last executing test programs: 4m0.464464371s ago: executing program 0 (id=3514): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d6151", 0xc5}], 0x1}}], 0x1, 0x2090) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="ced940a28e6deb603b3ebee82feb4bfe3f951e", 0x13}, {&(0x7f0000000400)="ba042c62c897bd35a499391e8b800e3641055b01a3599f25963b3331334daa7145fefa2a59777c3cf0c2c1081b20143e22af635e397c0fba3bfc2339508783c1b039b6c934098bd53df0b51e4670dab6312d4c55efa46602c495eaa31740ffa765a775ec8cfef5e86863d46cb49638aa8f988dcf7e", 0x75}, {&(0x7f0000000500)="450c277e4c6a78d8e85f79d44f90", 0xe}, {&(0x7f00000005c0)="e4c138e3db97710076a9754ee0803fcb7f9287da7ccd7dcbcf2d0f1c4be6e7e0c508b8ba72b5b28f9a7200a17f0d18292f44990eaf39e03a6a26663f59e4cc990b89eb16", 0x44}], 0x4}}], 0x1, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (fail_nth: 4) 4m0.244387222s ago: executing program 0 (id=3517): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRESDEC=r0], 0xfe33) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r1, &(0x7f0000000740)={&(0x7f0000000540)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x20}, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000940)=0x707987cd) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000002c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfee4}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = syz_io_uring_setup(0xf4d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x69f1227ab38ce363}, &(0x7f0000000080)={&(0x7f0000000100)=""/15}) sigaltstack(0x0, &(0x7f0000000200)={0x0}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r4, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m59.77669502s ago: executing program 0 (id=3521): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x3f) 3m59.602246251s ago: executing program 0 (id=3524): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000d90000000000e800010000010000efffffff00000000000000"], 0x0, 0x32}, 0x28) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0x9, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x20000000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000001c0)={0x1, 0x400, 0xb94}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000bc0)={0x0, 0x84, 0x3}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000fc0)={r2, "2d122342bd31c1dbc277e09b8a7e9254"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file2\x00'}) accept(r3, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000180)=0x80) openat(r3, &(0x7f0000000140)='./file7/file0\x00', 0x40, 0x40) 3m59.098252136s ago: executing program 0 (id=3529): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg/0:0:0:0\x00', 0x10b003, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m58.687492812s ago: executing program 0 (id=3533): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f8e050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008810}, 0x200448c6) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000000)={0xffc1, 0x7, 0xfff9, 0x8, 0x12, "b95d2b5b35f90e50"}) (async) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m42.953585474s ago: executing program 32 (id=3533): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f8e050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008810}, 0x200448c6) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000000)={0xffc1, 0x7, 0xfff9, 0x8, 0x12, "b95d2b5b35f90e50"}) (async) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.314190053s ago: executing program 1 (id=4934): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={&(0x7f0000000540)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256-generic\x00'}, 0x80, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000001c40)=[{0x370, 0x1, 0x8, "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"}, {0x10, 0x108, 0x2}, {0xe8, 0x114, 0x3, "14de4e11cc1b7b9c87cb283c35ed216179fffff02f43f9040dbd96a4a31979463a557b963633819542a4dbff22946796f56173f2dcfa3a07ab17cf12afccbad562e51b8730a884d42aec71e6a411d62fd76b05b7baf008f6b781fa2c381c42907a2298b01b9341a64fcba61b45edd16e32a049db6f7531740ee2cc5bdd533d3aae7f3c911dba00a82d4dc36159c1ea023056cb6ec7379e6c33461a2422a3e1639c833116b5480f74d4cf5b59450ec4f14c278f029e60700638a59e224a42760a4deac19e6f5ed15c79802ab0c7202996ab"}], 0x468}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000002c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfee4}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.182355743s ago: executing program 1 (id=4935): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000200)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000680)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d271d3", 0x84}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5", 0x5}], 0x1}}], 0x2, 0x2090) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x200, 0x3, 0x2, 0xc}, {0x9, 0x5, 0xd, 0x2, 0x10, 0x9, 0x2}, {0x9, 0x5, 0xf, 0x3, 0x40, 0x6, 0x6, 0x9}}}}}}]}}, 0x0) sendto$inet(r0, &(0x7f00000002c0)="95", 0x1, 0x0, 0x0, 0x0) 5.083734214s ago: executing program 4 (id=4938): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e34", 0xc3}], 0x1}], 0x1, 0x40800) 4.630391701s ago: executing program 4 (id=4939): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) 4.288247543s ago: executing program 3 (id=4940): socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x38, 0x0, 0x0, 0x0, 0x8, 0x499, 0x101b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x5, 0x90, 0xf5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffc, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x2, 0x6a, 0x26, {0x7, 0x25, 0x1, 0x0, 0x7, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x7f, 0x4, {0x7, 0x25, 0x1, 0xc, 0x7, 0x7}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 4.287973281s ago: executing program 1 (id=4941): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 4.098548726s ago: executing program 1 (id=4942): r0 = socket$pppl2tp(0x18, 0x1, 0x1) accept4$netrom(r0, 0x0, 0x0, 0x800) 3.931485455s ago: executing program 1 (id=4943): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) 3.08058023s ago: executing program 2 (id=4945): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}]}}]}, 0x38}}, 0x0) 3.080379564s ago: executing program 4 (id=4946): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0xf170, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffc], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.874898386s ago: executing program 2 (id=4947): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0xb) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4890}, 0x40) r4 = syz_open_dev$sg(0x0, 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f00000000c0)={0x1, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0xc0086202, &(0x7f0000000540)=0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 2.671750394s ago: executing program 3 (id=4948): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084090) 2.290710951s ago: executing program 4 (id=4949): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1a"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 2.157648047s ago: executing program 3 (id=4950): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) 1.934173724s ago: executing program 3 (id=4951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x14, 0x1, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x4004) 1.73809685s ago: executing program 4 (id=4952): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff000000, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x8}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x1, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x81000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, 0xffffffff, 0xff000000, 'macsec0\x00', 'netdevsim0\x00', {}, {}, 0x73, 0x3, 0x25}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r4, r4, 0x0, 0x200000) 1.60671731s ago: executing program 3 (id=4953): r0 = socket$inet_tcp(0x2, 0x1, 0x0) read(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cp'], 0x5) mount(0x0, 0x0, &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x2d3}) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000000) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) r5 = add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r5, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 1.342973694s ago: executing program 2 (id=4954): syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}, "040022eb"}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 1.062136324s ago: executing program 2 (id=4955): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x10, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x48048}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 881.205799ms ago: executing program 2 (id=4956): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setreuid(0x0, 0xee00) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) 498.946282ms ago: executing program 3 (id=4957): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 498.77606ms ago: executing program 1 (id=4958): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/2, 0x2}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000151000/0x2000)=nil, 0x2000, &(0x7f0000000040)='\x00') 416.433986ms ago: executing program 2 (id=4959): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 0s ago: executing program 4 (id=4960): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) kernel console output (not intermixed with test programs): 9 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.302870][T18597] RSP: 002b:00007fe98a1e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.302889][T18597] RAX: ffffffffffffffda RBX: 00007fe989616090 RCX: 00007fe98939c799 [ 418.302901][T18597] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 418.302912][T18597] RBP: 00007fe98a1e4090 R08: 0000000000000000 R09: 0000000000000000 [ 418.302922][T18597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.302932][T18597] R13: 00007fe989616128 R14: 00007fe989616090 R15: 00007ffe4ba92d38 [ 418.302958][T18597] [ 418.302969][T18597] syz.2.4566: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 418.804423][T18597] CPU: 2 UID: 0 PID: 18597 Comm: syz.2.4566 Not tainted syzkaller #0 PREEMPT(full) [ 418.804448][T18597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 418.804459][T18597] Call Trace: [ 418.804464][T18597] [ 418.804471][T18597] dump_stack_lvl+0x100/0x190 [ 418.804504][T18597] warn_alloc.cold+0x95/0x1c1 [ 418.804532][T18597] ? __pfx_warn_alloc+0x10/0x10 [ 418.804554][T18597] ? trace_kmalloc+0x101/0x130 [ 418.804573][T18597] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 418.804603][T18597] ? __kasan_kmalloc+0x8a/0xb0 [ 418.804628][T18597] ? __get_vm_area_node+0x208/0x330 [ 418.804652][T18597] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 418.804673][T18597] ? local_lock_release+0x99/0x130 [ 418.804713][T18597] ? vhost_task_create+0x1db/0x370 [ 418.804740][T18597] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 418.804768][T18597] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 418.804791][T18597] ? rcu_is_watching+0x12/0xc0 [ 418.804811][T18597] ? trace_kmem_cache_alloc+0xf3/0x120 [ 418.804829][T18597] ? vhost_task_create+0x1db/0x370 [ 418.804848][T18597] __vmalloc_node_noprof+0xad/0xf0 [ 418.804867][T18597] ? vhost_task_create+0x1db/0x370 [ 418.804888][T18597] copy_process+0x5ec/0x7a10 [ 418.804924][T18597] ? __pfx_copy_process+0x10/0x10 [ 418.804951][T18597] ? lockdep_init_map_type+0x5c/0x250 [ 418.804969][T18597] ? lockdep_init_map_type+0x5c/0x250 [ 418.804987][T18597] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 418.805015][T18597] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 418.805039][T18597] vhost_task_create+0x1db/0x370 [ 418.805058][T18597] ? __pfx_vhost_task_create+0x10/0x10 [ 418.805077][T18597] ? trace_contention_end+0x140/0x180 [ 418.805101][T18597] ? __pfx_vhost_task_fn+0x10/0x10 [ 418.805122][T18597] ? __pfx___mutex_lock+0x10/0x10 [ 418.805141][T18597] ? kasan_quarantine_put+0x104/0x240 [ 418.805164][T18597] ? lockdep_hardirqs_on+0x78/0x100 [ 418.805187][T18597] kvm_mmu_post_init_vm+0x1b3/0x370 [ 418.805208][T18597] kvm_arch_vcpu_ioctl_run+0x66/0x1830 [ 418.805227][T18597] ? kvm_vcpu_ioctl+0x155c/0x1730 [ 418.805256][T18597] kvm_vcpu_ioctl+0x730/0x1730 [ 418.805282][T18597] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 418.805307][T18597] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 418.805332][T18597] ? do_vfs_ioctl+0x226/0x13e0 [ 418.805356][T18597] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 418.805380][T18597] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 418.805410][T18597] ? __fget_files+0x215/0x3d0 [ 418.805427][T18597] ? hook_file_ioctl_common+0x146/0x410 [ 418.805458][T18597] ? selinux_file_ioctl+0x139/0x290 [ 418.805478][T18597] ? selinux_file_ioctl+0xb4/0x290 [ 418.805499][T18597] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 418.805525][T18597] __x64_sys_ioctl+0x18e/0x210 [ 418.805582][T18597] do_syscall_64+0x106/0xf80 [ 418.805601][T18597] ? clear_bhb_loop+0x40/0x90 [ 418.805621][T18597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.805636][T18597] RIP: 0033:0x7fe98939c799 [ 418.805652][T18597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.805668][T18597] RSP: 002b:00007fe98a1e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.805684][T18597] RAX: ffffffffffffffda RBX: 00007fe989616090 RCX: 00007fe98939c799 [ 418.805695][T18597] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 418.805706][T18597] RBP: 00007fe98a1e4090 R08: 0000000000000000 R09: 0000000000000000 [ 418.805716][T18597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.805727][T18597] R13: 00007fe989616128 R14: 00007fe989616090 R15: 00007ffe4ba92d38 [ 418.805751][T18597] [ 418.805765][T18597] Mem-Info: [ 419.223020][T18597] active_anon:6487 inactive_anon:27584 isolated_anon:0 [ 419.223020][T18597] active_file:4630 inactive_file:27250 isolated_file:0 [ 419.223020][T18597] unevictable:1768 dirty:303 writeback:0 [ 419.223020][T18597] slab_reclaimable:8821 slab_unreclaimable:85303 [ 419.223020][T18597] mapped:35116 shmem:25552 pagetables:3745 [ 419.223020][T18597] sec_pagetables:307 bounce:0 [ 419.223020][T18597] kernel_misc_reclaimable:0 [ 419.223020][T18597] free:417815 free_pcp:14757 free_cma:0 [ 419.282397][T18597] Node 0 active_anon:24420kB inactive_anon:110336kB active_file:18308kB inactive_file:108792kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:87216kB dirty:1212kB writeback:0kB shmem:97128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15264kB pagetables:5844kB sec_pagetables:1228kB all_unreclaimable? no Balloon:0kB [ 419.316717][T18597] Node 1 active_anon:1652kB inactive_anon:0kB active_file:212kB inactive_file:208kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:53248kB dirty:0kB writeback:0kB shmem:5080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:9260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 419.365447][T18597] Node 0 DMA free:6800kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:224kB local_pcp:76kB free_cma:0kB [ 