last executing test programs: 7.841402509s ago: executing program 3 (id=1761): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="3b4697"], 0x1b0) 7.511786381s ago: executing program 3 (id=1763): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000102000aac14140ce000006a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.915697906s ago: executing program 3 (id=1768): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r3, 0x5) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = syz_open_dev$vivid(0x0, 0x2, 0x2) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000400)={0x0, 0x1, @stop_pts=0x5320000000000000}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001540)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0xbb, 0x1b99, 0x0, 0x3, 0x4, 0x13, "b7f8ada941fbfa24b230324b3122fe227031c9fb2622e97099e554942542690fb0219cbefea4d3a5c75b831367cbd848f5a1b04aff3568c826ed63af1057abf6", "e5774ce57e1395c66549c09e1a753713979872f8b081a61f3a2ce683ee7b6ead66b72f1365216f05a2ea09d6cd61fc85ebf757186da4d22874517bf0100dd87b", "8cbcf6468f994f1274302174ba4d9ee37a68f48b1ba174b75fe8178e0debfa0a", [0x80000000, 0xb52]}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'batadv_slave_1\x00'}) 4.840276299s ago: executing program 1 (id=1777): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x20000000, 0x0, 0x64, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000380)=0x80000000001, 0x4) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0xb, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x1ff) write(r6, &(0x7f0000001000)='8', 0x1) 4.602221561s ago: executing program 0 (id=1778): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 3.216788852s ago: executing program 1 (id=1779): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x8090) lseek(r0, 0xffffffff, 0x0) 3.216617658s ago: executing program 0 (id=1780): add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, 0xfffffffffffffffd) 3.216403128s ago: executing program 0 (id=1782): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00(', @ANYRES16=r0, @ANYBLOB="0100"], 0x4c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4800) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000040)=0x1, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x602cc0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000611000/0x1000)=nil) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@ctrl_frame=@rts={{}, {0xe}, @device_b, @broadcast}, 0x10) 2.726536383s ago: executing program 2 (id=1784): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x40, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x10, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40810}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800024000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x36, 0xfff, 0x76b83ded, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.396794237s ago: executing program 1 (id=1785): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc/net/rpc/nfsd.export/channel\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000a00)) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000d00)={0x1, 0x1}) 2.125380869s ago: executing program 1 (id=1786): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, &(0x7f0000007780)={0x6, 0x2, 0x7}) syz_emit_ethernet(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.006553148s ago: executing program 3 (id=1787): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001fc0)={'ip6gre0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x2f, 0x9f, 0xb, 0x7fff, 0x63, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x10, 0x3cd8, 0x1, 0x2}}) 2.006222302s ago: executing program 0 (id=1788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '\x918s\x89X', 0x20, 0xffd}, 0x2f, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1.805804846s ago: executing program 0 (id=1789): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$kcm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b00)='Q', 0x1}], 0x1}, 0x4000804) close(r0) 1.767513273s ago: executing program 2 (id=1790): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x200}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x0, 0x1}}}}}}}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='2', 0x1) syz_emit_ethernet(0x17, 0x0, 0x0) 1.767265517s ago: executing program 3 (id=1791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x100, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000003, 0x5, 0x6, 0x5d05}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)=',', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x40045) 1.334613291s ago: executing program 2 (id=1792): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x8) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="040f0c"], 0x7) 1.158058578s ago: executing program 3 (id=1793): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904004001030000000921010000012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0xb, 0x880c0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f00000004c0)=[{0x3, 0xe000, 0x0, 0x0}], 0x1}) 935.264027ms ago: executing program 2 (id=1794): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) fstat(r0, &(0x7f0000000140)) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCG_STATS(r3, 0xc0109207, &(0x7f0000000180)) 790.067354ms ago: executing program 0 (id=1795): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x80000001, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 789.05798ms ago: executing program 2 (id=1796): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 364.682626ms ago: executing program 2 (id=1797): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='md0\x00', 0x3) socket$inet_sctp(0x2, 0x1, 0x84) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='1:0', 0x3) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 256.254769ms ago: executing program 1 (id=1798): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000340)={0x3, 0x3, 0xf, 0x0, 0xe, 0x7fff}) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 0s ago: executing program 1 (id=1799): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) kernel console output (not intermixed with test programs): 71] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 102.559969][ T7171] ? trace_kmem_cache_alloc+0xdd/0x100 [ 102.560003][ T7171] ? vhost_task_create+0x1db/0x370 [ 102.560027][ T7171] __vmalloc_node_noprof+0xad/0xf0 [ 102.560046][ T7171] ? vhost_task_create+0x1db/0x370 [ 102.560074][ T7171] copy_process+0x803/0x8370 [ 102.560147][ T7171] ? __pfx_copy_process+0x10/0x10 [ 102.560176][ T7171] ? __kasan_kmalloc+0xaa/0xb0 [ 102.560204][ T7171] ? lockdep_init_map_type+0x5c/0x250 [ 102.560235][ T7171] ? lockdep_init_map_type+0x5c/0x250 [ 102.560265][ T7171] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 102.560291][ T7171] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 102.560315][ T7171] vhost_task_create+0x1db/0x370 [ 102.560340][ T7171] ? __pfx_vhost_task_create+0x10/0x10 [ 102.560374][ T7171] ? __pfx_vhost_task_fn+0x10/0x10 [ 102.560403][ T7171] ? __pfx___mutex_lock+0x10/0x10 [ 102.560423][ T7171] ? kasan_quarantine_put+0x104/0x240 [ 102.560454][ T7171] kvm_mmu_post_init_vm+0x1b3/0x360 [ 102.560476][ T7171] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 102.560497][ T7171] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 102.560527][ T7171] kvm_vcpu_ioctl+0x730/0x1700 [ 102.560555][ T7171] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 102.560581][ T7171] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.560612][ T7171] ? do_vfs_ioctl+0x226/0x13e0 [ 102.560637][ T7171] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 102.560658][ T7171] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 102.560690][ T7171] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 102.560738][ T7171] ? selinux_file_ioctl+0x13b/0x290 [ 102.560764][ T7171] ? selinux_file_ioctl+0xb6/0x290 [ 102.560799][ T7171] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 102.560827][ T7171] __x64_sys_ioctl+0x18e/0x210 [ 102.560853][ T7171] do_syscall_64+0x123/0x790 [ 102.560875][ T7171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.560895][ T7171] RIP: 0033:0x7f9ac899e0d9 [ 102.560913][ T7171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.560929][ T7171] RSP: 002b:00007f9ac9866028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.560949][ T7171] RAX: ffffffffffffffda RBX: 00007f9ac8c25fa0 RCX: 00007f9ac899e0d9 [ 102.560961][ T7171] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 102.560972][ T7171] RBP: 00007f9ac9866090 R08: 0000000000000000 R09: 0000000000000000 [ 102.560984][ T7171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.560995][ T7171] R13: 00007f9ac8c26038 R14: 00007f9ac8c25fa0 R15: 00007ffedc949cc8 [ 102.561022][ T7171] [ 102.788304][ T7171] warn_alloc: 1 callbacks suppressed [ 102.788322][ T7171] syz.3.402: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 102.799807][ T7171] CPU: 2 UID: 0 PID: 7171 Comm: syz.3.402 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.799836][ T7171] Tainted: [L]=SOFTLOCKUP [ 102.799842][ T7171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.799853][ T7171] Call Trace: [ 102.799860][ T7171] [ 102.799868][ T7171] dump_stack_lvl+0x100/0x190 [ 102.799900][ T7171] warn_alloc.cold+0x9e/0xb2 [ 102.799922][ T7171] ? __pfx_warn_alloc+0x10/0x10 [ 102.799945][ T7171] ? lockdep_hardirqs_on+0x7d/0x110 [ 102.799968][ T7171] ? __get_vm_area_node+0x2f0/0x350 [ 102.800004][ T7171] ? __get_vm_area_node+0x22b/0x350 [ 102.800039][ T7171] __vmalloc_node_range_noprof+0xf6b/0x1460 [ 102.800063][ T7171] ? find_held_lock+0x2b/0x80 [ 102.800111][ T7171] ? rcu_read_unlock+0x17/0x60 [ 102.800136][ T7171] ? vhost_task_create+0x1db/0x370 [ 102.800168][ T7171] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 102.800192][ T7171] ? trace_kmem_cache_alloc+0xdd/0x100 [ 102.800225][ T7171] ? vhost_task_create+0x1db/0x370 [ 102.800250][ T7171] __vmalloc_node_noprof+0xad/0xf0 [ 102.800269][ T7171] ? vhost_task_create+0x1db/0x370 [ 102.800295][ T7171] copy_process+0x803/0x8370 [ 102.800341][ T7171] ? __pfx_copy_process+0x10/0x10 [ 102.800370][ T7171] ? __kasan_kmalloc+0xaa/0xb0 [ 102.800397][ T7171] ? lockdep_init_map_type+0x5c/0x250 [ 102.800427][ T7171] ? lockdep_init_map_type+0x5c/0x250 [ 102.800456][ T7171] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 102.800483][ T7171] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 102.800507][ T7171] vhost_task_create+0x1db/0x370 [ 102.800533][ T7171] ? __pfx_vhost_task_create+0x10/0x10 [ 102.800566][ T7171] ? __pfx_vhost_task_fn+0x10/0x10 [ 102.800595][ T7171] ? __pfx___mutex_lock+0x10/0x10 [ 102.800615][ T7171] ? kasan_quarantine_put+0x104/0x240 [ 102.800647][ T7171] kvm_mmu_post_init_vm+0x1b3/0x360 [ 102.800668][ T7171] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 102.800687][ T7171] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 102.800718][ T7171] kvm_vcpu_ioctl+0x730/0x1700 [ 102.800745][ T7171] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 102.800769][ T7171] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.800824][ T7171] ? do_vfs_ioctl+0x226/0x13e0 [ 102.800849][ T7171] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 102.800870][ T7171] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 102.800902][ T7171] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 102.800979][ T7171] ? selinux_file_ioctl+0x13b/0x290 [ 102.801025][ T7171] ? selinux_file_ioctl+0xb6/0x290 [ 102.801052][ T7171] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 102.801077][ T7171] __x64_sys_ioctl+0x18e/0x210 [ 102.801101][ T7171] do_syscall_64+0x123/0x790 [ 102.801124][ T7171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.801143][ T7171] RIP: 0033:0x7f9ac899e0d9 [ 102.801158][ T7171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.801175][ T7171] RSP: 002b:00007f9ac9866028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.801193][ T7171] RAX: ffffffffffffffda RBX: 00007f9ac8c25fa0 RCX: 00007f9ac899e0d9 [ 102.801205][ T7171] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 102.801216][ T7171] RBP: 00007f9ac9866090 R08: 0000000000000000 R09: 0000000000000000 [ 102.801230][ T7171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.801263][ T7171] R13: 00007f9ac8c26038 R14: 00007f9ac8c25fa0 R15: 00007ffedc949cc8 [ 102.801288][ T7171] [ 102.801410][ T7171] Mem-Info: [ 102.950966][ T7171] active_anon:6886 inactive_anon:860 isolated_anon:0 [ 102.950966][ T7171] active_file:3738 inactive_file:16803 isolated_file:0 [ 102.950966][ T7171] unevictable:1000 dirty:205 writeback:0 [ 102.950966][ T7171] slab_reclaimable:10348 slab_unreclaimable:65265 [ 102.950966][ T7171] mapped:25053 shmem:1572 pagetables:5905 [ 102.950966][ T7171] sec_pagetables:297 bounce:0 [ 102.950966][ T7171] kernel_misc_reclaimable:0 [ 102.950966][ T7171] free:351009 free_pcp:26312 free_cma:0 [ 102.970127][ T7171] Node 0 active_anon:26884kB inactive_anon:3440kB active_file:14952kB inactive_file:54512kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:100212kB dirty:820kB writeback:0kB shmem:4288kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13216kB pagetables:16352kB sec_pagetables:1188kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 102.970770][ T34] tipc: Node number set to 4269801492 [ 102.984229][ T7171] Node 1 active_anon:660kB inactive_anon:0kB active_file:0kB inactive_file:12700kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:7268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 103.000874][ T7171] Node 0 DMA free:6176kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:240kB local_pcp:36kB free_cma:0kB [ 103.014589][ T7171] lowmem_reserve[]: 0 1224 1224 1224 1224 [ 103.017228][ T7171] Node 0 DMA32 free:84956kB boost:0kB min:27364kB low:34204kB high:41044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26868kB inactive_anon:3440kB active_file:14952kB inactive_file:54432kB unevictable:2000kB writepending:820kB zspages:0kB present:2080628kB managed:1253908kB mlocked:0kB bounce:0kB free_pcp:29096kB local_pcp:9852kB free_cma:0kB [ 103.031391][ T7171] lowmem_reserve[]: 0 0 0 0 0 [ 103.033580][ T7171] Node 1 Normal free:1315836kB boost:0kB min:39872kB low:49840kB high:59808kB reserved_highatomic:0KB free_highatomic:0KB active_anon:540kB inactive_anon:0kB active_file:0kB inactive_file:12700kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:73148kB local_pcp:6268kB free_cma:0kB [ 103.047365][ T7171] lowmem_reserve[]: 0 0 0 0 0 [ 103.049608][ T7171] Node 0 DMA: 16*4kB (UM) 12*8kB (UM) 8*16kB (UM) 4*32kB (U) 2*64kB (UM) 4*128kB (U) 2*256kB (UM) 1*512kB (M) 2*1024kB (UM) 1*2048kB (M) 0*4096kB = 6176kB [ 103.057212][ T7171] Node 0 DMA32: 703*4kB (UME) 297*8kB (UME) 155*16kB (UME) 408*32kB (UME) 136*64kB (UME) 86*128kB (UME) 61*256kB (UME) 34*512kB (UM) 11*1024kB (U) 0*2048kB 0*4096kB = 84724kB [ 103.064738][ T7171] Node 1 Normal: 230*4kB (UM) 167*8kB (UM) 155*16kB (UM) 172*32kB (UME) 161*64kB (UME) 140*128kB (UM) 166*256kB (UME) 130*512kB (UME) 101*1024kB (UM) 2*2048kB (ME) 259*4096kB (M) = 1315904kB [ 103.072964][ T7171] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 103.076890][ T7171] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 103.080841][ T7171] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 103.084774][ T7171] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 103.088867][ T7171] 22086 total pagecache pages [ 103.091011][ T7171] 0 pages in swap cache [ 103.092943][ T7171] Free swap = 124996kB [ 103.094690][ T7171] Total swap = 124996kB [ 103.096462][ T7171] 1048443 pages RAM [ 103.098071][ T7171] 0 pages HighMem/MovableOnly [ 103.100224][ T7171] 285655 pages reserved [ 103.102307][ T7171] 0 pages cma reserved [ 103.244161][ T42] audit: type=1400 audit(1787824903.893:463): avc: denied { ioctl } for pid=7188 comm="syz.2.408" path="socket:[16119]" dev="sockfs" ino=16119 ioctlcmd=0x922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.459471][ T5731] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 103.754840][ T7233] __nla_validate_parse: 7 callbacks suppressed [ 103.754854][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.422'. [ 103.899221][ T7240] tmpfs: Unknown parameter 'usrquota0' [ 103.920502][ T7242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.022391][ T7249] overlayfs: failed to resolve './sys/devices/system/cpu/cpu1/online': -2 [ 104.089994][ T7252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.102156][ T7252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.528211][ T7266] netlink: 112 bytes leftover after parsing attributes in process `syz.3.434'. [ 104.570108][ T42] audit: type=1400 audit(1787824905.213:464): avc: denied { ioctl } for pid=7270 comm="syz.3.436" path="socket:[18551]" dev="sockfs" ino=18551 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.581721][ T42] audit: type=1400 audit(1787824905.223:465): avc: denied { connect } for pid=7270 comm="syz.3.