last executing test programs: 4.214777582s ago: executing program 2 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) epoll_create1(0x0) epoll_create1(0x80000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x88080, 0x16) read$FUSE(r4, &(0x7f0000006780)={0x2020}, 0x2020) syz_clone3(&(0x7f0000000540)={0x81000000, 0x0, 0x0, 0x0, {0x3d}, &(0x7f00000001c0)=""/170, 0xaa, &(0x7f0000000380)=""/209, &(0x7f0000000280)=[r0], 0x1}, 0x58) 4.111686513s ago: executing program 3 (id=851): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000480)={0x8e5f, 0x0, 0x1, 'queue1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0xff, 0x195, 0x0, 'queue0\x00', 0x5}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0xff) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x15) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x65) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x64) 3.290795669s ago: executing program 2 (id=856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000f00)={0x2, 0x0, 0x16, 0x19, 0xcc, &(0x7f0000000b00)="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"}) keyctl$clear(0x3, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40880, 0x0) r4 = dup(r3) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000100)=""/60, 0x3c}], 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') preadv(r6, &(0x7f0000000180), 0x0, 0x6, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) 2.841066813s ago: executing program 0 (id=857): migrate_pages(0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000000280)=0xa) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x6, 0xa2b9, 0x6, 0x2, 0x3, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x4, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x84, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0x8, 0x0, 0x2, 0x4b8, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x7, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c64, 0xa8a9, 0x2000006f, 0x801, 0x2, 0x8000007, 0xad, 0x80002, 0x809, 0x40, 0xa7, 0x1004, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x5, 0x5], [0x2, 0xffffffff, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x7, 0x97f7, 0x3, 0x2000011, 0x3, 0x10010, 0x7, 0xdd81, 0x97, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0xb, 0x4, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x6], [0xa773, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5398, 0x3, 0x6, 0x80008001, 0x777a, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x8, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463d, 0x5, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000001c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x0) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000200)=0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002090101000000000000000001000001200002001400018008000100ac14141d080002"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x80) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="0a000300010000", 0x7) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01000040000000e5e7aa9b00000008000300", @ANYRES32=r9, @ANYBLOB="0c005a80"], 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r11, 0x1, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r8, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, r11, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x20040801) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000203010100000000000000000200000008000100010000020900020000ecffff01000000bf1f06ce27620040000000080363146522f9e81db0dd5554d2dd1450c102c33b034b9aa539bc0c909bf7530ebb705e804c5c128afd5b94031c9a754af4"], 0x38}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000300)}) 2.61991801s ago: executing program 3 (id=858): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@getchain={0x2c, 0x66, 0x200, 0x70bc2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x2, 0x5}, {0xffe0, 0x8}, {0x5, 0x10}}, [{0x8, 0xb, 0x10001}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xc}, {0xb, 0xfff1}, {0x8, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.470182485s ago: executing program 1 (id=859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x4a, 0x7ff, 0x44, 0x3, 0x7, 0x0, 0x40}, 0xc) setns(0xc9, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mount(&(0x7f0000000280)=@rnullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='v7\x00', 0x20800b, &(0x7f0000000380)='}\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf2504"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r4 = socket$inet(0x2, 0xa, 0x20000000) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x8b, 0x0, 0x94}]}) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0x9, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000000300)="060000000300000000", 0x9) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000400)=@x86={0x7, 0x0, 0x1, 0x0, 0x8, 0x1, 0x7, 0x0, 0x2, 0x6f, 0x2d, 0x10, 0x0, 0x8, 0x101, 0x9, 0x0, 0x1b, 0x2, '\x00', 0xc9, 0x5}) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11"], 0x4a) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) 2.469993031s ago: executing program 3 (id=860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 2.394786075s ago: executing program 2 (id=861): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r3, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r4, 0x0, 0xd, 0xfffffffffffffffe) 2.394498946s ago: executing program 3 (id=862): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000003c0)={0x14, &(0x7f0000000000)={0x40, 0x22, 0xa6, {0xa6, 0xd, "da2e9f9ebfa83f3ff29396527b895d0fac30e12fb6bdc9406ab550076642b8cb763e7da8ec1c64903cf881407ce5975dd3cd0a786e391a9522443afb7b38d3d8e0670426631ef8d96546b63704ec42dc7d8b4e652830d5b41e3cb69ca0dde527daa77433ab0de7c58f0d2833c7c9bdb50a340554353d4197cef9bc76e98e94d1940dd88332d8340bbb15ecce04cf40a2cf785c5014f6b4c20b11978bc39a7ac5626ca5f3"}}, &(0x7f00000002c0)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "427da88fb0468dd4396e571bfa37922c55c19f632f839908300312379ed2a4772ffaf1ccaafea9fed40d32109d9ea719b7eca50b7151b3c30e499a9c6b4460529346a8892d0fabdd913a650c6f706adfdab3ad5d2ca4b472bc8043015a54bbe6447e1e5bcdd07bb3a673893dd28b43d1444d2a9ad05f61fc58497c97b43e6e43d1c0e5753e32c24a7941a3377118f359c0e99372bded8fd61e4b1ff27722e89582dc0764642c94c3eea5dccbcb383072a66cece62b0fa3d76640eb9ae2426fdb90"}}}, &(0x7f00000006c0)={0x34, &(0x7f0000000440)={0x0, 0xe, 0x35, "60aa96ea0ecd3e000a58749acd2e8c6c10488339d42437533522ae33305bb1d4af1439b524cb59ef216e23bb2200be87d5761c209b"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000500)={0x20, 0x0, 0xfc, {0xfa, "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"}}, &(0x7f0000000640)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000680)={0x20, 0x0, 0x1, 0x4}}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002300fbffffff00000400000001010080"], 0x114}], 0x1}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r3, 0x0, 0xf, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/tasks\x00', 0x0, 0x0) read(r5, &(0x7f0000000740)=""/16, 0x10) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r6, &(0x7f0000000100)='select \n', 0x10) write(r6, &(0x7f0000000100)='file read /etc/passwd task.uid=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x1aff80, 0x13b) syz_usb_disconnect(r1) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, 0x0) 2.351956842s ago: executing program 0 (id=863): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 1.700958084s ago: executing program 0 (id=864): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e0c400714"], 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000140)=@tcp6, 0x1}, 0x20) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0xffffffff, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 1.587181743s ago: executing program 1 (id=865): pipe2$9p(0x0, 0x4080) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x0, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xc000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x2, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0xffff2000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x0, 0xf401, 0x3000, [0x9, 0x100000000000204, 0x5b, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'fo\x00', 0x0, 0x7f}, 0x2c) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x3, 0x12) sendto$inet(r3, &(0x7f0000000300)="85fb020db8a337c86c08231f450b2bcb8888d9ab6738d5a368698c417c452eb988675c4191fd87cc853e3290f763d548c12417bddd179b2048bbdc877c13bbb35ae97951d33d547bf736d429e5628d1c0450f5939efa64c7ce656b0b7d5487733665c7b6a9c34201dbb8e5947dba145bd59f75af1483032e150f7e8e986e4f18efe597e64ef85af7d4b0570efa9c26b817b3fb906a5f4cde073d8f8a5befa0904f62b1284f2cccc842e0dfeb406b4dca4393182345e3edd2779d7123ee4a5317310f47d31ba3d1380db241d884e3cd276a562298bd4d98811bd7177e1c39260b", 0xe0, 0x20000094, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 1.282650962s ago: executing program 1 (id=866): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c112233440008000000050005000000050005000825"], 0x4a) 1.282513973s ago: executing program 2 (id=867): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) fsmount(r3, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) 1.06118624s ago: executing program 1 (id=868): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xd, 0x3, 0x4, 0x1000, 0x0, r5, 0x0, '\x00', 0x0, r4}, 0x50) 932.135198ms ago: executing program 0 (id=869): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) memfd_create(&(0x7f00000001c0)='.@:\x00', 0x0) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x4000) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/225, 0xe1}], 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 884.926495ms ago: executing program 0 (id=870): r0 = memfd_create(&(0x7f0000000040)='security.selinux\x00\xab', 0x0) setns(0xc9, 0x0) r1 = socket(0x2a, 0x2, 0x80000001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000104"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYRES8=r0, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES64=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRES32, @ANYRES16, @ANYRES8=r1], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x4000800) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$PPPOEIOCDFWD(r1, 0x5411, 0xf0ff1f00000000) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x6, 0xffff, 0x0, 0x8, 0x8, 0x82, 0xde, 0xfd, 0x3, 0x0, 0x46, 0x0, 0x2}, {0x3746, 0x400, 0x2, 0x1, 0x0, 0x61, 0x1, 0x0, 0x0, 0x0, 0x42, 0xfd, 0xffffeffffffffffe}, {0x200003, 0x2, 0xe0, 0x80, 0x9, 0x4, 0x5d, 0x40, 0x42, 0x2, 0x3, 0x40, 0x3ae1}], 0x1ffffff}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20004004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r4, &(0x7f0000000000)="240000003f0005000a0000000000000002020000000000000c0001006f76732d64703000", 0x24, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000200)="340000003f000500010000000000000001020000000000000c0001006f76732d6470300008000200000000000800090010270000", 0x34, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000400)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000600)="a800000042000100030000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x0, r3}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x3ff, 0x8, 0x4, 0x3c5b, 0x9, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x2, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8080, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0xfffffffd, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x100007], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x8, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x6, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0xc, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x6, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0x3ff, 0x3, 0x7f, 0xac1e, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2445, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r7, 0x8301}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) 320.179578ms ago: executing program 2 (id=871): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_LLC_SDREQ(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x20, r3, 0x5, 0xf0bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x40800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008815) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r5, @ANYRES16], 0x14) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r5) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r7, 0xaed1d1fa70eb29d3, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) 211.102238ms ago: executing program 3 (id=872): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffff0, @empty, 0xfffffffc, 0x3}, 0x20) 158.108306ms ago: executing program 0 (id=873): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$KVM_CREATE_VM(r0, 0x40086806, 0x21) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x76, &(0x7f0000000740)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x68, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0xe, 0x0, 0xe7, {[@exp_fastopen={0xfe, 0x11, 0xf989, "0770efd53fd16110a5cb1d4771"}, @generic={0x4, 0xc, "d6aa3a2fb28d58fe4fd3"}, @sack={0x5, 0xe, [0xfffffffb, 0x4, 0x0]}, @md5sig={0x13, 0x12, "e696c0c27e03719465289a404c32c40a"}]}}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x840) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x6801, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f00000001c0)=""/118, 0x76}], 0x2, 0xd6840391, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 152.600069ms ago: executing program 1 (id=874): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x8e5f, 0x0, 0x1, 'queue1\x00', 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x64) pipe2(&(0x7f0000000000), 0x80000) 49.883066ms ago: executing program 2 (id=875): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 313.821µs ago: executing program 3 (id=876): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40010122, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b458b09a7bc6afad62c3f97125bc54bad5b9f6", 0x13}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 0s ago: executing program 1 (id=877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x20000020) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0x0, 0x0}, 0x10) r4 = socket$inet(0x2, 0x80000, 0x6) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x1}}, 0x2e) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) sendmmsg$sock(r7, &(0x7f0000000a80)=[{{&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x1, 0x4, {0xa, 0x4e24, 0x5, @loopback, 0xf9bb}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)="7e38097493018116cf632bb966e220c1e18b63b51367db88d15dd4b56b365639d8b0c89cd905573a925d19eed4ab2e99cf3da6b21706ce7a75df714498ca0a6f7c438b67f9dab0cdbf8da5dc73f74762977ebb8777d14305b3063f2b021e7d0f9f3d7cea36c2913e296b1d547e4c20471fe94815a13f22238b85c1e2e8e15334299962cfde24a742c459319b2f479b0f196fb7b66af2f81f232fc76a", 0x9c}, {&(0x7f0000000300)="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", 0xff}], 0x2, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x7f}}, @txtime={{0x18, 0x1, 0x3d, 0xa}}, @timestamping={{0x14, 0x1, 0x25, 0xf33}}], 0x60}}, {{&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x3, @random="48297db99810", 'syzkaller1\x00'}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)}, {&(0x7f0000000580)="30532c86334afa79eb440184b83cea8fd6664c25af5227fde34353fd5f4956c8a6d42e9519fad853dbfca2722c2ae07474b9718a0e054e36b89ddd329accc6a34fc44fb7e0e2eecaa53a0e9530a4bcc8e34921abd013f2290c9c8b9b27a15a86bcb456848e7f3e93317ecc71d5523ab0e284783f06d3093107e78b3ec00d6e25ebad441c29610372f9636866cbfd4eb378c7e7ade7dbcb9225641ad85ad198f4c39b5639410f0d92a2d5f61c849764f8ebc5ebced6b24fb5a5564aa8db4476adf8e177a331fd2577166ac3f879ae59e54df0", 0xd2}], 0x2, &(0x7f00000006c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}}, {{&(0x7f0000000700)=@in6={0xa, 0x2, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000780)="1f64867d52000067eff3e33933bd53fd7919cc6346f5ea00646ce36325b37fa78371d5bc3e60e1660303c0ab7a5a97d7c5b143f5415b2346190d4342b8d78b4d244f2385775fff0dca48a17e6fcffac675963a117ebd302b50", 0x59}, {&(0x7f0000000800)="178ab3aaa0ae358ab00dadf868e369c01ceda58b3257b9", 0x17}, {&(0x7f0000000840)="1b214c8377af4966a1f1e4013012805e5ed0f00fa2b24633913d47f655f9b26280b98e5ddac2aa0c504919fad1d374d8cbc6d95698ac8b0eea8696166d04ac641a6d2ef7a3b7db171878e96abf", 0x4d}, {&(0x7f00000008c0)="4fc05b612ef710dc69ed4b5696d2cf320ff507c8aed3958dc6", 0x19}, {&(0x7f0000000900)="194ce863602a6cc18010b4c0", 