419.394384][T18597] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 419.400336][T18597] Node 0 DMA32 free:178412kB boost:0kB min:27476kB low:34344kB high:41212kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24420kB inactive_anon:110336kB active_file:18308kB inactive_file:108792kB unevictable:3536kB writepending:1212kB zspages:2328kB present:2080628kB managed:1260952kB mlocked:0kB bounce:0kB free_pcp:40288kB local_pcp:7108kB free_cma:0kB [ 419.441639][T18597] lowmem_reserve[]: 0 0 0 0 0 [ 419.444523][T18597] Node 1 Normal free:1485800kB boost:0kB min:39760kB low:49700kB high:59640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1652kB inactive_anon:0kB active_file:212kB inactive_file:208kB unevictable:3536kB writepending:0kB zspages:2412kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:18892kB local_pcp:8228kB free_cma:0kB [ 419.483392][T18597] lowmem_reserve[]: 0 0 0 0 0 [ 419.485588][T18597] Node 0 DMA: 10*4kB (UM) 13*8kB (UM) 4*16kB (M) 10*32kB (UM) 8*64kB (UM) 7*128kB (UM) 5*256kB (UM) 1*512kB (U) 1*1024kB (U) 1*2048kB (U) 0*4096kB = 6800kB [ 419.492793][T18597] Node 0 DMA32: 1072*4kB (U) 1801*8kB (UE) 1250*16kB (UE) 246*32kB (UE) 86*64kB (UME) 99*128kB (UME) 56*256kB (UM) 34*512kB (M) 20*1024kB (UM) 14*2048kB (UM) 8*4096kB (UM) = 178408kB [ 419.544461][T18597] Node 1 Normal: 354*4kB (UM) 362*8kB (UME) 317*16kB (UME) 310*32kB (UME) 320*64kB (UME) 267*128kB (UME) 267*256kB (UME) 242*512kB (UM) 213*1024kB (UM) 7*2048kB (UME) 241*4096kB (M) = 1485800kB [ 419.561627][T18597] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 419.567445][T18597] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 419.586818][T18597] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 419.590049][T18602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=18602 comm=syz.3.4569 [ 419.605385][T18597] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 419.616790][T18597] 54325 total pagecache pages [ 419.626023][T18597] 90 pages in swap cache [ 419.635378][T18597] Free swap = 117196kB [ 419.637309][T18597] Total swap = 124996kB [ 419.659941][T18597] 1048443 pages RAM [ 419.661451][T18597] 0 pages HighMem/MovableOnly [ 419.664288][T18597] 283894 pages reserved [ 419.666749][T18597] 0 pages cma reserved [ 419.928102][T18608] FAULT_INJECTION: forcing a failure. [ 419.928102][T18608] name failslab, interval 1, probability 0, space 0, times 0 [ 419.957905][T18608] CPU: 0 UID: 0 PID: 18608 Comm: syz.1.4570 Not tainted syzkaller #0 PREEMPT(full) [ 419.957932][T18608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 419.957942][T18608] Call Trace: [ 419.957948][T18608] [ 419.957955][T18608] dump_stack_lvl+0x100/0x190 [ 419.957987][T18608] should_fail_ex.cold+0x5/0xa [ 419.958009][T18608] should_failslab+0xc2/0x120 [ 419.958027][T18608] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 419.958052][T18608] ? __alloc_skb+0x140/0x710 [ 419.958076][T18608] __alloc_skb+0x140/0x710 [ 419.958091][T18608] ? __alloc_skb+0x5b7/0x710 [ 419.958107][T18608] ? __pfx___alloc_skb+0x10/0x10 [ 419.958131][T18608] netlink_alloc_large_skb+0x69/0x150 [ 419.958154][T18608] netlink_sendmsg+0x680/0xda0 [ 419.958181][T18608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.958201][T18608] ? __pfx___might_fault+0x10/0x10 [ 419.958243][T18608] ____sys_sendmsg+0x9e1/0xb70 [ 419.958263][T18608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.958284][T18608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.958316][T18608] ___sys_sendmsg+0x190/0x1e0 [ 419.958341][T18608] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.958390][T18608] __sys_sendmsg+0x170/0x220 [ 419.960582][T18608] ? __pfx___sys_sendmsg+0x10/0x10 [ 419.960626][T18608] do_syscall_64+0x106/0xf80 [ 419.960646][T18608] ? clear_bhb_loop+0x40/0x90 [ 419.960668][T18608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.960686][T18608] RIP: 0033:0x7f096019c799 [ 419.960703][T18608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.960719][T18608] RSP: 002b:00007f0960fc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.960737][T18608] RAX: ffffffffffffffda RBX: 00007f0960416090 RCX: 00007f096019c799 [ 419.960748][T18608] RDX: 0000000004000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 419.960759][T18608] RBP: 00007f0960fc8090 R08: 0000000000000000 R09: 0000000000000000 [ 419.960769][T18608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.960779][T18608] R13: 00007f0960416128 R14: 00007f0960416090 R15: 00007fff07ab8518 [ 419.960802][T18608] [ 422.203420][T18633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 422.493730][ T40] kauditd_printk_skb: 228 callbacks suppressed [ 422.493747][ T40] audit: type=1400 audit(1772842157.287:39048): avc: denied { create } for pid=18641 comm="syz.4.4582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 422.541426][ T40] audit: type=1400 audit(1772842157.327:39049): avc: denied { write } for pid=18641 comm="syz.4.4582" path="socket:[137022]" dev="sockfs" ino=137022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 422.568801][ T40] audit: type=1400 audit(1772842157.327:39050): avc: denied { write } for pid=18641 comm="syz.4.4582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 422.604220][ T40] audit: type=1400 audit(1772842157.387:39051): avc: denied { read write } for pid=15700 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 422.614735][ T40] audit: type=1400 audit(1772842157.387:39052): avc: denied { read write open } for pid=15700 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 422.636969][ T40] audit: type=1400 audit(1772842157.387:39053): avc: denied { ioctl } for pid=15700 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 422.757126][ T40] audit: type=1400 audit(1772842157.547:39054): avc: denied { read write } for pid=18644 comm="syz.4.4583" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 422.797764][ T40] audit: type=1400 audit(1772842157.547:39055): avc: denied { read open } for pid=18644 comm="syz.4.4583" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 422.820771][ T40] audit: type=1400 audit(1772842157.547:39056): avc: denied { read write } for pid=18644 comm="syz.4.4583" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 422.845386][ T40] audit: type=1400 audit(1772842157.547:39057): avc: denied { read write open } for pid=18644 comm="syz.4.4583" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 423.186283][T18650] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 423.192822][T18650] overlayfs: overlapping lowerdir path [ 424.791198][T18678] FAULT_INJECTION: forcing a failure. [ 424.791198][T18678] name failslab, interval 1, probability 0, space 0, times 0 [ 424.813452][T18678] CPU: 0 UID: 0 PID: 18678 Comm: syz.2.4592 Not tainted syzkaller #0 PREEMPT(full) [ 424.813478][T18678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 424.813513][T18678] Call Trace: [ 424.813529][T18678] [ 424.813538][T18678] dump_stack_lvl+0x100/0x190 [ 424.813574][T18678] should_fail_ex.cold+0x5/0xa [ 424.813597][T18678] should_failslab+0xc2/0x120 [ 424.813616][T18678] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 424.813643][T18678] ? sidtab_sid2str_get+0x17a/0x670 [ 424.813672][T18678] kmemdup_noprof+0x29/0x60 [ 424.813699][T18678] sidtab_sid2str_get+0x17a/0x670 [ 424.813725][T18678] security_sid_to_context_core+0x35a/0x6d0 [ 424.813747][T18678] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 424.813789][T18678] avc_audit_post_callback+0x109/0x910 [ 424.813818][T18678] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 424.813841][T18678] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 424.813863][T18678] ? skb_put+0x138/0x180 [ 424.813888][T18678] ? audit_log_n_string+0x256/0x550 [ 424.813916][T18678] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 424.813940][T18678] common_lsm_audit+0x23f/0x2b0 [ 424.813962][T18678] ? __pfx_common_lsm_audit+0x10/0x10 [ 424.813982][T18678] ? avc_denied+0x14a/0x190 [ 424.814012][T18678] slow_avc_audit+0x186/0x210 [ 424.814037][T18678] ? __pfx_slow_avc_audit+0x10/0x10 [ 424.814063][T18678] ? find_held_lock+0x2b/0x80 [ 424.814084][T18678] ? avc_has_perm_noaudit+0x2b3/0x3b0 [ 424.814119][T18678] avc_has_perm+0x1a6/0x1e0 [ 424.814162][T18678] ? __pfx_avc_has_perm+0x10/0x10 [ 424.814188][T18678] ? is_bpf_text_address+0x94/0x1a0 [ 424.814219][T18678] sock_has_perm+0x251/0x2f0 [ 424.814237][T18678] ? __pfx_sock_has_perm+0x10/0x10 [ 424.814257][T18678] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 424.814280][T18678] ? import_ubuf+0x1b6/0x220 [ 424.814307][T18678] ? __pfx___might_fault+0x10/0x10 [ 424.814329][T18678] ? __might_fault+0xc5/0x140 [ 424.814356][T18678] security_socket_sendmsg+0xd3/0x230 [ 424.814376][T18678] ____sys_sendmsg+0x862/0xb70 [ 424.814403][T18678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.814438][T18678] ___sys_sendmsg+0x190/0x1e0 [ 424.814464][T18678] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.814525][T18678] __sys_sendmsg+0x170/0x220 [ 424.814545][T18678] ? __pfx___sys_sendmsg+0x10/0x10 [ 424.814581][T18678] do_syscall_64+0x106/0xf80 [ 424.814600][T18678] ? clear_bhb_loop+0x40/0x90 [ 424.814621][T18678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.814641][T18678] RIP: 0033:0x7fe98939c799 [ 424.814657][T18678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.814674][T18678] RSP: 002b:00007fe98a205028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.814693][T18678] RAX: ffffffffffffffda RBX: 00007fe989615fa0 RCX: 00007fe98939c799 [ 424.814705][T18678] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 424.814717][T18678] RBP: 00007fe98a205090 R08: 0000000000000000 R09: 0000000000000000 [ 424.814728][T18678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.814739][T18678] R13: 00007fe989616038 R14: 00007fe989615fa0 R15: 00007ffe4ba92d38 [ 424.814765][T18678] [ 424.816198][T18678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4592'. [ 425.196032][T18681] comedi comedi1: No channels found! [ 425.574973][T18688] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4597'. [ 425.778049][T18694] FAULT_INJECTION: forcing a failure. [ 425.778049][T18694] name failslab, interval 1, probability 0, space 0, times 0 [ 425.786407][T18694] CPU: 3 UID: 0 PID: 18694 Comm: syz.1.4598 Not tainted syzkaller #0 PREEMPT(full) [ 425.786433][T18694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 425.786443][T18694] Call Trace: [ 425.786448][T18694] [ 425.786454][T18694] dump_stack_lvl+0x100/0x190 [ 425.786483][T18694] should_fail_ex.cold+0x5/0xa [ 425.786502][T18694] should_failslab+0xc2/0x120 [ 425.786523][T18694] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 425.786544][T18694] ? __alloc_skb+0x140/0x710 [ 425.786562][T18694] __alloc_skb+0x140/0x710 [ 425.786575][T18694] ? __alloc_skb+0x5b7/0x710 [ 425.786587][T18694] ? __pfx___alloc_skb+0x10/0x10 [ 425.786607][T18694] netlink_alloc_large_skb+0x69/0x150 [ 425.786626][T18694] netlink_sendmsg+0x680/0xda0 [ 425.786646][T18694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.786662][T18694] ? __pfx___might_fault+0x10/0x10 [ 425.786688][T18694] ____sys_sendmsg+0x9e1/0xb70 [ 425.786705][T18694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.786724][T18694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.786752][T18694] ___sys_sendmsg+0x190/0x1e0 [ 425.786776][T18694] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.786818][T18694] __sys_sendmsg+0x170/0x220 [ 425.786833][T18694] ? __pfx___sys_sendmsg+0x10/0x10 [ 425.786860][T18694] do_syscall_64+0x106/0xf80 [ 425.786876][T18694] ? clear_bhb_loop+0x40/0x90 [ 425.786893][T18694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.786907][T18694] RIP: 0033:0x7f096019c799 [ 425.786920][T18694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.786934][T18694] RSP: 002b:00007f0960fe9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.786949][T18694] RAX: ffffffffffffffda RBX: 00007f0960415fa0 RCX: 00007f096019c799 [ 425.786958][T18694] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 425.786967][T18694] RBP: 00007f0960fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 425.786976][T18694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.786985][T18694] R13: 00007f0960416038 R14: 00007f0960415fa0 R15: 00007fff07ab8518 [ 425.787004][T18694] [ 427.501098][ T40] kauditd_printk_skb: 882 callbacks suppressed [ 427.501117][ T40] audit: type=1400 audit(1772842162.297:39940): avc: denied { write } for pid=18687 comm="syz.2.4596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 427.528092][ T40] audit: type=1400 audit(1772842162.297:39941): avc: denied { write } for pid=18687 comm="syz.2.4596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 427.543532][ T40] audit: type=1400 audit(1772842162.297:39942): avc: denied { write } for pid=18687 comm="syz.2.4596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 427.574673][ T40] audit: type=1400 audit(1772842162.297:39943): avc: denied { write } for pid=18687 comm="syz.2.4596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 427.630606][T18721] syzkaller0: entered promiscuous mode [ 427.633527][T18721] syzkaller0: entered allmulticast mode [ 427.644898][ T40] audit: type=1400 audit(1772842162.297:39944): avc: denied { write } for pid=18687 comm="syz.2.4596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 427.702319][ T40] audit: type=1400 audit(1772842162.317:39945): avc: denied { write } for pid=18687 comm="syz.2.4596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 427.716351][ T40] audit: type=1400 audit(1772842162.337:39946): avc: denied { write } for pid=18687 comm="syz.2.4596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 427.778784][ T40] audit: type=1400 audit(1772842162.337:39947): avc: denied { write } for pid=18687 comm="syz.2.4596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 427.821100][T18689] audit: audit_backlog=65 > audit_backlog_limit=64 [ 427.822669][T18721] audit: audit_backlog=65 > audit_backlog_limit=64 [ 428.513178][T18734] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 428.628172][T18739] overlay: filesystem on ./bus is read-only [ 429.695119][T18753] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 429.818898][T18753] geneve2: entered promiscuous mode [ 430.431012][T18775] syzkaller0: entered promiscuous mode [ 430.439545][T18775] syzkaller0: entered allmulticast mode [ 430.586428][T18762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.273777][T18793] trusted_key: syz.4.4627 sent an empty control message without MSG_MORE. [ 431.741377][T18800] netlink: 'syz.4.4629': attribute type 10 has an invalid length. [ 432.051811][T18805] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 432.068218][T18805] netlink: 'syz.1.4630': attribute type 10 has an invalid length. [ 432.509677][ T40] kauditd_printk_skb: 953 callbacks suppressed [ 432.509694][ T40] audit: type=1400 audit(1772842167.297:40897): avc: denied { write } for pid=18797 comm="syz.4.4629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 432.535143][ T40] audit: type=1400 audit(1772842167.307:40898): avc: denied { write } for pid=18797 