xce/0x6d0 [ 75.789166][ T7440] vfs_write+0x2aa/0x1050 [ 75.789177][ T7440] ? __pfx_ucma_write+0x10/0x10 [ 75.789190][ T7440] ? lock_acquire+0x1d1/0x380 [ 75.789203][ T7440] ? __fget_files+0x34/0x3d0 [ 75.789215][ T7440] ? __pfx_vfs_write+0x10/0x10 [ 75.789224][ T7440] ? find_held_lock+0x2b/0x80 [ 75.789250][ T7440] ? __fget_files+0x215/0x3d0 [ 75.789261][ T7440] ? __fget_files+0x215/0x3d0 [ 75.789275][ T7440] ? __fget_files+0x21f/0x3d0 [ 75.789291][ T7440] ksys_write+0x1f8/0x250 [ 75.789301][ T7440] ? __pfx_ksys_write+0x10/0x10 [ 75.789314][ T7440] do_syscall_64+0x123/0x790 [ 75.789327][ T7440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.789337][ T7440] RIP: 0033:0x7f74e859f559 [ 75.789346][ T7440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.789357][ T7440] RSP: 002b:00007f74e67f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.789367][ T7440] RAX: ffffffffffffffda RBX: 00007f74e8825fa0 RCX: 00007f74e859f559 [ 75.789374][ T7440] RDX: 0000000000000018 RSI: 0000200000000340 RDI: 0000000000000003 [ 75.789380][ T7440] RBP: 00007f74e67f6090 R08: 0000000000000000 R09: 0000000000000000 [ 75.789386][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.789392][ T7440] R13: 00007f74e8826038 R14: 00007f74e8825fa0 R15: 00007ffec0cf5268 [ 75.789407][ T7440] [ 75.810531][ T7443] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 75.870523][ T7429] netlink: 20 bytes leftover after parsing attributes in process `syz.0.514'. [ 75.872972][ T5138] Bluetooth: Frame is too long (len 25, expected len 23) [ 76.045940][ T7457] syzkaller0: entered promiscuous mode [ 76.045954][ T7457] syzkaller0: entered allmulticast mode [ 76.145329][ T7465] netlink: 'syz.1.524': attribute type 1 has an invalid length. [ 76.146146][ T7465] netlink: 'syz.1.524': attribute type 4 has an invalid length. [ 76.208296][ T7469] capability: warning: `syz.1.525' uses deprecated v2 capabilities in a way that may be insecure [ 76.209672][ T7469] overlayfs: failed to resolve './dev/console': -2 [ 76.398846][ T7485] netlink: 'syz.1.533': attribute type 1 has an invalid length. [ 76.407496][ T7485] 8021q: adding VLAN 0 to HW filter on device bond3 [ 76.441758][ T7488] syzkaller0: entered promiscuous mode [ 76.441773][ T7488] syzkaller0: entered allmulticast mode [ 76.443023][ T7490] Cannot find add_set index 0 as target [ 76.495758][ T6260] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 76.527120][ T7496] x_tables: duplicate entry at hook 3 [ 76.561429][ T7500] batadv_slave_0: entered promiscuous mode [ 76.567417][ T7499] batadv_slave_0: left promiscuous mode [ 76.581249][ T7502] FAULT_INJECTION: forcing a failure. [ 76.581249][ T7502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.581269][ T7502] CPU: 3 UID: 0 PID: 7502 Comm: syz.1.541 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.581284][ T7502] Tainted: [L]=SOFTLOCKUP [ 76.581288][ T7502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.581294][ T7502] Call Trace: [ 76.581298][ T7502] [ 76.581303][ T7502] dump_stack_lvl+0x100/0x190 [ 76.581325][ T7502] should_fail_ex.cold+0x5/0xa [ 76.581342][ T7502] _copy_to_user+0x32/0xd0 [ 76.581356][ T7502] ucma_destroy_id+0x22d/0x2a0 [ 76.581373][ T7502] ? __pfx_ucma_destroy_id+0x10/0x10 [ 76.581392][ T7502] ? __pfx_ucma_destroy_id+0x10/0x10 [ 76.581408][ T7502] ucma_write+0x1f6/0x330 [ 76.581422][ T7502] ? __pfx_ucma_write+0x10/0x10 [ 