0xc}, {&(0x7f0000000940)="3974560756c1cd719bf8f1d801518c403b6a95ddd754d1b527eeb494134ae430278b74f010955821e42ccf42b12fa9a788cf2f13a1ac92d11796b6e95ace74ef34b79f70480a8d9f1f0683dacff66ab44fbcd0f459119fddb864f3372f0e0e816d78a03f0f6fce49c1b705a0d118cdf7c8c3c145c8b7aa1694f5facf5474438006fa5a390334aadcac37661f65436e3107864fe891256efc4926e9dc744616669e73ba2185ad", 0xa6}], 0x6}}], 0x3, 0x4000) r8 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r8, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r8, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000400050007"], 0x4a) kernel console output (not intermixed with test programs): 000246 ORIG_RAX: 000000000000002e [ 74.563286][ T6601] RAX: ffffffffffffffda RBX: 00007f6b50226090 RCX: 00007f6b4ff9e159 [ 74.563305][ T6601] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 74.563316][ T6601] RBP: 00007f6b5003506b R08: 0000000000000000 R09: 0000000000000000 [ 74.563327][ T6601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.563338][ T6601] R13: 00007f6b50226128 R14: 00007f6b50226090 R15: 00007ffc6d076968 [ 74.563366][ T6601] [ 74.729270][ T6623] netlink: Unknown conntrack attr (0) [ 74.729298][ T6623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.769138][ T43] kauditd_printk_skb: 38 callbacks suppressed [ 74.769154][ T43] audit: type=1400 audit(1790079457.141:446): avc: denied { map_read map_write } for pid=6624 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 74.822778][ T43] audit: type=1400 audit(1790079457.191:447): avc: denied { watch watch_reads } for pid=6625 comm="syz.0.190" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.835759][ T43] audit: type=1400 audit(1790079457.201:448): avc: denied { create } for pid=6634 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 74.836002][ T43] audit: type=1400 audit(1790079457.201:449): avc: denied { create } for pid=6634 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 74.978663][ T43] audit: type=1400 audit(1790079457.351:450): avc: denied { mounton } for pid=6642 comm="syz.1.195" path="/50/config" dev="configfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.115422][ T6652] fuse: Bad value for 'fd' [ 75.173862][ T6654] trusted_key: encrypted_key: keylen parameter is missing [ 75.179428][ T6654] netlink: 'syz.1.198': attribute type 10 has an invalid length. [ 75.179442][ T6654] openvswitch: netlink: Flow actions attr not present in new flow. [ 75.233451][ T43] audit: type=1400 audit(1790079457.601:451): avc: denied { mount } for pid=6657 comm="syz.2.201" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 75.240153][ T6661] netlink: Unknown conntrack attr (0) [ 75.240171][ T6661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.265859][ T43] audit: type=1400 audit(1790079457.631:452): avc: denied { setattr } for pid=6657 comm="syz.2.201" name="sda1" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.271031][ T43] audit: type=1400 audit(1790079457.641:453): avc: denied { mount } for pid=6657 comm="syz.2.201" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 75.282441][ T43] audit: type=1400 audit(1790079457.651:454): avc: denied { map } for pid=6663 comm="syz.1.202" path="socket:[16387]" dev="sockfs" ino=16387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 75.282488][ T43] audit: type=1400 audit(1790079457.651:455): avc: denied { read accept } for pid=6663 comm="syz.1.202" path="socket:[16387]" dev="sockfs" ino=16387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 75.346616][ T6667] __nla_validate_parse: 2 callbacks suppressed [ 75.346635][ T6667] netlink: 60 bytes leftover after parsing attributes in process `syz.2.203'. [ 75.353318][ T6669] netlink: 36 bytes leftover after parsing attributes in process `syz.1.204'. [ 75.380107][ T6667] netlink: 60 bytes leftover after parsing attributes in process `syz.2.203'. [ 75.403786][ T6674] fuse: Bad value for 'fd' [ 75.669823][ T6690] netlink: Unknown conntrack attr (0) [ 75.669860][ T6690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.686611][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 75.836673][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 75.840513][ T9] usb 6-1: New USB device found, idVendor=05e3, idProduct=0505, bcdDevice=df.32 [ 75.842187][ T9] usb 6-1: config 8 has an invalid interface number: 195 but max is 2 [ 75.842202][ T9] usb 6-1: config 8 has an invalid interface number: 42 but max is 2 [ 75.842212][ T9] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 75.842221][ T9] usb 6-1: config 8 has an invalid interface number: 87 but max is 2 [ 75.842256][ T9] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 75.842267][ T9] usb 6-1: config 8 has no interface number 0 [ 75.842275][ T9] usb 6-1: config 8 has no interface number 1 [ 75.842306][ T9] usb 6-1: config 8 has no interface number 2 [ 75.842358][ T9] usb 6-1: config 8 interface 42 altsetting 8 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 75.842376][ T9] usb 6-1: config 8 interface 87 altsetting 253 has a duplicate endpoint with address 0xF, skipping [ 75.842412][ T9] usb 6-1: config 8 interface 87 altsetting 253 has a duplicate endpoint with address 0xF, skipping [ 75.842438][ T9] usb 6-1: config 8 interface 87 altsetting 253 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 75.842453][ T9] usb 6-1: config 8 interface 87 altsetting 253 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 75.842491][ T9] usb 6-1: config 8 interface 87 altsetting 253 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 75.842505][ T9] usb 6-1: config 8 interface 87 altsetting 253 has a duplicate endpoint with address 0x4, skipping [ 75.842541][ T9] usb 6-1: config 8 interface 87 altsetting 253 has a duplicate endpoint with address 0xD, skipping [ 75.842576][ T9] usb 6-1: config 8 interface 87 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 75.842610][ T9] usb 6-1: config 8 interface 87 altsetting 253 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 75.842624][ T9] usb 6-1: config 8 interface 87 altsetting 253 has a duplicate endpoint with address 0xF, skipping [ 75.842659][ T9] usb 6-1: config 8 interface 195 has no altsetting 0 [ 75.842670][ T9] usb 6-1: config 8 interface 42 has no altsetting 0 [ 75.842703][ T9] usb 6-1: config 8 interface 87 has no altsetting 0 [ 75.844881][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.844963][ T9] usb 6-1: Product: ͗がⓌ⫓预긁滇昻Ꚉ濣鲾沿虚⍅䛾榟邅멖ଫ砚⃯䗪뎫鴢伶棳紽䞑ﺯ勽ڴꌀ妱赓죣㦙⊮န톲홥늬糵ꭙꐿ᦬␜韈伵せ䟂뺓䪲瞔칩ൡꭲ㎔瓜ዦ执譱ﾽ㻆ೊᾭ藉зڠܨ뤢⮬囻嵙ꕩ킜檮㼝ꅿ疂큀龙ރ扥꓊ᖥ䩔៊᱒ [ 75.844981][ T9] usb 6-1: Manufacturer: п [ 75.844988][ T9] usb 6-1: SerialNumber: syz [ 75.872672][ T6694] nvme_tcp: malformed address passed: 1:8009 [ 76.081036][ T9] uvcvideo 6-1:8.195: Found UVC 0.00 device ͗がⓌ⫓预긁滇昻Ꚉ濣鲾沿虚⍅䛾榟邅멖ଫ砚⃯䗪뎫鴢伶棳紽䞑ﺯ勽ڴꌀ妱赓죣㦙⊮န톲홥늬糵ꭙꐿ᦬␜韈伵せ䟂뺓䪲瞔칩ൡꭲ㎔瓜ዦ执譱ﾽ㻆ೊᾭ藉зڠܨ뤢⮬囻嵙ꕩ킜檮㼝ꅿ疂큀龙ރ扥꓊ᖥ䩔៊᱒ (05e3:0505) [ 76.081076][ T9] uvcvideo 6-1:8.195: No valid video chain found. [ 76.113638][ T9] usb 6-1: USB disconnect, device number 6 [ 76.143533][ T5840] usb 8-1: USB disconnect, device number 9 [ 76.228294][ T6700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.228526][ T6700] batadv_slave_0: entered promiscuous mode [ 76.228569][ T6700] batadv_slave_0: entered allmulticast mode [ 76.247823][ T6704] netlink: 'syz.2.214': attribute type 11 has an invalid length. [ 76.249309][ T6706] FAULT_INJECTION: forcing a failure. [ 76.249309][ T6706] name failslab, interval 1, probability 0, space 0, times 0 [ 76.249351][ T6706] CPU: 0 UID: 0 PID: 6706 Comm: syz.3.215 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.249379][ T6706] Tainted: [L]=SOFTLOCKUP [ 76.249384][ T6706] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.249390][ T6706] Call Trace: [ 76.249395][ T6706] [ 76.249400][ T6706] dump_stack_lvl+0x100/0x190 [ 76.249421][ T6706] should_fail_ex.cold+0x5/0xa [ 76.249438][ T6706] should_failslab+0xc2/0x120 [ 76.249453][ T6706] __kmalloc_flags_noprof+0x122/0x8e0 [ 76.249472][ T6706] ? __lock_acquire+0x5c0/0x1f40 [ 76.249485][ T6706] ? alloc_slab_obj_exts+0x6a/0x170 [ 76.249497][ T6706] alloc_slab_obj_exts+0x6a/0x170 [ 76.249508][ T6706] __memcg_slab_post_alloc_hook+0x3fc/0x10c0 [ 76.249531][ T6706] ? kasan_unpoison+0x27/0x60 [ 76.249544][ T6706] __kvmalloc_node_noprof+0x750/0x9b0 [ 76.249558][ T6706] ? nf_hook_entries_grow+0x255/0x870 [ 76.249574][ T6706] nf_hook_entries_grow+0x255/0x870 [ 76.249587][ T6706] ? __call_rcu_common.constprop.0+0x3f2/0x9b0 [ 76.249605][ T6706] __nf_register_net_hook+0x112/0x780 [ 76.249619][ T6706] nf_register_net_hook+0xdb/0x170 [ 76.249633][ T6706] nf_register_net_hooks+0x5d/0xd0 [ 76.249647][ T6706] nf_ct_netns_do_get+0x225/0x610 [ 76.249660][ T6706] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 76.249674][ T6706] ? find_held_lock+0x2b/0x80 [ 76.249691][ T6706] ? net_generic+0xea/0x2a0 [ 76.249702][ T6706] ? net_generic+0xea/0x2a0 [ 76.249715][ T6706] nf_ct_netns_get+0x3d/0x160 [ 76.249728][ T6706] synproxy_tg6_check+0x1d6/0x330 [ 76.249740][ T6706] ? __pfx_synproxy_tg6_check+0x10/0x10 [ 76.249751][ T6706] xt_check_target+0x117/0x1c0 [ 76.249768][ T6706] find_check_entry.isra.0+0x808/0xa00 [ 76.249785][ T6706] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 76.249803][ T6706] ? kasan_quarantine_put+0x104/0x240 [ 76.249817][ T6706] ? translate_table+0xbd8/0x1770 [ 76.249830][ T6706] ? kfree+0x22b/0x6d0 [ 76.249845][ T6706] ? xt_check_table_hooks+0x206/0x330 [ 76.249862][ T6706] translate_table+0xcb9/0x1770 [ 76.249883][ T6706] ? __pfx_translate_table+0x10/0x10 [ 76.249908][ T6706] do_ip6t_set_ctl+0x689/0xd00 [ 76.249922][ T6706] ? nf_sockopt_find.isra.0+0x222/0x290 [ 76.249938][ T6706] ? nf_sockopt_find.isra.0+0x222/0x290 [ 76.249956][ T6706] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 76.249970][ T6706] ? __mutex_unlock_slowpath+0x35d/0x930 [ 76.249991][ T6706] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 76.250015][ T6706] ? nf_sockopt_find.isra.0+0x222/0x290 [ 76.250032][ T6706] nf_setsockopt+0x8d/0xf0 [ 76.250048][ T6706] ipv6_setsockopt+0x135/0x170 [ 76.250063][ T6706] tcp_setsockopt+0xa7/0x100 [ 76.250076][ T6706] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 76.250094][ T6706] do_sock_setsockopt+0xf3/0x1d0 [ 76.250112][ T6706] __sys_setsockopt+0x195/0x220 [ 76.250129][ T6706] __x64_sys_setsockopt+0xbd/0x160 [ 76.250142][ T6706] ? do_syscall_64+0xae/0x790 [ 76.250157][ T6706] ? lockdep_hardirqs_on+0x7d/0x110 [ 76.250173][ T6706] do_syscall_64+0x123/0x790 [ 76.250191][ T6706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.250203][ T6706] RIP: 0033:0x7f6b4ff9e159 [ 76.250213][ T6706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.250223][ T6706] RSP: 002b:00007f6b50da1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 76.250235][ T6706] RAX: ffffffffffffffda RBX: 00007f6b50225fa0 RCX: 00007f6b4ff9e159 [ 76.250242][ T6706] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 76.250248][ T6706] RBP: 00007f6b5003506b R08: 00000000000002d0 R09: 0000000000000000 [ 76.250255][ T6706] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.250262][ T6706] R13: 00007f6b50226038 R14: 00007f6b50225fa0 R15: 00007ffc6d076968 [ 76.250276][ T6706] [ 76.255893][ T6706] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 76.258069][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 76.258091][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 76.276707][ T6705] [U] ^E [ 76.366990][ T6712] fuse: Bad value for 'fd' [ 76.470476][ T6716] netlink: 60 bytes leftover after parsing attributes in process `syz.2.217'. [ 76.498627][ T6716] netlink: 60 bytes leftover after parsing attributes in process `syz.2.217'. [ 76.670738][ T6723] netlink: Unknown conntrack attr (0) [ 76.670835][ T6723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.696723][ T1333] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 76.704533][ T6725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.220'. [ 76.849186][ T1333] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 76.850346][ T1333] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 76.850362][ T1333] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 76.853973][ T1333] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 76.853985][ T1333] usb 8-1: Product: syz [ 76.853992][ T1333] usb 8-1: Manufacturer: syz [ 77.091422][ T6714] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 77.091577][ T6714] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 77.104074][ T1333] dvb_ttusb_budget: ttusb_init_controller: error [ 77.104114][ T1333] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 77.136630][ T5837] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 77.151525][ T1333] DVB: Unable to find symbol cx22700_attach() [ 77.203197][ T1333] DVB: Unable to find symbol tda10046_attach() [ 77.203206][ T1333] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 77.309183][ T5837] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.311050][ T5837] usb 6-1: config 0 has no interfaces? [ 77.311147][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.330233][ T5837] usb 6-1: config 0 descriptor?? [ 77.366242][ T6744] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 77.387313][ T993] usb 8-1: USB disconnect, device number 10 [ 77.439356][ T6748] fuse: Bad value for 'fd' [ 77.479582][ T6750] ip6t_frag: unknown flags 6 [ 77.481892][ T6750] MINIX-fs: unable to read superblock [ 77.535765][ T6750] bond1: option xmit_hash_policy: invalid value (6) [ 77.538099][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.228'. [ 77.538117][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'. [ 77.549906][ T6750] bond1 (unregistering): Released all slaves [ 78.415049][ T6787] fuse: Bad value for 'fd' [ 78.459952][ T6791] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 78.562413][ T6800] netlink: 'syz.0.242': attribute type 1 has an invalid length. [ 78.626048][ T6800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.627357][ T6800] bond1: (slave bond2): making interface the new active one [ 78.627900][ T6800] bond1: (slave bond2): Enslaving as an active interface with an up link [ 78.794615][ T6797] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 79.074621][ T6818] fuse: Invalid rootmode [ 79.606148][ T6845] netlink: 'syz.3.253': attribute type 1 has an invalid length. [ 79.638575][ T6845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.797270][ T6858] fuse: Invalid rootmode [ 79.874311][ T6864] veth1_macvtap: left promiscuous mode [ 79.900322][ T9] usb 6-1: USB disconnect, device number 7 [ 80.059529][ T43] kauditd_printk_skb: 31 callbacks suppressed [ 80.059544][ T43] audit: type=1400 audit(1790079462.431:487): avc: denied { create } for pid=6876 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.060178][ T43] audit: type=1400 audit(1790079462.431:488): avc: denied { write } for pid=6876 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.140734][ T43] audit: type=1400 audit(1790079462.511:489): avc: denied { unmount } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 80.205060][ T6884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.222458][ T6886] fuse: Invalid rootmode [ 80.246615][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 80.286536][ C1] net_ratelimit: 43 callbacks suppressed [ 80.397075][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 80.397906][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 80.397920][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 80.397948][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.404686][ T9] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 80.425056][ T9] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 80.616612][ T5837] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 80.767887][ T5837] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 80.768844][ T5837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 80.768869][ T5837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 80.768887][ T5837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 80.768907][ T5837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 80.770831][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.770846][ T5837] usb 8-1: Product: syz [ 80.770858][ T5837] usb 8-1: Manufacturer: syz [ 80.770871][ T5837] usb 8-1: SerialNumber: syz [ 80.773366][ T5837] usb 8-1: config 0 descriptor?? [ 80.977658][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 80.978958][ T5837] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 80.997204][ T6904] syzkaller0: entered promiscuous mode [ 80.997218][ T6904] syzkaller0: entered allmulticast mode [ 81.005325][ T5837] usb 8-1: USB disconnect, device number 11 [ 81.129071][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.129503][ T9] usb 7-1: config 0 has no interfaces? [ 81.129531][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.148664][ T9] usb 7-1: config 0 descriptor?? [ 81.218243][ T43] audit: type=1400 audit(1790079463.591:490): avc: denied { listen } for pid=6913 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 81.218722][ T6914] __nla_validate_parse: 11 callbacks suppressed [ 81.218732][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'. [ 81.378545][ T6918] netlink: 60 bytes leftover after parsing attributes in process `syz.0.273'. [ 81.400111][ T6918] netlink: 60 bytes leftover after parsing attributes in process `syz.0.273'. [ 81.556231][ T6925] fuse: Bad value for 'rootmode' [ 81.594645][ T43] audit: type=1400 audit(1790079463.961:491): avc: denied { ioctl } for pid=6926 comm="syz.0.276" path="socket:[14992]" dev="sockfs" ino=14992 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 81.597408][ T43] audit: type=1400 audit(1790079463.971:492): avc: denied { create } for pid=6926 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 81.620138][ T43] audit: type=1400 audit(1790079463.991:493): avc: denied { mount } for pid=6926 comm="syz.0.276" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 81.621530][ T43] audit: type=1400 audit(1790079463.991:494): avc: denied { search } for pid=6926 comm="syz.0.276" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 81.622037][ T43] audit: type=1400 audit(1790079463.991:495): avc: denied { read write } for pid=6926 comm="syz.0.276" name="versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 81.622082][ T43] audit: type=1400 audit(1790079463.991:496): avc: denied { open } for pid=6926 comm="syz.0.276" path="/75/nfsd/versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 81.704898][ T6932] overlay: Unknown parameter 'posixacl' [ 82.009018][ T6940] smpboot: CPU 1 is now offline [ 82.148164][ T6948] netlink: 60 bytes leftover after parsing attributes in process `syz.0.282'. [ 82.176192][ T6948] netlink: 60 bytes leftover after parsing attributes in process `syz.0.282'. [ 82.351526][ T6955] fuse: Bad value for 'rootmode' [ 82.435496][ T6959] netlink: 64 bytes leftover after parsing attributes in process `syz.0.286'. [ 82.454141][ T6959] FAULT_INJECTION: forcing a failure. [ 82.454141][ T6959] name failslab, interval 1, probability 0, space 0, times 0 [ 82.454164][ T6959] CPU: 2 UID: 0 PID: 6959 Comm: syz.0.286 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.454179][ T6959] Tainted: [L]=SOFTLOCKUP [ 82.454183][ T6959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.454190][ T6959] Call Trace: [ 82.454194][ T6959] [ 82.454199][ T6959] dump_stack_lvl+0x100/0x190 [ 82.454221][ T6959] should_fail_ex.cold+0x5/0xa [ 82.454237][ T6959] should_failslab+0xc2/0x120 [ 82.454252][ T6959] __kmalloc_noprof+0xfc/0x840 [ 82.454271][ T6959] ? sk_prot_alloc+0x10b/0x2a0 [ 82.454291][ T6959] sk_prot_alloc+0x10b/0x2a0 [ 82.454308][ T6959] sk_alloc+0x36/0xe80 [ 82.454322][ T6959] __netlink_create+0x5e/0x2c0 [ 82.454340][ T6959] ? __wake_up+0x3f/0x60 [ 82.454357][ T6959] netlink_create+0x29b/0x610 [ 82.454368][ T6959] ? __pfx_rtnetlink_bind+0x10/0x10 [ 82.454397][ T6959] __sock_create+0x339/0x860 [ 82.454412][ T6959] __sys_socket+0x14d/0x260 [ 82.454423][ T6959] ? __pfx___sys_socket+0x10/0x10 [ 82.454438][ T6959] __x64_sys_socket+0x72/0xb0 [ 82.454449][ T6959] ? lockdep_hardirqs_on+0x7d/0x110 [ 82.454466][ T6959] do_syscall_64+0x123/0x790 [ 82.454484][ T6959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.454496][ T6959] RIP: 0033:0x7f008739e159 [ 82.454506][ T6959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.454517][ T6959] RSP: 002b:00007f00881d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 82.454528][ T6959] RAX: ffffffffffffffda RBX: 00007f0087625fa0 RCX: 00007f008739e159 [ 82.454535][ T6959] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 82.454542][ T6959] RBP: 00007f008743506b R08: 0000000000000000 R09: 0000000000000000 [ 82.454549][ T6959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.454555][ T6959] R13: 00007f0087626038 R14: 00007f0087625fa0 R15: 00007ffc9717caf8 [ 82.454570][ T6959] [ 82.548340][ T6964] netlink: 196 bytes leftover after parsing attributes in process `syz.0.288'. [ 82.549645][ T6964] netlink: 196 bytes leftover after parsing attributes in process `syz.0.288'. [ 82.549664][ T6964] netlink: 19 bytes leftover after parsing attributes in process `syz.0.288'. [ 82.703958][ T6974] netlink: 60 bytes leftover after parsing attributes in process `syz.0.291'. [ 82.898363][ T6982] fuse: Bad value for 'rootmode' [ 82.961533][ T1333] usb 6-1: USB disconnect, device number 8 [ 83.002122][ T1333] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 83.002769][ T1333] spcp8x5 6-1:1.0: device disconnected [ 83.209036][ T6998] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 83.429329][ T7009] input: syz1 as /devices/virtual/input/input7 [ 83.517329][ T1333] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 83.530520][ T7012] fuse: Unknown parameter 'use00000000000000000000' [ 83.605151][ T7015] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 83.605169][ T7015] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 83.605807][ T7015] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 83.667393][ T1333] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 83.668461][ T1333] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 83.668481][ T1333] usb 6-1: config 1 has no interface number 0 [ 83.670762][ T1333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.670780][ T1333] usb 6-1: Product: syz [ 83.670793][ T1333] usb 6-1: Manufacturer: syz [ 83.670806][ T1333] usb 6-1: SerialNumber: syz [ 83.683751][ T1333] usb 6-1: Error in usbnet_get_endpoints (-22) [ 83.750087][ T5837] usb 7-1: USB disconnect, device number 5 [ 83.882812][ T1333] usb 6-1: USB disconnect, device number 9 [ 84.610453][ T7049] fuse: Unknown parameter 'use00000000000000000000' [ 84.853578][ T7068] wlan0 speed is unknown, defaulting to 1000 [ 84.853626][ T7068] wlan0 speed is unknown, defaulting to 1000 [ 84.856804][ T7068] wlan0 speed is unknown, defaulting to 1000 [ 84.858690][ T7068] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 84.858721][ T7068] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 84.858761][ T7068] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 84.861378][ T7068] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 84.869713][ T7068] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 84.902215][ T7068] wlan0 speed is unknown, defaulting to 1000 [ 84.904495][ T7068] wlan0 speed is unknown, defaulting to 1000 [ 84.905972][ T7068] wlan0 speed is unknown, defaulting to 1000 [ 84.907749][ T7068] wlan0 speed is unknown, defaulting to 1000 [ 84.928538][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 84.937854][ T7072] smbdirect: ib_dev[syz0] removed [ 85.077760][ T43] kauditd_printk_skb: 23 callbacks suppressed [ 85.077771][ T43] audit: type=1400 audit(1790079467.451:520): avc: denied { bind } for pid=7081 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.084661][ T43] audit: type=1400 audit(1790079467.451:521): avc: denied { ioctl } for pid=7081 comm="syz.0.319" path="socket:[15760]" dev="sockfs" ino=15760 ioctlcmd=0x542c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 85.122011][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.122545][ T9] usb 6-1: config 0 has no interfaces? [ 85.122584][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.139249][ T9] usb 6-1: config 0 descriptor?? [ 85.172662][ T7087] fuse: Unknown parameter 'use00000000000000000000' [ 85.236350][ T43] audit: type=1400 audit(1790079467.601:522): avc: denied { mounton } for pid=7090 comm="syz.0.321" path="/106/trace/error_log" dev="tracefs" ino=2681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 85.239792][ T7091] Can't find a SQUASHFS superblock on nullb0 [ 85.476634][ C2] net_ratelimit: 296 callbacks suppressed [ 85.485891][ T43] audit: type=1400 audit(1790079467.851:523): avc: denied { mounton } for pid=7100 comm="syz.0.323" path="/sys" dev="bpf" ino=15865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 85.489513][ T43] audit: type=1400 audit(1790079467.861:524): avc: denied { write } for pid=7100 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.489776][ T43] audit: type=1400 audit(1790079467.861:525): avc: denied { connect } for pid=7100 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.629287][ T7109] openvswitch: netlink: Key 22 has unexpected len 12 expected 4 [ 85.703651][ T7110] autofs4:pid:7110:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) [ 85.705816][ T43] audit: type=1400 audit(1790079468.071:526): avc: denied { read } for pid=7054 comm="syz.1.312" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 85.705866][ T43] audit: type=1400 audit(1790079468.071:527): avc: denied { open } for pid=7054 comm="syz.1.312" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 85.705902][ T43] audit: type=1400 audit(1790079468.071:528): avc: denied { ioctl } for pid=7054 comm="syz.1.312" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 85.761964][ T7113] program syz.0.328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.894212][ T7119] fuse: Unknown parameter 'user_i00000000000000000000' [ 86.049952][ T43] audit: type=1400 audit(1790079468.421:529): avc: denied { map } for pid=7122 comm="syz.0.331" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 86.322284][ T7134] netlink: 'syz.2.333': attribute type 11 has an invalid length. [ 86.500921][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.552697][ T7135] veth1_macvtap: entered promiscuous mode [ 86.590392][ T7138] warning: `syz.2.333' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.645679][ T7134] ip6gretap0: entered promiscuous mode [ 86.689234][ T5565] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.689277][ T5565] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.689305][ T5565] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.689332][ T5565] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.281575][ T7142] __nla_validate_parse: 14 callbacks suppressed [ 87.281586][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.334'. [ 87.281761][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.334'. [ 87.359382][ T7149] IPVS: set_ctl: invalid protocol: 131 255.255.255.255:20003 [ 87.717386][ T7157] netlink: 'syz.0.338': attribute type 9 has an invalid length. [ 87.794609][ T9] usb 6-1: USB disconnect, device number 10 [ 87.870417][ T7160] fuse: Unknown parameter 'user_i00000000000000000000' [ 87.977745][ T7167] netlink: 60 bytes leftover after parsing attributes in process `syz.1.341'. [ 88.024124][ T7172] 9pnet_virtio: no channels available for device syz [ 88.024603][ T7167] netlink: 60 bytes leftover after parsing attributes in process `syz.1.341'. [ 88.369062][ T7185] xt_hashlimit: max too large, truncated to 1048576 [ 88.369862][ T7185] xt_hashlimit: size too large, truncated to 1048576 [ 88.369904][ T7185] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 88.420695][ T7183] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 88.550217][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 88.556235][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 88.618127][ T5817] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 88.747578][ T7210] netlink: 124 bytes leftover after parsing attributes in process `syz.3.349'. [ 88.812935][ T7214] fuse: Unknown parameter 'user_i00000000000000000000' [ 88.817227][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 88.836251][ T7212] FAULT_INJECTION: forcing a failure. [ 88.836251][ T7212] name failslab, interval 1, probability 0, space 0, times 0 [ 88.836271][ T7212] CPU: 2 UID: 0 PID: 7212 Comm: syz.2.348 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.836288][ T7212] Tainted: [L]=SOFTLOCKUP [ 88.836293][ T7212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.836301][ T7212] Call Trace: [ 88.836305][ T7212] [ 88.836311][ T7212] dump_stack_lvl+0x100/0x190 [ 88.836333][ T7212] should_fail_ex.cold+0x5/0xa [ 88.836350][ T7212] should_failslab+0xc2/0x120 [ 88.836366][ T7212] __kmalloc_noprof+0xfc/0x840 [ 88.836379][ T7212] ? hash_ipmark4_add+0x1876/0x26a0 [ 88.836395][ T7212] hash_ipmark4_add+0x1876/0x26a0 [ 88.836416][ T7212] ? __pfx_hash_ipmark4_add+0x10/0x10 [ 88.836433][ T7212] hash_ipmark4_uadt+0x704/0x950 [ 88.836446][ T7212] ? __pfx_hash_ipmark4_add+0x10/0x10 [ 88.836460][ T7212] ? __pfx_hash_ipmark4_uadt+0x10/0x10 [ 88.836491][ T7212] ? lock_acquire+0x1d1/0x380 [ 88.836511][ T7212] ? __local_bh_enable_ip+0xa5/0x120 [ 88.836550][ T7212] call_ad.isra.0+0x171/0x950 [ 88.836569][ T7212] ? __pfx_hash_ipmark4_resize+0x10/0x10 [ 88.836585][ T7212] ? __pfx_call_ad.isra.0+0x10/0x10 [ 88.836602][ T7212] ? __pfx___nla_validate_parse+0x10/0x10 [ 88.836627][ T7212] ? __nla_parse+0x40/0x60 [ 88.836645][ T7212] ip_set_ad.isra.0+0x3f1/0x8b0 [ 88.836658][ T7212] ? __pfx_ip_set_ad.isra.0+0x10/0x10 [ 88.836669][ T7212] ? trace_contention_end+0x126/0x160 [ 88.836693][ T7212] ? find_held_lock+0x2b/0x80 [ 88.836711][ T7212] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 88.836735][ T7212] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 88.836752][ T7212] ? __lock_acquire+0x5c0/0x1f40 [ 88.836775][ T7212] ? avc_has_perm_noaudit+0x145/0x470 [ 88.836801][ T7212] netlink_rcv_skb+0x159/0x420 [ 88.836816][ T7212] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 88.836834][ T7212] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 88.836855][ T7212] ? ns_capable+0xd2/0xf0 [ 88.836869][ T7212] nfnetlink_rcv+0x1b3/0x440 [ 88.836885][ T7212] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 88.836902][ T7212] ? netlink_deliver_tap+0x1ae/0xcc0 [ 88.836917][ T7212] netlink_unicast+0x585/0x850 [ 88.836933][ T7212] ? __pfx_netlink_unicast+0x10/0x10 [ 88.836947][ T7212] ? __pfx_sock_has_perm+0x10/0x10 [ 88.836961][ T7212] netlink_sendmsg+0x8b0/0xda0 [ 88.836976][ T7212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.836991][ T7212] ? selinux_socket_sendmsg+0x198/0x2f0 [ 88.837005][ T7212] ____sys_sendmsg+0xa4d/0xbe0 [ 88.837022][ T7212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.837036][ T7212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.837056][ T7212] ? plist_check_list+0x1b8/0x280 [ 88.837070][ T7212] ? plist_del+0x308/0x510 [ 88.837084][ T7212] ___sys_sendmsg+0x190/0x1e0 [ 88.837096][ T7212] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.837107][ T7212] ? futex_wake+0x220/0x5e0 [ 88.837123][ T7212] ? find_held_lock+0x2b/0x80 [ 88.837147][ T7212] __sys_sendmsg+0x160/0x210 [ 88.837161][ T7212] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.837182][ T7212] do_syscall_64+0x123/0x790 [ 88.837202][ T7212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.837214][ T7212] RIP: 0033:0x7faa5f79e159 [ 88.837225][ T7212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.837236][ T7212] RSP: 002b:00007faa5d9b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.837248][ T7212] RAX: ffffffffffffffda RBX: 00007faa5fa26180 RCX: 00007faa5f79e159 [ 88.837255][ T7212] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000008 [ 88.837262][ T7212] RBP: 00007faa5f83506b R08: 0000000000000000 R09: 0000000000000000 [ 88.837268][ T7212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.837275][ T7212] R13: 00007faa5fa26218 R14: 00007faa5fa26180 R15: 00007ffe34351288 [ 88.837290][ T7212] [ 88.888365][ T5817] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 89.160304][ T7220] netlink: 60 bytes leftover after parsing attributes in process `syz.0.353'. [ 89.167334][ T5840] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 89.179669][ T7220] netlink: 60 bytes leftover after parsing attributes in process `syz.0.353'. [ 89.307640][ T5840] usb 8-1: device descriptor read/64, error -71 [ 89.309749][ T7194] ceph: No mds server is up or the cluster is laggy [ 89.310212][ T7193] ceph: No mds server is up or the cluster is laggy [ 89.338139][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 89.441796][ T7230] netlink: 56 bytes leftover after parsing attributes in process `syz.1.355'. [ 89.577401][ T5840] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 89.594661][ T7240] fuse: Unknown parameter 'user_id00000000000000000000' [ 89.672381][ T7246] netlink: 60 bytes leftover after parsing attributes in process `syz.2.362'. [ 89.704326][ T7246] netlink: 60 bytes leftover after parsing attributes in process `syz.2.362'. [ 89.717650][ T5840] usb 8-1: device descriptor read/64, error -71 [ 89.736802][ T7250] binder: BINDER_SET_CONTEXT_MGR already set [ 89.736815][ T7250] binder: 7249:7250 ioctl 4018620d 200000000040 returned -16 [ 89.828992][ T5840] usb usb8-port1: attempt power cycle [ 90.047540][ T7270] nbd: must specify an index to disconnect [ 90.091520][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 90.091534][ T43] audit: type=1400 audit(1790079472.461:544): avc: denied { ioctl } for pid=7271 comm="syz.0.369" path="socket:[18490]" dev="sockfs" ino=18490 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.146067][ T43] audit: type=1400 audit(1790079472.511:545): avc: denied { bind } for pid=7271 comm="syz.0.