comm="syz.4.4629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 432.584863][T18801] audit: audit_backlog=65 > audit_backlog_limit=64 [ 432.587665][ T40] audit: type=1400 audit(1772842167.307:40899): avc: denied { write } for pid=18797 comm="syz.4.4629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 432.595436][T18801] audit: audit_lost=61 audit_rate_limit=0 audit_backlog_limit=64 [ 432.630012][ T40] audit: type=1400 audit(1772842167.307:40900): avc: denied { write } for pid=18797 comm="syz.4.4629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 432.633890][T18801] audit: backlog limit exceeded [ 432.665528][ T40] audit: type=1400 audit(1772842167.307:40901): avc: denied { write } for pid=18797 comm="syz.4.4629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 432.665567][ T40] audit: type=1400 audit(1772842167.307:40902): avc: denied { write } for pid=18797 comm="syz.4.4629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 432.665599][ T40] audit: type=1400 audit(1772842167.307:40903): avc: denied { write } for pid=18797 comm="syz.4.4629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 439.172556][T18800] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 439.328880][ T40] kauditd_printk_skb: 786 callbacks suppressed [ 439.328898][ T40] audit: type=1400 audit(1772842174.107:41688): avc: denied { read write } for pid=18196 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 439.399601][ T40] audit: type=1400 audit(1772842174.117:41689): avc: denied { read write open } for pid=18196 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 439.497599][ T40] audit: type=1400 audit(1772842174.117:41690): avc: denied { ioctl } for pid=18196 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 439.609595][ T40] audit: type=1400 audit(1772842174.127:41691): avc: denied { read write } for pid=15700 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 439.628295][ T40] audit: type=1400 audit(1772842174.127:41692): avc: denied { read write open } for pid=15700 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 439.639442][ T40] audit: type=1400 audit(1772842174.147:41693): avc: denied { ioctl } for pid=15700 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 439.665302][ T40] audit: type=1400 audit(1772842174.167:41694): avc: denied { read write } for pid=12583 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 439.696723][ T40] audit: type=1400 audit(1772842174.167:41695): avc: denied { read write open } for pid=12583 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 439.716208][ T40] audit: type=1400 audit(1772842174.167:41696): avc: denied { ioctl } for pid=12583 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 439.736110][ T40] audit: type=1400 audit(1772842174.177:41697): avc: denied { read write } for pid=11669 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 439.843144][T18845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4643'. [ 439.848763][T18845] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4643'. [ 440.914412][T18858] syzkaller0: entered promiscuous mode [ 440.935140][T18858] syzkaller0: entered allmulticast mode [ 441.171679][T18868] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 441.175782][T18868] SELinux: failed to load policy [ 442.134289][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 442.149589][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 442.158449][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 442.169629][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 442.198522][ C1] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 442.214314][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 442.232465][ C1] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 442.248447][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 442.259557][ C1] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 442.278393][ C1] Buffer I/O error on dev loop6, logical block 4, async page read [ 442.299135][ C1] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 442.312655][ C1] Buffer I/O error on dev loop6, logical block 5, async page read [ 442.329948][ C1] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 442.335437][ C1] Buffer I/O error on dev loop6, logical block 6, async page read [ 442.364452][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 442.386897][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 442.391041][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 442.395730][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 442.410921][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 442.415338][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 442.429587][ T5337] ldm_validate_partition_table(): Disk read failed. [ 442.445995][ T5337] Dev loop6: unable to read RDB block 0 [ 442.467274][ T5337] loop6: unable to read partition table [ 442.473758][ T5337] loop6: partition table beyond EOD, truncated [ 443.156150][T18898] FAULT_INJECTION: forcing a failure. [ 443.156150][T18898] name failslab, interval 1, probability 0, space 0, times 0 [ 443.163699][T18898] CPU: 2 UID: 0 PID: 18898 Comm: syz.4.4661 Not tainted syzkaller #0 PREEMPT(full) [ 443.163726][T18898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 443.163737][T18898] Call Trace: [ 443.163745][T18898] [ 443.163753][T18898] dump_stack_lvl+0x100/0x190 [ 443.163789][T18898] should_fail_ex.cold+0x5/0xa [ 443.163813][T18898] ? tomoyo_encode2+0xfb/0x3c0 [ 443.163834][T18898] should_failslab+0xc2/0x120 [ 443.163852][T18898] __kmalloc_noprof+0xe0/0x850 [ 443.163876][T18898] ? d_absolute_path+0x136/0x1b0 [ 443.163906][T18898] tomoyo_encode2+0xfb/0x3c0 [ 443.163936][T18898] tomoyo_encode+0x29/0x50 [ 443.163956][T18898] tomoyo_realpath_from_path+0x18c/0x690 [ 443.163983][T18898] tomoyo_path_number_perm+0x23c/0x580 [ 443.164002][T18898] ? tomoyo_path_number_perm+0x22e/0x580 [ 443.164022][T18898] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 443.164067][T18898] ? find_held_lock+0x2b/0x80 [ 443.164090][T18898] ? __fget_files+0x215/0x3d0 [ 443.164107][T18898] ? hook_file_ioctl_common+0x146/0x410 [ 443.164138][T18898] ? __fget_files+0x21f/0x3d0 [ 443.164160][T18898] security_file_ioctl+0xd3/0x230 [ 443.164182][T18898] __x64_sys_ioctl+0xb7/0x210 [ 443.164211][T18898] do_syscall_64+0x106/0xf80 [ 443.164231][T18898] ? clear_bhb_loop+0x40/0x90 [ 443.164253][T18898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.164271][T18898] RIP: 0033:0x7fbef039c799 [ 443.164287][T18898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.164305][T18898] RSP: 002b:00007fbef1214028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.164322][T18898] RAX: ffffffffffffffda RBX: 00007fbef0616090 RCX: 00007fbef039c799 [ 443.164334][T18898] RDX: 0000200000000740 RSI: 00000000c0189436 RDI: 0000000000000003 [ 443.164345][T18898] RBP: 00007fbef1214090 R08: 0000000000000000 R09: 0000000000000000 [ 443.164356][T18898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.164367][T18898] R13: 00007fbef0616128 R14: 00007fbef0616090 R15: 00007ffd892a23c8 [ 443.164392][T18898] [ 443.164413][T18898] ERROR: Out of memory at tomoyo_realpath_from_path. [ 443.875060][T18907] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4663'. [ 444.419168][ T40] kauditd_printk_skb: 291 callbacks suppressed [ 444.419185][ T40] audit: type=1400 audit(1772842179.207:41989): avc: denied { sys_module } for pid=18904 comm="syz.4.4663" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 444.455109][ T40] audit: type=1400 audit(1772842179.207:41990): avc: denied { module_request } for pid=18904 comm="syz.4.4663" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 444.492839][ T40] audit: type=1400 audit(1772842179.217:41991): avc: denied { read write } for pid=11669 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 444.512736][ T40] audit: type=1400 audit(1772842179.217:41992): avc: denied { read write open } for pid=11669 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 444.532781][ T40] audit: type=1400 audit(1772842179.217:41993): avc: denied { ioctl } for pid=11669 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 444.558227][ T40] audit: type=1400 audit(1772842179.347:41994): avc: denied { create } for pid=18916 comm="syz.1.4665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 444.581743][ T40] audit: type=1400 audit(1772842179.357:41995): avc: denied { read write } for pid=18916 comm="syz.1.4665" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 444.612787][ T40] audit: type=1400 audit(1772842179.357:41996): avc: denied { read write open } for pid=18916 comm="syz.1.4665" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 444.630511][ T40] audit: type=1400 audit(1772842179.357:41997): avc: denied { setopt } for pid=18916 comm="syz.1.4665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 444.664989][ T40] audit: type=1400 audit(1772842179.357:41998): avc: denied { create } for pid=18916 comm="syz.1.4665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 445.132560][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.137766][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.031144][T18935] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.421730][ T40] kauditd_printk_skb: 116 callbacks suppressed [ 449.421751][ T40] audit: type=1400 audit(1772842184.207:42115): avc: denied { read write } for pid=15700 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 449.462209][ T40] audit: type=1400 audit(1772842184.207:42116): avc: denied { read write open } for pid=15700 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 449.494161][ T40] audit: type=1400 audit(1772842184.207:42117): avc: denied { ioctl } for pid=15700 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 449.581664][ T40] audit: type=1400 audit(1772842184.377:42118): avc: denied { map } for pid=18947 comm="syz.4.4674" path="socket:[140153]" dev="sockfs" ino=140153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 449.609372][ T40] audit: type=1400 audit(1772842184.397:42119): avc: denied { name_bind } for pid=18947 comm="syz.4.4674" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 449.634620][ T40] audit: type=1400 audit(1772842184.397:42120): avc: denied { node_bind } for pid=18947 comm="syz.4.4674" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 449.788438][ T40] audit: type=1400 audit(1772842184.567:42121): avc: denied { read write } for pid=18196 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 449.873680][ T40] audit: type=1400 audit(1772842184.647:42122): avc: denied { read write open } for pid=18196 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 450.042000][ T40] audit: type=1400 audit(1772842184.647:42123): avc: denied { ioctl } for pid=18196 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 450.109185][ T40] audit: type=1400 audit(1772842184.687:42124): avc: denied { read write } for pid=11669 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 450.294185][T18956] syzkaller0: entered promiscuous mode [ 450.302549][T18956] syzkaller0: entered allmulticast mode [ 452.785385][T18991] ntfs3(loop1): try to read out of volume at offset 0x0 [ 454.529314][ T40] kauditd_printk_skb: 224 callbacks suppressed [ 454.529336][ T40] audit: type=1400 audit(1772842189.317:42349): avc: denied { read write } for pid=19012 comm="syz.3.4694" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 454.545631][T19013] FAULT_INJECTION: forcing a failure. [ 454.545631][T19013] name failslab, interval 1, probability 0, space 0, times 0 [ 454.553673][ T40] audit: type=1400 audit(1772842189.327:42350): avc: denied { read write open } for pid=19012 comm="syz.3.4694" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 454.572331][T19013] CPU: 2 UID: 0 PID: 19013 Comm: syz.3.4694 Not tainted syzkaller #0 PREEMPT(full) [ 454.572358][T19013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 454.572368][T19013] Call Trace: [ 454.572379][T19013] [ 454.572387][T19013] dump_stack_lvl+0x100/0x190 [ 454.572421][T19013] should_fail_ex.cold+0x5/0xa [ 454.572442][T19013] should_failslab+0xc2/0x120 [ 454.572457][T19013] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 454.572482][T19013] ? sidtab_sid2str_get+0x17a/0x670 [ 454.572509][T19013] kmemdup_noprof+0x29/0x60 [ 454.572536][T19013] sidtab_sid2str_get+0x17a/0x670 [ 454.572561][T19013] security_sid_to_context_core+0x35a/0x6d0 [ 454.572581][T19013] ? skb_put+0x12a/0x180 [ 454.572604][T19013] avc_audit_post_callback+0x109/0x910 [ 454.572632][T19013] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 454.572653][T19013] ? skb_put+0x138/0x180 [ 454.572673][T19013] ? audit_log_n_string+0x256/0x550 [ 454.572701][T19013] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 454.572723][T19013] common_lsm_audit+0x23f/0x2b0 [ 454.572746][T19013] ? __pfx_common_lsm_audit+0x10/0x10 [ 454.572764][T19013] ? find_held_lock+0x2b/0x80 [ 454.572787][T19013] ? rcu_is_watching+0x12/0xc0 [ 454.572811][T19013] slow_avc_audit+0x186/0x210 [ 454.572836][T19013] ? __pfx_slow_avc_audit+0x10/0x10 [ 454.572887][T19013] ? find_held_lock+0x2b/0x80 [ 454.572907][T19013] ? avc_has_extended_perms+0x33a/0x1080 [ 454.572926][T19013] ? avc_has_extended_perms+0x33a/0x1080 [ 454.572954][T19013] avc_has_extended_perms+0x9b7/0x1080 [ 454.572986][T19013] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 454.573013][T19013] ? kasan_quarantine_put+0x104/0x240 [ 454.573040][T19013] ? find_held_lock+0x2b/0x80 [ 454.573067][T19013] ? tomoyo_path_number_perm+0x188/0x580 [ 454.573103][T19013] ioctl_has_perm.constprop.0.isra.0+0x376/0x540 [ 454.573128][T19013] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 454.573156][T19013] ? __fget_files+0x215/0x3d0 [ 454.573172][T19013] ? hook_file_ioctl_common+0x146/0x410 [ 454.573202][T19013] ? selinux_file_ioctl+0x139/0x290 [ 454.573255][T19013] selinux_file_ioctl+0x139/0x290 [ 454.573278][T19013] security_file_ioctl+0xfb/0x230 [ 454.573300][T19013] __x64_sys_ioctl+0xb7/0x210 [ 454.573326][T19013] do_syscall_64+0x106/0xf80 [ 454.573345][T19013] ? clear_bhb_loop+0x40/0x90 [ 454.573367][T19013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.573384][T19013] RIP: 0033:0x7fcc8db9c799 [ 454.573400][T19013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.573415][T19013] RSP: 002b:00007fcc8ea5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 454.573432][T19013] RAX: ffffffffffffffda RBX: 00007fcc8de15fa0 RCX: 00007fcc8db9c799 [ 454.573442][T19013] RDX: 0000200000000040 RSI: 00000000000007a0 RDI: 0000000000000003 [ 454.573451][T19013] RBP: 00007fcc8ea5a090 R08: 0000000000000000 R09: 0000000000000000 [ 454.573459][T19013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.573468][T19013] R13: 00007fcc8de16038 R14: 00007fcc8de15fa0 R15: 00007ffd63b1a498 [ 454.573492][T19013] [ 454.897922][ T40] audit: type=1400 audit(1772842189.337:42351): avc: denied { ioctl } for pid=19012 comm="syz.3.4694" path="/dev/vmci" dev="devtmpfs" ino=708 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 454.914692][ T40] audit: type=1400 audit(1772842189.337:42352): avc: denied { ioctl } for pid=19012 