76.581436][ T7502] ? bpf_lsm_file_permission+0x9/0x10 [ 76.581469][ T7502] ? security_file_permission+0x76/0x210 [ 76.581480][ T7502] ? rw_verify_area+0xce/0x6d0 [ 76.581496][ T7502] vfs_write+0x2aa/0x1050 [ 76.581506][ T7502] ? __pfx_ucma_write+0x10/0x10 [ 76.581520][ T7502] ? lock_acquire+0x1d1/0x380 [ 76.581533][ T7502] ? __fget_files+0x34/0x3d0 [ 76.581546][ T7502] ? __pfx_vfs_write+0x10/0x10 [ 76.581554][ T7502] ? find_held_lock+0x2b/0x80 [ 76.581564][ T7502] ? __fget_files+0x215/0x3d0 [ 76.581576][ T7502] ? __fget_files+0x215/0x3d0 [ 76.581590][ T7502] ? __fget_files+0x21f/0x3d0 [ 76.581606][ T7502] ksys_write+0x1f8/0x250 [ 76.581618][ T7502] ? __pfx_ksys_write+0x10/0x10 [ 76.581632][ T7502] do_syscall_64+0x123/0x790 [ 76.581644][ T7502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.581655][ T7502] RIP: 0033:0x7f0ebf39f559 [ 76.581664][ T7502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.581674][ T7502] RSP: 002b:00007f0ec01f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.581686][ T7502] RAX: ffffffffffffffda RBX: 00007f0ebf625fa0 RCX: 00007f0ebf39f559 [ 76.581692][ T7502] RDX: 0000000000000018 RSI: 0000200000000340 RDI: 0000000000000003 [ 76.581699][ T7502] RBP: 00007f0ec01f7090 R08: 0000000000000000 R09: 0000000000000000 [ 76.581705][ T7502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.581711][ T7502] R13: 00007f0ebf626038 R14: 00007f0ebf625fa0 R15: 00007ffcb3d44b08 [ 76.581725][ T7502] [ 76.612145][ T7507] xt_IDLETIMER: timeout value is zero [ 76.641177][ T7507] capability: warning: `syz.1.543' uses 32-bit capabilities (legacy support in use) [ 76.659541][ T6260] usb 5-1: New USB device found: idVendor=172f, idProduct=0501, bcdDevice=0.00 [ 76.660370][ T6260] usb 5-1: config 0 interface 0 has no altsetting 0 [ 76.660388][ T6260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.662241][ T6260] usb 5-1: config 0 descriptor?? [ 76.871827][ T7523] CIFS: VFS: UNC: path must begin with // or \\ [ 76.871841][ T7523] Malformed UNC in devname [ 76.871841][ T7523] [ 76.871854][ T7523] CIFS: VFS: Malformed UNC in devname [ 76.872972][ T42] kauditd_printk_skb: 43 callbacks suppressed [ 76.872985][ T42] audit: type=1400 audit(1793304748.331:605): avc: denied { nlmsg_read } for pid=7522 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.875150][ T6260] usbhid 5-1:0.0: can't add hid device: -71 [ 76.875257][ T6260] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 76.876549][ T6260] usb 5-1: USB disconnect, device number 11 [ 76.877714][ T7523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.547'. [ 76.878840][ T42] audit: type=1400 audit(1793304748.341:606): avc: denied { read } for pid=7522 comm="syz.2.547" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.878879][ T42] audit: type=1400 audit(1793304748.341:607): avc: denied { open } for pid=7522 comm="syz.2.547" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.882482][ T42] audit: type=1400 audit(1793304748.341:608): avc: denied { mount } for pid=7522 comm="syz.2.547" name="/" dev="ramfs" ino=18032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 76.883700][ T42] audit: type=1400 audit(1793304748.341:609): avc: denied { execute } for pid=7522 comm="syz.2.547" dev="tmpfs" ino=1033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.886142][ T42] audit: type=1400 audit(1793304748.351:610): avc: denied { execute_no_trans } for pid=7522 comm="syz.2.547" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.963340][ T7535] netlink: 'syz.2.554': attribute type 1 has an invalid length. [ 76.968354][ T42] audit: type=1400 audit(1793304748.431:611): avc: denied { mount } for pid=7532 comm="syz.1.553" name="/" dev="9p" ino=71827607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 76.974450][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 76.975131][ T42] audit: type=1400 audit(1793304748.431:612): avc: denied { write } for pid=7532 comm="syz.1.553" name="/" dev="9p" ino=71827607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.975157][ T42] audit: type=1400 audit(1793304748.431:613): avc: denied { remove_name } for pid=7532 comm="syz.1.553" name="file0" dev="9p" ino=71827617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.975177][ T42] audit: type=1400 audit(1793304748.431:614): avc: denied { unlink } for pid=7532 comm="syz.1.553" name="file0" dev="9p" ino=71827617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.978360][ T7535] 8021q: adding VLAN 0 to HW filter on device bond3 [ 77.039937][ T7540] x_tables: unsorted entry at hook 3 [ 77.044405][ T7542] netlink: 'syz.2.558': attribute type 11 has an invalid length. [ 77.044419][ T7542] netlink: 224 bytes leftover after parsing attributes in process `syz.2.558'. [ 77.099557][ T7549] FAULT_INJECTION: forcing a failure. [ 77.099557][ T7549] name failslab, interval 1, probability 0, space 0, times 0 [ 77.099577][ T7549] CPU: 0 UID: 0 PID: 7549 Comm: syz.3.561 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.099599][ T7549] Tainted: [L]=SOFTLOCKUP [ 77.099603][ T7549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.099609][ T7549] Call Trace: [ 77.099613][ T7549] [ 77.099618][ T7549] dump_stack_lvl+0x100/0x190 [ 77.099641][ T7549] should_fail_ex.cold+0x5/0xa [ 77.099658][ T7549] should_failslab+0xc2/0x120 [ 77.099671][ T7549] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 77.099688][ T7549] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 77.099720][ T7549] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 77.099755][ T7549] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 77.099772][ T7549] alloc_inode+0x68/0x250 [ 77.099790][ T7549] new_inode+0x22/0x1c0 [ 77.099808][ T7549] hugetlbfs_get_inode+0x339/0x740 [ 77.099827][ T7549] hugetlb_file_setup+0x15b/0x5b0 [ 77.099840][ T7549] ksys_mmap_pgoff+0x242/0x610 [ 77.099860][ T7549] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 77.099875][ T7549] ? xfd_validate_state+0x129/0x190 [ 77.099891][ T7549] __x64_sys_mmap+0x125/0x190 [ 77.099906][ T7549] do_syscall_64+0x123/0x790 [ 77.099919][ T7549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.099929][ T7549] RIP: 0033:0x7fb787f9f559 [ 77.099939][ T7549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.099948][ T7549] RSP: 002b:00007fb788e51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 77.099960][ T7549] RAX: ffffffffffffffda RBX: 00007fb788225fa0 RCX: 00007fb787f9f559 [ 77.099967][ T7549] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 77.099973][ T7549] RBP: 00007fb788036b20 R08: ffffffffffffffff R09: 0000000000000000 [ 77.099980][ T7549] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 77.099986][ T7549] R13: 00007fb788226038 R14: 00007fb788225fa0 R15: 00007fff44ba5858 [ 77.100000][ T7549] [ 77.123680][ T7551] Cannot find add_set