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.588634][ T42] audit: type=1400 audit(1787824905.223:466): avc: denied { write } for pid=7270 comm="syz.3.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.623126][ T7271] Console: switching to colour dummy device 80x25 [ 104.655563][ T7277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'. [ 104.817867][ T7284] netlink: 'syz.1.440': attribute type 83 has an invalid length. [ 104.942582][ T42] audit: type=1400 audit(1787824905.593:467): avc: denied { mounton } for pid=7289 comm="syz.1.443" path="/154/bus" dev="tmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 104.942730][ T7290] /dev/nullb0: Can't lookup blockdev [ 105.032320][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.446'. [ 105.219861][ T5731] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 105.296434][ T7316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.452'. [ 105.394605][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.455'. [ 105.416900][ T7324] No control pipe specified [ 105.524355][ T7328] netlink: 64 bytes leftover after parsing attributes in process `syz.1.458'. [ 105.527820][ T42] audit: type=1400 audit(1787824906.173:468): avc: denied { accept } for pid=7327 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 105.638023][ T7348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3360 sclass=netlink_route_socket pid=7348 comm=syz.0.463 [ 105.661160][ T42] audit: type=1400 audit(1787824906.313:469): avc: denied { write } for pid=7346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.755569][ T42] audit: type=1400 audit(1787824906.403:470): avc: denied { write } for pid=7353 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.780784][ T7357] FAULT_INJECTION: forcing a failure. [ 105.780784][ T7357] name failslab, interval 1, probability 0, space 0, times 0 [ 105.787274][ T7357] CPU: 0 UID: 0 PID: 7357 Comm: syz.3.466 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.787304][ T7357] Tainted: [L]=SOFTLOCKUP [ 105.787310][ T7357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.787320][ T7357] Call Trace: [ 105.787327][ T7357] [ 105.787335][ T7357] dump_stack_lvl+0x100/0x190 [ 105.787387][ T7357] should_fail_ex.cold+0x5/0xa [ 105.787411][ T7357] should_failslab+0xc2/0x120 [ 105.787446][ T7357] kmem_cache_alloc_noprof+0x91/0x6a0 [ 105.787473][ T7357] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 105.787504][ T7357] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 105.787536][ T7357] mmu_topup_memory_caches+0x25/0x170 [ 105.787568][ T7357] kvm_mmu_load+0xe2/0x2570 [ 105.787597][ T7357] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 105.787618][ T7357] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 105.787643][ T7357] ? __pfx_kvm_mmu_load+0x10/0x10 [ 105.787670][ T7357] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 105.787696][ T7357] ? kvm_check_and_inject_events+0x873/0x12a0 [ 105.787725][ T7357] ? record_steal_time+0x3f0/0xbb0 [ 105.787751][ T7357] vcpu_run+0x3ab0/0x5df0 [ 105.787779][ T7357] ? __pfx_vcpu_run+0x10/0x10 [ 105.787813][ T7357] ? rcu_is_watching+0x13/0xc0 [ 105.787838][ T7357] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 105.787856][ T7357] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 105.787882][ T7357] kvm_vcpu_ioctl+0x730/0x1700 [ 105.787909][ T7357] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 105.787933][ T7357] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 105.787963][ T7357] ? do_vfs_ioctl+0x226/0x13e0 [ 105.787985][ T7357] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 105.788005][ T7357] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 105.788043][ T7357] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 105.788192][ T7357] ? selinux_file_ioctl+0x13b/0x290 [ 105.788218][ T7357] ? selinux_file_ioctl+0xb6/0x290 [ 105.788246][ T7357] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 105.788272][ T7357] __x64_sys_ioctl+0x18e/0x210 [ 105.788297][ T7357] do_syscall_64+0x123/0x790 [ 105.788329][ T7357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.788348][ T7357] RIP: 0033:0x7f9ac899e0d9 [ 105.788364][ T7357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.788398][ T7357] RSP: 002b:00007f9ac9866028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.788417][ T7357] RAX: ffffffffffffffda RBX: 00007f9ac8c25fa0 RCX: 00007f9ac899e0d9 [ 105.788428][ T7357] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 105.788438][ T7357] RBP: 00007f9ac9866090 R08: 0000000000000000 R09: 0000000000000000 [ 105.788449][ T7357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.788459][ T7357] R13: 00007f9ac8c26038 R14: 00007f9ac8c25fa0 R15: 00007ffedc949cc8 [ 105.788484][ T7357] [ 106.002810][ T7371] capability: warning: `syz.2.470' uses deprecated v2 capabilities in a way that may be insecure [ 106.261177][ T7393] fuse: fd is not a fuse device [ 106.418652][ T7408] ubi31: attaching mtd0 [ 106.427738][ T7408] ubi31: scanning is finished [ 106.432084][ T7408] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 106.723885][ T7408] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 106.797770][ T5731] Bluetooth: hci0: unexpected event for opcode 0x0c47 [ 106.966584][ T7427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.058400][ T7437] overlay: Bad value for 'metacopy' [ 107.124314][ T7441] netlink: 'syz.0.488': attribute type 3 has an invalid length. [ 107.131657][ T7442] overlayfs: failed to clone upperpath [ 107.131737][ T7441] overlayfs: failed to clone upperpath [ 107.807177][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 107.807196][ T42] audit: type=1400 audit(1787824908.453:490): avc: denied { write } for pid=7470 comm="syz.3.497" name="usb_gadget" dev="configfs" ino=5768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.826014][ T42] audit: type=1400 audit(1787824908.453:491): avc: denied { add_name } for pid=7470 comm="syz.3.497" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.838279][ T42] audit: type=1400 audit(1787824908.453:492): avc: denied { create } for pid=7470 comm="syz.3.497" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 107.858912][ T42] audit: type=1400 audit(1787824908.463:493): avc: denied { write } for pid=7470 comm="syz.3.497" name="configs" dev="configfs" ino=18771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.868074][ T42] audit: type=1400 audit(1787824908.463:494): avc: denied { write } for pid=7470 comm="syz.3.497" name="functions" dev="configfs" ino=18770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.875996][ T42] audit: type=1400 audit(1787824908.473:495): avc: denied { write } for pid=7470 comm="syz.3.497" name="ss" dev="configfs" ino=18789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.882793][ T42] audit: type=1400 audit(1787824908.473:496): avc: denied { create } for pid=7470 comm="syz.3.497" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 107.888088][ T7473] kvm: kvm [7470]: vcpu0, guest rIP: 0x5408d Unhandled WRMSR(0x40000004) = 0x3 [ 107.891556][ T42] audit: type=1400 audit(1787824908.473:497): avc: denied { write } for pid=7470 comm="syz.3.497" name="header" dev="configfs" ino=18792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.901792][ T42] audit: type=1400 audit(1787824908.473:498): avc: denied { write } for pid=7470 comm="syz.3.497" name="fs" dev="configfs" ino=18799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.908513][ T42] audit: type=1400 audit(1787824908.473:499): avc: denied { write } for pid=7470 comm="syz.3.497" name="fs" dev="configfs" ino=18799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.033734][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'. [ 108.038275][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'. [ 108.096485][ T5731] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 108.200874][ T7514] ptrace attach of "/syz-executor exec"[5737] was attempted by "/syz-executor exec"[7514] [ 108.217098][ T7507] overlayfs: failed to clone upperpath [ 108.387968][ T7529] input: syz0 as /devices/virtual/input/input6 [ 108.402099][ T7529] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 108.411839][ T7529] CIFS mount error: No usable UNC path provided in device string! [ 108.411839][ T7529] [ 108.415580][ T7529] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 108.588960][ T41] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 108.615505][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'. [ 108.636182][ T7562] can: request_module (can-proto-0) failed. [ 108.639659][ T7566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7566 comm=syz.0.528 [ 108.749392][ T41] usb 7-1: device descriptor read/64, error -71 [ 108.864429][ T7591] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 108.886729][ T7593] __nla_validate_parse: 1 callbacks suppressed [ 108.886746][ T7593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.539'. [ 108.903297][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 108.904365][ T7593] JFS: charset not found [ 108.906592][ T7595] netlink: 'syz.0.540': attribute type 30 has an invalid length. [ 108.906607][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.540'. [ 108.916158][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 108.920327][ T7595] netlink: 'syz.0.540': attribute type 30 has an invalid length. [ 108.923541][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.540'. [ 108.989022][ T41] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 109.124805][ T41] usb 7-1: device descriptor read/64, error -71 [ 109.229277][ T41] usb usb7-port1: attempt power cycle [ 109.580931][ T41] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 109.609364][ T41] usb 7-1: device descriptor read/8, error -71 [ 109.745784][ T5731] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 109.859011][ T41] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 109.879500][ T41] usb 7-1: device descriptor read/8, error -71 [ 109.902243][ T7642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.557'. [ 109.905039][ T7642] netlink: 32 bytes leftover after parsing attributes in process `syz.1.557'. [ 109.907909][ T7642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.557'. [ 109.929278][ T7646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.558'. [ 109.933584][ T7646] smc: net device veth1_to_team applied user defined pnetid S [ 109.945530][ T7648] loop4: detected capacity change from 0 to 10832 [ 109.957221][ T7648] Buffer I/O error on dev loop4, logical block 0, async page read [ 109.961569][ T7648] Buffer I/O error on dev loop4, logical block 0, async page read [ 109.965986][ T7648] Buffer I/O error on dev loop4, logical block 0, async page read [ 109.969500][ T7648] Buffer I/O error on dev loop4, logical block 0, async page read [ 109.972971][ T7648] Buffer I/O error on dev loop4, logical block 0, async page read [ 109.976032][ T7648] Buffer I/O error on dev loop4, logical block 0, async page read [ 109.979705][ T7648] Buffer I/O error on dev loop4, logical block 0, async page read [ 109.983147][ T7648] Buffer I/O error on dev loop4, logical block 0, async page read [ 109.986128][ T7648] ldm_validate_partition_table(): Disk read failed. [ 109.989248][ T7648] Buffer I/O error on dev loop4, logical block 0, async page read [ 109.993751][ T7648] Buffer I/O error on dev loop4, logical block 0, async page read [ 109.995649][ T41] usb usb7-port1: unable to enumerate USB device [ 109.998374][ T7648] Dev loop4: unable to read RDB block 0 [ 110.004461][ T7648] loop4: unable to read partition table [ 110.010476][ T7648] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 110.580701][ T7689] ubi31: attaching mtd0 [ 110.584268][ T7689] ubi31: scanning is finished [ 110.586468][ T7689] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 110.710350][ T7689] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 110.803990][ T7702] FAULT_INJECTION: forcing a failure. [ 110.803990][ T7702] name failslab, interval 1, probability 0, space 0, times 0 [ 110.808610][ T7702] CPU: 3 UID: 0 PID: 7702 Comm: syz.3.574 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.808629][ T7702] Tainted: [L]=SOFTLOCKUP [ 110.808633][ T7702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.808640][ T7702] Call Trace: [ 110.808646][ T7702] [ 110.808651][ T7702] dump_stack_lvl+0x100/0x190 [ 110.808672][ T7702] should_fail_ex.cold+0x5/0xa [ 110.808688][ T7702] should_failslab+0xc2/0x120 [ 110.808715][ T7702] __kmalloc_noprof+0xfc/0x820 [ 110.808757][ T7702] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 110.808781][ T7702] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 110.808804][ T7702] genl_family_rcv_msg_doit+0xc7/0x300 [ 110.808824][ T7702] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 110.808851][ T7702] ? bpf_lsm_capable+0x9/0x10 [ 110.808871][ T7702] ? security_capable+0x80/0x260 [ 110.808893][ T7702] ? ns_capable+0xd2/0xf0 [ 110.808918][ T7702] genl_rcv_msg+0x560/0x800 [ 110.808937][ T7702] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.808955][ T7702] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 110.808987][ T7702] netlink_rcv_skb+0x159/0x420 [ 110.809015][ T7702] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.809035][ T7702] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.809073][ T7702] ? netlink_deliver_tap+0x1ae/0xcc0 [ 110.809103][ T7702] genl_rcv+0x28/0x40 [ 110.809130][ T7702] netlink_unicast+0x585/0x850 [ 110.809161][ T7702] ? __pfx_netlink_unicast+0x10/0x10 [ 110.809195][ T7702] netlink_sendmsg+0x8b0/0xda0 [ 110.809227][ T7702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.809257][ T7702] ? selinux_socket_sendmsg+0x198/0x2f0 [ 110.809287][ T7702] ____sys_sendmsg+0xa4d/0xbe0 [ 110.809310][ T7702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.809340][ T7702] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.809375][ T7702] ___sys_sendmsg+0x190/0x1e0 [ 110.809401][ T7702] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.809426][ T7702] ? get_pid_task+0x106/0x250 [ 110.809458][ T7702] ? find_held_lock+0x2b/0x80 [ 110.809497][ T7702] __sys_sendmsg+0x160/0x210 [ 110.809516][ T7702] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.809550][ T7702] do_syscall_64+0x123/0x790 [ 110.809581][ T7702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.809601][ T7702] RIP: 0033:0x7f9ac899e0d9 [ 110.809618][ T7702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.809634][ T7702] RSP: 002b:00007f9ac9866028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.809653][ T7702] RAX: ffffffffffffffda RBX: 00007f9ac8c25fa0 RCX: 00007f9ac899e0d9 [ 110.809665][ T7702] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 110.809676][ T7702] RBP: 00007f9ac9866090 R08: 0000000000000000 R09: 0000000000000000 [ 110.809686][ T7702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.809694][ T7702] R13: 00007f9ac8c26038 R14: 00007f9ac8c25fa0 R15: 00007ffedc949cc8 [ 110.809718][ T7702] [ 111.714374][ T7762] tipc: Enabling of bearer rejected, already enabled [ 112.464324][ T7775] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 112.606327][ T7789] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare [ 112.610987][ T5731] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 112.620543][ T7789] CIFS: VFS: Error connecting to socket. Aborting operation. [ 112.624846][ T7789] CIFS: VFS: cifs_mount failed w/return code = -111 [ 112.704947][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'. [ 112.826779][ T42] kauditd_printk_skb: 46 callbacks suppressed [ 112.826796][ T42] audit: type=1400 audit(1787824913.473:546): avc: denied { write } for pid=7800 comm="syz.3.611" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.024777][ T7819] exFAT-fs (nbd2): unable to read boot sector [ 113.027891][ T7819] exFAT-fs (nbd2): failed to read boot sector [ 113.030616][ T7819] exFAT-fs (nbd2): failed to recognize exfat type [ 113.060875][ T7828] unsupported nlmsg_type 40 [ 113.066854][ T42] audit: type=1400 audit(1787824913.713:547): avc: denied { ioctl } for pid=7824 comm="syz.3.619" path="socket:[19273]" dev="sockfs" ino=19273 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.069779][ T7826] ip6gre0: Master is either lo or non-ether device [ 113.077108][ T42] audit: type=1400 audit(1787824913.713:548): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 113.164949][ T7838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.428917][ T6209] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 113.599513][ T6209] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 113.604901][ T6209] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 113.607738][ T6209] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.612806][ T6209] usb 7-1: config 0 has no interfaces? [ 113.615802][ T6209] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.621745][ T6209] usb 7-1: config 0 descriptor?? [ 113.700539][ T7850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.713109][ T7850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.730965][ T5731] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 113.836312][ T7837] syzkaller0: entered promiscuous mode [ 113.838552][ T7837] syzkaller0: entered allmulticast mode [ 113.901795][ T10] usb 7-1: USB disconnect, device number 8 [ 114.482898][ T7872] create_pit_timer: 15 callbacks suppressed [ 114.482920][ T7872] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 114.686871][ T7895] xt_socket: unknown flags 0x48 [ 114.788091][ T7906] netlink: 'syz.2.653': attribute type 4 has an invalid length. [ 115.020974][ T7929] __nla_validate_parse: 2 callbacks suppressed [ 115.020996][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.660'. [ 115.047472][ T5731] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 115.148357][ T7943] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 115.177670][ T7943] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 115.181214][ T7943] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 115.188366][ T7943] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 115.191798][ T7943] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 115.195514][ T7943] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 115.206002][ T7946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.667'. [ 115.233684][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.234805][ T7943] pci 0000:00:01.0: Adding to iommu group 1 [ 115.237138][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.261504][ T7943] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 115.264819][ T7943] pci 0000:00:01.0: vgaarb: bridge control possible [ 115.267167][ T7943] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 115.278201][ T7943] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 115.283929][ T7943] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 115.293854][ T7943] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 115.354821][ T7943] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 115.358999][ T7943] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 115.363098][ T7943] [drm] features: -virgl +edid -resource_blob -host_visible [ 115.363114][ T7943] [drm] features: -context_init -blob_alignment [ 115.380341][ T7943] [drm] number of scanouts: 1 [ 115.382004][ T7943] [drm] number of cap sets: 0 [ 115.412632][ T7955] X.509: Couldn't decode AuthKeyIdentifier [ 115.415536][ T7943] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 1 [ 115.452569][ T7957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.672'. [ 115.455418][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'. [ 115.492505][ T7957] netlink: 28 bytes leftover after parsing attributes in process `syz.0.672'. [ 115.552600][ T7943] Console: switching to colour frame buffer device 160x50 [ 115.622857][ T7943] virtio-pci 0000:00:01.0: [drm] fb0: virtio_gpudrmfb frame buffer device [ 115.683652][ T7970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.676'. [ 115.723120][ T7970] kvm: pic: non byte read [ 115.725708][ T7970] kvm: pic: level sensitive irq not supported [ 115.725969][ T7970] kvm: pic: non byte read [ 115.731066][ T7970] kvm: pic: level sensitive irq not supported [ 115.731341][ T7970] kvm: pic: non byte read [ 115.740230][ T7970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=7970 comm=syz.3.676 [ 115.769409][ T7970] PKCS7: Unsupported SignedData version [ 115.914537][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 115.993879][ T7992] overlayfs: failed to clone upperpath [ 116.171906][ T8006] netlink: 80 bytes leftover after parsing attributes in process `syz.0.688'. [ 116.178488][ T8006] overlayfs: failed to clone lowerpath [ 116.292586][ T8015] jffs2: notice: (8015) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 116.315833][ T42] audit: type=1400 audit(1787824916.963:549): avc: denied { read } for pid=8011 comm="syz.3.689" name="file0" dev="fuse" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 116.324684][ T42] audit: type=1400 audit(1787824916.963:550): avc: denied { open } for pid=8011 comm="syz.3.689" path="/148/file0/file0" dev="fuse" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 116.356738][ T8016] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 116.360286][ T8016] block device autoloading is deprecated and will be removed. [ 116.467663][ T8021] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.575995][ T8021] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.643214][ T8021] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.755940][ T42] audit: type=1400 audit(1787824917.403:551): avc: denied { write } for pid=8035 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.776632][ T8021] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.825812][ T8042] netlink: 'syz.3.697': attribute type 5 has an invalid length. [ 116.839717][ T42] audit: type=1400 audit(1787824917.483:552): avc: denied { write } for pid=8040 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.852227][ T8042] netlink: 'syz.3.697': attribute type 1 has an invalid length. [ 116.906948][ T107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.915268][ T107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.921496][ T1165] IPVS: starting estimator thread 0... [ 116.937697][ T42] audit: type=1400 audit(1787824917.583:553): avc: denied { write } for pid=8046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.984955][ T42] audit: type=1400 audit(1787824917.633:554): avc: denied { write } for pid=8051 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.988859][ T8044] IPVS: lc: FWM 3 0x00000003 - no destination available [ 117.019263][ T8048] IPVS: using max 28 ests per chain, 67200 per kthread [ 117.072993][ T42] audit: type=1400 audit(1787824917.723:555): avc: denied { write } for pid=8053 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.109449][ T5775] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.114347][ T5775] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.120386][ T5775] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.125349][ T5775] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.131515][ T5731] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 117.673374][ T8079] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 117.710605][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.831132][ T366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.836157][ T366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.849089][ T366] IPVS: starting estimator thread 0... [ 117.859417][ T8085] IPVS: lc: FWM 3 0x00000003 - no destination available [ 117.971209][ T8087] IPVS: using max 22 ests per chain, 52800 per kthread [ 118.429137][ T57] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 60 sec [ 118.545201][ T8103] bond1: option downdelay: invalid value (18446744073709551615) [ 118.551167][ T8103] bond1: option downdelay: allowed values 0 - 2147483647 [ 118.557834][ T8103] bond1 (unregistering): Released all slaves [ 118.851323][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 118.851340][ T42] audit: type=1400 audit(1787824919.503:558): avc: denied { read } for pid=8112 comm="syz.2.718" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 118.876167][ T42] audit: type=1400 audit(1787824919.503:559): avc: denied { open } for pid=8112 comm="syz.2.718" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 118.897292][ T42] audit: type=1400 audit(1787824919.503:560): avc: denied { ioctl } for pid=8112 comm="syz.2.718" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 118.918091][ T42] audit: type=1400 audit(1787824919.513:561): avc: denied { append } for pid=8110 comm="syz.3.717" name="card1" dev="devtmpfs" ino=2998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 119.008140][ T8116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.719'. [ 119.966272][ T42] audit: type=1400 audit(1787824920.613:562): avc: denied { ioctl } for pid=8128 comm="syz.3.723" path="/dev/vhost-net" dev="devtmpfs" ino=1297 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 120.378037][ T8156] 9p: Bad value for 'rfdno' [ 120.385104][ T42] audit: type=1400 audit(1787824921.033:563): avc: denied { write } for pid=8152 comm="syz.2.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.401200][ T8160] overlayfs: failed to resolve './file1': -2 [ 120.491637][ T8166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.729'. [ 120.738327][ T8178] syz0: rxe_newlink: already configured on bond_slave_1 [ 120.750028][ T8178] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 120.787576][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 120.800231][ T42] audit: type=1400 audit(1787824921.453:564): avc: denied { listen } for pid=8193 comm="syz.3.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.870977][ T8202] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 120.894725][ T8202] tmpfs: Bad value for 'mpol' [ 121.095440][ T8123] syz.2.721 (8123) used greatest stack depth: 19736 bytes left [ 121.167399][ T42] audit: type=1400 audit(1787824921.813:565): avc: denied { setopt } for pid=8224 comm="syz.0.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 121.176660][ T42] audit: type=1400 audit(1787824921.823:566): avc: denied { read } for pid=8224 comm="syz.0.746" path="socket:[22072]" dev="sockfs" ino=22072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 121.249911][ T42] audit: type=1800 audit(1787824921.893:567): pid=8231 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.749" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 121.282849][ T8234] fuse: fd is not a fuse device [ 121.321861][ T8236] netlink: 'syz.2.751': attribute type 49 has an invalid length. [ 121.335620][ T8236] bond0: (slave bond_slave_0): Releasing backup interface [ 121.459587][ T8236] bond_slave_0: entered promiscuous mode [ 121.468122][ T8236] bond_slave_0: entered allmulticast mode [ 121.671166][ T5731] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 122.199600][ T5731] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 122.411699][ T8302] tipc: Started in network mode [ 122.413386][ T8302] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 122.416997][ T8302] tipc: Enabled bearer , priority 10 [ 122.566247][ T8315] ubi31: attaching mtd0 [ 122.571308][ T8315] ubi31: scanning is finished [ 122.572904][ T8315] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 122.576121][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 122.580843][ T8321] netlink: 'syz.1.778': attribute type 10 has an invalid length. [ 122.584662][ T8321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.778'. [ 122.720302][ T8315] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 123.411741][ T5732] tipc: Node number set to 4269801492 [ 125.350745][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 125.350766][ T42] audit: type=1400 audit(1787824926.003:571): avc: denied { create } for pid=8328 comm="syz.0.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 125.383321][ T42] audit: type=1400 audit(1787824926.003:572): avc: denied { ioctl } for pid=8328 comm="syz.0.781" path="socket:[23283]" dev="sockfs" ino=23283 ioctlcmd=0x6183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 125.506768][ T5731] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 126.010103][ T8353] ubi31: attaching mtd0 [ 126.036453][ T8353] ubi31: scanning is finished [ 126.043022][ T8353] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 126.320431][ T8353] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 126.325210][ T42] audit: type=1400 audit(1787824926.973:573): avc: denied { create } for pid=8366 comm="syz.3.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 126.391624][ T42] audit: type=1400 audit(1787824927.033:574): avc: denied { nlmsg_write } for pid=8366 comm="syz.3.