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.196705][ T5840] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 90.217040][ T5840] usb 8-1: device descriptor read/8, error -71 [ 90.224338][ T7281] fuse: Unknown parameter 'user_id00000000000000000000' [ 90.486575][ T5840] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 90.506963][ T5840] usb 8-1: device descriptor read/8, error -71 [ 90.516604][ C0] net_ratelimit: 123 callbacks suppressed [ 90.533012][ T7299] netlink: Unknown conntrack attr (0) [ 90.533027][ T7299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.616822][ T5840] usb usb8-port1: unable to enumerate USB device [ 90.636244][ T43] audit: type=1400 audit(1790079473.001:546): avc: denied { sys_admin } for pid=7302 comm="syz.2.378" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 90.862901][ T7318] fuse: Unknown parameter 'user_id00000000000000000000' [ 90.886261][ T43] audit: type=1400 audit(1790079473.251:547): avc: denied { mounton } for pid=7319 comm="syz.0.383" path="/130/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 90.905471][ T43] audit: type=1400 audit(1790079473.271:548): avc: denied { recv } for pid=5715 comm="sshd-session" saddr=10.0.2.2 src=36154 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 90.917757][ T43] audit: type=1400 audit(1790079473.291:549): avc: denied { recv } for pid=5715 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=55658 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 91.054284][ T43] audit: type=1400 audit(1790079473.421:550): avc: denied { wake_alarm } for pid=7338 comm="syz.2.389" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.094781][ T43] audit: type=1400 audit(1790079473.461:551): avc: denied { read } for pid=7346 comm="syz.2.390" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 91.094932][ T43] audit: type=1400 audit(1790079473.461:552): avc: denied { open } for pid=7346 comm="syz.2.390" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 91.095457][ T43] audit: type=1400 audit(1790079473.461:553): avc: denied { ioctl } for pid=7346 comm="syz.2.390" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 91.232881][ T7354] fuse: Bad value for 'fd' [ 91.262816][ T7345] xt_cgroup: path and classid specified [ 91.282816][ T7342] ftl_cs: FTL header not found. [ 91.350716][ T7342] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [65] [ 91.466671][ T5810] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 91.606589][ T5810] usb 7-1: device descriptor read/64, error -71 [ 91.866588][ T5810] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 92.000835][ T5810] usb 7-1: device descriptor read/64, error -71 [ 92.117584][ T5810] usb usb7-port1: attempt power cycle [ 92.325321][ T7393] fuse: Bad value for 'fd' [ 92.456781][ T5810] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 92.477437][ T5810] usb 7-1: device descriptor read/8, error -71 [ 92.716699][ T5810] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 92.726576][ T58] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 92.737092][ T5810] usb 7-1: device descriptor read/8, error -71 [ 92.847072][ T5810] usb usb7-port1: unable to enumerate USB device [ 92.887032][ T58] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.887512][ T58] usb 6-1: config 0 has no interfaces? [ 92.887546][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.889482][ T58] usb 6-1: config 0 descriptor?? [ 93.207620][ T7404] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 94.395321][ T7414] __nla_validate_parse: 13 callbacks suppressed [ 94.395333][ T7414] netlink: 60 bytes leftover after parsing attributes in process `syz.2.410'. [ 94.416179][ T7414] netlink: 60 bytes leftover after parsing attributes in process `syz.2.410'. [ 94.639450][ T7421] fuse: Bad value for 'fd' [ 94.803153][ T7431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=7431 comm=syz.2.416 [ 94.812358][ T7436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=7436 comm=syz.2.416 [ 95.029455][ T7450] netlink: 60 bytes leftover after parsing attributes in process `syz.2.419'. [ 95.059191][ T7450] netlink: 60 bytes leftover after parsing attributes in process `syz.2.419'. [ 95.268532][ T7468] fuse: Unknown parameter '0x0000000000000004' [ 95.302294][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 95.302313][ T43] audit: type=1400 audit(1790079477.671:563): avc: denied { read } for pid=7469 comm="syz.2.422" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 95.302410][ T43] audit: type=1400 audit(1790079477.671:564): avc: denied { open } for pid=7469 comm="syz.2.422" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 95.302726][ T43] audit: type=1400 audit(1790079477.671:565): avc: denied { ioctl } for pid=7469 comm="syz.2.422" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 95.344639][ T7470] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 95.344654][ T7470] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 95.344669][ T7470] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x756d instead [ 95.344683][ T7470] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x2f70 instead [ 95.344698][ T7470] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x7473 instead [ 95.344716][ T7470] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0010 instead [ 95.344730][ T7470] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0001 instead [ 95.344748][ T7470] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x001c instead [ 95.344761][ T7470] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0200 instead [ 95.358432][ T7470] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000094: 0x0008 instead [ 95.358451][ T7470] jffs2: Further such events for this erase block will not be printed [ 95.376981][ T7470] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 95.376990][ T7470] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 95.553057][ T5810] usb 6-1: USB disconnect, device number 11 [ 95.699255][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.426'. [ 95.703180][ T7493] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 95.740462][ T43] audit: type=1400 audit(1790079478.111:566): avc: denied { create } for pid=7495 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.740921][ T43] audit: type=1400 audit(1790079478.111:567): avc: denied { write } for pid=7495 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.774899][ T7500] netlink: 60 bytes leftover after parsing attributes in process `syz.1.428'. [ 95.798639][ T7503] net_ratelimit: 92 callbacks suppressed [ 95.801916][ T7500] netlink: 60 bytes leftover after parsing attributes in process `syz.1.428'. [ 95.970476][ T7509] fuse: Unknown parameter '0x0000000000000004' [ 96.090012][ T43] audit: type=1400 audit(1790079478.461:568): avc: denied { read } for pid=7510 comm="syz.1.432" name="usbmon9" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 96.091498][ T43] audit: type=1400 audit(1790079478.461:569): avc: denied { open } for pid=7510 comm="syz.1.432" path="/dev/usbmon9" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 96.093827][ T43] audit: type=1400 audit(1790079478.461:570): avc: denied { ioctl } for pid=7510 comm="syz.1.432" path="/dev/usbmon9" dev="devtmpfs" ino=763 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 96.103419][ T43] audit: type=1400 audit(1790079478.471:571): avc: denied { bind } for pid=7510 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 96.105346][ T43] audit: type=1400 audit(1790079478.471:572): avc: denied { connect } for pid=7510 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 97.120446][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 97.120566][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 97.120647][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 97.288011][ T1333] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 97.410837][ T7557] fuse: Unknown parameter '0x0000000000000004' [ 97.450058][ T1333] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.450557][ T1333] usb 6-1: config 0 has no interfaces? [ 97.450619][ T1333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.455409][ T1333] usb 6-1: config 0 descriptor?? [ 97.566023][ T7567] xt_hashlimit: size too large, truncated to 1048576 [ 97.583956][ T7568] xt_hashlimit: size too large, truncated to 1048576 [ 97.737620][ T7577] XFS (nbd2): SB validate failed with error -5. [ 97.879635][ T7584] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 98.059496][ T7598] fuse: Unknown parameter '0x0000000000000004' [ 98.514980][ T7635] fuse: Unknown parameter '0x0000000000000004' [ 98.813975][ T7653] input: syz1 as /devices/virtual/input/input8 [ 99.318138][ T7666] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 99.318438][ T7666] team0: Device ipvlan2 is already an upper device of the team interface [ 100.049977][ T5810] usb 6-1: USB disconnect, device number 12 [ 100.149290][ T7672] fuse: Unknown parameter '0x0000000000000004' [ 100.185356][ T7674] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 100.185373][ T7674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 100.188004][ T7674] vhci_hcd vhci_hcd.0: Device attached [ 100.436623][ T1333] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 100.496615][ T5810] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 100.546279][ T7680] __nla_validate_parse: 36 callbacks suppressed [ 100.546294][ T7680] netlink: 60 bytes leftover after parsing attributes in process `syz.0.470'. [ 100.568300][ T7680] netlink: 60 bytes leftover after parsing attributes in process `syz.0.470'. [ 100.646639][ T5810] usb 6-1: Using ep0 maxpacket: 8 [ 100.647242][ T5810] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 100.648165][ T5810] usb 6-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 100.648184][ T5810] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.648201][ T5810] usb 6-1: config 1 has no interface number 0 [ 100.648249][ T5810] usb 6-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 100.648268][ T5810] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 100.648288][ T5810] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 100.650220][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.650236][ T5810] usb 6-1: Product: syz [ 100.650247][ T5810] usb 6-1: Manufacturer: syz [ 100.650260][ T5810] usb 6-1: SerialNumber: syz [ 100.835737][ T7687] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 100.836960][ T7687] @0: renamed from bond_slave_1 (while UP) [ 101.076579][ C2] net_ratelimit: 922 callbacks suppressed [ 101.576987][ T7637] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 101.608852][ T5840] usb 6-1: USB disconnect, device number 13 [ 101.615369][ T7675] vhci_hcd: connection reset by peer [ 101.665007][ T5565] vhci_hcd vhci_hcd.1: stop threads [ 101.665511][ T5565] vhci_hcd vhci_hcd.1: release socket [ 101.673536][ T5565] vhci_hcd vhci_hcd.1: disconnect device [ 101.701735][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 101.701745][ T43] audit: type=1400 audit(5370238954.759:583): avc: denied { getopt } for pid=7695 comm="syz.0.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.739622][ T43] audit: type=1400 audit(5370238954.799:584): avc: denied { map } for pid=7695 comm="syz.0.474" path="socket:[19152]" dev="sockfs" ino=19152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.739902][ T43] audit: type=1400 audit(5370238954.799:585): avc: denied { read } for pid=7695 comm="syz.0.474" path="socket:[19152]" dev="sockfs" ino=19152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.843925][ T7705] fuse: Unknown parameter 'fd0x0000000000000004' [ 101.946877][ T5810] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 101.988622][ T7710] pim6reg: entered allmulticast mode [ 102.117242][ T5810] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.117660][ T5810] usb 8-1: config 0 has no interfaces? [ 102.117687][ T5810] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.119203][ T5810] usb 8-1: config 0 descriptor?? [ 102.177329][ T7712] netlink: 60 bytes leftover after parsing attributes in process `syz.1.479'. [ 102.205360][ T7712] netlink: 60 bytes leftover after parsing attributes in process `syz.1.479'. [ 102.367886][ T43] audit: type=1400 audit(5370238955.429:586): avc: denied { mount } for pid=7718 comm="syz.1.481" name="/" dev="hugetlbfs" ino=19893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 102.370281][ T43] audit: type=1400 audit(5370238955.429:587): avc: denied { listen } for pid=7718 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.640063][ T7726] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.483'. [ 102.647733][ T7726] netlink: 36 bytes leftover after parsing attributes in process `syz.0.483'. [ 102.651629][ T7726] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.700239][ T7732] 9p filesystem being mounted at /152/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 102.719329][ T7731] FAULT_INJECTION: forcing a failure. [ 102.719329][ T7731] name failslab, interval 1, probability 0, space 0, times 0 [ 102.719353][ T7731] CPU: 0 UID: 0 PID: 7731 Comm: syz.3.473 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.719369][ T7731] Tainted: [L]=SOFTLOCKUP [ 102.719373][ T7731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.719380][ T7731] Call Trace: [ 102.719385][ T7731] [ 102.719390][ T7731] dump_stack_lvl+0x100/0x190 [ 102.719410][ T7731] should_fail_ex.cold+0x5/0xa [ 102.719428][ T7731] should_failslab+0xc2/0x120 [ 102.719453][ T7731] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 102.719467][ T7731] ? __alloc_skb+0x5b7/0x710 [ 102.719482][ T7731] ? __alloc_skb+0x140/0x710 [ 102.719499][ T7731] __alloc_skb+0x140/0x710 [ 102.719512][ T7731] ? __alloc_skb+0x5b7/0x710 [ 102.719525][ T7731] ? __pfx___alloc_skb+0x10/0x10 [ 102.719539][ T7731] ? __pfx_nf_tables_abort+0x10/0x10 [ 102.719555][ T7731] netlink_ack+0x117/0xb80 [ 102.719569][ T7731] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 102.719590][ T7731] nfnetlink_rcv_batch+0x1d52/0x2880 [ 102.719618][ T7731] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 102.719639][ T7731] ? lock_acquire+0x1d1/0x380 [ 102.719651][ T7731] ? avc_has_perm_noaudit+0x56/0x470 [ 102.719673][ T7731] ? avc_has_perm_noaudit+0x145/0x470 [ 102.719701][ T7731] ? __nla_parse+0x40/0x60 [ 102.719720][ T7731] nfnetlink_rcv+0x3bd/0x440 [ 102.719736][ T7731] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 102.719756][ T7731] netlink_unicast+0x585/0x850 [ 102.719771][ T7731] ? __pfx_netlink_unicast+0x10/0x10 [ 102.719789][ T7731] netlink_sendmsg+0x8b0/0xda0 [ 102.719805][ T7731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.719820][ T7731] ? selinux_socket_sendmsg+0x198/0x2f0 [ 102.719835][ T7731] ____sys_sendmsg+0xa4d/0xbe0 [ 102.719851][ T7731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.719865][ T7731] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.719888][ T7731] ___sys_sendmsg+0x190/0x1e0 [ 102.719899][ T7731] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.719911][ T7731] ? futex_wait+0x11e/0x370 [ 102.719927][ T7731] ? find_held_lock+0x2b/0x80 [ 102.719950][ T7731] __sys_sendmsg+0x160/0x210 [ 102.719965][ T7731] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.719986][ T7731] do_syscall_64+0x123/0x790 [ 102.720005][ T7731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.720017][ T7731] RIP: 0033:0x7f6b4ff9e159 [ 102.720028][ T7731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.720039][ T7731] RSP: 002b:00007f6b50d80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.720050][ T7731] RAX: ffffffffffffffda RBX: 00007f6b50226090 RCX: 00007f6b4ff9e159 [ 102.720058][ T7731] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000005 [ 102.720068][ T7731] RBP: 00007f6b5003506b R08: 0000000000000000 R09: 0000000000000000 [ 102.720079][ T7731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.720089][ T7731] R13: 