comm="syz.3.4694" path="/dev/vmci" dev="devtmpfs" ino=708 ioctlcmd=0x7a0 ssid=149 tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 454.963534][ T40] audit: type=1400 audit(1772842189.757:42353): avc: denied { read write } for pid=12583 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 454.988234][ T40] audit: type=1400 audit(1772842189.757:42354): avc: denied { read write open } for pid=12583 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.000441][ T40] audit: type=1400 audit(1772842189.757:42355): avc: denied { ioctl } for pid=12583 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.082971][ T40] audit: type=1400 audit(1772842189.867:42356): avc: denied { read write } for pid=19014 comm="syz.3.4695" name="0:0:0:0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 455.089187][T19015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4695'. [ 455.102889][ T40] audit: type=1400 audit(1772842189.867:42357): avc: denied { read write open } for pid=19014 comm="syz.3.4695" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 455.131120][ T40] audit: type=1400 audit(1772842189.877:42358): avc: denied { ioctl } for pid=19014 comm="syz.3.4695" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=723 ioctlcmd=0x2201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 455.274631][T19018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4695'. [ 458.370828][T18991] dummy0: entered allmulticast mode [ 458.715177][T18991] dummy0: left allmulticast mode [ 458.724797][T19024] FAULT_INJECTION: forcing a failure. [ 458.724797][T19024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.734041][T19024] CPU: 1 UID: 0 PID: 19024 Comm: syz.4.4696 Not tainted syzkaller #0 PREEMPT(full) [ 458.734069][T19024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 458.734079][T19024] Call Trace: [ 458.734086][T19024] [ 458.734094][T19024] dump_stack_lvl+0x100/0x190 [ 458.734131][T19024] should_fail_ex.cold+0x5/0xa [ 458.734153][T19024] _copy_to_user+0x32/0xd0 [ 458.734182][T19024] simple_read_from_buffer+0xcb/0x170 [ 458.734212][T19024] proc_fail_nth_read+0x1af/0x230 [ 458.734238][T19024] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 458.734263][T19024] ? rw_verify_area+0xce/0x6d0 [ 458.734285][T19024] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 458.734307][T19024] vfs_read+0x1e4/0xb30 [ 458.734343][T19024] ? __pfx_vfs_read+0x10/0x10 [ 458.734367][T19024] ? __fget_files+0x215/0x3d0 [ 458.734390][T19024] ? __fget_files+0x21f/0x3d0 [ 458.734416][T19024] ksys_read+0x12a/0x250 [ 458.734440][T19024] ? __pfx_ksys_read+0x10/0x10 [ 458.734468][T19024] do_syscall_64+0x106/0xf80 [ 458.734488][T19024] ? clear_bhb_loop+0x40/0x90 [ 458.734511][T19024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.734530][T19024] RIP: 0033:0x7fbef035cfce [ 458.734549][T19024] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 458.734566][T19024] RSP: 002b:00007fbef1234fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 458.734585][T19024] RAX: ffffffffffffffda RBX: 00007fbef12356c0 RCX: 00007fbef035cfce [ 458.734597][T19024] RDX: 000000000000000f RSI: 00007fbef12350a0 RDI: 0000000000000004 [ 458.734609][T19024] RBP: 00007fbef1235090 R08: 0000000000000000 R09: 0000000000000000 [ 458.734620][T19024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.734631][T19024] R13: 00007fbef0616038 R14: 00007fbef0615fa0 R15: 00007ffd892a23c8 [ 458.734656][T19024] [ 459.083030][T19027] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4698'. [ 459.636636][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 459.636654][ T40] audit: type=1400 audit(1772842194.427:42407): avc: denied { read } for pid=19039 comm="syz.2.4702" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 459.679178][ T40] audit: type=1400 audit(1772842194.427:42408): avc: denied { read open } for pid=19039 comm="syz.2.4702" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 459.739953][ T40] audit: type=1400 audit(1772842194.427:42409): avc: denied { ioctl } for pid=19039 comm="syz.2.4702" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 459.780131][ T40] audit: type=1400 audit(1772842194.447:42410): avc: denied { read } for pid=19038 comm="syz.3.4701" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 459.788941][ T40] audit: type=1400 audit(1772842194.447:42411): avc: denied { read open } for pid=19038 comm="syz.3.4701" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 459.811071][ T40] audit: type=1400 audit(1772842194.447:42412): avc: denied { ioctl } for pid=19038 comm="syz.3.4701" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 459.838155][ T40] audit: type=1400 audit(1772842194.457:42413): avc: denied { create } for pid=19038 comm="syz.3.4701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 459.862000][ T40] audit: type=1400 audit(1772842194.457:42414): avc: denied { read write } for pid=11669 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 459.886205][ T40] audit: type=1400 audit(1772842194.457:42415): avc: denied { read write open } for pid=11669 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 459.895325][ T40] audit: type=1400 audit(1772842194.457:42416): avc: denied { ioctl } for pid=11669 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 460.672353][T19059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 460.852424][T19061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4707'. [ 461.538665][T19069] syzkaller0: entered promiscuous mode [ 461.563491][T19069] syzkaller0: entered allmulticast mode [ 464.809741][ T40] kauditd_printk_skb: 232 callbacks suppressed [ 464.809764][ T40] audit: type=1400 audit(1772842199.587:42649): avc: denied { read } for pid=19114 comm="syz.4.4724" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 464.850969][ T40] audit: type=1400 audit(1772842199.587:42650): avc: denied { read open } for pid=19114 comm="syz.4.4724" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 464.884713][ T40] audit: type=1400 audit(1772842199.587:42651): avc: denied { ioctl } for pid=19114 comm="syz.4.4724" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 464.928269][ T40] audit: type=1400 audit(1772842199.607:42652): avc: denied { create } for pid=19114 comm="syz.4.4724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 464.959958][ T40] audit: type=1400 audit(1772842199.607:42653): avc: denied { bind } for pid=19114 comm="syz.4.4724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 464.990318][ T40] audit: type=1400 audit(1772842199.607:42654): avc: denied { setopt } for pid=19114 comm="syz.4.4724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 465.010432][ T40] audit: type=1400 audit(1772842199.607:42655): avc: denied { accept } for pid=19114 comm="syz.4.4724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 465.024155][ T40] audit: type=1400 audit(1772842199.627:42656): avc: denied { append } for pid=19114 comm="syz.4.4724" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 465.042212][ T40] audit: type=1400 audit(1772842199.627:42657): avc: denied { append } for pid=19114 comm="syz.4.4724" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 465.062384][ T40] audit: type=1400 audit(1772842199.647:42658): avc: denied { write } for pid=19114 comm="syz.4.4724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 466.066319][T19126] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 466.139422][T19126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 470.123628][ T40] kauditd_printk_skb: 126 callbacks suppressed [ 470.123643][ T40] audit: type=1400 audit(1772842204.917:42785): avc: denied { read write } for pid=12583 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.183547][ T40] audit: type=1400 audit(1772842204.927:42786): avc: denied { read write open } for pid=12583 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.217933][ T40] audit: type=1400 audit(1772842204.927:42787): avc: denied { ioctl } for pid=12583 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.294364][ T40] audit: type=1400 audit(1772842205.087:42788): avc: denied { read } for pid=19151 comm="syz.3.4734" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 470.319741][ T40] audit: type=1400 audit(1772842205.087:42789): avc: denied { read open } for pid=19151 comm="syz.3.4734" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 470.337520][ T40] audit: type=1400 audit(1772842205.107:42790): avc: denied { ioctl } for pid=19151 comm="syz.3.4734" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 470.352953][ T40] audit: type=1400 audit(1772842205.147:42791): avc: denied { create } for pid=19151 comm="syz.3.4734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 470.400547][ T40] audit: type=1400 audit(1772842205.147:42792): avc: denied { bind } for pid=19151 comm="syz.3.4734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 470.420974][ T40] audit: type=1400 audit(1772842205.147:42793): avc: denied { setopt } for pid=19151 comm="syz.3.4734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 470.444098][ T40] audit: type=1400 audit(1772842205.147:42794): avc: denied { accept } for pid=19151 comm="syz.3.4734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 471.375324][T19092] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.400440][T19092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 471.470806][T19134] tipc: Enabled bearer , priority 0 [ 471.608084][T19132] tipc: Disabling bearer [ 471.942277][T19164] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.4737'. [ 472.195474][T19174] bond1 (unregistering): Released all slaves [ 472.849577][ T34] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 473.101401][ T34] usb 8-1: unable to get BOS descriptor or descriptor too short [ 473.144037][T19191] syzkaller0: entered promiscuous mode [ 473.148842][T19191] syzkaller0: entered allmulticast mode [ 473.163569][ T34] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 473.169897][ T34] usb 8-1: can't read configurations, error -71 [ 475.049623][T19208] xt_hashlimit: invalid interval [ 475.293358][ T40] kauditd_printk_skb: 234 callbacks suppressed [ 475.293379][ T40] audit: type=1400 audit(1772842210.077:43029): avc: denied { create } for pid=19211 comm="syz.3.4750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 475.336335][ T40] audit: type=1400 audit(1772842210.077:43030): avc: denied { read } for pid=19211 comm="syz.3.4750" dev="nsfs" ino=4026534467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 475.372912][ T40] audit: type=1400 audit(1772842210.077:43031): avc: denied { read open } for pid=19211 comm="syz.3.4750" path="net:[4026534467]" dev="nsfs" ino=4026534467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 475.389756][ T40] audit: type=1400 audit(1772842210.077:43032): avc: denied { create } for pid=19211 comm="syz.3.4750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 475.398505][ T40] audit: type=1400 audit(1772842210.077:43033): avc: denied { module_request } for pid=19211 comm="syz.3.4750" kmod="bt-proto-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 475.481204][ T40] audit: type=1400 audit(1772842210.237:43034): avc: denied { read } for pid=19211 comm="syz.3.4750" dev="nsfs" ino=4026532885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 475.523377][ T40] audit: type=1400 audit(1772842210.257:43035): avc: denied { execmem } for pid=19211 comm="syz.3.4750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 475.557283][ T40] audit: type=1400 audit(1772842210.257:43036): avc: denied { read open } for pid=19211 comm="syz.3.4750" path="cgroup:[4026532885]" dev="nsfs" ino=4026532885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 475.591671][ T40] audit: type=1400 audit(1772842210.317:43037): avc: denied { create } for pid=19211 comm="syz.3.4750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 476.081698][ T40] audit: type=1400 audit(1772842210.837:43038): avc: denied { read write } for pid=12583 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 481.758320][T19196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 481.813322][ T40] kauditd_printk_skb: 51 callbacks suppressed [ 481.813343][ T40] audit: type=1400 audit(1772842216.607:43090): avc: denied { read write } for pid=11669 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 481.871046][ T40] audit: type=1400 audit(1772842216.607:43091): avc: denied { read write open } for pid=11669 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 481.900523][ T40] audit: type=1400 audit(1772842216.607:43092): avc: denied { ioctl } for pid=11669 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 481.917930][ T40] audit: type=1400 audit(1772842216.637:43093): avc: denied { read write } for pid=12583 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 481.934527][ T40] audit: type=1400 audit(1772842216.647:43094): avc: denied { read write open } for pid=12583 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 481.952690][ T40] audit: type=1400 audit(1772842216.647:43095): avc: denied { ioctl } for pid=12583 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 481.973415][ T40] audit: type=1400 audit(1772842216.677:43096): avc: denied { execute } for pid=19236 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 482.019587][ T40] audit: type=1400 audit(1772842216.687:43097): avc: denied { execute_no_trans } for pid=19236 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 482.059585][ T40] audit: type=1400 audit(1772842216.697:43098): avc: denied { read write } for pid=18196 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 482.081317][ T40] audit: type=1400 audit(1772842216.697:43099): avc: denied { read write open } for pid=18196 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 482.242423][T19246] tipc: Enabled bearer , priority 0 [ 482.315654][T19240] tipc: Disabling bearer [ 482.416263][T19252] fuse: Bad value for 'fd' [ 482.434102][ T5930] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 482.525418][ T5930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 482.535221][ T5930] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 482.589194][ T5930] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 482.632247][ T5930] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 482.971995][T19049] bridge0: port 3(syz_tun) entered disabled state [ 483.156396][T19049] syz_tun (unregistering): left allmulticast mode [ 483.170715][T19049] syz_tun (unregistering): left promiscuous mode [ 483.239750][T19049] bridge0: port 3(syz_tun) entered disabled state [ 483.557455][T12709] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.565822][T12709] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 483.900759][T12709] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.939596][T12709] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 484.091756][T19270] syzkaller0: entered promiscuous mode [ 484.094958][T19270] syzkaller0: entered allmulticast mode [ 484.148869][T19272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 484.524319][T19277] fuse: Bad value for 'fd' [ 484.869122][ T5930] Bluetooth: hci4: command tx timeout [ 484.994083][T19280] fuse: Unknown parameter 'fuse' [ 486.864836][ T40] kauditd_printk_skb: 218 callbacks suppressed [ 486.864860][ T40] audit: type=1400 audit(1772842221.637:43318): avc: denied { read write } for pid=18196 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 486.917803][ T40] audit: type=1400 audit(1772842221.637:43319): avc: denied { read write open } for pid=18196 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 486.931659][ T40] audit: type=1400 audit(1772842221.637:43320): avc: denied { ioctl } for pid=18196 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 486.962165][ T5930] Bluetooth: hci4: command tx timeout [ 487.111444][ T40] audit: type=1400 audit(1772842221.897:43321): avc: denied { create } for pid=19293 comm="syz.2.4771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 487.139630][ T40] audit: type=1400 audit(1772842221.907:43322): avc: denied { create } for pid=19293 comm="syz.2.4771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 487.161401][ T40] audit: type=1400 audit(1772842221.907:43323): avc: denied { module_request } for pid=19293 comm="syz.2.4771" kmod="net-pf-10-proto-132-type-4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 487.198360][ T40] audit: type=1400 audit(1772842221.997:43324): avc: denied { write } for pid=19293 comm="syz.2.4771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 487.214125][ T40] audit: type=1400 audit(1772842221.997:43325): avc: denied { connect } for pid=19293 comm="syz.2.4771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 487.230131][ T40] audit: type=1400 audit(1772842221.997:43326): avc: denied { name_connect } for pid=19293 comm="syz.2.4771" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 487.247590][ T40] audit: type=1400 audit(1772842222.007:43327): avc: denied { setopt } for pid=19293 comm="syz.2.4771" laddr=::1 lport=35361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 489.024627][ T5930] Bluetooth: hci4: command tx timeout [ 491.109713][ T5930] Bluetooth: hci4: command tx timeout [ 492.229721][ T40] kauditd_printk_skb: 56 callbacks suppressed [ 492.229739][ T40] audit: type=1400 audit(1772842227.007:43384): avc: denied { read write } for pid=15700 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 492.238391][T12709] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.266184][T12709] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 492.284494][ T40] audit: type=1400 audit(1772842227.007:43385): avc: denied { read write open } for pid=15700 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 492.329562][ T40] audit: type=1400 audit(1772842227.007:43386): avc: denied { ioctl } for pid=15700 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 492.383728][ T40] audit: type=1400 audit(1772842227.177:43387): avc: denied { module_request } for pid=19249 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 492.413539][T19307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 492.469810][ T40] audit: type=1400 audit(1772842227.237:43388): avc: denied { read write } for pid=12583 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 492.479845][T19314] fuse: Bad value for 'fd' [ 492.497573][ T40] audit: type=1400 audit(1772842227.237:43389): avc: denied { read write open } for pid=12583 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 492.497627][ T40] audit: type=1400 audit(1772842227.237:43390): avc: denied { ioctl } for pid=12583 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 492.497668][ T40] audit: type=1400 audit(1772842227.237:43391): avc: denied { mounton } for pid=19313 comm="syz.4.4775" path="/302/file0" dev="tmpfs" ino=1720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 492.627559][ T40] audit: type=1400 audit(1772842227.417:43392): avc: denied { name_bind } for pid=19315 comm="syz.3.4776" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 492.650899][T12709] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.654712][T12709] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 492.660747][ T40] audit: type=1400 audit(1772842227.437:43393): avc: denied { read write } for pid=18196 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 492.667195][T19317] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 492.726592][T19249] chnl_net:caif_netlink_parms(): no params data found [ 493.326336][T19249] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.330315][T19249] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.334146][T19249] bridge_slave_0: entered allmulticast mode [ 493.345937][T19249] bridge_slave_0: entered promiscuous mode [ 493.406549][T19249] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.419689][T19249] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.429855][T19249] bridge_slave_1: entered allmulticast mode [ 493.434111][T19249] bridge_slave_1: entered promiscuous mode [ 493.485737][T19249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.511931][T19249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.534634][T12709] bridge_slave_1: left allmulticast mode [ 493.618325][T12709] bridge_slave_1: left promiscuous mode [ 493.623917][T12709] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.773421][T12709] bridge_slave_0: left allmulticast mode [ 493.777422][T12709] bridge_slave_0: left promiscuous mode [ 493.793716][T12709] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.533237][T12709] bond1 (unregistering): (slave geneve2): Releasing active interface [ 495.321685][T12709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.425983][T12709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.474513][T12709] bond0 (unregistering): (slave team0): Releasing backup interface [ 495.481721][T12709] bond0 (unregistering): Released all slaves [ 495.490316][T19361] fuse: Bad value for 'fd' [ 495.493984][T12709] bond1 (unregistering): Released all slaves [ 495.827063][T19249] team0: Port device team_slave_0 added [ 495.837243][T19249] team0: Port device team_slave_1 added [ 495.864377][T12709] tipc: Left network mode [ 496.003008][T19249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.023794][T19249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.049553][T19249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.073530][T19249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.076564][T19249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.101727][T19249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.679530][T12709] hsr_slave_0: left promiscuous mode [ 496.717218][T12709] hsr_slave_1: left promiscuous mode [ 496.722703][T12709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.725495][T12709] batadv0: mtu less than device minimum [ 496.760801][T12709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 496.768200][T12709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 496.779035][T12709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 496.786357][T12709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 496.793097][T12709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 496.801524][T12709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 496.810041][T12709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 496.818931][T12709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 496.835579][T12709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.878151][T12709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.919576][T12709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.941234][T12709] batman_adv: batadv0: Interface deactivated: dummy0 [ 496.943990][T12709] batman_adv: batadv0: Removing interface: dummy0 [ 497.019444][T19386] binder: 19385:19386 ioctl c0306201 0 returned -14 [ 497.046650][T12709] veth1_macvtap: left promiscuous mode [ 497.087512][T12709] veth0_macvtap: left promiscuous mode [ 497.122519][T12709] veth1_vlan: left promiscuous mode [ 497.125725][T12709] veth0_vlan: left promiscuous mode [ 497.239627][ T40] kauditd_printk_skb: 416 callbacks suppressed [ 497.239646][ T40] audit: type=1400 audit(1772842232.027:43810): avc: denied { name_bind } for pid=19387 comm="syz.2.4792" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 497.256689][ T40] audit: type=1400 audit(1772842232.027:43811): avc: denied { node_bind } for pid=19387 comm="syz.2.4792" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 497.276775][ T40] audit: type=1400 audit(1772842232.047:43812): avc: denied { search } for pid=19380 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.325775][ T40] audit: type=1400 audit(1772842232.047:43813): avc: denied { search } for pid=19380 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.362331][ T40] audit: type=1400 audit(1772842232.047:43814): avc: denied { search } for pid=19380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1905 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.428996][ T40] audit: type=1400 audit(1772842232.047:43815): avc: denied { search } for pid=19380 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.488596][ T40] audit: type=1400 audit(1772842232.047:43816): avc: denied { search } for pid=19380 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.539623][ T40] audit: type=1400 audit(1772842232.047:43817): avc: denied { search } for pid=19380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1905 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.565296][T12709] pim6reg (unregistering): left allmulticast mode [ 497.589590][ T40] audit: type=1400 audit(1772842232.047:43818): avc: denied { getattr } for pid=19380 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.659614][ T40] audit: type=1400 audit(1772842232.057:43819): avc: denied { search } for pid=19380 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.730229][T19402] FAULT_INJECTION: forcing a failure. [ 497.730229][T19402] name failslab, interval 1, probability 0, space 0, times 0 [ 497.769648][T19402] CPU: 0 UID: 0 PID: 19402 Comm: syz.4.4795 Not tainted syzkaller #0 PREEMPT(full) [ 497.769675][T19402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 497.769684][T19402] Call Trace: [ 497.769691][T19402] [ 497.769699][T19402] dump_stack_lvl+0x100/0x190 [ 497.769741][T19402] should_fail_ex.cold+0x5/0xa [ 497.769761][T19402] should_failslab+0xc2/0x120 [ 497.769776][T19402] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 497.769798][T19402] ? __alloc_skb+0x140/0x710 [ 497.769822][T19402] __alloc_skb+0x140/0x710 [ 497.769835][T19402] ? __alloc_skb+0x5b7/0x710 [ 497.769848][T19402] ? __pfx___alloc_skb+0x10/0x10 [ 497.769868][T19402] __ip6_append_data+0x36c0/0x4dc0 [ 497.769894][T19402] ? __pfx_udplite_getfrag+0x10/0x10 [ 497.769925][T19402] ? __pfx___ip6_append_data+0x10/0x10 [ 497.769950][T19402] ? do_raw_spin_lock+0x128/0x260 [ 497.769971][T19402] ip6_append_data+0x10b/0x410 [ 497.769992][T19402] ? __pfx_udplite_getfrag+0x10/0x10 [ 497.770024][T19402] udpv6_sendmsg+0x8fb/0x2f60 [ 497.770044][T19402] ? slow_avc_audit+0x18b/0x210 [ 497.770075][T19402] ? __pfx_udplite_getfrag+0x10/0x10 [ 497.770107][T19402] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 497.770129][T19402] ? avc_has_perm+0x1b1/0x1e0 [ 497.770174][T19402] ? __pfx___might_fault+0x10/0x10 [ 497.770195][T19402] ? __might_fault+0xc5/0x140 [ 497.770216][T19402] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 497.770234][T19402] ? inet6_sendmsg+0x105/0x140 [ 497.770249][T19402] inet6_sendmsg+0x105/0x140 [ 497.770267][T19402] ____sys_sendmsg+0x704/0xb70 [ 497.770292][T19402] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.770322][T19402] ___sys_sendmsg+0x190/0x1e0 [ 497.770350][T19402] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.770400][T19402] __sys_sendmsg+0x170/0x220 [ 497.770422][T19402] ? __pfx___sys_sendmsg+0x10/0x10 [ 497.770455][T19402] do_syscall_64+0x106/0xf80 [ 497.770474][T19402] ? clear_bhb_loop+0x40/0x90 [ 497.770496][T19402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.770513][T19402] RIP: 0033:0x7fbef039c799 [ 497.770528][T19402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.770544][T19402] RSP: 002b:00007fbef1235028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.770562][T19402] RAX: ffffffffffffffda RBX: 00007fbef0615fa0 RCX: 00007fbef039c799 [ 497.770575][T19402] RDX: 0000000004000001 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 497.770586][T19402] RBP: 00007fbef1235090 R08: 0000000000000000 R09: 0000000000000000 [ 497.770597][T19402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.770607][T19402] R13: 00007fbef0616038 R14: 00007fbef0615fa0 R15: 00007ffd892a23c8 [ 497.770634][T19402] [ 498.335515][T19407] FAULT_INJECTION: forcing a failure. [ 498.335515][T19407] name failslab, interval 1, probability 0, space 0, times 0 [ 498.346046][T19407] CPU: 3 UID: 0 PID: 19407 Comm: syz.2.4796 Not tainted syzkaller #0 PREEMPT(full) [ 498.346072][T19407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 498.346080][T19407] Call Trace: [ 498.346085][T19407] [ 498.346091][T19407] dump_stack_lvl+0x100/0x190 [ 498.346126][T19407] should_fail_ex.cold+0x5/0xa [ 498.346151][T19407] should_failslab+0xc2/0x120 [ 498.346169][T19407] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 498.346194][T19407] ? __anon_vma_prepare+0xae/0x5e0 [ 498.346221][T19407] ? __pfx_filemap_map_pages+0x10/0x10 [ 498.346243][T19407] __anon_vma_prepare+0xae/0x5e0 [ 498.346264][T19407] ? __pfx_filemap_map_pages+0x10/0x10 [ 498.346285][T19407] __vmf_anon_prepare+0x11f/0x250 [ 498.346306][T19407] do_fault+0x152/0x1950 [ 498.346330][T19407] __handle_mm_fault+0x180f/0x2b60 [ 498.346354][T19407] ? mt_find+0x45e/0x8e0 [ 498.346376][T19407] ? __pfx___handle_mm_fault+0x10/0x10 [ 498.346394][T19407] ? __pfx_mt_find+0x10/0x10 [ 498.346435][T19407] handle_mm_fault+0x36d/0xa20 [ 498.346471][T19407] __get_user_pages+0xf9c/0x34d0 [ 498.346502][T19407] ? __pfx___get_user_pages+0x10/0x10 [ 498.346528][T19407] get_user_pages_remote+0x3d2/0xb10 [ 498.346551][T19407] ? __pfx_get_user_pages_remote+0x10/0x10 [ 498.346568][T19407] ? __lock_acquire+0x4a5/0x2630 [ 498.346595][T19407] ? __lock_acquire+0x4a5/0x2630 [ 498.346622][T19407] ? bpf_ksym_find+0x128/0x1c0 [ 498.346662][T19407] uprobe_write+0x227/0x2760 [ 498.346692][T19407] ? __pfx_verify_opcode+0x10/0x10 [ 498.346725][T19407] ? __pfx_uprobe_write+0x10/0x10 [ 498.346761][T19407] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 498.346788][T19407] ? insn_get_modrm+0x61/0x790 [ 498.346808][T19407] uprobe_write_opcode+0x99/0x1a0 [ 498.346833][T19407] ? __pfx_uprobe_write_opcode+0x10/0x10 [ 498.346859][T19407] ? __pfx_arch_uprobe_analyze_insn+0x10/0x10 [ 498.346884][T19407] set_swbp+0x115/0x200 [ 498.346901][T19407] ? __pfx_set_swbp+0x10/0x10 [ 498.346922][T19407] ? up_write+0x290/0x4f0 [ 498.346944][T19407] install_breakpoint+0x684/0x9f0 [ 498.346980][T19407] register_for_each_vma+0xa31/0xdb0 [ 498.347017][T19407] uprobe_register+0x815/0xa90 [ 498.347047][T19407] bpf_uprobe_multi_link_attach+0xa75/0x13d0 [ 498.347088][T19407] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 498.347117][T19407] ? __fget_files+0x21f/0x3d0 [ 