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 127.393955][ T5731] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 127.559919][ T8392] netlink: 132 bytes leftover after parsing attributes in process `syz.0.801'. [ 127.754634][ T8401] ubi31: attaching mtd0 [ 127.772367][ T8401] ubi31: scanning is finished [ 127.774723][ T8401] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 127.900445][ T5731] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 128.096317][ T8401] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 128.436559][ T5731] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 128.536347][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.821'. [ 128.556668][ T8440] tipc: Started in network mode [ 128.570028][ T8440] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 128.574337][ T8440] tipc: Enabling of bearer rejected, failed to enable media [ 128.881943][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 129.119473][ T10] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 129.126097][ T10] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 129.135677][ T10] usb 8-1: config 0 has no interface number 0 [ 129.153772][ T10] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.198900][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.232398][ T10] usb 8-1: Product: syz [ 129.234269][ T10] usb 8-1: Manufacturer: syz [ 129.279700][ T10] usb 8-1: SerialNumber: syz [ 129.290750][ T10] usb 8-1: config 0 descriptor?? [ 129.381535][ T10] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 129.536242][ T8440] fuse: Unknown parameter '184467440737095516150x0000000000000007' [ 129.551748][ T5731] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 129.645404][ T1361] usb 8-1: USB disconnect, device number 3 [ 129.723407][ T1361] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 130.860176][ T5731] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 131.002402][ T5731] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 131.062149][ T5731] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 131.263473][ T42] audit: type=1400 audit(1787824931.903:575): avc: denied { write } for pid=8535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.541354][ T42] audit: type=1400 audit(1787824932.193:576): avc: denied { write } for pid=8541 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.801587][ T5731] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 132.071897][ T42] audit: type=1400 audit(1787824932.703:577): avc: denied { connect } for pid=8553 comm="syz.2.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.233090][ T8564] netlink: 236 bytes leftover after parsing attributes in process `syz.0.856'. [ 132.562865][ T5731] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 132.696113][ T42] audit: type=1400 audit(1787824933.353:578): avc: denied { mount } for pid=8582 comm="syz.1.863" name="/" dev="autofs" ino=25243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 132.922238][ T42] audit: type=1400 audit(1787824933.563:579): avc: denied { map } for pid=8582 comm="syz.1.863" path="socket:[24246]" dev="sockfs" ino=24246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 132.957729][ T42] audit: type=1400 audit(1787824933.563:580): avc: denied { write } for pid=8586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.102176][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.160715][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.203211][ T42] audit: type=1400 audit(1787824933.853:581): avc: denied { write } for pid=8594 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.376957][ T5731] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 133.746971][ T8613] ubi31: attaching mtd0 [ 133.750505][ T8613] ubi31: scanning is finished [ 133.753085][ T8613] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 134.020179][ T5731] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 134.215376][ T8613] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 134.249981][ T8626] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 134.252703][ T8626] syzkaller1: group set to 0 [ 134.380328][ T5731] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 134.911013][ T5731] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 134.922131][ T5731] Bluetooth: hci2: Injecting HCI hardware error event [ 134.926811][ T5731] Bluetooth: hci2: hardware error 0x00 [ 135.003713][ T5741] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 135.359701][ T8659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.527258][ T5741] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 136.092014][ T4555] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 136.137680][ T5741] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 136.252013][ T5741] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 136.280977][ T4555] usb 8-1: Using ep0 maxpacket: 32 [ 136.286074][ T4555] usb 8-1: unable to get BOS descriptor or descriptor too short [ 136.290417][ T4555] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 136.314085][ T4555] usb 8-1: string descriptor 0 read error: -22 [ 136.388425][ T4555] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.457022][ T4555] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 136.467346][ T4555] dw2102: su3000_power_ctrl: 1, initialized 0 [ 136.471718][ T4555] dvb-usb: bulk message failed: -22 (2/0) [ 136.496670][ T4555] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 136.503786][ T4555] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 136.535007][ T4555] usb 8-1: media controller created [ 136.541193][ T4555] dvb-usb: bulk message failed: -22 (6/0) [ 136.562967][ T4555] dw2102: i2c transfer failed. [ 136.566059][ T4555] dvb-usb: bulk message failed: -22 (6/0) [ 136.613166][ T4555] dw2102: i2c transfer failed. [ 136.616864][ T4555] dvb-usb: bulk message failed: -22 (6/0) [ 136.620224][ T4555] dw2102: i2c transfer failed. [ 136.622899][ T4555] dvb-usb: bulk message failed: -22 (6/0) [ 136.626894][ T5741] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 136.637451][ T4555] dw2102: i2c transfer failed. [ 136.647207][ T5741] Bluetooth: hci3: Injecting HCI hardware error event [ 136.649114][ T5741] Bluetooth: hci3: hardware error 0x00 [ 136.709004][ T8674] dvb-usb: bulk message failed: -22 (4/0) [ 136.732919][ T8674] dw2102: i2c transfer failed. [ 136.756529][ T4555] dvb-usb: bulk message failed: -22 (6/0) [ 136.765993][ T4555] dw2102: i2c transfer failed. [ 136.827549][ T4555] dvb-usb: bulk message failed: -22 (6/0) [ 136.832629][ T4555] dw2102: i2c transfer failed. [ 136.836625][ T4555] dvb-usb: MAC address: 02:02:02:02:02:02 [ 136.895688][ T4555] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.943044][ T4555] dvb-usb: bulk message failed: -22 (3/0) [ 136.962248][ T4555] dw2102: command 0x0e transfer failed. [ 136.993305][ T4555] dvb-usb: bulk message failed: -22 (3/0) [ 136.996167][ T4555] dw2102: command 0x0e transfer failed. [ 137.072474][ T5731] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 137.183717][ T5731] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 137.363280][ T4555] dvb-usb: bulk message failed: -22 (3/0) [ 137.365796][ T4555] dw2102: command 0x0e transfer failed. [ 137.412658][ T4555] dvb-usb: bulk message failed: -22 (3/0) [ 137.433848][ T4555] dw2102: command 0x0e transfer failed. [ 137.469311][ T4555] dvb-usb: bulk message failed: -22 (1/0) [ 137.475433][ T4555] dw2102: command 0x51 transfer failed. [ 137.624221][ T4555] DVB: Unable to find symbol ds3000_attach() [ 137.626947][ T4555] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 137.863622][ T4555] rc_core: IR keymap rc-su3000 not found [ 137.892509][ T4555] Registered IR keymap rc-empty [ 137.896644][ T4555] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 137.967115][ T4555] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input7 [ 138.004429][ T4555] dvb-usb: schedule remote query interval to 150 msecs. [ 138.032007][ T4555] dw2102: su3000_power_ctrl: 0, initialized 1 [ 138.035594][ T4555] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 138.046599][ T8739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.050861][ T4555] usb 8-1: USB disconnect, device number 4 [ 138.527693][ T4555] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 138.750563][ T5741] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 138.784729][ T5741] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 139.191594][ T8765] fuse: fd is not a fuse device [ 139.198392][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.924'. [ 139.206362][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.924'. [ 140.174194][ T8797] openvswitch: netlink: IP tunnel TTL not specified. [ 140.187409][ T42] audit: type=1400 audit(1787824940.833:582): avc: denied { cmd } for pid=8791 comm="iou-wrk-8793" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 140.210131][ T42] audit: type=1400 audit(1787824940.833:583): avc: denied { ioctl } for pid=8791 comm="syz.3.933" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 141.573426][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'. [ 142.000802][ T8850] X.509: Couldn't decode AuthKeyIdentifier [ 142.064813][ T42] audit: type=1400 audit(1787824942.713:584): avc: denied { write } for pid=8849 comm="syz.2.952" name="functions" dev="configfs" ino=18770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.163197][ T8850] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 142.167205][ T8850] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 142.205892][ T8850] udc dummy_udc.0: failed to start g1: -22 [ 142.300928][ T8856] ubi31: attaching mtd0 [ 142.301866][ T8850] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 142.304710][ T42] audit: type=1804 audit(1787824942.953:585): pid=8855 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.952" name="/newroot/151/file0" dev="tmpfs" ino=822 res=1 errno=0 [ 142.305702][ T8856] ubi31: scanning is finished [ 142.305804][ T8856] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 142.382285][ T8850] UDC core: g1: couldn't find an available UDC or it's busy [ 142.800679][ T8856] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 143.085907][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.958'. [ 143.159572][ T5741] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 143.335021][ T8890] fuse: Unknown parameter 'root0000álV¿Hgj¦Tòîê040000' [ 143.352260][ T8890] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 143.364156][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.965'. [ 143.375591][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.965'. [ 143.909803][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.971'. [ 143.986766][ T5741] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 144.211516][ T42] audit: type=1400 audit(1787824944.863:586): avc: denied { getopt } for pid=8929 comm="syz.2.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 144.235548][ T8934] fuse: fd is not a fuse device [ 144.337966][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 144.360095][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 144.954308][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.983'. [ 145.802230][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.994'. [ 146.128331][ T42] audit: type=1400 audit(1787824946.763:587): avc: denied { mmap_zero } for pid=9001 comm="syz.1.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 146.830195][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'. [ 147.680660][ T9072] overlayfs: failed to clone lowerpath [ 147.725024][ T9074] ubi31: attaching mtd0 [ 147.732102][ T42] audit: type=1400 audit(1787824948.373:588): avc: denied { write } for pid=9066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.746303][ T9074] ubi31: scanning is finished [ 147.778108][ T9074] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 147.980934][ T42] audit: type=1400 audit(1787824948.593:589): avc: denied { write } for pid=9080 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.360583][ T42] audit: type=1400 audit(1787824949.003:590): avc: denied { write } for pid=9088 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.404952][ T9074] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 148.561719][ T42] audit: type=1400 audit(1787824949.203:591): avc: denied { write } for pid=9093 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.536268][ T9124] ubi31: attaching mtd0 [ 149.546554][ T9124] ubi31: scanning is finished [ 149.565368][ T9124] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 149.950407][ T9124] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 150.330315][ T42] audit: type=1400 audit(1787824950.973:592): avc: denied { name_bind } for pid=9137 comm="syz.1.1041" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 153.392436][ T42] audit: type=1400 audit(1787824954.043:593): avc: denied { mount } for pid=9268 comm="syz.2.1098" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 153.490933][ T42] audit: type=1400 audit(1787824954.143:594): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 156.329653][ T5741] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 156.390287][ T9384] jffs2: notice: (9384) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 156.680510][ T9388] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.714327][ T9391] fuse: Unknown parameter 'root0000álV¿Hgj¦Tòîê040000' [ 156.732676][ T9391] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 156.743530][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1153'. [ 156.796032][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1153'. [ 156.944369][ T9388] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.168150][ T9388] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.346335][ T5741] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 157.690240][ T9388] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.509179][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.513227][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.519426][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.540314][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.564945][ T42] audit: type=1326 audit(1787824959.113:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.2.1165" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f630879e0d9 code=0x10000 [ 161.180085][ T42] audit: type=1400 audit(1787824961.833:596): avc: denied { lock } for pid=9506 comm="syz.0.1200" path="socket:[30918]" dev="sockfs" ino=30918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 167.416858][ T42] audit: type=1400 audit(1787824968.063:597): avc: denied { write } for pid=9702 comm="syz.3.1281" name="udp" dev="proc" ino=4026533335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 176.217977][ T42] audit: type=1400 audit(1787824976.873:598): avc: denied { listen } for pid=9861 comm="syz.3.