00007f6b50226128 R14: 00007f6b50226090 R15: 00007ffc6d076968 [ 102.720117][ T7731] [ 102.858815][ T7734] fuse: Unknown parameter 'fd0x0000000000000004' [ 103.041200][ T7740] netlink: 60 bytes leftover after parsing attributes in process `syz.2.488'. [ 103.069920][ T7740] netlink: 60 bytes leftover after parsing attributes in process `syz.2.488'. [ 103.356048][ T43] audit: type=1400 audit(5370238956.409:588): avc: denied { setopt } for pid=7750 comm=C007B0FDA31C0A171BFA8120DD21D9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.364563][ T7752] overlayfs: fs on './file1/file0' does not support file handles, falling back to index=off,nfs_export=off. [ 103.364574][ T7752] overlayfs: maximum fs stacking depth exceeded [ 103.434313][ T43] audit: type=1400 audit(5370238956.489:589): avc: denied { read } for pid=7754 comm="syz.2.493" dev="sockfs" ino=18373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.525433][ T7759] fuse: Unknown parameter 'fd0x0000000000000004' [ 103.650905][ T7767] netlink: 60 bytes leftover after parsing attributes in process `syz.2.497'. [ 103.673018][ T7767] netlink: 60 bytes leftover after parsing attributes in process `syz.2.497'. [ 103.713697][ T43] audit: type=1400 audit(5370238956.769:590): avc: denied { unmount } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 103.761944][ T43] audit: type=1400 audit(5370238956.819:591): avc: denied { ioctl } for pid=7773 comm="syz.0.498" path="/139/config/usb_gadget/g1/UDC" dev="configfs" ino=19981 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 104.442415][ T43] audit: type=1400 audit(5370238957.499:592): avc: denied { egress } for pid=66 comm="kworker/u34:0" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 104.701270][ T5817] usb 8-1: USB disconnect, device number 16 [ 105.552238][ T1333] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 105.966664][ T35] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 106.117304][ T35] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.117778][ T35] usb 6-1: config 0 has no interfaces? [ 106.117822][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.121487][ T35] usb 6-1: config 0 descriptor?? [ 106.196543][ C0] net_ratelimit: 152 callbacks suppressed [ 106.808500][ T7779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.829549][ T7841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.845808][ T7840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.911855][ T7841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.920151][ T7846] sda1: Can't mount, would change RO state [ 106.930225][ T7850] __nla_validate_parse: 2 callbacks suppressed [ 106.930243][ T7850] netlink: 60 bytes leftover after parsing attributes in process `syz.2.519'. [ 106.963244][ T7840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.971541][ T7850] netlink: 60 bytes leftover after parsing attributes in process `syz.2.519'. [ 107.020882][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 107.020892][ T43] audit: type=1400 audit(5370238960.079:599): avc: denied { create } for pid=7844 comm="syz.3.517" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 107.120362][ T43] audit: type=1400 audit(5370238960.179:600): avc: denied { read } for pid=7858 comm="syz.2.520" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 107.225913][ T43] audit: type=1400 audit(5370238960.279:601): avc: denied { append } for pid=7865 comm="syz.2.523" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 107.282775][ T43] audit: type=1400 audit(5370238960.339:602): avc: denied { map } for pid=7866 comm="syz.3.522" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 107.285094][ T43] audit: type=1400 audit(5370238960.339:603): avc: denied { write } for pid=7866 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 107.910503][ T7884] netlink: 60 bytes leftover after parsing attributes in process `syz.0.528'. [ 107.932287][ T7884] netlink: 60 bytes leftover after parsing attributes in process `syz.0.528'. [ 108.048178][ T43] audit: type=1400 audit(5370238961.099:604): avc: denied { setattr } for pid=7890 comm="syz.2.529" name="L2CAP" dev="sockfs" ino=20323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.388505][ T43] audit: type=1400 audit(5370238961.449:605): avc: denied { setopt } for pid=7906 comm="syz.0.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 108.545568][ T7926] vxcan0: tx address claim with dest, not broadcast [ 108.556167][ T7928] vxcan0: tx address claim with dest, not broadcast [ 108.668851][ T43] audit: type=1400 audit(5370238961.729:606): avc: denied { create } for pid=7930 comm="syz.3.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 108.669278][ T43] audit: type=1400 audit(5370238961.729:607): avc: denied { write } for pid=7930 comm="syz.3.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 108.670455][ T43] audit: type=1400 audit(5370238961.729:608): avc: denied { ioctl } for pid=7930 comm="syz.3.537" path="socket:[20378]" dev="sockfs" ino=20378 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 108.758968][ T5840] usb 6-1: USB disconnect, device number 14 [ 108.795501][ T7939] netlink: 60 bytes leftover after parsing attributes in process `syz.1.538'. [ 108.814965][ T7939] netlink: 60 bytes leftover after parsing attributes in process `syz.1.538'. [ 108.989896][ T7950] 9p filesystem being mounted at /119/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 108.992881][ T7950] Cannot find set identified by id 0 to match qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 109.455911][ T7971] netlink: 60 bytes leftover after parsing attributes in process `syz.0.547'. [ 109.488721][ T7971] netlink: 60 bytes leftover after parsing attributes in process `syz.0.547'. [ 109.669371][ T7982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.549'. [ 109.696566][ T1333] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 109.872961][ T1333] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.873396][ T1333] usb 7-1: config 0 has no interfaces? [ 109.873423][ T1333] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.874749][ T1333] usb 7-1: config 0 descriptor?? [ 110.029771][ T7999] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 110.029788][ T7999] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 110.029809][ T7999] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 110.081921][ T7996] FAULT_INJECTION: forcing a failure. [ 110.081921][ T7996] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 110.081952][ T7996] CPU: 0 UID: 0 PID: 7996 Comm: syz.3.555 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.081975][ T7996] Tainted: [L]=SOFTLOCKUP [ 110.081982][ T7996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.081992][ T7996] Call Trace: [ 110.081998][ T7996] [ 110.082006][ T7996] dump_stack_lvl+0x100/0x190 [ 110.082036][ T7996] should_fail_ex.cold+0x5/0xa [ 110.082060][ T7996] strncpy_from_user+0x3b/0x2d0 [ 110.082083][ T7996] do_getname+0x78/0x390 [ 110.082109][ T7996] __x64_sys_rmdir+0x36/0x70 [ 110.082133][ T7996] do_syscall_64+0x123/0x790 [ 110.082160][ T7996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.082178][ T7996] RIP: 0033:0x7f6b4ff9e159 [ 110.082194][ T7996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.082209][ T7996] RSP: 002b:00007f6b50da1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 110.082226][ T7996] RAX: ffffffffffffffda RBX: 00007f6b50225fa0 RCX: 00007f6b4ff9e159 [ 110.082243][ T7996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.082254][ T7996] RBP: 00007f6b5003506b R08: 0000000000000000 R09: 0000000000000000 [ 110.082264][ T7996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.082274][ T7996] R13: 00007f6b50226038 R14: 00007f6b50225fa0 R15: 00007ffc6d076968 [ 110.082298][ T7996] [ 110.084474][ T7999] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 110.380668][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.558'. [ 110.459621][ T8017] FAULT_INJECTION: forcing a failure. [ 110.459621][ T8017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.459653][ T8017] CPU: 0 UID: 0 PID: 8017 Comm: syz.2.546 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.459678][ T8017] Tainted: [L]=SOFTLOCKUP [ 110.459685][ T8017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.459695][ T8017] Call Trace: [ 110.459699][ T8017] [ 110.459706][ T8017] dump_stack_lvl+0x100/0x190 [ 110.459744][ T8017] should_fail_ex.cold+0x5/0xa [ 110.459770][ T8017] strncpy_from_user+0x3b/0x2d0 [ 110.459816][ T8017] do_getname+0x78/0x390 [ 110.459843][ T8017] do_sys_openat2+0xc7/0x1e0 [ 110.459871][ T8017] ? __pfx_do_sys_openat2+0x10/0x10 [ 110.459905][ T8017] __x64_sys_openat+0x12d/0x210 [ 110.459925][ T8017] ? __pfx___x64_sys_openat+0x10/0x10 [ 110.459961][ T8017] do_syscall_64+0x123/0x790 [ 110.459990][ T8017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.460004][ T8017] RIP: 0033:0x7faa5f75e98e [ 110.460019][ T8017] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 110.460035][ T8017] RSP: 002b:00007faa5d9d4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.460054][ T8017] RAX: ffffffffffffffda RBX: 00007faa5d9d56c0 RCX: 00007faa5f75e98e [ 110.460067][ T8017] RDX: 0000000000000002 RSI: 00007faa5d9d4f90 RDI: ffffffffffffff9c [ 110.460078][ T8017] RBP: 00007faa5f83506b R08: 0000000000000000 R09: 0000000000000000 [ 110.460085][ T8017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.460092][ T8017] R13: 00007faa5fa26128 R14: 00007faa5fa26090 R15: 00007ffe34351288 [ 110.460116][ T8017] [ 111.219089][ T8036] net_ratelimit: 130 callbacks suppressed [ 111.473052][ T8041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.830072][ T8054] ovs-dp0: left promiscuous mode [ 111.905640][ T8050] ovs-dp0: entered promiscuous mode [ 112.104140][ T8058] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 112.470743][ T25] usb 7-1: USB disconnect, device number 10 [ 112.500090][ T8064] __nla_validate_parse: 4 callbacks suppressed [ 112.500100][ T8064] netlink: 60 bytes leftover after parsing attributes in process `syz.3.571'. [ 112.547183][ T8064] netlink: 60 bytes leftover after parsing attributes in process `syz.3.571'. [ 112.565037][ T8061] usb 1-1: USB disconnect, device number 2 [ 112.589492][ T8070] ovs-dp0: entered promiscuous mode [ 112.595668][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 112.595677][ T43] audit: type=1400 audit(5370238965.649:619): avc: denied { perfmon } for pid=8060 comm="syz.0.570" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 112.677582][ T5733] Bluetooth: hci4: command 0x1003 tx timeout [ 112.678424][ T66] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 112.708368][ T8061] hub 1-0:1.0: USB hub found [ 112.708561][ T8061] hub 1-0:1.0: 6 ports detected [ 112.780282][ T8076] netlink: 'syz.2.573': attribute type 30 has an invalid length. [ 112.806300][ T8076] bond1: option arp_missed_max: invalid value (0) [ 112.806310][ T8076] bond1: option arp_missed_max: allowed values 1 - 255 [ 112.817749][ T8076] bond1 (unregistering): Released all slaves [ 112.878279][ T8082] netlink: 60 bytes leftover after parsing attributes in process `syz.3.582'. [ 112.886718][ T35] usb 1-1: new high-speed USB device number 3 using ehci-pci [ 112.910600][ T8082] netlink: 60 bytes leftover after parsing attributes in process `syz.3.582'. [ 113.087360][ T35] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 113.101229][ T35] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 113.101240][ T35] usb 1-1: Product: QEMU USB Tablet [ 113.101249][ T35] usb 1-1: Manufacturer: QEMU [ 113.101258][ T35] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 113.132296][ T8106] netlink: 60 bytes leftover after parsing attributes in process `syz.2.587'. [ 113.148020][ T35] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0002/input/input9 [ 113.254046][ T35] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 113.391180][ T8114] netlink: 60 bytes leftover after parsing attributes in process `syz.0.589'. [ 113.430772][ T8114] netlink: 60 bytes leftover after parsing attributes in process `syz.0.589'. [ 113.431697][ T8119] netlink: 60 bytes leftover after parsing attributes in process `syz.3.580'. [ 113.455307][ T8119] netlink: 60 bytes leftover after parsing attributes in process `syz.3.580'. [ 113.472954][ T8119] ovs-dp0: left promiscuous mode [ 113.519362][ T43] audit: type=1400 audit(5370238966.579:620): avc: denied { write } for pid=8126 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.549432][ T8130] ovs-dp0: entered promiscuous mode [ 113.593876][ T43] audit: type=1400 audit(5370238966.649:621): avc: denied { write } for pid=8132 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.634342][ T5840] bridge0: entered promiscuous mode [ 113.687024][ T76] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 113.729024][ T43] audit: type=1400 audit(5370238966.789:622): avc: denied { write } for pid=8138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.829876][ T43] audit: type=1400 audit(5370238966.889:623): avc: denied { write } for pid=8156 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.847849][ T76] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.848286][ T76] usb 7-1: config 0 has no interfaces? [ 113.848351][ T76] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.850270][ T76] usb 7-1: config 0 descriptor?? [ 113.899039][ T8144] blktrace: Concurrent blktraces are not allowed on sg0 [ 113.916910][ T8144] usb 1-1: USB disconnect, device number 3 [ 113.928777][ T43] audit: type=1400 audit(5370238966.989:624): avc: denied { write } for pid=8163 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.991880][ T43] audit: type=1400 audit(5370238967.049:625): avc: denied { write } for pid=8168 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.061637][ T8144] hub 1-0:1.0: USB hub found [ 114.070099][ T8144] hub 1-0:1.0: 6 ports detected [ 114.093403][ T43] audit: type=1400 audit(5370238967.149:626): avc: denied { write } for pid=8170 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.167377][ T43] audit: type=1400 audit(5370238967.229:627): avc: denied { write } for pid=8174 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.276679][ T35] usb 1-1: new high-speed USB device number 4 using ehci-pci [ 114.282983][ T43] audit: type=1400 audit(5370238967.339:628): avc: denied { write } for pid=8176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.314171][ T8181] netlink: 60 bytes leftover after parsing attributes in process `syz.1.594'. [ 114.467295][ T35] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 114.484244][ T35] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 114.484262][ T35] usb 1-1: Product: QEMU USB Tablet [ 114.484276][ T35] usb 1-1: Manufacturer: QEMU [ 114.484290][ T35] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 114.530164][ T35] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0003/input/input10 [ 114.607048][ T35] hid-generic 0003:0627:0001.0003: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 116.064020][ T8251] mmap: syz.0.607 (8251) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.085233][ T8251] capability: warning: `syz.0.607' uses deprecated v2 capabilities in a way that may be insecure [ 116.387844][ T8259] net_ratelimit: 166 callbacks suppressed [ 116.387856][ T8259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.453737][ T5810] usb 7-1: USB disconnect, device number 11 [ 116.721173][ T5810] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 116.721200][ T5810] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 116.721213][ T5810] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 116.721225][ T5810] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 116.721237][ T5810] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 116.721249][ T5810] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 116.721261][ T5810] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 116.721273][ T5810] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 116.721285][ T5810] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 116.721297][ T5810] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 116.735043][ T5810] hid-generic 0006:0004:0009.0004: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 116.837990][ T8281] fido_id[8281]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 117.313681][ T8272] 9pnet_fd: p9_fd_create_tcp (8272): problem connecting socket to 127.0.0.1 [ 117.315961][ T8263] 9pnet_fd: p9_fd_create_tcp (8263): problem connecting socket to 127.0.0.1 [ 117.684539][ T8309] netlink: 'syz.0.627': attribute type 1 has an invalid length. [ 117.726374][ T8309] bond5: (slave veth0_to_bond): making interface the new active one [ 117.733246][ T8309] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 117.788995][ T76] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 117.958228][ T76] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.958663][ T76] usb 8-1: config 0 has no interfaces? [ 117.958691][ T76] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.962341][ T76] usb 8-1: config 0 descriptor?? [ 117.988951][ T8325] af_packet: tpacket_rcv: packet too big, clamped from 65512 to 4294967272. macoff=96 [ 118.016723][ T8321] blktrace: Concurrent blktraces are not allowed on sg0 [ 118.019867][ T8321] usb 1-1: USB disconnect, device number 4 [ 118.069806][ T8329] __nla_validate_parse: 7 callbacks suppressed [ 118.069817][ T8329] netlink: 60 bytes leftover after parsing attributes in process `syz.0.634'. [ 118.098350][ T8329] netlink: 60 bytes leftover after parsing attributes in process `syz.0.634'. [ 118.104383][ T8321] hub 1-0:1.0: USB hub found [ 118.104560][ T8321] hub 1-0:1.0: 6 ports detected [ 118.201395][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 118.201404][ T43] audit: type=1400 audit(5370238971.259:644): avc: denied { read } for pid=8333 comm="syz.2.635" dev="nsfs" ino=4026533163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 118.201598][ T43] audit: type=1400 audit(5370238971.259:645): avc: denied { open } for pid=8333 comm="syz.2.635" path="net:[4026533163]" dev="nsfs" ino=4026533163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 118.276956][ T5810] usb 1-1: new high-speed USB device number 5 using ehci-pci [ 118.300415][ T8342] netlink: 'syz.0.638': attribute type 2 has an invalid length. [ 118.367106][ T43] audit: type=1400 audit(5370238971.429:646): avc: denied { write } for pid=8340 comm="syz.1.