498.347142][T19407] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 498.347172][T19407] __sys_bpf+0x3faf/0x4b90 [ 498.347197][T19407] ? __pfx___sys_bpf+0x10/0x10 [ 498.347214][T19407] ? proc_fail_nth_write+0x9f/0x220 [ 498.347237][T19407] ? find_held_lock+0x2b/0x80 [ 498.347265][T19407] ? find_held_lock+0x2b/0x80 [ 498.347287][T19407] ? ksys_write+0x190/0x250 [ 498.347317][T19407] ? __mutex_unlock_slowpath+0x15c/0x790 [ 498.347339][T19407] ? __fget_files+0x215/0x3d0 [ 498.347371][T19407] ? fput+0x79/0x100 [ 498.347390][T19407] ? ksys_write+0x1ac/0x250 [ 498.347416][T19407] ? __pfx_ksys_write+0x10/0x10 [ 498.347448][T19407] __x64_sys_bpf+0x7b/0xc0 [ 498.347473][T19407] ? lockdep_hardirqs_on+0x78/0x100 [ 498.347493][T19407] do_syscall_64+0x106/0xf80 [ 498.347512][T19407] ? clear_bhb_loop+0x40/0x90 [ 498.347534][T19407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.347551][T19407] RIP: 0033:0x7fe98939c799 [ 498.347570][T19407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.347587][T19407] RSP: 002b:00007fe98a205028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 498.347606][T19407] RAX: ffffffffffffffda RBX: 00007fe989615fa0 RCX: 00007fe98939c799 [ 498.347617][T19407] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 498.347627][T19407] RBP: 00007fe98a205090 R08: 0000000000000000 R09: 0000000000000000 [ 498.347637][T19407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.347648][T19407] R13: 00007fe989616038 R14: 00007fe989615fa0 R15: 00007ffe4ba92d38 [ 498.347671][T19407] [ 498.673618][T19413] netlink: 4440 bytes leftover after parsing attributes in process `syz.4.4797'. [ 498.678103][T19413] net_ratelimit: 31 callbacks suppressed [ 498.678126][T19413] openvswitch: netlink: Flow key attr not present in new flow. [ 498.908420][T12709] team0 (unregistering): Port device team_slave_1 removed [ 498.929318][T12709] team0 (unregistering): Port device team_slave_0 removed [ 499.479019][T19249] hsr_slave_0: entered promiscuous mode [ 499.511442][T19249] hsr_slave_1: entered promiscuous mode [ 499.532400][T19249] debugfs: 'hsr0' already exists in 'hsr' [ 499.534960][T19249] Cannot create hsr debugfs directory [ 501.866176][ T39] libceph: connect (1)[c::]:6789 error -101 [ 501.885394][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 502.123938][T19443] ceph: No mds server is up or the cluster is laggy [ 502.201399][ T39] libceph: connect (1)[c::]:6789 error -101 [ 502.204429][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 502.372754][ T40] kauditd_printk_skb: 564 callbacks suppressed [ 502.433121][ T40] audit: type=1400 audit(1772842237.147:44384): avc: denied { read write } for pid=19460 comm="syz.3.4809" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 502.507936][ T40] audit: type=1400 audit(1772842237.207:44385): avc: denied { read write open } for pid=19460 comm="syz.3.4809" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 502.579568][ T40] audit: type=1400 audit(1772842237.207:44386): avc: denied { read } for pid=19460 comm="syz.3.4809" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 502.609579][ T40] audit: type=1400 audit(1772842237.207:44387): avc: denied { read open } for pid=19460 comm="syz.3.4809" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 502.619362][T19249] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 502.638643][ T40] audit: type=1400 audit(1772842237.227:44388): avc: denied { ioctl } for pid=19460 comm="syz.3.4809" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 502.691331][ T40] audit: type=1400 audit(1772842237.227:44389): avc: denied { mounton } for pid=19460 comm="syz.3.4809" path="/523/bus" dev="tmpfs" ino=2976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 502.692037][T19249] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 502.711217][T19463] audit: audit_backlog=65 > audit_backlog_limit=64 [ 502.722691][T19463] audit: audit_lost=63 audit_rate_limit=0 audit_backlog_limit=64 [ 502.726976][ T40] audit: type=1400 audit(1772842237.257:44390): avc: denied { read write } for pid=18196 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 502.728033][T19463] audit: backlog limit exceeded [ 502.839272][T19249] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 502.866250][T19249] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 502.944981][T19465] syzkaller0: entered promiscuous mode [ 502.947633][T19465] syzkaller0: entered allmulticast mode [ 504.067450][T19249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.108584][T19249] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.151149][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.154884][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.216898][ T1206] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.220781][ T1206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.640850][T19509] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 504.644444][T19509] block device autoloading is deprecated and will be removed. [ 505.101251][ T39] libceph: connect (1)[c::]:6789 error -101 [ 505.115258][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 505.335811][T19515] ceph: No mds server is up or the cluster is laggy [ 505.920182][T19249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.148638][T19249] veth0_vlan: entered promiscuous mode [ 506.208410][T19249] veth1_vlan: entered promiscuous mode [ 506.294648][T19249] veth0_macvtap: entered promiscuous mode [ 506.319997][T19249] veth1_macvtap: entered promiscuous mode [ 506.362273][T19249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.397444][T19249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.447524][T12709] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.468811][T12709] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.489605][T12709] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.497323][T12707] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.543962][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.549404][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.797028][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.819569][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.880005][T19542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 507.024019][ T1206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.028707][ T1206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.369000][ T40] kauditd_printk_skb: 1171 callbacks suppressed [ 507.369021][ T40] audit: type=1400 audit(1772842242.157:45523): avc: denied { read write } for pid=19249 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 507.399819][ T40] audit: type=1400 audit(1772842242.167:45524): avc: denied { read write open } for pid=19249 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 507.410513][ T40] audit: type=1400 audit(1772842242.167:45525): avc: denied { ioctl } for pid=19249 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 507.439879][ T40] audit: type=1400 audit(1772842242.167:45526): avc: denied { read write } for pid=19548 comm="syz.4.4828" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 507.472440][ T40] audit: type=1400 audit(1772842242.167:45527): avc: denied { read write open } for pid=19548 comm="syz.4.4828" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 507.506441][ T40] audit: type=1400 audit(1772842242.167:45528): avc: denied { ioctl } for pid=19548 comm="syz.4.4828" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 507.539007][ T40] audit: type=1400 audit(1772842242.327:45529): avc: denied { read write } for pid=12583 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 507.569320][ T40] audit: type=1400 audit(1772842242.327:45530): avc: denied { read write open } for pid=12583 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 507.628705][ T40] audit: type=1400 audit(1772842242.327:45531): avc: denied { ioctl } for pid=12583 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 507.660652][ T40] audit: type=1400 audit(1772842242.347:45532): avc: denied { mounton } for pid=19552 comm="syz.1.4756" path="/0/bus" dev="tmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 508.180367][T19549] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.448658][T18275] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 510.473775][T19603] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 510.479271][T19602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4845'. [ 510.509612][T19603] block device autoloading is deprecated and will be removed. [ 510.651611][T18275] usb 9-1: Using ep0 maxpacket: 8 [ 510.761822][T18275] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 510.797792][T19599] md: could not open device unknown-block(0,0). [ 510.801585][T19599] md: md_import_device returned -6 [ 510.806222][T18275] usb 9-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 510.825415][T18275] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.831763][T18275] usb 9-1: Product: 扺믝谺崰뜑ꭁ鵜㘛꼃뒱褩呂ೠ퍂ᘀኰ睨븝漗礨ዅ㕉닖撑ﭫꃹ얞嵘赎྿ᓥ퐇Ӑ또훨ꮋⵉ楽䴶㧛⢓瘃鸧⒨㋱퀌劍桙㊘省巐☐㺠录ꔓ䛈쟬쨮䅡曌姲ɣ㛲⡮᝼銅䄞杘ꂔꯉ⒃톪年浓ᅮᎱ畮黜䷆⋼્ﴃ疞Ȉ剠ꉑ헟刺ʂ儠鬁곮㒞땖檠ᭈ퍍 [ 510.881599][T18275] usb 9-1: Manufacturer: ᰁ [ 510.884578][T18275] usb 9-1: SerialNumber: 㑟 [ 511.248045][T19613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.283075][T19613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.461805][T18275] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 511.715643][T18275] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 511.725291][T18275] usb 9-1: USB disconnect, device number 12 [ 511.939415][T19244] udevd[19244]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 512.209130][ T5930] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 512.377441][ T40] kauditd_printk_skb: 384 callbacks suppressed [ 512.377465][ T40] audit: type=1400 audit(1772842247.157:45913): avc: denied { ioctl } for pid=19630 comm="syz.1.4853" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 512.460063][ T40] audit: type=1400 audit(1772842247.247:45914): avc: denied { read write } for pid=19249 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 512.470619][ T40] audit: type=1400 audit(1772842247.247:45915): avc: denied { read write open } for pid=19249 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 512.521187][ T40] audit: type=1400 audit(1772842247.247:45916): avc: denied { ioctl } for pid=19249 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 512.556406][ T40] audit: type=1400 audit(1772842247.287:45917): avc: denied { read write } for pid=19632 comm="syz.4.4854" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 512.594785][ T40] audit: type=1400 audit(1772842247.297:45918): avc: denied { read write open } for pid=19632 comm="syz.4.4854" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 512.611053][ T40] audit: type=1400 audit(1772842247.347:45919): avc: denied { read write } for pid=12583 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 512.633892][ T40] audit: type=1400 audit(1772842247.347:45920): avc: denied { read write open } for pid=12583 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 512.665279][ T40] audit: type=1400 audit(1772842247.367:45921): avc: denied { ioctl } for pid=12583 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 512.683328][ T40] audit: type=1400 audit(1772842247.377:45922): avc: denied { read write } for pid=15700 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 512.807893][T19639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 513.350053][T19653] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4861'. [ 515.042062][T19681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 515.583140][T19699] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 515.749558][T19700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4875'. [ 515.779878][T19700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4875'. [ 516.182146][T19708] fuse: Bad value for 'fd' [ 516.334653][T19711] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4878'. [ 516.337906][T19712] could not open pipe file descriptor [ 516.340133][T19711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4878'. [ 516.340156][T19711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4878'. [ 516.375454][T19712] netlink: 'syz.4.4879': attribute type 10 has an invalid length. [ 516.379416][T19712] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4879'. [ 516.383779][T19712] team0: entered promiscuous mode [ 516.385767][T19712] team_slave_0: entered promiscuous mode [ 516.388784][T19712] team_slave_1: entered promiscuous mode [ 516.391572][T19712] team0: entered allmulticast mode [ 516.393810][T19712] team_slave_0: entered allmulticast mode [ 516.396333][T19712] team_slave_1: entered allmulticast mode [ 516.417450][T19712] bridge0: port 3(team0) entered blocking state [ 516.420993][T19712] bridge0: port 3(team0) entered disabled state [ 516.449123][T19712] bridge0: port 3(team0) entered blocking state [ 516.453285][T19712] bridge0: port 3(team0) entered forwarding state [ 517.078374][T19728] overlayfs: missing 'lowerdir' [ 517.435162][ T40] kauditd_printk_skb: 391 callbacks suppressed [ 517.435180][ T40] audit: type=1400 audit(1772842252.227:46312): avc: denied { read write } for pid=19249 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 517.485340][ T40] audit: type=1400 audit(1772842252.247:46313): avc: denied { read write open } for pid=19249 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 517.559606][ T40] audit: type=1400 audit(1772842252.247:46314): avc: denied { ioctl } for pid=19249 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 517.634298][ T40] audit: type=1400 audit(1772842252.427:46315): avc: denied { create } for pid=19739 comm="syz.2.4886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 517.661220][ T40] audit: type=1400 audit(1772842252.427:46316): avc: denied { read write } for pid=19739 comm="syz.2.4886" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 517.693433][ T40] audit: type=1400 audit(1772842252.427:46317): avc: denied { read write open } for pid=19739 comm="syz.2.4886" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 517.716452][ T40] audit: type=1400 audit(1772842252.467:46318): avc: denied { read } for pid=19742 comm="syz.4.4887" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 517.747876][ T40] audit: type=1400 audit(1772842252.467:46319): avc: denied { read open } for pid=19742 comm="syz.4.4887" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 517.813760][ T40] audit: type=1400 audit(1772842252.467:46320): avc: denied { ioctl } for pid=19742 comm="syz.4.4887" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 517.858042][ T40] audit: type=1400 audit(1772842252.487:46321): avc: denied { create } for pid=19742 comm="syz.4.4887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 517.919306][T19747] fuse: Bad value for 'fd' [ 518.185522][T19750] XFS (nbd1): no-recovery mounts must be read-only. [ 518.673131][T19753] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 518.983250][T19761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4895'. [ 519.271138][T19772] fuse: Bad value for 'fd' [ 