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 176.992962][ T42] audit: type=1326 audit(1787824977.643:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9865 comm="syz.3.1338" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ac899e0d9 code=0x0 [ 177.096168][ T42] audit: type=1326 audit(1787824977.643:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9865 comm="syz.3.1338" exe="/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f9ac899e0d9 code=0x0 [ 177.312046][ T42] audit: type=1326 audit(1787824977.953:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9865 comm="syz.3.1338" exe="/syz-executor" sig=31 arch=c000003e syscall=15 compat=0 ip=0x7f9ac893f459 code=0x0 [ 184.273984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.066720][T10024] ptrace attach of "/syz-executor exec"[5725] was attempted by "/syz-executor exec"[10024] [ 186.468960][T10031] x_tables: duplicate underflow at hook 1 [ 188.448448][T10062] x_tables: duplicate underflow at hook 3 [ 189.398874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.561240][ T42] audit: type=1400 audit(1787824990.183:602): avc: denied { lock } for pid=10082 comm="syz.1.1410" path="socket:[32051]" dev="sockfs" ino=32051 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 191.397044][ T42] audit: type=1400 audit(1787824992.043:603): avc: denied { watch watch_reads } for pid=10128 comm="syz.3.1428" path="/276" dev="tmpfs" ino=1468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 192.294929][ T9893] syz.2.1342 (9893) used greatest stack depth: 19352 bytes left [ 194.042562][ T9927] syz.2.1355 (9927) used greatest stack depth: 19120 bytes left [ 194.525784][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.530547][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.812952][ T42] audit: type=1800 audit(1787824996.463:604): pid=10190 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1446" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 202.236062][T10258] syz.0.1470 (10258): attempted to duplicate a private mapping with mremap. This is not supported. [ 204.038338][T10271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1474'. [ 204.225310][T10176] syz.1.1443 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 204.302645][T10176] CPU: 0 UID: 0 PID: 10176 Comm: syz.1.1443 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.302681][T10176] Tainted: [L]=SOFTLOCKUP [ 204.302687][T10176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.302697][T10176] Call Trace: [ 204.302704][T10176] [ 204.302711][T10176] dump_stack_lvl+0x100/0x190 [ 204.302760][T10176] dump_header+0xfb/0x606 [ 204.302780][T10176] oom_kill_process.cold+0xd/0x380 [ 204.302802][T10176] out_of_memory+0x340/0x14f0 [ 204.302869][T10176] ? __pfx_out_of_memory+0x10/0x10 [ 204.302893][T10176] mem_cgroup_out_of_memory+0xc6/0x130 [ 204.302917][T10176] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 204.302938][T10176] ? find_held_lock+0x2b/0x80 [ 204.302963][T10176] ? do_raw_spin_unlock+0x145/0x1e0 [ 204.302981][T10176] ? _raw_spin_unlock+0x28/0x50 [ 204.303036][T10176] try_charge_memcg+0x6e1/0xdf0 [ 204.303059][T10176] ? __pfx_try_charge_memcg+0x10/0x10 [ 204.303076][T10176] ? find_held_lock+0x2b/0x80 [ 204.303094][T10176] ? rcu_read_unlock+0x17/0x60 [ 204.303111][T10176] ? rcu_read_unlock+0x17/0x60 [ 204.303129][T10176] ? find_held_lock+0x2b/0x80 [ 204.303149][T10176] ? rcu_read_unlock+0x17/0x60 [ 204.303172][T10176] charge_memcg+0x1ae/0x210 [ 204.303192][T10176] __mem_cgroup_charge+0x2b/0x1c0 [ 204.303213][T10176] shmem_alloc_and_add_folio+0x451/0xd40 [ 204.303240][T10176] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 204.303261][T10176] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 204.303287][T10176] shmem_get_folio_gfp+0x75b/0x1980 [ 204.303306][T10176] ? do_raw_spin_lock+0x128/0x260 [ 204.303327][T10176] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 204.303350][T10176] ? pte_offset_map_lock+0x174/0x320 [ 204.303371][T10176] ? vm_normal_page+0x1d5/0x390 [ 204.303400][T10176] shmem_write_begin+0x1a4/0x420 [ 204.303422][T10176] ? __pfx_shmem_write_begin+0x10/0x10 [ 204.303443][T10176] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 204.303488][T10176] generic_perform_write+0x292/0xa40 [ 204.303514][T10176] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 204.303543][T10176] ? __pfx_generic_perform_write+0x10/0x10 [ 204.303572][T10176] ? file_update_time_flags+0x38c/0x520 [ 204.303594][T10176] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 204.303644][T10176] shmem_file_write_iter+0x10e/0x140 [ 204.303669][T10176] __kernel_write_iter+0x2ac/0x930 [ 204.303701][T10176] ? __pfx___kernel_write_iter+0x10/0x10 [ 204.303722][T10176] ? __up_read+0x333/0x980 [ 204.303741][T10176] ? dump_user_range+0x65e/0xad0 [ 204.303768][T10176] dump_user_range+0x3f9/0xad0 [ 204.303794][T10176] ? __pfx_dump_user_range+0x10/0x10 [ 204.303823][T10176] ? __pfx_writenote+0x10/0x10 [ 204.303845][T10176] ? elf_core_dump+0x1f25/0x3d20 [ 204.303872][T10176] elf_core_dump+0x2d68/0x3d20 [ 204.303907][T10176] ? __pfx_elf_core_dump+0x10/0x10 [ 204.303926][T10176] ? kasan_save_stack+0x3f/0x50 [ 204.303944][T10176] ? kasan_save_stack+0x30/0x50 [ 204.303962][T10176] ? kasan_save_track+0x14/0x30 [ 204.303980][T10176] ? __kasan_kmalloc+0xaa/0xb0 [ 204.303998][T10176] ? vfs_coredump+0x21f6/0x54a0 [ 204.304014][T10176] ? get_signal+0x1f2a/0x21e0 [ 204.304034][T10176] ? arch_do_signal_or_restart+0x91/0x7e0 [ 204.304057][T10176] ? 0xffffffffff600000 [ 204.304102][T10176] ? vfs_coredump+0x281a/0x54a0 [ 204.304118][T10176] vfs_coredump+0x281a/0x54a0 [ 204.304142][T10176] ? __pfx_vfs_coredump+0x10/0x10 [ 204.304163][T10176] ? __lock_acquire+0x4c5/0x1ec0 [ 204.304204][T10176] ? __lock_acquire+0x4c5/0x1ec0 [ 204.304228][T10176] ? lock_acquire+0x1b9/0x370 [ 204.304253][T10176] ? lock_acquire+0x1b9/0x370 [ 204.304282][T10176] ? bpf_ksym_find+0x128/0x1c0 [ 204.304302][T10176] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 204.304332][T10176] ? arch_stack_walk+0xa6/0xf0 [ 204.304354][T10176] ? __sigqueue_free+0xbe/0x2a0 [ 204.304371][T10176] ? stack_trace_save+0x8e/0xc0 [ 204.304392][T10176] ? __pfx_stack_trace_save+0x10/0x10 [ 204.304412][T10176] ? stack_depot_save_flags+0x27/0x9f0 [ 204.304429][T10176] ? __lock_acquire+0x4c5/0x1ec0 [ 204.304486][T10176] ? proc_coredump_connector+0x2d3/0x4f0 [ 204.304511][T10176] ? __pfx_proc_coredump_connector+0x10/0x10 [ 204.304536][T10176] ? rcu_is_watching+0x13/0xc0 [ 204.304558][T10176] get_signal+0x1f2a/0x21e0 [ 204.304590][T10176] ? __pfx_get_signal+0x10/0x10 [ 204.304618][T10176] arch_do_signal_or_restart+0x91/0x7e0 [ 204.304640][T10176] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 204.304681][T10176] irqentry_exit+0x402/0xa10 [ 204.304703][T10176] asm_exc_page_fault+0x26/0x30 [ 204.304722][T10176] RIP: 0033:0x7f63cae53bd7 [ 204.304736][T10176] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 204.304753][T10176] RSP: 002b:00007f63cbdd21a0 EFLAGS: 00010206 [ 204.304768][T10176] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f63caf9e0d9 [ 204.304777][T10176] RDX: 00007f63cbdd21c0 RSI: 00007f63cbdd22f0 RDI: 000000000000000b [ 204.304787][T10176] RBP: 00007f63cb035024 R08: 0000000000000000 R09: 0000000000000000 [ 204.304796][T10176] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 204.304805][T10176] R13: 00007f63cb226038 R14: 00007f63cb225fa0 R15: 00007ffda1073d98 [ 204.304827][T10176] [ 204.669085][T10176] memory: usage 307200kB, limit 307200kB, failcnt 18141 [ 204.673847][T10176] memory+swap: usage 378948kB, limit 9007199254740988kB, failcnt 0 [ 204.694767][T10176] kmem: usage 4208kB, limit 9007199254740988kB, failcnt 0 [ 204.705630][T10176] Memory cgroup stats for /syz1: [ 204.707333][T10176] cache 308801536 [ 204.811132][T10176] rss 1355776 [ 204.813883][T10176] rss_huge 0 [ 204.816927][T10176] shmem 308797440 [ 204.834503][T10176] mapped_file 113950720 [ 204.839369][T10176] dirty 0 [ 204.919831][T10176] writeback 0 [ 204.921590][T10176] workingset_refault_anon 2926 [ 204.923839][T10176] workingset_refault_file 3777 [ 204.925674][T10176] swap 73469952 [ 204.927121][T10176] swapcached 95813632 [ 204.928650][T10176] pgpgin 358249 [ 204.950864][T10176] pgpgout 282501 [ 204.961163][T10176] pgfault 146168 [ 204.970250][T10176] pgmajfault 746 [ 204.975314][T10176] inactive_anon 95744000 [ 204.977408][T10176] active_anon 214515712 [ 204.992350][T10176] inactive_file 0 [ 205.007623][T10176] active_file 4096 [ 205.069557][T10176] unevictable 0 [ 205.111715][T10176] hierarchical_memory_limit 314572800 [ 205.145491][T10176] hierarchical_memsw_limit 9223372036854771712 [ 205.159091][T10176] total_cache 308801536 [ 205.187189][T10176] total_rss 1355776 [ 205.194232][T10176] total_rss_huge 0 [ 205.220385][T10176] total_shmem 308797440 [ 205.222899][T10176] total_mapped_file 113950720 [ 205.224723][T10176] total_dirty 0 [ 205.239804][T10176] total_writeback 0 [ 205.242243][T10176] total_workingset_refault_anon 2926 [ 205.245172][T10176] total_workingset_refault_file 3777 [ 205.247413][T10176] total_swap 73469952 [ 205.276982][T10176] total_swapcached 95813632 [ 205.283175][T10176] total_pgpgin 358249 [ 205.304126][T10176] total_pgpgout 282501 [ 205.317520][T10176] total_pgfault 146168 [ 205.321958][T10176] total_pgmajfault 746 [ 205.325196][T10176] total_inactive_anon 95744000 [ 205.327844][T10176] total_active_anon 214515712 [ 205.339158][T10176] total_inactive_file 0 [ 205.402420][T10176] total_active_file 4096 [ 205.426378][T10176] total_unevictable 0 [ 205.428594][T10176] anon_cost 0 [ 205.431334][T10176] file_cost 0 [ 205.448392][T10074] syz.2.1402 (10074) used greatest stack depth: 19096 bytes left [ 205.458902][T10176] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1299,pid=9774,uid=0 [ 205.530267][T10176] Memory cgroup out of memory: Killed process 9774 (syz.1.1299) total-vm:200824kB, anon-rss:196kB, file-rss:20612kB, shmem-rss:111280kB, UID:0 pgtables:324kB oom_score_adj:0 [ 205.708898][T10246] syz.0.1467 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 205.800973][T10246] CPU: 2 UID: 0 PID: 10246 Comm: syz.0.1467 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.801008][T10246] Tainted: [L]=SOFTLOCKUP [ 205.801016][T10246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.801026][T10246] Call Trace: [ 205.801033][T10246] [ 205.801040][T10246] dump_stack_lvl+0x100/0x190 [ 205.801075][T10246] dump_header+0xfb/0x606 [ 205.801096][T10246] oom_kill_process.cold+0xd/0x380 [ 205.801119][T10246] out_of_memory+0x340/0x14f0 [ 205.801144][T10246] ? __pfx_out_of_memory+0x10/0x10 [ 205.801173][T10246] mem_cgroup_out_of_memory+0xc6/0x130 [ 205.801201][T10246] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 205.801227][T10246] ? find_held_lock+0x2b/0x80 [ 205.801254][T10246] ? do_raw_spin_unlock+0x145/0x1e0 [ 205.801276][T10246] ? _raw_spin_unlock+0x28/0x50 [ 205.801309][T10246] try_charge_memcg+0x6e1/0xdf0 [ 205.801335][T10246] ? __pfx_try_charge_memcg+0x10/0x10 [ 205.801354][T10246] ? find_held_lock+0x2b/0x80 [ 205.801376][T10246] ? rcu_read_unlock+0x17/0x60 [ 205.801396][T10246] ? rcu_read_unlock+0x17/0x60 [ 205.801417][T10246] ? find_held_lock+0x2b/0x80 [ 205.801439][T10246] ? rcu_read_unlock+0x17/0x60 [ 205.801466][T10246] charge_memcg+0x1ae/0x210 [ 205.801490][T10246] __mem_cgroup_charge+0x2b/0x1c0 [ 205.801516][T10246] shmem_alloc_and_add_folio+0x451/0xd40 [ 205.801545][T10246] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 205.801570][T10246] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 205.801600][T10246] shmem_get_folio_gfp+0x75b/0x1980 [ 205.801629][T10246] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 205.801659][T10246] ? filemap_map_pages+0x112c/0x2020 [ 205.801694][T10246] shmem_fault+0x1fb/0xa30 [ 205.801719][T10246] ? __pfx_shmem_fault+0x10/0x10 [ 205.801746][T10246] ? __pfx_filemap_map_pages+0x10/0x10 [ 205.801790][T10246] ? find_held_lock+0x2b/0x80 [ 205.801816][T10246] ? __pfx_filemap_map_pages+0x10/0x10 [ 205.801846][T10246] __do_fault+0x10b/0x440 [ 205.801875][T10246] do_fault+0xb3f/0x1830 [ 205.801907][T10246] ? __pfx_do_fault+0x10/0x10 [ 205.801935][T10246] ? rcu_read_unlock+0x2d/0xb0 [ 205.801956][T10246] ? rcu_read_unlock+0x2d/0xb0 [ 205.801976][T10246] ? __pte_offset_map+0x179/0x310 [ 205.802008][T10246] __handle_mm_fault+0x150b/0x2f60 [ 205.802036][T10246] ? __pfx___handle_mm_fault+0x10/0x10 [ 205.802057][T10246] ? pte_offset_map_lock+0x174/0x320 [ 205.802086][T10246] ? find_held_lock+0x2b/0x80 [ 205.802108][T10246] ? find_held_lock+0x2b/0x80 [ 205.802130][T10246] ? follow_page_pte+0x536/0x1360 [ 205.802168][T10246] handle_mm_fault+0x37b/0xa30 [ 205.802190][T10246] __get_user_pages+0x1169/0x3280 [ 205.802221][T10246] ? __pfx___get_user_pages+0x10/0x10 [ 205.802246][T10246] ? __pfx___might_resched+0x10/0x10 [ 205.802275][T10246] get_dump_page+0x27e/0x3d0 [ 205.802303][T10246] ? __pfx_get_dump_page+0x10/0x10 [ 205.802341][T10246] ? dump_user_range+0x65e/0xad0 [ 205.802365][T10246] ? iov_iter_bvec+0x7d/0x1d0 [ 205.802397][T10246] dump_user_range+0x18d/0xad0 [ 205.802428][T10246] ? __pfx_dump_user_range+0x10/0x10 [ 205.802462][T10246] ? __pfx_writenote+0x10/0x10 [ 205.802487][T10246] ? elf_core_dump+0x1f25/0x3d20 [ 205.802518][T10246] elf_core_dump+0x2d68/0x3d20 [ 205.802560][T10246] ? __pfx_elf_core_dump+0x10/0x10 [ 205.802586][T10246] ? kasan_save_stack+0x3f/0x50 [ 205.802611][T10246] ? kasan_save_stack+0x30/0x50 [ 205.802636][T10246] ? kasan_save_track+0x14/0x30 [ 205.802658][T10246] ? __kasan_kmalloc+0xaa/0xb0 [ 205.802684][T10246] ? vfs_coredump+0x21f6/0x54a0 [ 205.802706][T10246] ? get_signal+0x1f2a/0x21e0 [ 205.802734][T10246] ? arch_do_signal_or_restart+0x91/0x7e0 [ 205.802867][T10246] ? 0xffffffffff600000 [ 205.802937][T10246] ? vfs_coredump+0x281a/0x54a0 [ 205.802963][T10246] vfs_coredump+0x281a/0x54a0 [ 205.802999][T10246] ? __pfx_vfs_coredump+0x10/0x10 [ 205.803025][T10246] ? __lock_acquire+0x4c5/0x1ec0 [ 205.803061][T10246] ? __lock_acquire+0x4c5/0x1ec0 [ 205.803092][T10246] ? lock_acquire+0x1b9/0x370 [ 205.803126][T10246] ? lock_acquire+0x1b9/0x370 [ 205.803162][T10246] ? bpf_ksym_find+0x128/0x1c0 [ 205.803189][T10246] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 205.803224][T10246] ? arch_stack_walk+0xa6/0xf0 [ 205.803255][T10246] ? __sigqueue_free+0xbe/0x2a0 [ 205.803281][T10246] ? stack_trace_save+0x8e/0xc0 [ 205.803304][T10246] ? __pfx_stack_trace_save+0x10/0x10 [ 205.803332][T10246] ? stack_depot_save_flags+0x27/0x9f0 [ 205.803354][T10246] ? __lock_acquire+0x4c5/0x1ec0 [ 205.803431][T10246] ? proc_coredump_connector+0x2d3/0x4f0 [ 205.803463][T10246] ? __pfx_proc_coredump_connector+0x10/0x10 [ 205.803498][T10246] ? rcu_is_watching+0x13/0xc0 [ 205.803527][T10246] get_signal+0x1f2a/0x21e0 [ 205.803570][T10246] ? __pfx_get_signal+0x10/0x10 [ 205.819706][T10246] arch_do_signal_or_restart+0x91/0x7e0 [ 205.819744][T10246] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 205.819779][T10246] irqentry_exit+0x402/0xa10 [ 205.819805][T10246] asm_exc_page_fault+0x26/0x30 [ 205.819825][T10246] RIP: 0033:0x7fa16b053bd7 [ 205.819843][T10246] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 205.819861][T10246] RSP: 002b:00007fa16c0471a0 EFLAGS: 00010206 [ 205.819879][T10246] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa16b19e0d9 [ 205.819890][T10246] RDX: 00007fa16c0471c0 RSI: 00007fa16c0472f0 RDI: 000000000000000b [ 205.819901][T10246] RBP: 00007fa16b235024 R08: 0000000000000000 R09: 0000000000000000 [ 205.819912][T10246] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 205.819922][T10246] R13: 00007fa16b426038 R14: 00007fa16b425fa0 R15: 00007ffe6ef6d198 [ 205.819948][T10246] [ 206.510329][T10246] memory: usage 307200kB, limit 307200kB, failcnt 2233 [ 206.525289][T10246] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 206.571474][T10246] kmem: usage 3296kB, limit 9007199254740988kB, failcnt 0 [ 206.574944][T10246] Memory cgroup stats for /syz0: [ 206.575270][T10246] cache 309719040 [ 206.593183][T10246] rss 1458176 [ 206.599811][T10246] rss_huge 0 [ 206.606762][T10246] shmem 309719040 [ 206.612831][T10246] mapped_file 103759872 [ 206.622540][T10246] dirty 0 [ 206.651918][T10246] writeback 0 [ 206.657336][T10246] workingset_refault_anon 1963 [ 206.669008][T10246] workingset_refault_file 1090 [ 206.679567][T10246] swap 200704 [ 206.738925][T10246] swapcached 31858688 [ 206.741793][T10246] pgpgin 324580 [ 206.743890][T10246] pgpgout 248609 [ 206.824157][T10246] pgfault 144040 [ 206.826458][T10246] pgmajfault 115 [ 206.828476][T10246] inactive_anon 217767936 [ 206.832296][T10246] active_anon 93409280 [ 206.834207][T10246] inactive_file 0 [ 206.836158][T10246] active_file 0 [ 