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.367380][ T43] audit: type=1400 audit(5370238971.429:647): avc: denied { write } for pid=8340 comm="syz.1.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 118.447580][ T5810] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 118.461654][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 118.461666][ T5810] usb 1-1: Product: QEMU USB Tablet [ 118.461675][ T5810] usb 1-1: Manufacturer: QEMU [ 118.461683][ T5810] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 118.498873][ T8359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.646'. [ 118.507560][ T5810] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0005/input/input12 [ 118.522261][ T5810] hid-generic 0003:0627:0001.0005: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 118.552716][ T8359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.646'. [ 118.580427][ T43] audit: type=1400 audit(5370238971.639:648): avc: denied { map } for pid=8303 comm="syz.3.625" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 118.605573][ T8354] blktrace: Concurrent blktraces are not allowed on sg0 [ 118.693883][ T43] audit: type=1400 audit(5370238971.749:649): avc: denied { mount } for pid=8370 comm="syz.1.648" name="/" dev="ramfs" ino=22889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 118.695717][ T43] audit: type=1400 audit(5370238971.749:650): avc: denied { mounton } for pid=8370 comm="syz.1.648" path="/dev" dev="ramfs" ino=22891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 118.699962][ T8371] kAFS: No cell specified [ 118.842558][ T8382] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 118.939253][ T43] audit: type=1400 audit(5370238971.999:651): avc: denied { associate } for pid=8389 comm="syz.1.654" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 118.944115][ T43] audit: type=1400 audit(5370238971.999:652): avc: denied { mounton } for pid=8387 comm="syz.1.654" path="/proc/433/task" dev="proc" ino=22238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 119.119778][ T8393] blktrace: Concurrent blktraces are not allowed on sg0 [ 119.221474][ T8399] netlink: 60 bytes leftover after parsing attributes in process `syz.1.658'. [ 119.239241][ T8399] netlink: 60 bytes leftover after parsing attributes in process `syz.1.658'. [ 119.474983][ T43] audit: type=1400 audit(5370238972.529:653): avc: denied { append } for pid=8409 comm="syz.1.662" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 119.607013][ T5810] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 119.949010][ T8422] blktrace: Concurrent blktraces are not allowed on sg0 [ 120.154188][ T8436] netlink: 60 bytes leftover after parsing attributes in process `syz.1.669'. [ 120.169420][ T8436] netlink: 60 bytes leftover after parsing attributes in process `syz.1.669'. [ 120.554192][ T76] usb 8-1: USB disconnect, device number 17 [ 120.944697][ T8464] netlink: 60 bytes leftover after parsing attributes in process `syz.3.679'. [ 120.944984][ T8456] blktrace: Concurrent blktraces are not allowed on sg0 [ 120.976451][ T8464] netlink: 60 bytes leftover after parsing attributes in process `syz.3.679'. [ 121.084721][ T8474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.085115][ T8474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.087318][ T8474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.087622][ T8474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.142087][ T8478] ip6t_rt: unknown flags D [ 121.170147][ T8478] dvmrp1: entered allmulticast mode [ 121.419518][ T8490] blktrace: Concurrent blktraces are not allowed on sg0 [ 121.608999][ T8493] net_ratelimit: 116 callbacks suppressed [ 121.609013][ T8493] openvswitch: netlink: IPv4 frag type 4 is out of range max 2 [ 122.259239][ T8516] blktrace: Concurrent blktraces are not allowed on sg0 [ 122.397137][ T8522] netlink: 'syz.0.696': attribute type 2 has an invalid length. [ 122.449748][ T8533] netlink: 'syz.0.696': attribute type 2 has an invalid length. [ 122.451604][ T8533] X25: received unknown 00 with LCI 000 [ 122.726535][ T9] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 122.891820][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.893041][ T9] usb 8-1: config 0 has no interfaces? [ 122.893069][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.897019][ T9] usb 8-1: config 0 descriptor?? [ 123.169177][ T8561] __nla_validate_parse: 5 callbacks suppressed [ 123.169197][ T8561] netlink: 60 bytes leftover after parsing attributes in process `syz.0.703'. [ 123.197697][ T8561] netlink: 60 bytes leftover after parsing attributes in process `syz.0.703'. [ 123.288482][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 123.288498][ T43] audit: type=1400 audit(5370238976.349:667): avc: denied { write } for pid=8564 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.493232][ T43] audit: type=1400 audit(5370238976.549:668): avc: denied { write } for pid=8571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.551974][ T43] audit: type=1400 audit(5370238976.609:669): avc: denied { write } for pid=8577 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.823295][ T8575] blktrace: Concurrent blktraces are not allowed on sg0 [ 123.837271][ T8575] usb 1-1: USB disconnect, device number 5 [ 123.937760][ T8575] hub 1-0:1.0: USB hub found [ 123.938575][ T8575] hub 1-0:1.0: 6 ports detected [ 124.126561][ T5840] usb 1-1: new high-speed USB device number 6 using ehci-pci [ 124.317333][ T5840] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 124.331059][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 124.331079][ T5840] usb 1-1: Product: QEMU USB Tablet [ 124.331094][ T5840] usb 1-1: Manufacturer: QEMU [ 124.331109][ T5840] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 124.393897][ T5840] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0006/input/input13 [ 124.468512][ T5840] hid-generic 0003:0627:0001.0006: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 124.743781][ T8592] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 124.759021][ T8594] fuse: fd is not a fuse device [ 124.759198][ T8594] fuse: fd is not a fuse device [ 124.759316][ T8594] fuse: fd is not a fuse device [ 124.759421][ T8594] fuse: fd is not a fuse device [ 124.759531][ T8594] fuse: fd is not a fuse device [ 124.759635][ T8594] fuse: fd is not a fuse device [ 124.759741][ T8594] fuse: fd is not a fuse device [ 124.759844][ T8594] fuse: fd is not a fuse device [ 124.761350][ T8594] fuse: fd is not a fuse device [ 124.761456][ T8594] fuse: fd is not a fuse device [ 124.761567][ T8594] fuse: fd is not a fuse device [ 124.761675][ T8594] fuse: fd is not a fuse device [ 124.761780][ T8594] fuse: fd is not a fuse device [ 124.761889][ T8594] fuse: fd is not a fuse device [ 124.761993][ T8594] fuse: fd is not a fuse device [ 124.763461][ T43] audit: type=1400 audit(5370238977.819:670): avc: denied { set_context_mgr } for pid=8591 comm="syz.1.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 124.764387][ T8594] fuse: fd is not a fuse device [ 124.764510][ T8594] fuse: fd is not a fuse device [ 124.764620][ T8594] fuse: fd is not a fuse device [ 124.764726][ T8594] fuse: fd is not a fuse device [ 124.764829][ T8594] fuse: fd is not a fuse device [ 124.764934][ T8594] fuse: fd is not a fuse device [ 124.765037][ T8594] fuse: fd is not a fuse device [ 124.765143][ T8594] fuse: fd is not a fuse device [ 124.765250][ T8594] fuse: fd is not a fuse device [ 124.765354][ T8594] fuse: fd is not a fuse device [ 124.766535][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.766544][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.766851][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.766856][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.766898][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.766902][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.769086][ T8594] fuse: fd is not a fuse device [ 124.769273][ T8594] fuse: fd is not a fuse device [ 124.769453][ T8594] fuse: fd is not a fuse device [ 124.769635][ T8594] fuse: fd is not a fuse device [ 124.769805][ T8594] fuse: fd is not a fuse device [ 124.770876][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.770881][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.770920][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.770925][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.771002][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.771009][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.771066][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.771072][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.771137][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.771145][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.771212][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.771217][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.771256][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.771261][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.771334][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.771340][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.771379][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.771383][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.771421][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.771425][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.771488][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.771495][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.771562][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.771570][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.771633][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.771642][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.771711][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.771719][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.771787][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.771795][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.771859][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.771865][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.771931][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.771937][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.772003][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.772011][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.772051][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.772055][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.772096][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.772100][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.772138][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.772142][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.772180][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.772184][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.772186][ T8594] fuse: fd is not a fuse device [ 124.772246][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.772254][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.772300][ T8594] fuse: fd is not a fuse device [ 124.772323][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.772328][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.772370][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.772375][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.772406][ T8594] fuse: fd is not a fuse device [ 124.772413][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.772418][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.772455][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.772460][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.772499][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.772503][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.772541][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.772546][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.772584][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.772588][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.772626][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.772630][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.772669][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.772673][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.772716][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.772720][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.772773][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.772780][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.772847][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.772853][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.772921][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.772926][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.772965][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.772969][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.773007][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.773012][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.773656][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.773661][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.773702][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.773711][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.773749][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.773754][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.773793][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.773797][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.773835][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.773839][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.773877][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.773882][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.773935][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.773942][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.774034][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.774041][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.774108][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.774114][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.774154][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.774158][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.774196][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.774201][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.774253][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.774258][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.774295][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.774299][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.774337][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.774341][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.774378][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.774382][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.774430][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.774434][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.774472][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.774476][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.774521][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.774528][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.774591][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.774599][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.774670][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.774675][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.774719][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.774723][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.774761][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.774765][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.774802][ T8592] binder: BINDER_SET_CONTEXT_MGR already set [ 124.774806][ T8592] binder: 8591:8592 ioctl 4018620d 200000000100 returned -16 [ 124.778486][ T43] audit: type=1400 audit(5370238977.839:671): avc: denied { call } for pid=8591 comm="syz.1.