index 0 as target [ 77.216968][ T7546] ima: policy update failed [ 77.252293][ T7559] FAULT_INJECTION: forcing a failure. [ 77.252293][ T7559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.252326][ T7559] CPU: 1 UID: 0 PID: 7559 Comm: syz.2.564 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.252340][ T7559] Tainted: [L]=SOFTLOCKUP [ 77.252344][ T7559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.252356][ T7559] Call Trace: [ 77.252360][ T7559] [ 77.252364][ T7559] dump_stack_lvl+0x100/0x190 [ 77.252397][ T7559] should_fail_ex.cold+0x5/0xa [ 77.252414][ T7559] _copy_to_user+0x32/0xd0 [ 77.252432][ T7559] simple_read_from_buffer+0xcb/0x170 [ 77.252446][ T7559] proc_fail_nth_read+0x1af/0x230 [ 77.252460][ T7559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.252474][ T7559] ? rw_verify_area+0xce/0x6d0 [ 77.252492][ T7559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.252504][ T7559] vfs_read+0x1e4/0xb40 [ 77.252521][ T7559] ? lock_acquire+0x1d1/0x380 [ 77.252535][ T7559] ? __fget_files+0x34/0x3d0 [ 77.252546][ T7559] ? __pfx_vfs_read+0x10/0x10 [ 77.252561][ T7559] ? find_held_lock+0x2b/0x80 [ 77.252572][ T7559] ? __fget_files+0x215/0x3d0 [ 77.252586][ T7559] ? __fget_files+0x21f/0x3d0 [ 77.252602][ T7559] ksys_read+0x12a/0x250 [ 77.252611][ T7559] ? __pfx_ksys_read+0x10/0x10 [ 77.252625][ T7559] do_syscall_64+0x123/0x790 [ 77.252640][ T7559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.252651][ T7559] RIP: 0033:0x7f74e855fd8e [ 77.252660][ T7559] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 77.252671][ T7559] RSP: 002b:00007f74e67f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.252681][ T7559] RAX: ffffffffffffffda RBX: 00007f74e67f66c0 RCX: 00007f74e855fd8e [ 77.252688][ T7559] RDX: 000000000000000f RSI: 00007f74e67f60a0 RDI: 0000000000000004 [ 77.252694][ T7559] RBP: 00007f74e67f6090 R08: 0000000000000000 R09: 0000000000000000 [ 77.252700][ T7559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.252706][ T7559] R13: 00007f74e8826038 R14: 00007f74e8825fa0 R15: 00007ffec0cf5268 [ 77.252720][ T7559] [ 77.406188][ T7575] ------------[ cut here ]------------ [ 77.406197][ T7575] 1 [ 77.406209][ T7575] WARNING: mm/slub.c:5459 at ___kmalloc_large_node+0x132/0x170, CPU#0: syz.1.572/7575 [ 77.411862][ T7575] Modules linked in: [ 77.413137][ T7575] CPU: 0 UID: 0 PID: 7575 Comm: syz.1.572 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.416757][ T7575] Tainted: [L]=SOFTLOCKUP [ 77.418139][ T7575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.422083][ T7575] RIP: 0010:___kmalloc_large_node+0x132/0x170 [ 77.424095][ T7575] Code: db 0f 85 66 ff ff ff 45 31 e4 eb cb 48 81 ff 00 00 40 00 0f 86 07 ff ff ff 80 3d d8 1e d6 0f 00 75 0b c6 05 cf 1e d6 0f 01 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc [ 77.430380][ T7575] RSP: 0018:ffffc9000426fa60 EFLAGS: 00010246 [ 77.432779][ T7575] RAX: ffffffff85e72264 RBX: 0000000100000578 RCX: ffffc900062b1000 [ 77.435795][ T7575] RDX: 00000000ffffffff RSI: 0000000000000cc0 RDI: 0000000100000578 [ 77.438351][ T7575] RBP: 0000000000000cc0 R08: 0000000000000000 R09: 000000004000015e [ 77.440799][ T7575] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000cc0 [ 77.443194][ T7575] R13: 00000000ffffffff R14: 0000000100000578 R15: ffff88802b4c2000 [ 77.445974][ T7575] FS: 00007f0ec01f76c0(0000) GS:ffff8880d448e000(0000) knlGS:0000000000000000 [ 77.448828][ T7575] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.450837][ T7575] CR2: 000000110c28b12c CR3: 00000000305e7000 CR4: 0000000000352ef0 [ 77.453297][ T7575] DR0: 0000000000000000 DR1: 0000000000008000 DR2: 0000000000000000 [ 77.455958][ T7575] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 77.458557][ T7575] Call Trace: [ 77.459590][ T7575] [ 77.460511][ T7575] __kmalloc_large_node_noprof+0x1c/0x70 [ 77.462242][ T7575] __kmalloc_noprof+0x5a3/0x840 [ 77.463882][ T7575] ? avc_has_extended_perms+0x4a5/0x10b0 [ 77.465865][ T7575] ? drm_syncobj_array_find+0x34/0x3a0 [ 77.467557][ T7575] drm_syncobj_array_find+0x34/0x3a0 [ 77.469207][ T7575] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 77.471036][ T7575] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 77.473021][ T7575] ? drm_dev_enter+0x53/0x170 [ 77.474832][ T7575] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 77.477106][ T7575] ? drm_dev_exit+0x41/0x60 [ 77.478550][ T7575] ? drm_dev_exit+0x41/0x60 [ 77.479946][ T7575] drm_ioctl_kernel+0x1f3/0x3e0 [ 77.481539][ T7575] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 77.483600][ T7575] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 77.485281][ T7575] drm_ioctl+0x5e6/0xc60 [ 77.486565][ T7575] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 77.488690][ T7575] ? __pfx_drm_ioctl+0x10/0x10 [ 77.490137][ T7575] ? __fget_files+0x34/0x3d0 [ 77.491510][ T7575] ? selinux_file_ioctl+0x1e0/0x290 [ 77.493079][ T7575] ? selinux_file_ioctl+0x1e7/0x290 [ 77.493270][ T7580] netlink: 'syz.1.572': attribute type 1 has an invalid length. [ 77.496906][ T7575] ? __pfx_drm_ioctl+0x10/0x10 [ 77.498510][ T7575] __x64_sys_ioctl+0x18e/0x210 [ 77.500096][ T7575] do_syscall_64+0x123/0x790 [ 77.501442][ T7575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.503186][ T7575] RIP: 0033:0x7f0ebf39f559 [ 77.504702][ T7575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.505667][ T7580] 8021q: adding VLAN 0 to HW filter on device bond4 [ 77.512365][ T7575] RSP: 002b:00007f0ec01f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.514895][ T7575] RAX: ffffffffffffffda RBX: 00007f0ebf625fa0 RCX: 00007f0ebf39f559 [ 77.517297][ T7575] RDX: 0000200000000040 RSI: 00000000c01864cd RDI: 0000000000000004 [ 77.520123][ T7575] RBP: 00007f0ebf436b20 R08: 0000000000000000 R09: 0000000000000000 [ 77.522492][ T7575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.525137][ T7575] R13: 00007f0ebf626038 R14: 00007f0ebf625fa0 R15: 00007ffcb3d44b08 [ 77.527732][ T7575] [ 77.528827][ T7575] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 77.530991][ T7575] CPU: 0 UID: 0 PID: 7575 Comm: syz.1.572 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.534223][ T7575] Tainted: [L]=SOFTLOCKUP [ 77.535495][ T7575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.538516][ T7575] Call Trace: [ 77.539483][ T7575] [ 77.540358][ T7575] dump_stack_lvl+0x100/0x190 [ 77.541776][ T7575] vpanic+0x2dc/0x6f8 [ 77.542999][ T7575] panic+0xd1/0xe0 [ 77.544170][ T7575] ? __pfx_panic+0x10/0x10 [ 77.545490][ T7575] check_panic_on_warn.cold+0x19/0x34 [ 77.547116][ T7575] ? ___kmalloc_large_node+0x132/0x170 [ 77.548722][ T7575] __warn.cold+0x191/0x321 [ 77.550057][ T7575] __report_bug+0x30f/0x440 [ 77.551431][ T7575] ? ___kmalloc_large_node+0x132/0x170 [ 77.553046][ T7575] ? __pfx___report_bug+0x10/0x10 [ 