520.283214][T19789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 520.347920][T19793] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.4903'. [ 520.361492][ T140] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 520.412309][T19793] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4903'. [ 520.421392][T19796] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4903'. [ 520.599934][ T140] usb 9-1: unable to get BOS descriptor or descriptor too short [ 520.645878][ T140] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 520.659745][ T140] usb 9-1: can't read configurations, error -71 [ 520.693942][T19800] FAULT_INJECTION: forcing a failure. [ 520.693942][T19800] name failslab, interval 1, probability 0, space 0, times 0 [ 520.700892][T19800] CPU: 0 UID: 0 PID: 19800 Comm: syz.1.4906 Not tainted syzkaller #0 PREEMPT(full) [ 520.700917][T19800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 520.700928][T19800] Call Trace: [ 520.700935][T19800] [ 520.700942][T19800] dump_stack_lvl+0x100/0x190 [ 520.700973][T19800] should_fail_ex.cold+0x5/0xa [ 520.700996][T19800] should_failslab+0xc2/0x120 [ 520.701013][T19800] __kmalloc_node_noprof+0xe6/0x850 [ 520.701036][T19800] ? __vmalloc_node_range_noprof+0x3dc/0x1530 [ 520.701059][T19800] __vmalloc_node_range_noprof+0x3dc/0x1530 [ 520.701085][T19800] ? vhost_task_create+0x1db/0x370 [ 520.701105][T19800] ? find_held_lock+0x2b/0x80 [ 520.701125][T19800] ? rcu_read_unlock+0x17/0x60 [ 520.701143][T19800] ? obj_cgroup_charge_account+0x46d/0x640 [ 520.701161][T19800] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 520.701182][T19800] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 520.701204][T19800] ? rcu_is_watching+0x12/0xc0 [ 520.701224][T19800] ? trace_kmem_cache_alloc+0xf3/0x120 [ 520.701253][T19800] ? vhost_task_create+0x1db/0x370 [ 520.701272][T19800] __vmalloc_node_noprof+0xad/0xf0 [ 520.701290][T19800] ? vhost_task_create+0x1db/0x370 [ 520.701312][T19800] copy_process+0x5ec/0x7a10 [ 520.701347][T19800] ? __pfx_copy_process+0x10/0x10 [ 520.701375][T19800] ? lockdep_init_map_type+0x5c/0x250 [ 520.701395][T19800] ? lockdep_init_map_type+0x5c/0x250 [ 520.701411][T19800] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 520.701436][T19800] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 520.701457][T19800] vhost_task_create+0x1db/0x370 [ 520.701476][T19800] ? __pfx_vhost_task_create+0x10/0x10 [ 520.701493][T19800] ? trace_contention_end+0x140/0x180 [ 520.701517][T19800] ? __pfx_vhost_task_fn+0x10/0x10 [ 520.701540][T19800] ? __pfx___mutex_lock+0x10/0x10 [ 520.701561][T19800] ? kasan_quarantine_put+0x104/0x240 [ 520.701586][T19800] ? lockdep_hardirqs_on+0x78/0x100 [ 520.701612][T19800] kvm_mmu_post_init_vm+0x1b3/0x370 [ 520.701637][T19800] kvm_arch_vcpu_ioctl_run+0x66/0x1830 [ 520.701658][T19800] ? kvm_vcpu_ioctl+0x155c/0x1730 [ 520.701689][T19800] kvm_vcpu_ioctl+0x730/0x1730 [ 520.701717][T19800] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 520.701743][T19800] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 520.701770][T19800] ? do_vfs_ioctl+0x226/0x13e0 [ 520.701798][T19800] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 520.701825][T19800] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 520.701857][T19800] ? __fget_files+0x215/0x3d0 [ 520.701874][T19800] ? hook_file_ioctl_common+0x146/0x410 [ 520.701904][T19800] ? selinux_file_ioctl+0x139/0x290 [ 520.701924][T19800] ? selinux_file_ioctl+0xb4/0x290 [ 520.701945][T19800] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 520.701973][T19800] __x64_sys_ioctl+0x18e/0x210 [ 520.702001][T19800] do_syscall_64+0x106/0xf80 [ 520.702021][T19800] ? clear_bhb_loop+0x40/0x90 [ 520.702043][T19800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.702062][T19800] RIP: 0033:0x7fbe1159c799 [ 520.702080][T19800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.702098][T19800] RSP: 002b:00007fbe12392028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 520.702116][T19800] RAX: ffffffffffffffda RBX: 00007fbe11815fa0 RCX: 00007fbe1159c799 [ 520.702128][T19800] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 520.702139][T19800] RBP: 00007fbe12392090 R08: 0000000000000000 R09: 0000000000000000 [ 520.702150][T19800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.702160][T19800] R13: 00007fbe11816038 R14: 00007fbe11815fa0 R15: 00007ffd6f030028 [ 520.702186][T19800] [ 520.702198][T19800] syz.1.4906: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 521.036219][T19800] CPU: 0 UID: 0 PID: 19800 Comm: syz.1.4906 Not tainted syzkaller #0 PREEMPT(full) [ 521.036244][T19800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 521.036254][T19800] Call Trace: [ 521.036263][T19800] [ 521.036271][T19800] dump_stack_lvl+0x100/0x190 [ 521.036305][T19800] warn_alloc.cold+0x95/0x1c1 [ 521.036335][T19800] ? __pfx_warn_alloc+0x10/0x10 [ 521.036362][T19800] ? lockdep_hardirqs_on+0x78/0x100 [ 521.036381][T19800] ? dump_stack_lvl+0x17c/0x190 [ 521.036410][T19800] ? trace_kmalloc+0x101/0x130 [ 521.036425][T19800] ? __kasan_kmalloc+0x8a/0xb0 [ 521.036452][T19800] ? __kmalloc_node_noprof+0x324/0x850 [ 521.036475][T19800] ? __vmalloc_node_range_noprof+0x3dc/0x1530 [ 521.036502][T19800] __vmalloc_node_range_noprof+0x1275/0x1530 [ 521.036530][T19800] ? vhost_task_create+0x1db/0x370 [ 521.036554][T19800] ? rcu_read_unlock+0x17/0x60 [ 521.036571][T19800] ? obj_cgroup_charge_account+0x46d/0x640 [ 521.036590][T19800] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 521.036634][T19800] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 521.036656][T19800] ? rcu_is_watching+0x12/0xc0 [ 521.036676][T19800] ? trace_kmem_cache_alloc+0xf3/0x120 [ 521.036695][T19800] ? vhost_task_create+0x1db/0x370 [ 521.036713][T19800] __vmalloc_node_noprof+0xad/0xf0 [ 521.036732][T19800] ? vhost_task_create+0x1db/0x370 [ 521.036754][T19800] copy_process+0x5ec/0x7a10 [ 521.036791][T19800] ? __pfx_copy_process+0x10/0x10 [ 521.036818][T19800] ? lockdep_init_map_type+0x5c/0x250 [ 521.036841][T19800] ? lockdep_init_map_type+0x5c/0x250 [ 521.036858][T19800] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 521.036886][T19800] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 521.036910][T19800] vhost_task_create+0x1db/0x370 [ 521.036930][T19800] ? __pfx_vhost_task_create+0x10/0x10 [ 521.036948][T19800] ? trace_contention_end+0x140/0x180 [ 521.036973][T19800] ? __pfx_vhost_task_fn+0x10/0x10 [ 521.036994][T19800] ? __pfx___mutex_lock+0x10/0x10 [ 521.037013][T19800] ? kasan_quarantine_put+0x104/0x240 [ 521.037037][T19800] ? lockdep_hardirqs_on+0x78/0x100 [ 521.037061][T19800] kvm_mmu_post_init_vm+0x1b3/0x370 [ 521.037083][T19800] kvm_arch_vcpu_ioctl_run+0x66/0x1830 [ 521.037104][T19800] ? kvm_vcpu_ioctl+0x155c/0x1730 [ 521.037135][T19800] kvm_vcpu_ioctl+0x730/0x1730 [ 521.037163][T19800] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 521.037189][T19800] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 521.037215][T19800] ? do_vfs_ioctl+0x226/0x13e0 [ 521.037241][T19800] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 521.037266][T19800] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 521.037298][T19800] ? __fget_files+0x215/0x3d0 [ 521.037314][T19800] ? hook_file_ioctl_common+0x146/0x410 [ 521.037345][T19800] ? selinux_file_ioctl+0x139/0x290 [ 521.037364][T19800] ? selinux_file_ioctl+0xb4/0x290 [ 521.037386][T19800] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 521.037412][T19800] __x64_sys_ioctl+0x18e/0x210 [ 521.037439][T19800] do_syscall_64+0x106/0xf80 [ 521.037457][T19800] ? clear_bhb_loop+0x40/0x90 [ 521.037479][T19800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.037497][T19800] RIP: 0033:0x7fbe1159c799 [ 521.037515][T19800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.037532][T19800] RSP: 002b:00007fbe12392028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 521.037548][T19800] RAX: ffffffffffffffda RBX: 00007fbe11815fa0 RCX: 00007fbe1159c799 [ 521.037559][T19800] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 521.037570][T19800] RBP: 00007fbe12392090 R08: 0000000000000000 R09: 0000000000000000 [ 521.037581][T19800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.037591][T19800] R13: 00007fbe11816038 R14: 00007fbe11815fa0 R15: 00007ffd6f030028 [ 521.037616][T19800] [ 521.037623][T19800] Mem-Info: [ 521.301038][T19800] active_anon:6856 inactive_anon:24301 isolated_anon:0 [ 521.301038][T19800] active_file:4630 inactive_file:28314 isolated_file:0 [ 521.301038][T19800] unevictable:1768 dirty:105 writeback:0 [ 521.301038][T19800] slab_reclaimable:8877 slab_unreclaimable:85333 [ 521.301038][T19800] mapped:34624 shmem:25540 pagetables:3862 [ 521.301038][T19800] sec_pagetables:311 bounce:0 [ 521.301038][T19800] kernel_misc_reclaimable:0 [ 521.301038][T19800] free:428202 free_pcp:8827 free_cma:0 [ 521.343470][T19800] Node 0 active_anon:25780kB inactive_anon:97204kB active_file:18308kB inactive_file:113048kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:89344kB dirty:420kB writeback:0kB shmem:97080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:15360kB pagetables:6204kB sec_pagetables:1244kB all_unreclaimable? no Balloon:0kB [ 521.365629][T19800] Node 1 active_anon:1644kB inactive_anon:0kB active_file:212kB inactive_file:208kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:49152kB dirty:0kB writeback:0kB shmem:5080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:9244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 521.395693][T19800] Node 0 DMA free:14968kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 521.414485][T19800] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 521.417455][T19800] Node 0 DMA32 free:189132kB boost:0kB min:27476kB low:34344kB high:41212kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25780kB inactive_anon:97204kB active_file:18308kB inactive_file:113048kB unevictable:3536kB writepending:420kB zspages:0kB present:2080628kB managed:1260952kB mlocked:0kB bounce:0kB free_pcp:23080kB local_pcp:4768kB free_cma:0kB [ 521.449587][T19800] lowmem_reserve[]: 0 0 0 0 0 [ 521.456345][T19800] Node 1 Normal free:1509080kB boost:0kB min:39760kB low:49700kB high:59640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1644kB inactive_anon:0kB active_file:212kB inactive_file:208kB unevictable:3536kB writepending:0kB zspages:2332kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:12084kB local_pcp:0kB free_cma:0kB [ 521.509114][T19800] lowmem_reserve[]: 0 0 0 0 0 [ 521.531304][T19800] Node 0 DMA: 8*4kB (UM) 11*8kB (UM) 6*16kB (UM) 11*32kB (UM) 7*64kB (UM) 7*128kB (UM) 7*256kB (UM) 2*512kB (U) 2*1024kB (U) 2*2048kB (U) 1*4096kB (U) = 14968kB [ 521.557369][T19800] Node 0 DMA32: 2582*4kB (UME) 3182*8kB (UME) 1600*16kB (UM) 571*32kB (UME) 265*64kB (UME) 130*128kB (UME) 64*256kB (UM) 36*512kB (UM) 18*1024kB (UM) 13*2048kB (UM) 0*4096kB = 193128kB [ 521.599631][T19800] Node 1 Normal: 354*4kB (UM) 380*8kB (UME) 345*16kB (UME) 335*32kB (UME) 328*64kB (UME) 270*128kB (UME) 271*256kB (UME) 247*512kB (UM) 214*1024kB (UM) 11*2048kB (UME) 243*4096kB (UM) = 1509080kB [ 521.608350][T19800] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 521.612112][T19800] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 521.626133][T19800] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 521.644244][T19800] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 521.670386][T19800] 54924 total pagecache pages [ 521.674399][T19800] 134 pages in swap cache [ 521.681596][T19800] Free swap = 120360kB [ 521.688976][T19800] Total swap = 124996kB [ 521.699217][T19800] 1048443 pages RAM [ 521.701960][T19800] 0 pages HighMem/MovableOnly [ 521.729804][T19800] 283894 pages reserved [ 521.731741][T19800] 0 pages cma reserved [ 522.453678][ T40] kauditd_printk_skb: 297 callbacks suppressed [ 522.453699][ T40] audit: type=1400 audit(1772842257.227:46619): avc: denied { read open } for pid=19814 comm="syz.4.4911" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 522.477831][ T40] audit: type=1400 audit(1772842257.257:46620): avc: denied { read } for pid=19815 comm="syz.1.4912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 522.495161][ T40] audit: type=1400 audit(1772842257.257:46621): avc: denied { read } for pid=19815 comm="syz.1.4912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 522.523022][ T40] audit: type=1400 audit(1772842257.267:46622): avc: denied { ioctl } for pid=19814 comm="syz.4.4911" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 522.540350][ T40] audit: type=1400 audit(1772842257.317:46623): avc: denied { create } for pid=19814 comm="syz.4.4911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 522.560232][ T40] audit: type=1400 audit(1772842257.347:46624): avc: denied { create } for pid=19815 comm="syz.1.4912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 522.581435][ T40] audit: type=1400 audit(1772842257.347:46625): avc: denied { bind } for pid=19814 comm="syz.4.4911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 522.643865][ T40] audit: type=1400 audit(1772842257.347:46626): avc: denied { write } for pid=19815 comm="syz.1.4912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 522.667627][ T40] audit: type=1400 audit(1772842257.347:46627): avc: denied { setopt } for pid=19814 comm="syz.4.4911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 522.692511][ T40] audit: type=1400 audit(1772842257.347:46628): avc: denied { read } for pid=19815 comm="syz.1.4912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 523.251090][T19828] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4915'. [ 523.271448][T19828] openvswitch: netlink: Flow actions attr not present in new flow. [ 523.455047][T19835] FAULT_INJECTION: forcing a failure. [ 523.455047][T19835] name failslab, interval 1, probability 0, space 0, times 0 [ 523.471142][T19835] CPU: 2 UID: 0 PID: 19835 Comm: syz.4.4918 Not tainted syzkaller #0 PREEMPT(full) [ 523.471165][T19835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 523.471174][T19835] Call Trace: [ 523.471181][T19835] [ 523.471188][T19835] dump_stack_lvl+0x100/0x190 [ 523.471216][T19835] should_fail_ex.cold+0x5/0xa [ 523.471235][T19835] should_failslab+0xc2/0x120 [ 523.471249][T19835] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 523.471270][T19835] ? __alloc_skb+0x140/0x710 [ 523.471288][T19835] __alloc_skb+0x140/0x710 [ 523.471300][T19835] ? __alloc_skb+0x5b7/0x710 [ 523.471312][T19835] ? __pfx___alloc_skb+0x10/0x10 [ 523.471330][T19835] netlink_alloc_large_skb+0x69/0x150 [ 523.471349][T19835] netlink_sendmsg+0x680/0xda0 [ 523.471369][T19835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.471385][T19835] ? __pfx___might_fault+0x10/0x10 [ 523.471409][T19835] ____sys_sendmsg+0x9e1/0xb70 [ 523.471426][T19835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.471444][T19835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 523.471471][T19835] ___sys_sendmsg+0x190/0x1e0 [ 523.471492][T19835] ? __pfx____sys_sendmsg+0x10/0x10 [ 523.471532][T19835] __sys_sendmsg+0x170/0x220 [ 