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 124.778769][ T43] audit: type=1400 audit(5370238977.839:672): avc: denied { transfer } for pid=8591 comm="syz.1.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 124.779036][ T8592] binder: 8591:8592 unknown command 0 [ 124.779048][ T8592] binder: 8591:8592 ioctl c0306201 200000004a40 returned -22 [ 124.877331][ T8597] netlink: 60 bytes leftover after parsing attributes in process `syz.1.712'. [ 124.893078][ T8597] netlink: 60 bytes leftover after parsing attributes in process `syz.1.712'. [ 125.236252][ T8608] tmpfs: Unknown parameter 'usrquota_blnck_hardlimit' [ 125.240474][ T43] audit: type=1400 audit(5370238978.299:673): avc: denied { listen } for pid=8607 comm="syz.0.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.274042][ T8606] blktrace: Concurrent blktraces are not allowed on sg0 [ 125.282829][ T8606] usb 1-1: USB disconnect, device number 6 [ 125.441659][ T43] audit: type=1326 audit(5370238978.499:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.0.718" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f008739e159 code=0x0 [ 125.473186][ T8606] hub 1-0:1.0: USB hub found [ 125.477304][ T8606] hub 1-0:1.0: 6 ports detected [ 125.536338][ T5840] usb 8-1: USB disconnect, device number 18 [ 125.666848][ T76] usb 1-1: new high-speed USB device number 7 using ehci-pci [ 125.761877][ T8626] netlink: 60 bytes leftover after parsing attributes in process `syz.3.721'. [ 125.796134][ T8626] netlink: 60 bytes leftover after parsing attributes in process `syz.3.721'. [ 125.866791][ T8621] tmpfs: Bad value for 'mpol' [ 125.868902][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 125.869015][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 125.870659][ T76] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 125.885551][ T43] audit: type=1400 audit(5370238978.939:675): avc: denied { write } for pid=8625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.894866][ T76] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 125.894886][ T76] usb 1-1: Product: QEMU USB Tablet [ 125.894901][ T76] usb 1-1: Manufacturer: QEMU [ 125.894915][ T76] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 125.965502][ T76] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0007/input/input14 [ 126.059272][ T76] hid-generic 0003:0627:0001.0007: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 126.097340][ T43] audit: type=1400 audit(5370238979.159:676): avc: denied { write } for pid=8642 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.392610][ T8658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.729'. [ 126.502925][ T8655] blktrace: Concurrent blktraces are not allowed on sg0 [ 126.532045][ T8655] usb 1-1: USB disconnect, device number 7 [ 126.539315][ T5840] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 126.672070][ T8655] hub 1-0:1.0: USB hub found [ 126.672395][ T8655] hub 1-0:1.0: 6 ports detected [ 126.689650][ T5840] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.690166][ T5840] usb 8-1: config 0 has no interfaces? [ 126.690206][ T5840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.722129][ T5840] usb 8-1: config 0 descriptor?? [ 126.836703][ T4990] net_ratelimit: 90 callbacks suppressed [ 126.866599][ T9] usb 1-1: new high-speed USB device number 8 using ehci-pci [ 126.875871][ T8677] netlink: 60 bytes leftover after parsing attributes in process `syz.1.733'. [ 126.966633][ T1333] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 127.048858][ T9] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 127.063672][ T9] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 127.063683][ T9] usb 1-1: Product: QEMU USB Tablet [ 127.063693][ T9] usb 1-1: Manufacturer: QEMU [ 127.063701][ T9] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 127.097092][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0008/input/input15 [ 127.147503][ T1333] usb 7-1: not running at top speed; connect to a high speed hub [ 127.147522][ T1333] usb 7-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 127.148383][ T1333] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 127.149968][ T1333] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.149978][ T1333] usb 7-1: Product: syz [ 127.149986][ T1333] usb 7-1: Manufacturer: syz [ 127.149994][ T1333] usb 7-1: SerialNumber: syz [ 127.179943][ T9] hid-generic 0003:0627:0001.0008: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 127.182687][ T1333] oti6858 7-1:1.0: oti6858 converter detected [ 127.194023][ T1333] usb 7-1: oti6858 converter now attached to ttyUSB0 [ 127.519197][ T8673] netlink: 'syz.2.731': attribute type 1 has an invalid length. [ 127.519239][ T8673] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.519263][ T8673] IPv6: NLM_F_CREATE should be set when creating new route [ 127.520823][ T8673] IPv6: NLM_F_CREATE should be set when creating new route [ 127.699054][ T5810] usb 7-1: USB disconnect, device number 12 [ 127.747414][ T5810] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 127.748093][ T5810] oti6858 7-1:1.0: device disconnected [ 128.603340][ T8701] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.006138][ T8709] blktrace: Concurrent blktraces are not allowed on sg0 [ 129.035514][ T8709] usb 1-1: USB disconnect, device number 8 [ 129.045254][ T8714] __nla_validate_parse: 1 callbacks suppressed [ 129.045265][ T8714] netlink: 60 bytes leftover after parsing attributes in process `syz.2.742'. [ 129.086598][ T8714] netlink: 60 bytes leftover after parsing attributes in process `syz.2.742'. [ 129.137668][ T8709] hub 1-0:1.0: USB hub found [ 129.141549][ T8709] hub 1-0:1.0: 6 ports detected [ 129.241458][ T8722] 9p filesystem being mounted at /191/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 129.306603][ T76] usb 1-1: new high-speed USB device number 9 using ehci-pci [ 129.313091][ T1333] usb 8-1: USB disconnect, device number 19 [ 129.386231][ T8726] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 129.477420][ T76] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 129.494715][ T76] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 129.494726][ T76] usb 1-1: Product: QEMU USB Tablet [ 129.494735][ T76] usb 1-1: Manufacturer: QEMU [ 129.494744][ T76] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 129.536743][ T76] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0009/input/input16 [ 129.584833][ T8736] netlink: 60 bytes leftover after parsing attributes in process `syz.2.752'. [ 129.601977][ T76] hid-generic 0003:0627:0001.0009: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 129.620616][ T8736] netlink: 60 bytes leftover after parsing attributes in process `syz.2.752'. [ 129.818911][ T8739] blktrace: Concurrent blktraces are not allowed on sg0 [ 129.823807][ T8739] usb 1-1: USB disconnect, device number 9 [ 129.876241][ T8749] netlink: 60 bytes leftover after parsing attributes in process `syz.2.763'. [ 129.894426][ T8749] netlink: 60 bytes leftover after parsing attributes in process `syz.2.763'. [ 130.000539][ T8754] 9p filesystem being mounted at /220/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 130.108129][ T8739] hub 1-0:1.0: USB hub found [ 130.109112][ T8739] hub 1-0:1.0: 6 ports detected [ 130.214764][ T8758] netlink: 60 bytes leftover after parsing attributes in process `syz.0.766'. [ 130.262439][ T8758] netlink: 60 bytes leftover after parsing attributes in process `syz.0.766'. [ 130.287298][ T76] usb 1-1: new high-speed USB device number 10 using ehci-pci [ 130.451019][ T8768] FAULT_INJECTION: forcing a failure. [ 130.451019][ T8768] name fail_futex, interval 1, probability 0, space 0, times 1 [ 130.451039][ T8768] CPU: 0 UID: 0 PID: 8768 Comm: syz.1.758 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.451056][ T8768] Tainted: [L]=SOFTLOCKUP [ 130.451061][ T8768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.451069][ T8768] Call Trace: [ 130.451074][ T8768] [ 130.451079][ T8768] dump_stack_lvl+0x100/0x190 [ 130.451101][ T8768] should_fail_ex.cold+0x5/0xa [ 130.451117][ T8768] get_futex_key+0x1d0/0x14f0 [ 130.451135][ T8768] ? __pfx_get_futex_key+0x10/0x10 [ 130.451150][ T8768] ? find_held_lock+0x2b/0x80 [ 130.451166][ T8768] ? futex_wake+0x4ea/0x5e0 [ 130.451180][ T8768] futex_wake+0xf4/0x5e0 [ 130.451192][ T8768] ? __pfx_futex_wake+0x10/0x10 [ 130.451204][ T8768] ? __lock_acquire+0x5c0/0x1f40 [ 130.451219][ T8768] do_futex+0x2b2/0x440 [ 130.451236][ T8768] ? __pfx_do_futex+0x10/0x10 [ 130.451256][ T8768] __x64_sys_futex+0x34f/0x4d0 [ 130.451274][ T8768] ? fdget_pos+0x2c0/0x380 [ 130.451300][ T8768] ? __pfx___x64_sys_futex+0x10/0x10 [ 130.451316][ T8768] ? ksys_write+0x1ac/0x250 [ 130.451329][ T8768] ? __pfx_ksys_write+0x10/0x10 [ 130.451346][ T8768] do_syscall_64+0x123/0x790 [ 130.451365][ T8768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.451377][ T8768] RIP: 0033:0x7f82e0d9e159 [ 130.451387][ T8768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.451398][ T8768] RSP: 002b:00007f82e1bb10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.451410][ T8768] RAX: ffffffffffffffda RBX: 00007f82e1026098 RCX: 00007f82e0d9e159 [ 130.451419][ T8768] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f82e102609c [ 130.451427][ T8768] RBP: 00007f82e1026090 R08: 0000000000000001 R09: 0000000000000000 [ 130.451434][ T8768] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 130.451442][ T8768] R13: 00007f82e1026128 R14: 00007ffdbf0f65a0 R15: 00007ffdbf0f6688 [ 130.451456][ T8768] [ 130.457276][ T76] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 130.487649][ T76] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 130.487661][ T76] usb 1-1: Product: QEMU USB Tablet [ 130.487670][ T76] usb 1-1: Manufacturer: QEMU [ 130.487679][ T76] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 130.532684][ T76] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.000A/input/input17 [ 130.542665][ T76] hid-generic 0003:0627:0001.000A: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 131.558740][ T66] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 131.789782][ T8775] 9p filesystem being mounted at /214/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 131.876569][ C2] net_ratelimit: 187 callbacks suppressed [ 131.960243][ T8763] Set syz0 is full, maxelem 65536 reached [ 132.248165][ T8798] netlink: 'syz.1.769': attribute type 1 has an invalid length. [ 132.320651][ T8796] blktrace: Concurrent blktraces are not allowed on sg0 [ 132.335300][ T8796] usb 1-1: USB disconnect, device number 10 [ 132.483797][ T8796] hub 1-0:1.0: USB hub found [ 132.484097][ T8796] hub 1-0:1.0: 6 ports detected [ 132.488814][ T8802] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.495385][ T8802] bond1: (slave bond2): making interface the new active one [ 132.495953][ T8802] bond1: (slave bond2): Enslaving as an active interface with an up link [ 132.505849][ T8808] netlink: 60 bytes leftover after parsing attributes in process `syz.1.769'. [ 132.600486][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.600517][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.679166][ T35] usb 1-1: new high-speed USB device number 11 using ehci-pci [ 132.847140][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 132.847151][ T43] audit: type=1400 audit(5370238985.899:680): avc: denied { write } for pid=8830 comm="syz.2.783" name="subsystems" dev="configfs" ino=15544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 132.847196][ T43] audit: type=1400 audit(5370238985.899:681): avc: denied { write } for pid=8830 comm="syz.2.783" name="subsystems" dev="configfs" ino=15544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 132.848012][ T35] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 132.876332][ T35] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 132.876344][ T35] usb 1-1: Product: QEMU USB Tablet [ 132.876354][ T35] usb 1-1: Manufacturer: QEMU [ 132.876363][ T35] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 132.934989][ T35] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.000B/input/input18 [ 132.951647][ T8829] FAULT_INJECTION: forcing a failure. [ 132.951647][ T8829] name fail_futex, interval 1, probability 0, space 0, times 0 [ 132.951675][ T8829] CPU: 2 UID: 0 PID: 8829 Comm: syz.3.779 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.951702][ T8829] Tainted: [L]=SOFTLOCKUP [ 132.951711][ T8829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.951724][ T8829] Call Trace: [ 132.951732][ T8829] [ 132.951741][ T8829] dump_stack_lvl+0x100/0x190 [ 132.951774][ T8829] should_fail_ex.cold+0x5/0xa [ 132.951802][ T8829] get_futex_key+0x1d0/0x14f0 [ 132.951831][ T8829] ? __pfx_get_futex_key+0x10/0x10 [ 132.951854][ T8829] ? find_held_lock+0x2b/0x80 [ 132.951882][ T8829] ? futex_wake+0x4ea/0x5e0 [ 132.951906][ T8829] futex_wake+0xf4/0x5e0 [ 132.951922][ T8829] ? futex_wait+0x11e/0x370 [ 132.951942][ T8829] ? __pfx_futex_wake+0x10/0x10 [ 132.951963][ T8829] ? __lock_acquire+0x5c0/0x1f40 [ 132.951985][ T8829] ? ksys_write+0x190/0x250 [ 132.952004][ T8829] ? ksys_write+0x190/0x250 [ 132.952027][ T8829] do_futex+0x2b2/0x440 [ 132.952054][ T8829] ? __pfx_do_futex+0x10/0x10 [ 132.952078][ T8829] ? lock_acquire+0x1d1/0x380 [ 132.952098][ T8829] ? __fget_files+0x34/0x3d0 [ 132.952122][ T8829] ? find_held_lock+0x2b/0x80 [ 132.952152][ T8829] __x64_sys_futex+0x34f/0x4d0 [ 132.952180][ T8829] ? __fget_files+0x21f/0x3d0 [ 132.952204][ T8829] ? __pfx___x64_sys_futex+0x10/0x10 [ 132.952262][ T8829] do_syscall_64+0x123/0x790 [ 132.952295][ T8829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.952316][ T8829] RIP: 0033:0x7f6b4ff9e159 [ 132.952332][ T8829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.952352][ T8829] RSP: 002b:00007f6b50d800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 132.952372][ T8829] RAX: ffffffffffffffda RBX: 00007f6b50226098 RCX: 00007f6b4ff9e159 [ 132.952386][ T8829] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6b5022609c [ 132.952398][ T8829] RBP: 00007f6b50226090 R08: 0000000000000001 R09: 0000000000000000 [ 132.952411][ T8829] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 132.952423][ T8829] R13: 00007f6b50226128 R14: 00007ffc6d076880 R15: 00007ffc6d076968 [ 132.952455][ T8829] [ 133.058685][ T35] hid-generic 0003:0627:0001.000B: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 133.701979][ T8846] netlink: 'syz.2.788': attribute type 1 has an invalid length. [ 133.864404][ T8846] 8021q: adding VLAN 0 to HW filter on device bond3 [ 133.875442][ T8846] bond2: (slave bond3): making interface the new active one [ 133.884099][ T8846] bond2: (slave bond3): Enslaving as an active interface with an up link [ 133.939304][ T8846] netlink: 60 bytes leftover after parsing attributes in process `syz.2.788'. [ 134.131182][ T8853] blktrace: Concurrent blktraces are not allowed on sg0 [ 134.156683][ T8853] usb 1-1: USB disconnect, device number 11 [ 134.258208][ T8853] hub 1-0:1.0: USB hub found [ 134.260651][ T8853] hub 1-0:1.0: 6 ports detected [ 134.436625][ T6710] usb 1-1: new high-speed USB device number 12 using ehci-pci [ 134.611956][ T6710] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 134.628854][ T6710] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 