206.837637][T10246] unevictable 0 [ 206.842281][T10246] hierarchical_memory_limit 314572800 [ 206.892164][T10246] hierarchical_memsw_limit 9223372036854771712 [ 206.899804][T10246] total_cache 309719040 [ 206.932020][T10246] total_rss 1458176 [ 206.939831][T10246] total_rss_huge 0 [ 206.944483][T10246] total_shmem 309719040 [ 206.980501][T10246] total_mapped_file 103759872 [ 206.990649][T10246] total_dirty 0 [ 206.992780][T10246] total_writeback 0 [ 206.994971][T10246] total_workingset_refault_anon 1963 [ 206.997568][T10246] total_workingset_refault_file 1090 [ 207.000575][T10246] total_swap 200704 [ 207.052007][T10246] total_swapcached 31858688 [ 207.061070][T10246] total_pgpgin 324580 [ 207.078870][T10246] total_pgpgout 248609 [ 207.093099][T10246] total_pgfault 144040 [ 207.096055][T10246] total_pgmajfault 115 [ 207.102281][T10246] total_inactive_anon 217767936 [ 207.105400][T10246] total_active_anon 93409280 [ 207.137335][T10246] total_inactive_file 0 [ 207.147905][T10246] total_active_file 0 [ 207.150732][T10246] total_unevictable 0 [ 207.153112][T10246] anon_cost 0 [ 207.155087][T10246] file_cost 0 [ 207.160113][T10246] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1404,pid=10061,uid=0 [ 207.193894][T10246] Memory cgroup out of memory: Killed process 10061 (syz.0.1404) total-vm:200692kB, anon-rss:988kB, file-rss:20612kB, shmem-rss:82696kB, UID:0 pgtables:264kB oom_score_adj:0 [ 207.338963][T10272] syz.0.1475 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 207.394100][T10272] CPU: 0 UID: 0 PID: 10272 Comm: syz.0.1475 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.394136][T10272] Tainted: [L]=SOFTLOCKUP [ 207.394142][T10272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.394152][T10272] Call Trace: [ 207.394160][T10272] [ 207.394168][T10272] dump_stack_lvl+0x100/0x190 [ 207.394201][T10272] dump_header+0xfb/0x606 [ 207.394225][T10272] oom_kill_process.cold+0xd/0x380 [ 207.394248][T10272] out_of_memory+0x340/0x14f0 [ 207.394274][T10272] ? __pfx_out_of_memory+0x10/0x10 [ 207.394300][T10272] mem_cgroup_out_of_memory+0xc6/0x130 [ 207.394327][T10272] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 207.394350][T10272] ? find_held_lock+0x2b/0x80 [ 207.394379][T10272] ? do_raw_spin_unlock+0x145/0x1e0 [ 207.394400][T10272] ? _raw_spin_unlock+0x28/0x50 [ 207.394430][T10272] try_charge_memcg+0x6e1/0xdf0 [ 207.394456][T10272] ? __pfx_try_charge_memcg+0x10/0x10 [ 207.394473][T10272] ? find_held_lock+0x2b/0x80 [ 207.394494][T10272] ? rcu_read_unlock+0x17/0x60 [ 207.394514][T10272] ? rcu_read_unlock+0x17/0x60 [ 207.394535][T10272] ? find_held_lock+0x2b/0x80 [ 207.394557][T10272] ? rcu_read_unlock+0x17/0x60 [ 207.394583][T10272] charge_memcg+0x1ae/0x210 [ 207.394605][T10272] __mem_cgroup_charge+0x2b/0x1c0 [ 207.394630][T10272] shmem_alloc_and_add_folio+0x451/0xd40 [ 207.394659][T10272] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 207.394692][T10272] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 207.394719][T10272] shmem_get_folio_gfp+0x75b/0x1980 [ 207.394741][T10272] ? do_raw_spin_lock+0x128/0x260 [ 207.394765][T10272] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 207.394795][T10272] shmem_write_begin+0x1a4/0x420 [ 207.394818][T10272] ? __pfx_shmem_write_begin+0x10/0x10 [ 207.394841][T10272] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 207.394869][T10272] generic_perform_write+0x292/0xa40 [ 207.394897][T10272] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 207.394928][T10272] ? __pfx_generic_perform_write+0x10/0x10 [ 207.394958][T10272] ? file_update_time_flags+0x38c/0x520 [ 207.394983][T10272] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 207.395006][T10272] shmem_file_write_iter+0x10e/0x140 [ 207.395033][T10272] __kernel_write_iter+0x2ac/0x930 [ 207.395059][T10272] ? __pfx___kernel_write_iter+0x10/0x10 [ 207.395082][T10272] ? __up_read+0x333/0x980 [ 207.395103][T10272] ? dump_user_range+0x65e/0xad0 [ 207.395134][T10272] dump_user_range+0x3f9/0xad0 [ 207.395162][T10272] ? __pfx_dump_user_range+0x10/0x10 [ 207.395195][T10272] ? __pfx_writenote+0x10/0x10 [ 207.395220][T10272] ? elf_core_dump+0x1f25/0x3d20 [ 207.395249][T10272] elf_core_dump+0x2d68/0x3d20 [ 207.395286][T10272] ? __pfx_elf_core_dump+0x10/0x10 [ 207.395310][T10272] ? kasan_save_stack+0x3f/0x50 [ 207.395336][T10272] ? kasan_save_stack+0x30/0x50 [ 207.395360][T10272] ? kasan_save_track+0x14/0x30 [ 207.395383][T10272] ? __kasan_kmalloc+0xaa/0xb0 [ 207.395405][T10272] ? vfs_coredump+0x21f6/0x54a0 [ 207.395423][T10272] ? get_signal+0x1f2a/0x21e0 [ 207.395447][T10272] ? arch_do_signal_or_restart+0x91/0x7e0 [ 207.395476][T10272] ? 0xffffffffff600000 [ 207.395532][T10272] ? vfs_coredump+0x281a/0x54a0 [ 207.395553][T10272] vfs_coredump+0x281a/0x54a0 [ 207.395585][T10272] ? __pfx_vfs_coredump+0x10/0x10 [ 207.395632][T10272] ? __lock_acquire+0x4c5/0x1ec0 [ 207.395657][T10272] ? __lock_acquire+0x4c5/0x1ec0 [ 207.395687][T10272] ? lock_acquire+0x1b9/0x370 [ 207.395712][T10272] ? lock_acquire+0x1b9/0x370 [ 207.395739][T10272] ? bpf_ksym_find+0x128/0x1c0 [ 207.395758][T10272] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 207.395787][T10272] ? arch_stack_walk+0xa6/0xf0 [ 207.395814][T10272] ? __sigqueue_free+0xbe/0x2a0 [ 207.395832][T10272] ? stack_trace_save+0x8e/0xc0 [ 207.395851][T10272] ? __pfx_stack_trace_save+0x10/0x10 [ 207.395873][T10272] ? stack_depot_save_flags+0x27/0x9f0 [ 207.395892][T10272] ? __lock_acquire+0x4c5/0x1ec0 [ 207.395951][T10272] ? proc_coredump_connector+0x2d3/0x4f0 [ 207.395993][T10272] ? __pfx_proc_coredump_connector+0x10/0x10 [ 207.396017][T10272] ? rcu_is_watching+0x13/0xc0 [ 207.396038][T10272] get_signal+0x1f2a/0x21e0 [ 207.396071][T10272] ? __pfx_get_signal+0x10/0x10 [ 207.396104][T10272] arch_do_signal_or_restart+0x91/0x7e0 [ 207.396128][T10272] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 207.396165][T10272] irqentry_exit+0x402/0xa10 [ 207.396188][T10272] asm_exc_page_fault+0x26/0x30 [ 207.396204][T10272] RIP: 0033:0x7fa16b053bd7 [ 207.396223][T10272] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 207.396239][T10272] RSP: 002b:00007fa16c0471a0 EFLAGS: 00010206 [ 207.396255][T10272] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa16b19e0d9 [ 207.396267][T10272] RDX: 00007fa16c0471c0 RSI: 00007fa16c0472f0 RDI: 000000000000000b [ 207.396278][T10272] RBP: 00007fa16b235024 R08: 0000000000000000 R09: 0000000000000000 [ 207.396288][T10272] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 207.396298][T10272] R13: 00007fa16b426038 R14: 00007fa16b425fa0 R15: 00007ffe6ef6d198 [ 207.396324][T10272] [ 207.398604][T10272] memory: usage 307200kB, limit 307200kB, failcnt 2260 [ 208.069230][T10272] memory+swap: usage 299680kB, limit 9007199254740988kB, failcnt 0 [ 208.112400][T10272] kmem: usage 3000kB, limit 9007199254740988kB, failcnt 0 [ 208.152049][T10272] Memory cgroup stats for /syz0: [ 208.152319][T10272] cache 299421696 [ 208.163393][T10272] rss 1150976 [ 208.182316][T10272] rss_huge 0 [ 208.203421][T10272] shmem 295292928 [ 208.238908][T10272] mapped_file 23220224 [ 208.240569][T10272] dirty 0 [ 208.242301][T10272] writeback 0 [ 208.243951][T10272] workingset_refault_anon 1963 [ 208.246970][T10272] workingset_refault_file 2098 [ 208.268819][T10272] swap 237568 [ 208.270646][T10272] swapcached 31895552 [ 208.272621][T10272] pgpgin 327282 [ 208.274404][T10272] pgpgout 253900 [ 208.276597][T10272] pgfault 144150 [ 208.311026][T10272] pgmajfault 116 [ 208.313188][T10272] inactive_anon 227590144 [ 208.318524][T10272] active_anon 68820992 [ 208.368893][T10272] inactive_file 3997696 [ 208.400251][T10272] active_file 131072 [ 208.402108][T10272] unevictable 0 [ 208.420111][T10272] hierarchical_memory_limit 314572800 [ 208.422575][T10272] hierarchical_memsw_limit 9223372036854771712 [ 208.440919][T10272] total_cache 299421696 [ 208.443579][T10272] total_rss 1150976 [ 208.445172][T10272] total_rss_huge 0 [ 208.462155][T10272] total_shmem 295292928 [ 208.465239][T10272] total_mapped_file 23220224 [ 208.468315][T10272] total_dirty 0 [ 208.470991][T10272] total_writeback 0 [ 208.473619][T10272] total_workingset_refault_anon 1963 [ 208.475850][T10272] total_workingset_refault_file 2098 [ 208.478155][T10272] total_swap 237568 [ 208.480927][T10272] total_swapcached 31895552 [ 208.483529][T10272] total_pgpgin 327282 [ 208.485280][T10272] total_pgpgout 253900 [ 208.487031][T10272] total_pgfault 144150 [ 208.508882][T10272] total_pgmajfault 116 [ 208.510665][T10272] total_inactive_anon 227590144 [ 208.513877][T10272] total_active_anon 68820992 [ 208.518429][T10272] total_inactive_file 3997696 [ 208.526039][T10272] total_active_file 131072 [ 208.532325][T10272] total_unevictable 0 [ 208.541413][T10272] anon_cost 0 [ 208.543094][T10272] file_cost 0 [ 208.550272][T10272] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1457,pid=10218,uid=0 [ 208.570306][T10272] Memory cgroup out of memory: Killed process 10218 (syz.0.1457) total-vm:102252kB, anon-rss:1200kB, file-rss:50740kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:0 [ 214.881819][ T42] audit: type=1400 audit(1787825015.523:605): avc: denied { listen } for pid=10370 comm="syz.3.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 221.295579][T10288] syz.2.1480 (10288) used greatest stack depth: 18904 bytes left [ 222.131920][ T42] audit: type=1400 audit(1787825022.693:606): avc: denied { write } for pid=10480 comm="syz.0.1536" name="/" dev="ocfs2_dlmfs" ino=32313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.311302][ T42] audit: type=1400 audit(1787825022.963:607): avc: denied { create } for pid=10480 comm="syz.0.1536" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 222.311657][T10482] o2cb: This node has not been configured. [ 222.558535][T10482] o2cb: Cluster check failed. Fix errors before retrying. [ 222.565769][T10482] (syz.0.1536,10482,3):user_dlm_register:674 ERROR: status = -22 [ 222.606129][T10482] (syz.0.1536,10482,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 222.705671][ T42] audit: type=1400 audit(1787825023.353:608): avc: denied { append } for pid=10484 comm="syz.2.1538" name="001" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 223.414345][ T42] audit: type=1400 audit(1787825024.053:609): avc: denied { set_context_mgr } for pid=10491 comm="syz.2.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 223.449569][T10496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1539'. [ 223.449628][ T42] audit: type=1400 audit(1787825024.103:610): avc: denied { write } for pid=10491 comm="syz.2.1541" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 223.558701][T10492] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 223.646503][T10492] binder: 10491:10492 ioctl 4018620d 200000000040 returned -1 [ 223.794782][ T42] audit: type=1400 audit(1787825024.393:611): avc: denied { setattr } for pid=10499 comm="syz.0.1542" name="SCTPv6" dev="sockfs" ino=33830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 224.110531][T10502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1543'. [ 224.294616][ T9851] syz.2.1332 (9851) used greatest stack depth: 18776 bytes left [ 225.585103][ T42] audit: type=1400 audit(1787825026.233:612): avc: denied { connect } for pid=10511 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 228.939876][ T57] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 229.150451][ T57] usb 7-1: Using ep0 maxpacket: 32 [ 229.155256][ T57] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 229.164424][ T57] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 229.181812][ T57] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 229.258440][ T57] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.278171][ T57] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 229.304877][ T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.311527][ T57] usb 7-1: Product: syz [ 229.370064][ T57] usb 7-1: Manufacturer: syz [ 229.374396][ T57] usb 7-1: SerialNumber: syz [ 229.888652][ C3] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 229.975023][ T57] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input8 [ 230.245663][ T57] imon:send_packet: packet tx failed (-71) [ 230.295724][ T57] imon 7-1:155.0: panel buttons/knobs setup failed [ 230.318998][ T57] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 230.389761][ T57] (id 0x00) [ 230.827264][ T57] rc_core: IR keymap rc-imon-pad not found [ 230.882869][ T57] Registered IR keymap rc-empty [ 230.891589][ T57] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 230.935176][ T57] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 231.052435][ T57] imon:send_packet: packet tx failed (-71) [ 231.069377][ T57] imon 7-1:155.0: remote input dev register failed [ 231.105967][ T57] imon 7-1:155.0: imon_init_intf0: rc device setup failed [ 231.494836][T10574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1568'. [ 231.944757][ T42] audit: type=1400 audit(1787825032.593:613): avc: denied { setopt } for pid=10579 comm="syz.1.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 232.693565][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1574'. [ 232.709281][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1574'. [ 232.745833][T10586] macvtap1: entered allmulticast mode [ 232.749849][T10586] dummy0: entered allmulticast mode [ 232.770432][T10586] dummy0: entered promiscuous mode [ 233.120913][ T57] imon 7-1:155.0: unable to initialize intf0, err 0 [ 233.158379][ T57] imon:imon_probe: failed to initialize context! [ 233.166840][ T57] imon 7-1:155.0: unable to register, err -19 [ 233.203530][ T57] usb 7-1: USB disconnect, device number 9 [ 234.088851][ T42] audit: type=1400 audit(1787825034.723:614): avc: denied { create } for pid=10601 comm="syz.2.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 234.279309][T10605] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 234.569936][T10611] fuse: Bad value for 'fd' [ 235.499169][T10617] fuse: fd is not a fuse device [ 237.476761][ T42] audit: type=1400 audit(1787825038.123:615): avc: denied { write } for pid=10636 comm="syz.1.1589" lport=38135 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 237.535097][ T42] audit: type=1400 audit(1787825038.123:616): avc: denied { read } for pid=10636 comm="syz.1.1589" lport=38135 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 239.119290][ T42] audit: type=1400 audit(1787825039.753:617): avc: denied { write } for pid=10656 comm="syz.1.1595" path="socket:[33919]" dev="sockfs" ino=33919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 241.448929][ T29] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 241.654548][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 241.662484][ T29] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 241.702210][ T29] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.712102][ T29] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.719312][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 241.741203][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.767783][ T29] usb 7-1: config 0 descriptor?? [ 241.827297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.880115][ T42] audit: type=1400 audit(1787825042.533:618): avc: denied { write } for pid=10704 comm="syz.1.1612" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 242.302234][ T29] nzxt-smart2 0003:1E71:2009.0002: item fetching failed at offset 0/5 [ 242.308714][ T29] nzxt-smart2 0003:1E71:2009.0002: probe with driver nzxt-smart2 failed with error -22 [ 242.496151][ T29] usb 7-1: USB disconnect, device number 10 [ 244.272241][ T42] audit: type=1400 audit(1787825044.923:619): avc: denied { read write } for pid=10732 comm="syz.3.1623" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 244.320986][ T6209] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 244.332536][ T42] audit: type=1400 audit(1787825044.923:620): avc: denied { open } for pid=10732 comm="syz.3.1623" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 244.441187][ T6209] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 245.104667][ T42] audit: type=1400 audit(1787825045.733:621): avc: denied { setopt } for pid=10745 comm="syz.3.