77.554554][ T7575] ? tomoyo_path_number_perm+0x46d/0x580 [ 77.556214][ T7575] ? stack_trace_save+0x8e/0xc0 [ 77.557707][ T7575] ? __pfx_stack_trace_save+0x10/0x10 [ 77.559326][ T7575] ? ___kmalloc_large_node+0x132/0x170 [ 77.560943][ T7575] report_bug+0xb3/0x220 [ 77.562245][ T7575] ? ___kmalloc_large_node+0x132/0x170 [ 77.563900][ T7575] handle_bug+0x16a/0x2a0 [ 77.565194][ T7575] exc_invalid_op+0x17/0x50 [ 77.566590][ T7575] asm_exc_invalid_op+0x1a/0x20 [ 77.568065][ T7575] RIP: 0010:___kmalloc_large_node+0x132/0x170 [ 77.569876][ T7575] Code: db 0f 85 66 ff ff ff 45 31 e4 eb cb 48 81 ff 00 00 40 00 0f 86 07 ff ff ff 80 3d d8 1e d6 0f 00 75 0b c6 05 cf 1e d6 0f 01 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc [ 77.575487][ T7575] RSP: 0018:ffffc9000426fa60 EFLAGS: 00010246 [ 77.577292][ T7575] RAX: ffffffff85e72264 RBX: 0000000100000578 RCX: ffffc900062b1000 [ 77.579614][ T7575] RDX: 00000000ffffffff RSI: 0000000000000cc0 RDI: 0000000100000578 [ 77.582472][ T7575] RBP: 0000000000000cc0 R08: 0000000000000000 R09: 000000004000015e [ 77.585417][ T7575] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000cc0 [ 77.588268][ T7575] R13: 00000000ffffffff R14: 0000000100000578 R15: ffff88802b4c2000 [ 77.591192][ T7575] ? drm_syncobj_array_find+0x34/0x3a0 [ 77.593189][ T7575] __kmalloc_large_node_noprof+0x1c/0x70 [ 77.595175][ T7575] __kmalloc_noprof+0x5a3/0x840 [ 77.596808][ T7575] ? avc_has_extended_perms+0x4a5/0x10b0 [ 77.598756][ T7575] ? drm_syncobj_array_find+0x34/0x3a0 [ 77.600529][ T7575] drm_syncobj_array_find+0x34/0x3a0 [ 77.602102][ T7575] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 77.603887][ T7575] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 77.605762][ T7575] ? drm_dev_enter+0x53/0x170 [ 77.607159][ T7575] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 77.609195][ T7575] ? drm_dev_exit+0x41/0x60 [ 77.610558][ T7575] ? drm_dev_exit+0x41/0x60 [ 77.611929][ T7575] drm_ioctl_kernel+0x1f3/0x3e0 [ 77.613370][ T7575] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 77.615395][ T7575] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 77.616992][ T7575] drm_ioctl+0x5e6/0xc60 [ 77.618399][ T7575] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 77.620539][ T7575] ? __pfx_drm_ioctl+0x10/0x10 [ 77.621979][ T7575] ? __fget_files+0x34/0x3d0 [ 77.623385][ T7575] ? selinux_file_ioctl+0x1e0/0x290 [ 77.624925][ T7575] ? selinux_file_ioctl+0x1e7/0x290 [ 77.626476][ T7575] ? __pfx_drm_ioctl+0x10/0x10 [ 77.627926][ T7575] __x64_sys_ioctl+0x18e/0x210 [ 77.629602][ T7575] do_syscall_64+0x123/0x790 [ 77.631028][ T7575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.632778][ T7575] RIP: 0033:0x7f0ebf39f559 [ 77.634154][ T7575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.639871][ T7575] RSP: 002b:00007f0ec01f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.642353][ T7575] RAX: ffffffffffffffda RBX: 00007f0ebf625fa0 RCX: 00007f0ebf39f559 [ 77.644720][ T7575] RDX: 0000200000000040 RSI: 00000000c01864cd RDI: 0000000000000004 [ 77.647055][ T7575] RBP: 00007f0ebf436b20 R08: 0000000000000000 R09: 0000000000000000 [ 77.649410][ T7575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.651744][ T7575] R13: 00007f0ebf626038 R14: 00007f0ebf625fa0 R15: 00007ffcb3d44b08 [ 77.654257][ T7575] [ 77.658052][ T7575] Kernel Offset: disabled [ 77.659428][ T7575] Rebooting in 86400 seconds..