134.628867][ T6710] usb 1-1: Product: QEMU USB Tablet [ 134.628876][ T6710] usb 1-1: Manufacturer: QEMU [ 134.628885][ T6710] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 134.704595][ T6710] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.000C/input/input19 [ 134.781426][ T6710] hid-generic 0003:0627:0001.000C: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 135.232897][ T8881] netlink: 'syz.2.801': attribute type 1 has an invalid length. [ 135.426001][ T8881] 8021q: adding VLAN 0 to HW filter on device bond5 [ 135.440097][ T8881] bond4: (slave bond5): making interface the new active one [ 135.440623][ T8881] bond4: (slave bond5): Enslaving as an active interface with an up link [ 135.553885][ T8879] blktrace: Concurrent blktraces are not allowed on sg0 [ 135.577672][ T8879] usb 1-1: USB disconnect, device number 12 [ 135.699280][ T8879] hub 1-0:1.0: USB hub found [ 135.700019][ T8879] hub 1-0:1.0: 6 ports detected [ 135.866656][ T76] usb 1-1: new high-speed USB device number 13 using ehci-pci [ 136.042022][ T76] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 136.061858][ T76] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 136.061876][ T76] usb 1-1: Product: QEMU USB Tablet [ 136.061893][ T76] usb 1-1: Manufacturer: QEMU [ 136.061907][ T76] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 136.168382][ T76] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.000D/input/input20 [ 136.265847][ T76] hid-generic 0003:0627:0001.000D: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 136.732717][ T8906] blktrace: Concurrent blktraces are not allowed on sg0 [ 136.747718][ T8906] usb 1-1: USB disconnect, device number 13 [ 136.881165][ T8906] hub 1-0:1.0: USB hub found [ 136.881820][ T8906] hub 1-0:1.0: 6 ports detected [ 136.916723][ C2] net_ratelimit: 117 callbacks suppressed [ 137.090247][ T25] usb 1-1: new high-speed USB device number 14 using ehci-pci [ 137.277353][ T25] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 137.299099][ T25] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 137.299118][ T25] usb 1-1: Product: QEMU USB Tablet [ 137.299134][ T25] usb 1-1: Manufacturer: QEMU [ 137.299148][ T25] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 137.370571][ T25] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.000E/input/input21 [ 137.439153][ T25] hid-generic 0003:0627:0001.000E: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 138.178810][ T8961] blktrace: Concurrent blktraces are not allowed on sg0 [ 138.184071][ T8961] usb 1-1: USB disconnect, device number 14 [ 138.246027][ T8961] hub 1-0:1.0: USB hub found [ 138.246264][ T8961] hub 1-0:1.0: 6 ports detected [ 138.437472][ T35] usb 1-1: new high-speed USB device number 15 using ehci-pci [ 138.617373][ T35] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 138.631173][ T35] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 138.631184][ T35] usb 1-1: Product: QEMU USB Tablet [ 138.631193][ T35] usb 1-1: Manufacturer: QEMU [ 138.631201][ T35] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 138.661193][ T35] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.000F/input/input22 [ 138.725846][ T35] hid-generic 0003:0627:0001.000F: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 138.871046][ T8983] usb 1-1: USB disconnect, device number 15 [ 138.939920][ T8983] hub 1-0:1.0: USB hub found [ 138.941330][ T8983] hub 1-0:1.0: 6 ports detected [ 139.127440][ T35] usb 1-1: new high-speed USB device number 16 using ehci-pci [ 139.297300][ T35] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 139.311172][ T35] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 139.311189][ T35] usb 1-1: Product: QEMU USB Tablet [ 139.311203][ T35] usb 1-1: Manufacturer: QEMU [ 139.311217][ T35] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 139.339228][ T35] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0010/input/input23 [ 139.404744][ T35] hid-generic 0003:0627:0001.0010: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 140.283820][ T8934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.375693][ T8995] netlink: 60 bytes leftover after parsing attributes in process `syz.0.840'. [ 140.421811][ T8995] netlink: 60 bytes leftover after parsing attributes in process `syz.0.840'. [ 140.485506][ T9003] netlink: 'syz.1.842': attribute type 1 has an invalid length. [ 140.544964][ T9006] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 140.615399][ T9003] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.617029][ T9003] bond3: (slave bond4): making interface the new active one [ 140.620325][ T9003] bond3: (slave bond4): Enslaving as an active interface with an up link [ 140.810532][ T9012] usb 1-1: USB disconnect, device number 16 [ 141.214667][ T9012] hub 1-0:1.0: USB hub found [ 141.215060][ T9012] hub 1-0:1.0: 6 ports detected [ 141.386560][ T76] usb 1-1: new high-speed USB device number 17 using ehci-pci [ 141.453396][ T43] audit: type=1400 audit(5370238994.509:682): avc: denied { checkpoint_restore } for pid=9025 comm="syz.2.850" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 141.568636][ T76] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 141.581570][ T76] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 141.581588][ T76] usb 1-1: Product: QEMU USB Tablet [ 141.581603][ T76] usb 1-1: Manufacturer: QEMU [ 141.581616][ T76] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 141.654232][ T76] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0011/input/input24 [ 141.671278][ T76] hid-generic 0003:0627:0001.0011: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 142.126558][ C2] net_ratelimit: 50 callbacks suppressed [ 142.428300][ T43] audit: type=1400 audit(5370238995.469:683): avc: denied { read } for pid=9044 comm="syz.2.856" name="trace_pipe_raw" dev="tracefs" ino=2630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 142.428366][ T43] audit: type=1400 audit(5370238995.469:684): avc: denied { open } for pid=9044 comm="syz.2.856" path="/245/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=2630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 142.846065][ T9052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.857'. [ 142.956829][ T9055] netlink: 32 bytes leftover after parsing attributes in process `syz.3.858'. [ 142.984390][ T9055] netlink: 32 bytes leftover after parsing attributes in process `syz.3.858'. [ 143.247450][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 143.274297][ T9066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.274618][ T9066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.438570][ T43] audit: type=1400 audit(5370238996.499:685): avc: denied { write } for pid=9069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.496618][ T5837] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 143.569626][ T43] audit: type=1400 audit(5370238996.629:686): avc: denied { write } for pid=9076 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.647287][ T5837] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 143.648348][ T5837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.855850][ T43] audit: type=1400 audit(5370238996.909:687): avc: denied { write } for pid=9079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.881232][ T5837] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 143.897933][ T9082] loop5: detected capacity change from 0 to 7 [ 143.906364][ T9082] Dev loop5: unable to read RDB block 7 [ 143.906390][ T9082] loop5: AHDI p1 p3 p4 [ 143.906406][ T9082] loop5: partition table partially beyond EOD, truncated [ 143.906811][ T9082] loop5: p1 size 100663296 extends beyond EOD, truncated [ 143.911104][ T9082] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 144.014587][ T43] audit: type=1400 audit(5370238997.069:688): avc: denied { write } for pid=9084 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.049880][ T9082] Dev loop5: unable to read RDB block 7 [ 144.049900][ T9082] loop5: AHDI p1 p3 p4 [ 144.049915][ T9082] loop5: partition table partially beyond EOD, truncated [ 144.050099][ T9082] loop5: p1 size 100663296 extends beyond EOD, truncated [ 144.055845][ T9082] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 144.173641][ T5739] udevd[5739]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 144.174530][ T6709] udevd[6709]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 144.527177][ T5837] usb 8-1: USB disconnect, device number 20 [ 144.702067][ T9104] netlink: 60 bytes leftover after parsing attributes in process `syz.0.870'. [ 144.729803][ T9104] netlink: 60 bytes leftover after parsing attributes in process `syz.0.870'. [ 144.759745][ T9104] ovs-dp0: left promiscuous mode [ 145.123037][ T43] audit: type=1400 audit(5370238998.179:689): avc: denied { write } for pid=9110 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.291152][ T9109] ovs-dp0: entered promiscuous mode [ 145.422822][ T43] audit: type=1400 audit(5370238998.479:690): avc: denied { write } for pid=9118 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.586080][ T43] audit: type=1400 audit(5370238998.639:691): avc: denied { name_bind } for pid=9130 comm="syz.3.876" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 145.597220][ T9126] ------------[ cut here ]------------ [ 145.597228][ T9126] do not call blocking ops when !TASK_RUNNING; state=1 set at [] hpet_read+0x21b/0x6a0 [ 145.597257][ T9126] WARNING: kernel/sched/core.c:9187 at __might_sleep+0x94/0xc0, CPU#0: syz.0.873/9126 [ 145.605796][ T9126] Modules linked in: [ 145.607495][ T9126] CPU: 0 UID: 0 PID: 9126 Comm: syz.0.873 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.611086][ T9126] Tainted: [L]=SOFTLOCKUP [ 145.612451][ T9126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.615784][ T9126] RIP: 0010:__might_sleep+0x97/0xc0 [ 145.618738][ T9126] Code: 8b 94 24 a8 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d dc 41 71 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 2d 64 a8 00 eb 9f 89 74 24 04 e8 52 64 a8 [ 145.627234][ T9126] RSP: 0018:ffffc90003237af0 EFLAGS: 00010286 [ 145.629828][ T9126] RAX: dffffc0000000000 RBX: ffffffff8c7539a0 RCX: ffffffff85b6d1eb [ 145.633170][ T9126] RDX: ffffffff85b6d1eb RSI: 0000000000000001 RDI: ffffffff914843d0 [ 145.636744][ T9126] RBP: 0000000000000135 R08: 0000000000000005 R09: 0000000000000000 [ 145.640069][ T9126] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888027c6cb00 [ 145.643449][ T9126] R13: 0000000000000000 R14: ffff88802a686540 R15: ffffed1004f8dc75 [ 145.646885][ T9126] FS: 00007f00881d16c0(0000) GS:ffff8880d5b53000(0000) knlGS:0000000000000000 [ 145.650747][ T9126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.653594][ T9126] CR2: 00005647a4805c10 CR3: 0000000025e26000 CR4: 0000000000352ef0 [ 145.657046][ T9126] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 145.660473][ T9126] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 145.663791][ T9126] Call Trace: [ 145.665223][ T9126] [ 145.666598][ T9126] __might_fault+0x8b/0x140 [ 145.668602][ T9126] hpet_read+0x56f/0x6a0 [ 145.670448][ T9126] ? __pfx_hpet_read+0x10/0x10 [ 145.672481][ T9126] ? avc_policy_seqno+0x9/0x20 [ 145.674312][ T9126] ? selinux_file_permission+0x8f/0x6d0 [ 145.676372][ T9126] ? __pfx_default_wake_function+0x10/0x10 [ 145.678600][ T9126] ? bpf_lsm_file_permission+0x9/0x10 [ 145.680869][ T9126] ? security_file_permission+0x76/0x210 [ 145.682823][ T9126] ? rw_verify_area+0xce/0x6d0 [ 145.684599][ T9126] ? __pfx_hpet_read+0x10/0x10 [ 145.686378][ T9126] vfs_readv+0x5d8/0x8d0 [ 145.688132][ T9126] ? __pfx_vfs_readv+0x10/0x10 [ 145.689923][ T9126] ? lock_acquire+0x1d1/0x380 [ 145.691934][ T9126] ? __fget_files+0x34/0x3d0 [ 145.693783][ T9126] ? __fget_files+0x21f/0x3d0 [ 145.695688][ T9126] ? do_preadv+0x1ac/0x270 [ 145.697291][ T9126] do_preadv+0x1ac/0x270 [ 145.698576][ T9126] ? __pfx_do_preadv+0x10/0x10 [ 145.700131][ T9126] do_syscall_64+0x123/0x790 [ 145.701599][ T9126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.703491][ T9126] RIP: 0033:0x7f008739e159 [ 145.704912][ T9126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.710959][ T9126] RSP: 002b:00007f00881d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 145.713441][ T9126] RAX: ffffffffffffffda RBX: 00007f0087625fa0 RCX: 00007f008739e159 [ 145.715776][ T9126] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 [ 145.718231][ T9126] RBP: 00007f008743506b R08: 0000000000000000 R09: 0000000000000000 [ 145.721235][ T9126] R10: 00000000d6840391 R11: 0000000000000246 R12: 0000000000000000 [ 145.723827][ T9126] R13: 00007f0087626038 R14: 00007f0087625fa0 R15: 00007ffc9717caf8 [ 145.726315][ T9126] [ 145.727663][ T9126] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 145.729829][ T9126] CPU: 0 UID: 0 PID: 9126 Comm: syz.0.873 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.733028][ T9126] Tainted: [L]=SOFTLOCKUP [ 145.734353][ T9126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.737343][ T9126] Call Trace: [ 145.738397][ T9126] [ 145.739320][ T9126] dump_stack_lvl+0x100/0x190 [ 145.740762][ T9126] vpanic+0x553/0x970 [ 145.741970][ T9126] ? __pfx_vpanic+0x10/0x10 [ 145.743525][ T9126] panic+0xd1/0xe0 [ 145.744715][ T9126] ? __pfx_panic+0x10/0x10 [ 145.746160][ T9126] check_panic_on_warn.cold+0x19/0x34 [ 145.747875][ T9126] ? __might_sleep+0x94/0xc0 [ 145.749288][ T9126] __warn.cold+0x191/0x318 [ 145.750911][ T9126] __report_bug+0x30f/0x440 [ 145.752661][ T9126] ? __might_sleep+0x94/0xc0 [ 145.754416][ T9126] ? __pfx___report_bug+0x10/0x10 [ 145.756132][ T9126] ? hpet_read+0x21b/0x6a0 [ 145.757594][ T9126] ? hpet_read+0x21b/0x6a0 [ 145.759039][ T9126] ? rcu_is_watching+0x13/0xc0 [ 145.760565][ T9126] report_bug_entry+0xe2/0x290 [ 145.762084][ T9126] ? __might_sleep+0x97/0xc0 [ 145.763746][ T9126] handle_bug+0x1cd/0x2a0 [ 145.765589][ T9126] exc_invalid_op+0x17/0x50 [ 145.767563][ T9126] asm_exc_invalid_op+0x1a/0x20 [ 145.769644][ T9126] RIP: 0010:__might_sleep+0x97/0xc0 [ 145.771800][ T9126] Code: 8b 94 24 a8 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d dc 41 71 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 2d 64 a8 00 eb 9f 89 74 24 04 e8 52 64 a8 [ 145.779898][ T9126] RSP: 0018:ffffc90003237af0 EFLAGS: 00010286 [ 145.781848][ T9126] RAX: dffffc0000000000 RBX: ffffffff8c7539a0 RCX: ffffffff85b6d1eb [ 145.784391][ T9126] RDX: ffffffff85b6d1eb RSI: 0000000000000001 RDI: ffffffff914843d0 [ 145.787277][ T9126] RBP: 0000000000000135 R08: 0000000000000005 R09: 0000000000000000 [ 145.789916][ T9126] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888027c6cb00 [ 145.792365][ T9126] R13: 0000000000000000 R14: ffff88802a686540 R15: ffffed1004f8dc75 [ 145.794740][ T9126] ? hpet_read+0x21b/0x6a0 [ 145.796208][ T9126] ? hpet_read+0x21b/0x6a0 [ 145.797606][ T9126] __might_fault+0x8b/0x140 [ 145.799077][ T9126] hpet_read+0x56f/0x6a0 [ 145.800433][ T9126] ? __pfx_hpet_read+0x10/0x10 [ 145.801961][ T9126] ? avc_policy_seqno+0x9/0x20 [ 145.803508][ T9126] ? selinux_file_permission+0x8f/0x6d0 [ 145.805245][ T9126] ? __pfx_default_wake_function+0x10/0x10 [ 145.807168][ T9126] ? bpf_lsm_file_permission+0x9/0x10 [ 145.809060][ T9126] ? security_file_permission+0x76/0x210 [ 145.811291][ T9126] ? rw_verify_area+0xce/0x6d0 [ 145.813613][ T9126] ? __pfx_hpet_read+0x10/0x10 [ 145.815387][ T9126] vfs_readv+0x5d8/0x8d0 [ 145.816792][ T9126] ? __pfx_vfs_readv+0x10/0x10 [ 145.818313][ T9126] ? lock_acquire+0x1d1/0x380 [ 145.819977][ T9126] ? __fget_files+0x34/0x3d0 [ 145.821491][ T9126] ? __fget_files+0x21f/0x3d0 [ 145.822998][ T9126] ? do_preadv+0x1ac/0x270 [ 145.824433][ T9126] do_preadv+0x1ac/0x270 [ 145.825784][ T9126] ? __pfx_do_preadv+0x10/0x10 [ 145.827757][ T9126] do_syscall_64+0x123/0x790 [ 145.829789][ T9126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.831697][ T9126] RIP: 0033:0x7f008739e159 [ 145.833117][ T9126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.839188][ T9126] RSP: 002b:00007f00881d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 145.841832][ T9126] RAX: ffffffffffffffda RBX: 00007f0087625fa0 RCX: 00007f008739e159 [ 145.844444][ T9126] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 [ 145.847511][ T9126] RBP: 00007f008743506b R08: 0000000000000000 R09: 0000000000000000 [ 145.849912][ T9126] R10: 00000000d6840391 R11: 0000000000000246 R12: 0000000000000000 [ 145.852338][ T9126] R13: 00007f0087626038 R14: 00007f0087625fa0 R15: 00007ffc9717caf8 [ 145.854719][ T9126] [ 145.856422][ T9126] Kernel Offset: disabled [ 145.857940][ T9126] Rebooting in 86400 seconds..