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.113224][ T42] audit: type=1400 audit(1787825045.733:622): avc: denied { bind } for pid=10745 comm="syz.3.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.301161][ T42] audit: type=1400 audit(1787825045.923:623): avc: denied { bpf } for pid=10751 comm="syz.1.1628" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 245.340164][T10740] fido_id[10740]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 245.442058][T10755] : renamed from bond_slave_0 (while UP) [ 246.832119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.296890][T10775] raw_sendmsg: syz.0.1634 forgot to set AF_INET. Fix it! [ 247.498683][T10779] bridge0: port 3(syz_tun) entered blocking state [ 247.510971][T10779] bridge0: port 3(syz_tun) entered disabled state [ 247.572238][ T42] audit: type=1400 audit(1787825048.213:624): avc: denied { perfmon } for pid=10778 comm="syz.3.1636" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 247.660136][T10779] syz_tun: entered allmulticast mode [ 247.715068][T10779] syz_tun: entered promiscuous mode [ 247.720264][T10779] bridge0: port 3(syz_tun) entered blocking state [ 247.741178][T10779] bridge0: port 3(syz_tun) entered forwarding state [ 247.880097][T10246] syz.0.1467 (10246) used greatest stack depth: 18056 bytes left [ 247.880212][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.909270][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.961663][ T42] audit: type=1400 audit(1787825049.613:625): avc: denied { bind } for pid=10786 comm="syz.3.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 249.269897][T10796] xt_HMARK: spi-set and port-set can't be combined [ 250.072829][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1642'. [ 250.077866][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1642'. [ 250.136131][T10805] netlink: 'syz.0.1642': attribute type 4 has an invalid length. [ 250.140613][T10805] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1642'. [ 250.165945][T10803] bond0: left allmulticast mode [ 250.168446][T10803] bond_slave_0: left allmulticast mode [ 250.171339][T10803] bond_slave_1: left allmulticast mode [ 250.251539][T10805] .`: renamed from bond0 [ 251.324902][T10832] fuse: fd is not a fuse device [ 251.393751][T10834] retu-mfd 0-0001: could not read Retu revision: -6 [ 251.407986][T10834] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 251.708884][ T42] audit: type=1400 audit(1787825052.353:626): avc: denied { write } for pid=10845 comm="syz.1.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 251.863209][ T5824] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 251.959970][T10851] tipc: Started in network mode [ 251.973945][T10851] tipc: Node identity ac1414aa, cluster identity 4711 [ 252.000998][T10851] tipc: New replicast peer: 172.20.20.187 [ 252.015340][T10851] tipc: Enabled bearer , priority 10 [ 252.042077][ T5824] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 252.069605][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.074924][ T5824] usb 7-1: Product: syz [ 252.077548][ T5824] usb 7-1: Manufacturer: syz [ 252.115214][ T5824] usb 7-1: SerialNumber: syz [ 252.364697][T10861] overlayfs: failed to clone upperpath [ 252.413104][ T42] audit: type=1400 audit(1787825053.063:627): avc: denied { module_request } for pid=10862 comm="syz.1.1664" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 252.496912][ T42] audit: type=1400 audit(1787825053.143:628): avc: denied { bind } for pid=10867 comm="syz.3.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 252.514361][ T42] audit: type=1400 audit(1787825053.163:629): avc: denied { listen } for pid=10867 comm="syz.3.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 252.599426][ T42] audit: type=1400 audit(1787825053.243:630): avc: denied { accept } for pid=10867 comm="syz.3.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 252.698061][ T5824] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 252.721908][ T5824] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 252.936020][ T5824] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 252.959467][ T5824] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 253.007222][ T5824] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 253.012697][ T5732] tipc: Node number set to 2886997162 [ 253.069930][ T5824] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 253.082462][ T5824] usb 7-1: USB disconnect, device number 11 [ 253.136305][T10880] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 254.073603][ T5824] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 254.241413][ T5824] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 254.254218][ T5824] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 254.280152][ T5824] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 254.313392][ T5824] usb 8-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 254.341098][ T5824] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 254.367248][ T5824] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 254.384315][ T5824] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 254.397198][ T5824] usb 8-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 254.459564][ T5824] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 254.469624][ T5824] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.481954][ T5824] usb 8-1: Product: syz [ 254.485729][ T5824] usb 8-1: Manufacturer: syz [ 254.494504][ T5824] usb 8-1: SerialNumber: syz [ 254.545794][ T5824] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 254.616686][ T5824] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 254.633785][ T5824] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 254.747602][T10891] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 254.769943][ T5824] usb 8-1: USB disconnect, device number 5 [ 254.805394][ T5824] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 254.851043][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.870291][ T5824] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 254.884508][ T5824] ti_usb_3410_5052 8-1:2.0: device disconnected [ 254.988668][ T5817] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 255.114450][T10905] 8021q: adding VLAN 0 to HW filter on device eth0 [ 255.151499][T10905] 8021q: adding VLAN 0 to HW filter on device eth1 [ 255.174723][T10905] 8021q: adding VLAN 0 to HW filter on device eth2 [ 255.180866][ T5817] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 255.188158][ T5817] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 255.189623][T10905] 8021q: adding VLAN 0 to HW filter on device eth3 [ 255.195601][ T5817] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 255.208527][ T5817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.217785][T10913] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 255.244454][ T5817] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 255.596564][ T5817] usb 7-1: USB disconnect, device number 12 [ 255.907707][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.955047][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.003140][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.449793][ T6209] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 256.625242][ T6209] usb 7-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 256.692689][ T6209] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.885425][ T6209] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.889617][ T6209] usb 7-1: Product: syz [ 256.900876][ T6209] usb 7-1: Manufacturer: syz [ 256.903536][ T6209] usb 7-1: SerialNumber: syz [ 256.936179][ T6209] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 257.568408][ T6209] gspca_mr97310a: reg write [21] error -22 [ 257.590270][ T6209] mr97310a 7-1:1.0: probe with driver mr97310a failed with error -22 [ 257.610328][ T6209] usb 7-1: USB disconnect, device number 13 [ 258.278676][ T42] audit: type=1400 audit(1787825058.903:631): avc: denied { sqpoll } for pid=10966 comm="syz.1.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 258.298854][ T29] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 258.889471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 259.344735][T10975] binder_alloc: 10974: binder_alloc_buf, no vma [ 259.407760][ T42] audit: type=1400 audit(1787825059.973:632): avc: denied { set_context_mgr } for pid=10974 comm="syz.3.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 259.783197][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 259.793688][T10983] fuse: fd is not a fuse device [ 259.798341][ T29] usb 7-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=26.79 [ 259.809834][ T29] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 259.841151][ T29] usb 7-1: can't read configurations, error -71 [ 260.818947][ T42] audit: type=1400 audit(1787825059.993:633): avc: denied { call } for pid=10974 comm="syz.3.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 260.878631][ T42] audit: type=1400 audit(1787825060.003:634): avc: denied { map } for pid=10974 comm="syz.3.1701" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 260.988652][ T42] audit: type=1400 audit(1787825060.223:635): avc: denied { bind } for pid=10978 comm="syz.1.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 261.009006][ T42] audit: type=1400 audit(1787825060.273:636): avc: denied { read } for pid=10978 comm="syz.1.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 261.018650][ T42] audit: type=1400 audit(1787825061.033:637): avc: denied { read } for pid=10988 comm="syz.0.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 261.103914][ T42] audit: type=1400 audit(1787825061.663:638): avc: denied { accept } for pid=11007 comm="syz.0.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 261.113428][T11008] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 261.900665][ T42] audit: type=1400 audit(1787825062.553:639): avc: denied { getopt } for pid=11024 comm="syz.2.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 261.956362][T11028] overlayfs: failed to clone lowerpath [ 262.907807][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1727'. [ 262.914046][T11058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1727'. [ 262.922673][T11058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1727'. [ 263.765013][ T42] audit: type=1400 audit(1787825064.423:640): avc: denied { read } for pid=11074 comm="syz.3.1733" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 263.838299][ T42] audit: type=1400 audit(1787825064.423:641): avc: denied { open } for pid=11074 comm="syz.3.1733" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 263.903019][ T42] audit: type=1400 audit(1787825064.553:642): avc: denied { write } for pid=11074 comm="syz.3.1733" name="file2" dev="tmpfs" ino=1815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 263.951558][ T42] audit: type=1400 audit(1787825064.553:643): avc: denied { open } for pid=11074 comm="syz.3.1733" path="/341/file2" dev="tmpfs" ino=1815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 265.567570][T11113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1744'. [ 265.841283][ T42] audit: type=1400 audit(1787825066.483:644): avc: denied { read } for pid=11119 comm="syz.2.1746" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 265.924490][ T42] audit: type=1400 audit(1787825066.483:645): avc: denied { open } for pid=11119 comm="syz.2.1746" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 265.978969][ T42] audit: type=1400 audit(1787825066.493:646): avc: denied { ioctl } for pid=11119 comm="syz.2.1746" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x4d13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 266.293538][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 266.439734][ T29] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 266.628122][T11131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.629172][ T29] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 266.706762][ T29] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 266.713128][ T29] usb 7-1: config 1 has no interface number 0 [ 266.742665][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.759579][ T29] usb 7-1: Product: syz [ 266.778201][ T29] usb 7-1: Manufacturer: syz [ 266.796179][ T29] usb 7-1: SerialNumber: syz [ 266.876815][ T29] usb 7-1: 3:1 : does not exist [ 266.880024][ T29] usb 7-1: 3:2 : does not exist [ 267.314164][T11132] ptrace attach of "/syz-executor exec"[5737] was attempted by "/syz-executor exec"[11132] [ 267.981218][ T29] usb 7-1: USB disconnect, device number 16 [ 268.097350][ T42] audit: type=1400 audit(1787825068.753:647): avc: denied { read } for pid=11140 comm="syz.3.1753" dev="nsfs" ino=4026533174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 268.146681][ T42] audit: type=1400 audit(1787825068.753:648): avc: denied { open } for pid=11140 comm="syz.3.1753" path="net:[4026533174]" dev="nsfs" ino=4026533174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 269.454856][T11153] syzkaller0: entered promiscuous mode [ 269.457766][T11153] syzkaller0: entered allmulticast mode [ 269.514843][ T42] audit: type=1400 audit(1787825070.163:649): avc: denied { name_bind } for pid=11155 comm="syz.3.1760" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 269.578686][ T42] audit: type=1326 audit(1787825070.223:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11150 comm="syz.0.1757" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa16b19e0d9 code=0x0 [ 270.911789][T11182] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 270.918276][T11182] CPU: 1 UID: 0 PID: 11182 Comm: syz.3.1768 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.918333][T11182] Tainted: [L]=SOFTLOCKUP [ 270.918341][T11182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 270.918356][T11182] Call Trace: [ 270.918365][T11182] [ 270.918374][T11182] dump_stack_lvl+0x100/0x190 [ 270.918413][T11182] sysfs_warn_dup.cold+0x1c/0x28 [ 270.918445][T11182] sysfs_create_dir_ns+0x24b/0x2b0 [ 270.918480][T11182] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 270.918508][T11182] ? find_held_lock+0x2b/0x80 [ 270.918531][T11182] ? kobject_add_internal+0x25f/0x930 [ 270.918559][T11182] ? kobject_add_internal+0x25f/0x930 [ 270.918592][T11182] ? class_dir_child_ns_type+0xd/0x60 [ 270.918620][T11182] kobject_add_internal+0x2c8/0x930 [ 270.918653][T11182] kobject_add+0x16a/0x1e0 [ 270.918682][T11182] ? __pfx_kobject_add+0x10/0x10 [ 270.918713][T11182] ? get_device_parent+0x1b3/0x4c0 [ 270.918737][T11182] ? kobject_put+0xb9/0x640 [ 270.918773][T11182] device_add+0x294/0x1970 [ 270.918801][T11182] ? lockdep_init_map_type+0x5c/0x250 [ 270.918854][T11182] ? __pfx_device_add+0x10/0x10 [ 270.918880][T11182] ? lockdep_init_map_type+0x5c/0x250 [ 