523.471548][T19835] ? __pfx___sys_sendmsg+0x10/0x10 [ 523.471574][T19835] do_syscall_64+0x106/0xf80 [ 523.471589][T19835] ? clear_bhb_loop+0x40/0x90 [ 523.471619][T19835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.471634][T19835] RIP: 0033:0x7fbef039c799 [ 523.471648][T19835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.471663][T19835] RSP: 002b:00007fbef1235028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.471677][T19835] RAX: ffffffffffffffda RBX: 00007fbef0615fa0 RCX: 00007fbef039c799 [ 523.471686][T19835] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 523.471695][T19835] RBP: 00007fbef1235090 R08: 0000000000000000 R09: 0000000000000000 [ 523.471703][T19835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.471711][T19835] R13: 00007fbef0616038 R14: 00007fbef0615fa0 R15: 00007ffd892a23c8 [ 523.471730][T19835] [ 523.789692][T19833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 524.072189][T19843] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 525.060820][T19858] program syz.2.4925 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 525.278426][T19861] binder: 19860:19861 ioctl c0306201 200000000180 returned -14 [ 526.766791][ T6015] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 526.944842][ T6015] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 526.953180][ T6015] usb 6-1: config 1 has no interface number 0 [ 526.956006][ T6015] usb 6-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 527.027927][T19889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4937'. [ 527.030003][ T6015] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 527.056115][ T6015] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.064234][ T6015] usb 6-1: Product: syz [ 527.067125][ T6015] usb 6-1: Manufacturer: syz [ 527.077702][ T6015] usb 6-1: SerialNumber: syz [ 527.102443][T19884] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 527.122870][ T6015] usb 6-1: Expected 3 endpoints, found: 2 [ 527.347648][ T989] usb 6-1: USB disconnect, device number 37 [ 527.583611][ T40] kauditd_printk_skb: 328 callbacks suppressed [ 527.583631][ T40] audit: type=1400 audit(1772842262.377:46957): avc: denied { read write } for pid=15700 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 527.604376][ T40] audit: type=1400 audit(1772842262.377:46958): avc: denied { read write open } for pid=15700 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 527.621500][ T40] audit: type=1400 audit(1772842262.377:46959): avc: denied { ioctl } for pid=15700 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 527.709715][ T40] audit: type=1400 audit(1772842262.497:46960): avc: denied { read write } for pid=19894 comm="syz.4.4939" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 527.720606][ T40] audit: type=1400 audit(1772842262.497:46961): avc: denied { read write open } for pid=19894 comm="syz.4.4939" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 527.742214][ T40] audit: type=1400 audit(1772842262.497:46962): avc: denied { ioctl } for pid=19894 comm="syz.4.4939" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 527.758359][ T40] audit: type=1400 audit(1772842262.497:46963): avc: denied { ioctl } for pid=19894 comm="syz.4.4939" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 527.780432][ T40] audit: type=1400 audit(1772842262.517:46964): avc: denied { ioctl } for pid=19894 comm="syz.4.4939" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 527.797756][ T40] audit: type=1400 audit(1772842262.517:46965): avc: denied { ioctl } for pid=19894 comm="syz.4.4939" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 527.827476][ T40] audit: type=1400 audit(1772842262.617:46966): avc: denied { ioctl } for pid=19894 comm="syz.4.4939" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 527.961275][T18275] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 528.124764][T18275] usb 9-1: Using ep0 maxpacket: 32 [ 528.174599][T18275] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 528.180904][T18275] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.188107][T18275] usb 9-1: Product: syz [ 528.215156][T18275] usb 9-1: Manufacturer: syz [ 528.217749][T18275] usb 9-1: SerialNumber: syz [ 528.228211][T18275] usb 9-1: config 0 descriptor?? [ 528.258693][T18275] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 528.329772][ T6015] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 528.509625][ T6015] usb 8-1: Using ep0 maxpacket: 8 [ 528.510281][T18275] gspca_ov534_9: reg_w failed -71 [ 528.616859][ T6015] usb 8-1: string descriptor 0 read error: -22 [ 528.631373][ T6015] usb 8-1: New USB device found, idVendor=0499, idProduct=101b, bcdDevice= 0.40 [ 528.662934][ T6015] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.686586][ T6015] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 528.692595][ T6015] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 528.715865][ T6015] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 528.724690][ T6015] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 528.736170][ T6015] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 528.854266][ T6015] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 528.931023][ T6026] usb 8-1: USB disconnect, device number 42 [ 528.962649][T19513] udevd[19513]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.995504][T18275] gspca_ov534_9: Unknown sensor 0000 [ 528.995582][T18275] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 529.031587][T18275] usb 9-1: USB disconnect, device number 15 [ 529.067645][T19244] udevd[19244]: setting owner of /dev/bus/usb/009/015 to uid=0, gid=0 failed: No such file or directory [ 530.047047][T19915] usb usb8: usbfs: process 19915 (syz.2.4947) did not claim interface 0 before use [ 532.351891][T19950] ------------[ cut here ]------------ [ 532.370826][T19950] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 532.388847][T19950] WARNING: kernel/bpf/verifier.c:2793 at reg_bounds_sanity_check+0x36a/0x1280, CPU#0: syz.2.4959/19950 [ 532.400897][T19950] Modules linked in: [ 532.411167][T19950] CPU: 0 UID: 0 PID: 19950 Comm: syz.2.4959 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.417023][T19950] Tainted: [L]=SOFTLOCKUP [ 532.423999][T19950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 532.429748][T19950] RIP: 0010:reg_bounds_sanity_check+0x3aa/0x1280 [ 532.453891][T19950] Code: ff ff 50 8b 85 6c ff ff ff 50 8b 85 78 ff ff ff 50 8b 85 7c ff ff ff 50 ff 75 b8 4c 8b 4d c0 48 8b 95 70 ff ff ff 48 8b 75 80 <67> 48 0f b9 3a 48 8b 95 48 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 [ 532.461410][T19950] RSP: 0018:ffffc9000414f280 EFLAGS: 00010283 SYZFAIL: failed to recv rpc [ 532.463804][T19950] RAX: 0000000080000000 RBX: ffff88805971b04c RCX: 0000000000000000 [ 532.477631][T19950] RDX: ffffffff8bb8cc60 RSI: ffffffff8bb91c60 RDI: ffffffff90dd9620 [ 532.480957][T19950] RBP: ffffc9000414f370 R08: 0000007800000000 R09: 0000000000000000 [ 532.485209][T19950] R10: ffffffffffffffff R11: 0000000000000000 R12: 0000000000000000 [ 532.489079][T19950] R13: 0000007800000000 R14: ffff88805971b000 R15: ffff88805971b054 [ 532.492253][T19950] FS: 00007fe98a1c36c0(0000) GS:ffff8880d6346000(0000) knlGS:0000000000000000 [ 532.498370][T19950] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 532.502487][T19950] CR2: 00007fe98a1c2ff8 CR3: 000000005856a000 CR4: 0000000000352ef0 [ 532.507756][T19950] Call Trace: [ 532.510456][T19950] [ 532.512421][T19950] reg_set_min_max+0x24b/0x2d0 [ 532.514885][T19950] check_cond_jmp_op+0x2b94/0x6860 [ 532.517892][T19950] ? bpf_mark_stack_read+0x360/0x3d0 [ 532.520926][T19950] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 532.523913][T19950] ? __asan_memset+0x23/0x50 [ 532.527087][T19950] do_check_common+0x99b7/0xcb00 [ 532.530823][T19950] ? __pfx_do_check_common+0x10/0x10 [ 532.533923][T19950] ? get_call_summary+0x7d1/0x800 [ 532.537353][T19950] bpf_check+0xbd53/0xcd50 [ 532.541323][T19950] ? slow_avc_audit+0x18b/0x210 [ 532.544553][T19950] ? __pfx_slow_avc_audit+0x10/0x10 [ 532.548276][T19950] ? __pfx_bpf_check+0x10/0x10 [ 532.551938][T19950] ? avc_has_perm+0x1b1/0x1e0 [ 532.554992][T19950] ? avc_has_perm+0x135/0x1e0 [ 532.558388][T19950] ? __pfx_avc_has_perm+0x10/0x10 [ 532.562281][T19950] ? bpf_prog_load+0x1c86/0x2c20 [ 532.565612][T19950] bpf_prog_load+0x1c86/0x2c20 [ 532.568892][T19950] ? __pfx_bpf_prog_load+0x10/0x10 [ 532.572865][T19950] ? avc_has_perm+0x1b1/0x1e0 [ 532.576185][T19950] ? avc_has_perm+0x135/0x1e0 [ 532.579309][T19950] ? selinux_bpf+0xfb/0x150 [ 532.582636][T19950] __sys_bpf+0x223a/0x4b90 [ 532.585704][T19950] ? tomoyo_path_number_perm+0x188/0x580 [ 532.589295][T19950] ? __pfx___sys_bpf+0x10/0x10 [ 532.592864][T19950] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 532.596975][T19950] ? __lock_acquire+0x4a5/0x2630 [ 532.600486][T19950] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 532.604158][T19950] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 532.608893][T19950] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 532.613399][T19950] ? kcov_ioctl+0x16a/0x720 [ 532.617147][T19950] __x64_sys_bpf+0x7b/0xc0 [ 532.620807][T19950] ? lockdep_hardirqs_on+0x78/0x100 [ 532.625397][T19950] do_syscall_64+0x106/0xf80 [ 532.629979][T19950] ? clear_bhb_loop+0x40/0x90 [ 532.635790][T19950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.640746][T19950] RIP: 0033:0x7fe98939c799 [ 532.644977][T19950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.661223][T19950] RSP: 002b:00007fe98a1c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 532.667965][T19950] RAX: ffffffffffffffda RBX: 00007fe989616180 RCX: 00007fe98939c799 [ 532.673189][T19950] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 532.678323][T19950] RBP: 00007fe989432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 532.686195][T19950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.697793][T19950] R13: 00007fe989616218 R14: 00007fe989616180 R15: 00007ffe4ba92d38 [ 532.705831][T19950] [ 532.706972][T19950] Kernel panic - not syncing: kernel: panic_on_warn set ... fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 532.716889][T19950] CPU: 0 UID: 0 PID: 19950 Comm: syz.2.4959 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.730148][T19950] Tainted: [L]=SOFTLOCKUP [ 532.732425][T19950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 532.751626][T19950] Call Trace: [ 532.753142][T19950] [ 532.754533][T19950] dump_stack_lvl+0x100/0x190 [ 532.756758][T19950] vpanic+0x552/0x970 [ 532.769929][T19950] ? __pfx_vpanic+0x10/0x10 [ 532.772989][T19950] panic+0xd1/0xe0 [ 532.775170][T19950] ? __pfx_panic+0x10/0x10 [ 532.784754][T19950] check_panic_on_warn.cold+0x19/0x34 [ 532.797216][T19950] ? reg_bounds_sanity_check+0x36a/0x1280 [ 532.799835][T19950] __warn.cold+0x191/0x348 [ 532.801898][T19950] __report_bug+0x296/0x3d0 [ 532.804048][T19950] ? reg_bounds_sanity_check+0x36a/0x1280 [ 532.806621][T19950] ? __pfx___report_bug+0x10/0x10 [ 532.808964][T19950] ? copy_verifier_state+0xbea/0x1010 [ 532.811617][T19950] ? push_stack+0x1ca/0x380 [ 532.813640][T19950] ? check_cond_jmp_op+0xaae/0x6860 [ 532.816372][T19950] ? do_check_common+0x99b7/0xcb00 [ 532.819888][T19950] ? bpf_check+0xbd53/0xcd50 [ 532.823017][T19950] ? bpf_prog_load+0x1c86/0x2c20 [ 532.829416][T19950] ? __sys_bpf+0x223a/0x4b90 [ 532.833584][T19950] ? __x64_sys_bpf+0x7b/0xc0 [ 532.836747][T19950] report_bug_entry+0xe1/0x290 [ 532.839879][T19950] ? reg_bounds_sanity_check+0x3aa/0x1280 [ 532.843684][T19950] handle_bug+0x1cd/0x2a0 [ 532.847890][T19950] exc_invalid_op+0x17/0x50 [ 532.850336][T19950] asm_exc_invalid_op+0x1a/0x20 [ 532.853098][T19950] RIP: 0010:reg_bounds_sanity_check+0x3aa/0x1280 [ 532.857295][T19950] Code: ff ff 50 8b 85 6c ff ff ff 50 8b 85 78 ff ff ff 50 8b 85 7c ff ff ff 50 ff 75 b8 4c 8b 4d c0 48 8b 95 70 ff ff ff 48 8b 75 80 <67> 48 0f b9 3a 48 8b 95 48 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 [ 532.868948][T19950] RSP: 0018:ffffc9000414f280 EFLAGS: 00010283 [ 532.872263][T19950] RAX: 0000000080000000 RBX: ffff88805971b04c RCX: 0000000000000000 [ 532.876624][T19950] RDX: ffffffff8bb8cc60 RSI: ffffffff8bb91c60 RDI: ffffffff90dd9620 [ 532.881757][T19950] RBP: ffffc9000414f370 R08: 0000007800000000 R09: 0000000000000000 [ 532.888576][T19950] R10: ffffffffffffffff R11: 0000000000000000 R12: 0000000000000000 [ 532.893914][T19950] R13: 0000007800000000 R14: ffff88805971b000 R15: ffff88805971b054 [ 532.899246][T19950] reg_set_min_max+0x24b/0x2d0 [ 532.901897][T19950] check_cond_jmp_op+0x2b94/0x6860 [ 532.905277][T19950] ? bpf_mark_stack_read+0x360/0x3d0 [ 532.908838][T19950] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 532.912477][T19950] ? __asan_memset+0x23/0x50 [ 532.915638][T19950] do_check_common+0x99b7/0xcb00 [ 532.919004][T19950] ? __pfx_do_check_common+0x10/0x10 [ 532.922585][T19950] ? get_call_summary+0x7d1/0x800 [ 532.925614][T19950] bpf_check+0xbd53/0xcd50 [ 532.927398][T19950] ? slow_avc_audit+0x18b/0x210 [ 532.929336][T19950] ? __pfx_slow_avc_audit+0x10/0x10 [ 532.932352][T19950] ? __pfx_bpf_check+0x10/0x10 [ 532.935038][T19950] ? avc_has_perm+0x1b1/0x1e0 [ 532.938555][T19950] ? avc_has_perm+0x135/0x1e0 [ 532.941774][T19950] ? __pfx_avc_has_perm+0x10/0x10 [ 532.946046][T19950] ? bpf_prog_load+0x1c86/0x2c20 [ 532.949482][T19950] bpf_prog_load+0x1c86/0x2c20 [ 532.951997][T19950] ? __pfx_bpf_prog_load+0x10/0x10 [ 532.954209][T19950] ? avc_has_perm+0x1b1/0x1e0 [ 532.956091][T19950] ? avc_has_perm+0x135/0x1e0 [ 532.958272][T19950] ? selinux_bpf+0xfb/0x150 [ 532.961306][T19950] __sys_bpf+0x223a/0x4b90 [ 532.963316][T19950] ? tomoyo_path_number_perm+0x188/0x580 [ 532.966515][T19950] ? __pfx___sys_bpf+0x10/0x10 [ 532.968603][T19950] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 532.971202][T19950] ? __lock_acquire+0x4a5/0x2630 [ 532.974225][T19950] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 532.976578][T19950] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 532.979378][T19950] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 532.981812][T19950] ? kcov_ioctl+0x16a/0x720 [ 532.983785][T19950] __x64_sys_bpf+0x7b/0xc0 [ 532.985803][T19950] ? lockdep_hardirqs_on+0x78/0x100 [ 532.988154][T19950] do_syscall_64+0x106/0xf80 [ 532.990909][T19950] ? clear_bhb_loop+0x40/0x90 [ 532.993992][T19950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.998172][T19950] RIP: 0033:0x7fe98939c799 [ 533.007755][T19950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.030864][T19950] RSP: 002b:00007fe98a1c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 533.034596][T19950] RAX: ffffffffffffffda RBX: 00007fe989616180 RCX: 00007fe98939c799 [ 533.038716][T19950] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 533.048846][T19950] RBP: 00007fe989432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 533.052792][T19950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.061421][T19950] R13: 00007fe989616218 R14: 00007fe989616180 R15: 00007ffe4ba92d38 [ 533.083793][T19950] [ 533.089208][T19950] Kernel Offset: disabled [ 533.092106][T19950] Rebooting in 86400 seconds..