270.918922][T11182] ? __init_waitqueue_head+0xca/0x150 [ 270.918954][T11182] tty_register_device_attr+0x388/0x7f0 [ 270.918989][T11182] ? lockdep_init_map_type+0x5c/0x250 [ 270.919021][T11182] ? __pfx_tty_register_device_attr+0x10/0x10 [ 270.919062][T11182] ? tty_port_init+0x156/0x1c0 [ 270.919090][T11182] gsm_activate_mux+0x155/0x2a0 [ 270.919113][T11182] gsmld_ioctl+0xbbc/0x15c0 [ 270.919146][T11182] ? __pfx_gsmld_ioctl+0x10/0x10 [ 270.919192][T11182] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 270.919226][T11182] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 270.919257][T11182] ? __pfx_gsmld_ioctl+0x10/0x10 [ 270.919281][T11182] tty_ioctl+0x11b4/0x1640 [ 270.919347][T11182] ? __pfx_tty_ioctl+0x10/0x10 [ 270.919369][T11182] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 270.919407][T11182] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 270.919463][T11182] ? selinux_file_ioctl+0x13b/0x290 [ 270.919493][T11182] ? selinux_file_ioctl+0xb6/0x290 [ 270.919526][T11182] ? __pfx_tty_ioctl+0x10/0x10 [ 270.919550][T11182] __x64_sys_ioctl+0x18e/0x210 [ 270.919579][T11182] do_syscall_64+0x123/0x790 [ 270.919605][T11182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.919629][T11182] RIP: 0033:0x7f9ac899e0d9 [ 270.919650][T11182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.919672][T11182] RSP: 002b:00007f9ac9824028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.919695][T11182] RAX: ffffffffffffffda RBX: 00007f9ac8c26180 RCX: 00007f9ac899e0d9 [ 270.919708][T11182] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 270.919722][T11182] RBP: 00007f9ac8a35024 R08: 0000000000000000 R09: 0000000000000000 [ 270.919735][T11182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.919747][T11182] R13: 00007f9ac8c26218 R14: 00007f9ac8c26180 R15: 00007ffedc949cc8 [ 270.919776][T11182] [ 271.245417][T11182] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 271.315946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 271.475917][ T42] audit: type=1400 audit(1787825072.093:651): avc: denied { read } for pid=11185 comm="syz.2.1771" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 272.356145][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.793033][T11212] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1776'. [ 273.389235][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.300727][T11223] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 274.329309][T11223] audit: out of memory in audit_log_start [ 274.696781][T11233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.861436][ T42] audit: type=1400 audit(1787825075.513:652): avc: denied { read } for pid=11234 comm="syz.2.1784" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 274.908687][ T42] audit: type=1400 audit(1787825075.543:653): avc: denied { open } for pid=11234 comm="syz.2.1784" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 274.954878][ T42] audit: type=1400 audit(1787825075.543:654): avc: denied { ioctl } for pid=11234 comm="syz.2.1784" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 275.215537][ T42] audit: type=1400 audit(1787825075.873:655): avc: denied { write } for pid=11234 comm="syz.2.1784" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 275.832680][T11250] syzkaller0: entered promiscuous mode [ 275.835488][T11250] syzkaller0: entered allmulticast mode [ 275.884891][T11252] FAULT_INJECTION: forcing a failure. [ 275.884891][T11252] name fail_futex, interval 1, probability 0, space 0, times 1 [ 275.907027][T11252] CPU: 0 UID: 0 PID: 11252 Comm: syz.2.1790 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.907082][T11252] Tainted: [L]=SOFTLOCKUP [ 275.907092][T11252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 275.907109][T11252] Call Trace: [ 275.907118][T11252] [ 275.907129][T11252] dump_stack_lvl+0x100/0x190 [ 275.907195][T11252] should_fail_ex.cold+0x5/0xa [ 275.907230][T11252] get_futex_key+0x1d0/0x14f0 [ 275.907259][T11252] ? __pfx_get_futex_key+0x10/0x10 [ 275.907323][T11252] ? exc_int3+0x23/0x3e0 [ 275.907375][T11252] futex_wait_setup+0x91/0x540 [ 275.907412][T11252] __futex_wait+0x19f/0x300 [ 275.907438][T11252] ? __pfx___futex_wait+0x10/0x10 [ 275.907465][T11252] ? __pfx_try_to_wake_up+0x10/0x10 [ 275.907482][T11252] ? futex_hash+0x311/0x400 [ 275.907501][T11252] ? __pfx_futex_wake_mark+0x10/0x10 [ 275.907529][T11252] ? find_held_lock+0x2b/0x80 [ 275.907551][T11252] ? futex_wake+0x4ea/0x5e0 [ 275.907580][T11252] futex_wait+0xe6/0x370 [ 275.907604][T11252] ? __pfx_futex_wait+0x10/0x10 [ 275.907632][T11252] ? rcu_read_lock_any_held+0x6a/0x90 [ 275.907655][T11252] ? find_held_lock+0x2b/0x80 [ 275.907674][T11252] ? ksys_write+0x190/0x250 [ 275.907703][T11252] ? ksys_write+0x190/0x250 [ 275.907727][T11252] do_futex+0x265/0x440 [ 275.907747][T11252] ? __pfx_do_futex+0x10/0x10 [ 275.907768][T11252] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 275.907793][T11252] __x64_sys_futex+0x34f/0x4d0 [ 275.907816][T11252] ? fput+0x7c/0x100 [ 275.907846][T11252] ? __pfx___x64_sys_futex+0x10/0x10 [ 275.907867][T11252] ? ksys_write+0x1ac/0x250 [ 275.907911][T11252] ? __pfx_ksys_write+0x10/0x10 [ 275.907942][T11252] do_syscall_64+0x123/0x790 [ 275.907963][T11252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.907982][T11252] RIP: 0033:0x7f630879e0d9 [ 275.908000][T11252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.908019][T11252] RSP: 002b:00007f63069f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 275.908045][T11252] RAX: ffffffffffffffda RBX: 00007f6308a25fa8 RCX: 00007f630879e0d9 [ 275.908057][T11252] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6308a25fa8 [ 275.908068][T11252] RBP: 00007f6308a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 275.908078][T11252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.908089][T11252] R13: 00007f6308a26038 R14: 00007ffdfbc7ef40 R15: 00007ffdfbc7f028 [ 275.908114][T11252] [ 276.463191][T11255] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 276.487687][T11255] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 276.490177][T11255] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 276.667242][ T42] audit: type=1400 audit(1787825077.313:656): avc: denied { read } for pid=11261 comm="syz.2.1794" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 276.696516][ T42] audit: type=1400 audit(1787825077.313:657): avc: denied { open } for pid=11261 comm="syz.2.1794" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 276.710925][ T42] audit: type=1400 audit(1787825077.323:658): avc: denied { ioctl } for pid=11261 comm="syz.2.1794" path="/dev/usbmon0" dev="devtmpfs" ino=736 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 276.774403][ T57] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 276.958874][ T57] usb 8-1: Using ep0 maxpacket: 16 [ 276.964255][ T57] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 276.970864][ T57] usb 8-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.976396][ T57] usb 8-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.988850][ T57] usb 8-1: config 0 interface 0 has no altsetting 0 [ 276.992074][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.042539][ T57] usb 8-1: config 0 descriptor?? [ 277.534896][ T57] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 277.556587][ T57] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 277.593860][ T57] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 277.612846][ T57] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 277.619600][T11276] ------------[ cut here ]------------ [ 277.626089][ T57] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 277.627474][ T57] mcp2221 0003:04D8:00DD.0004: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 277.658003][T11276] do not call blocking ops when !TASK_RUNNING; state=2 set at [] prepare_to_wait_event+0x8d/0x720 [ 277.668887][T11276] WARNING: kernel/sched/core.c:9157 at __might_sleep+0x94/0xc0, CPU#1: syz.1.1799/11276 [ 277.692183][T11276] Modules linked in: [ 277.693867][T11276] CPU: 1 UID: 0 PID: 11276 Comm: syz.1.1799 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.697885][T11276] Tainted: [L]=SOFTLOCKUP [ 277.700184][T11276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 277.714873][T11276] RIP: 0010:__might_sleep+0x97/0xc0 [ 277.717978][T11276] Code: 8b 94 24 80 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 0c 3c 70 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 bd bf a7 00 eb 9f 89 74 24 04 e8 e2 bf a7 [ 277.737541][T11276] RSP: 0018:ffffc90022a5fb88 EFLAGS: 00010282 [ 277.746004][T11276] RAX: dffffc0000000000 RBX: ffffffff8befd0a0 RCX: ffffffff81e29fad [ 277.758135][T11276] RDX: ffffffff81e29fad RSI: 0000000000000002 RDI: ffffffff914651d0 [ 277.776863][T11276] RBP: 000000000000026f R08: ffffffff81fcdfa2 R09: 0000000000000000 [ 277.781787][T11276] R10: ffffc90022a5fd40 R11: 0000000000000000 R12: ffff888013e7a580 [ 277.786404][T11276] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8ea0b240 [ 277.791678][T11276] FS: 00007f63cbdf16c0(0000) GS:ffff8880d5ca2000(0000) knlGS:0000000000000000 [ 277.801517][T11276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.812793][T11276] CR2: 00007f63cb171020 CR3: 000000005a994000 CR4: 0000000000352ef0 [ 277.817684][T11276] Call Trace: [ 277.819654][T11276] [ 277.821618][T11276] __mutex_lock+0x10e/0x1bc0 [ 277.824300][T11276] ? futex_hash_allocate+0xd22/0x1120 [ 277.826915][T11276] ? find_held_lock+0x2b/0x80 [ 277.828939][T11276] ? futex_hash_allocate+0x6fc/0x1120 [ 277.832690][T11276] ? __pfx___mutex_lock+0x10/0x10 [ 277.835081][T11276] ? do_raw_spin_lock+0x128/0x260 [ 277.839151][T11276] ? find_held_lock+0x2b/0x80 [ 277.842009][T11276] ? prepare_to_wait_event+0x8d/0x720 [ 277.844421][T11276] ? lockdep_hardirqs_on+0x7d/0x110 [ 277.846480][T11276] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 277.849285][T11276] ? prepare_to_wait_event+0xbe/0x720 [ 277.851694][T11276] ? futex_hash_allocate+0xd22/0x1120 [ 277.855142][T11276] futex_hash_allocate+0xd22/0x1120 [ 277.858950][T11276] ? __pfx_futex_hash_allocate+0x10/0x10 [ 277.862326][T11276] ? __pfx_var_wake_function+0x10/0x10 [ 277.865526][T11276] ? static_key_count+0x5a/0x70 [ 277.868649][T11276] futex_hash_prctl+0x1b8/0x390 [ 277.871590][T11276] __do_sys_prctl+0x16dd/0x2270 [ 277.874394][T11276] ? __pfx___do_sys_prctl+0x10/0x10 [ 277.879778][T11276] do_syscall_64+0x123/0x790 [ 277.882955][T11276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.887027][T11276] RIP: 0033:0x7f63caf9e0d9 [ 277.889960][T11276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.920743][T11276] RSP: 002b:00007f63cbdf1028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 277.929992][T11276] RAX: ffffffffffffffda RBX: 00007f63cb225fa0 RCX: 00007f63caf9e0d9 [ 277.940401][T11276] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 000000000000004e [ 277.947248][T11276] RBP: 00007f63cb035024 R08: 0000000000000000 R09: 0000000000000000 [ 277.966605][T11276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.969826][T11276] R13: 00007f63cb226038 R14: 00007f63cb225fa0 R15: 00007ffda1073d98 [ 277.972911][T11276] [ 277.974486][T11276] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 277.997971][T11276] CPU: 1 UID: 0 PID: 11276 Comm: syz.1.1799 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.012661][T11276] Tainted: [L]=SOFTLOCKUP [ 278.015180][T11276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 278.018768][T11276] Call Trace: [ 278.034518][T11276] [ 278.035780][T11276] dump_stack_lvl+0x100/0x190 [ 278.037851][T11276] vpanic+0x553/0x970 [ 278.039950][T11276] ? __pfx_vpanic+0x10/0x10 [ 278.042640][T11276] panic+0xd1/0xe0 [ 278.045528][T11276] ? __pfx_panic+0x10/0x10 [ 278.049303][T11276] check_panic_on_warn.cold+0x19/0x34 [ 278.052894][T11276] ? __might_sleep+0x94/0xc0 [ 278.071548][T11276] __warn.cold+0x191/0x318 [ 278.074436][T11276] __report_bug+0x30f/0x440 [ 278.081057][T11276] ? __might_sleep+0x94/0xc0 [ 278.083891][T11276] ? __pfx___report_bug+0x10/0x10 [ 278.087819][T11276] ? lock_acquire+0x1b9/0x370 [ 278.090283][T11276] ? prepare_to_wait_event+0x8d/0x720 [ 278.102072][T11276] ? prepare_to_wait_event+0x8d/0x720 [ 278.105475][T11276] ? futex_hash_allocate+0xd22/0x1120 [ 278.129824][T11276] ? mark_held_locks+0x40/0x70 [ 278.136106][T11276] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 278.149291][T11276] report_bug_entry+0xe2/0x290 [ 278.157594][T11276] ? __might_sleep+0x97/0xc0 [ 278.161911][T11276] handle_bug+0x1cd/0x2a0 [ 278.166581][T11276] exc_invalid_op+0x17/0x50 [ 278.182063][T11276] asm_exc_invalid_op+0x1a/0x20 [ 278.185072][T11276] RIP: 0010:__might_sleep+0x97/0xc0 [ 278.188858][T11276] Code: 8b 94 24 80 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 0c 3c 70 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 bd bf a7 00 eb 9f 89 74 24 04 e8 e2 bf a7 [ 278.214255][T11276] RSP: 0018:ffffc90022a5fb88 EFLAGS: 00010282 [ 278.217136][T11276] RAX: dffffc0000000000 RBX: ffffffff8befd0a0 RCX: ffffffff81e29fad [ 278.221337][T11276] RDX: ffffffff81e29fad RSI: 0000000000000002 RDI: ffffffff914651d0 [ 278.225844][T11276] RBP: 000000000000026f R08: ffffffff81fcdfa2 R09: 0000000000000000 [ 278.235787][T11276] R10: ffffc90022a5fd40 R11: 0000000000000000 R12: ffff888013e7a580 [ 278.251632][T11276] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8ea0b240 [ 278.256365][T11276] ? futex_hash_allocate+0xd22/0x1120 [ 278.259616][T11276] ? prepare_to_wait_event+0x8d/0x720 [ 278.269638][T11276] ? prepare_to_wait_event+0x8d/0x720 [ 278.273192][T11276] ? __lock_acquire+0x4c5/0x1ec0 [ 278.276338][T11276] __mutex_lock+0x10e/0x1bc0 [ 278.283758][T11276] ? futex_hash_allocate+0xd22/0x1120 [ 278.305422][T11276] ? find_held_lock+0x2b/0x80 [ 278.310917][T11276] ? futex_hash_allocate+0x6fc/0x1120 [ 278.332081][T11276] ? __pfx___mutex_lock+0x10/0x10 [ 278.340986][T11276] ? do_raw_spin_lock+0x128/0x260 [ 278.344842][T11276] ? find_held_lock+0x2b/0x80 [ 278.362497][T11276] ? prepare_to_wait_event+0x8d/0x720 [ 278.366033][T11276] ? lockdep_hardirqs_on+0x7d/0x110 [ 278.370633][T11276] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 278.401264][T11276] ? prepare_to_wait_event+0xbe/0x720 [ 278.407295][T11276] ? futex_hash_allocate+0xd22/0x1120 [ 278.410302][T11276] futex_hash_allocate+0xd22/0x1120 [ 278.416405][T11276] ? __pfx_futex_hash_allocate+0x10/0x10 [ 278.422152][T11276] ? __pfx_var_wake_function+0x10/0x10 [ 278.431358][T11276] ? static_key_count+0x5a/0x70 [ 278.434611][T11276] futex_hash_prctl+0x1b8/0x390 [ 278.437713][T11276] __do_sys_prctl+0x16dd/0x2270 [ 278.441414][T11276] ? __pfx___do_sys_prctl+0x10/0x10 [ 278.445245][T11276] do_syscall_64+0x123/0x790 [ 278.448361][T11276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.452713][T11276] RIP: 0033:0x7f63caf9e0d9 [ 278.456834][T11276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.470008][T11276] RSP: 002b:00007f63cbdf1028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 278.478152][T11276] RAX: ffffffffffffffda RBX: 00007f63cb225fa0 RCX: 00007f63caf9e0d9 [ 278.492653][T11276] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 000000000000004e [ 278.497350][T11276] RBP: 00007f63cb035024 R08: 0000000000000000 R09: 0000000000000000 [ 278.502466][T11276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.511881][T11276] R13: 00007f63cb226038 R14: 00007f63cb225fa0 R15: 00007ffda1073d98 [ 278.522390][T11276] [ 278.525336][T11276] Kernel Offset: disabled [ 278.528613][T11276] Rebooting in 86400 seconds..