last executing test programs: 54.253354812s ago: executing program 3 (id=349): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340), 0x1200400, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x2, {0xfffffffffffffffe, 0x0, 0x0, '\x00', {0x7ff, 0x3ff, 0xadf, 0x10, r1, 0x0, 0x8000, '\x00', 0x6, 0x7, 0x1, 0x2, {0xff, 0x6}, {0x4000000000006, 0x800}, {0x1fffffd, 0xd}, {0x9, 0xe}, 0x1fe, 0x6, 0xfff, 0x7}}}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='measure uid>1', 0xd) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000000)={0x80000001, 0x80000003, {0xffffffffffffffff}, {r1}, 0x5, 0x3ff}) r4 = syz_open_procfs(r3, &(0x7f0000000380)='gid_map\x00') write$cgroup_int(r4, 0x0, 0x0) 54.253239438s ago: executing program 3 (id=350): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r1, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x4}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1000000}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x5c}}, 0x64044000) 54.174532737s ago: executing program 3 (id=352): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x70bd29, 0x0, {0x1c}}, 0x1c}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2a}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8003, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc4c85512, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x0) 54.114466856s ago: executing program 3 (id=355): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000100000000000000000003000000000000000800010002"], 0x20}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000500)={0x1, 0x0, @pic={0x3, 0xe, 0x81, 0x8, 0xd, 0x0, 0x0, 0xb, 0x7f, 0xd, 0x4, 0x4, 0x0, 0x49, 0x6, 0x8}}) syz_emit_vhci(&(0x7f0000000580)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_VOICE_SETTING={{0x1}, 0xd}}}, 0x7) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x58, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x8, 0x6, "cd85b5", 0x7, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [], "aad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9ccbf356d"}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x60, 0x20180) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x3ff}}, './file0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="030f000000000000000034"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f0000000800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r10, 0x8, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2ca}, {0x6, 0x11, 0xfff9}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000090}, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r11, &(0x7f0000000180)='10000', 0x5) r12 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test\x00', 0xa2c2, 0x0) write(r12, &(0x7f0000000280)='0', 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 54.000320481s ago: executing program 3 (id=360): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) socket$netlink(0x10, 0x3, 0xf) (async) r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r0, 0x1, 0x2b, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24004881}, 0xc041) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r1, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) (async) write(r1, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) (async) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) madvise(&(0x7f0000fc3000/0x3000)=nil, 0x3000, 0x11) (async) madvise(&(0x7f0000fc3000/0x3000)=nil, 0x3000, 0x11) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) 53.815322546s ago: executing program 3 (id=361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c0001"], 0x30}}, 0x0) 30.978469252s ago: executing program 32 (id=361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c0001"], 0x30}}, 0x0) 4.10593652s ago: executing program 4 (id=987): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)="d3", 0x1}], 0x1) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4, 0x0, 0x4}) ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) 4.054445284s ago: executing program 4 (id=988): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x3, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xe1f5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x81}}]}, {}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x2c, r2, 0x321, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x42}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1274}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000e, 0x8010, r0, 0x2d68f000) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000200)) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r5, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) 3.934188261s ago: executing program 4 (id=992): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f00000001c0)=[@wr_crn={0x67, 0x20, {0x0, 0x1}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @cpuid={0x64, 0x18, {0xc6, 0x6}}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0xb4d, 0xba}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0x955, 0x5}}, @nested_amd_clgi={0x17f, 0x10}, @out_dx={0x6a, 0x28, {0xd9a5, 0x3, 0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x6, 0x7fffffff, 0x2, 0xe}}, @nested_vmresume={0x130, 0x18, 0x3}], 0x168}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000380)={{0x5000, 0x8041000, 0x19, 0xf5, 0x4, 0x4, 0x34, 0x51, 0x4b, 0x3, 0x3, 0x5c}, {0x60000, 0x8000000, 0x0, 0x9, 0x1, 0x5, 0x0, 0x8, 0x9, 0x4, 0x18, 0x7f}, {0x25000, 0xeeee8000, 0x8, 0x8, 0x5, 0x2, 0x9, 0x40, 0x10, 0x4d, 0x9, 0xf6}, {0x40000, 0xeef90000, 0x4, 0x4, 0x8, 0x2, 0xe, 0x0, 0x7, 0x6, 0x8, 0xed}, {0xa000, 0x30000, 0xd, 0x8, 0x5, 0x0, 0xae, 0x80, 0x8, 0x1, 0x8, 0x9}, {0x50000, 0x4, 0xf, 0x2, 0x1, 0x7, 0xfa, 0x5, 0x4, 0x1, 0x7, 0xc}, {0x8080000, 0x4, 0x9, 0xa, 0x3, 0xe8, 0xb6, 0xd, 0x9, 0x8, 0x7, 0x7f}, {0x59000, 0x6000, 0xf, 0x8, 0x4, 0x3, 0xff, 0xf8, 0xf9, 0x7, 0x7, 0x1}, {0xeeee0000, 0x3}, {0x54000, 0x3}, 0x5, 0x0, 0x41000, 0x422000, 0x4, 0x1100, 0xe000, 0x0, [0x8, 0x9, 0x8000000000000001, 0x1]}) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x89}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000004c0)={0xbc, 0x0, 0x7}) 3.863286755s ago: executing program 4 (id=994): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa002803f}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1b}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44000) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) timer_delete(r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x80) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r4, 0x0, 0x14) syz_emit_ethernet(0xba, &(0x7f0000000640)={@local, @empty, @val={@void, {0x8100, 0x5, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x1, 0xb, 0xa8, 0x66, 0x0, 0x5, 0x1, 0x0, @empty, @remote, {[@ra={0x94, 0x4, 0x1}, @generic={0x2, 0xa, "45b9afe20ee4a2c0"}, @generic={0x89, 0xd, "d581692ef3b270d7f86d86"}]}}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x9, 0x0, {0x1c, 0x4, 0x0, 0x17, 0x3b, 0x65, 0x7b98, 0x40, 0x2f, 0x4, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0x14, 0x91, 0x3, 0x2, [{@remote, 0x6558}, {@rand_addr=0x64010101, 0x9}]}, @rr={0x7, 0x3, 0x53}, @lsrr={0x83, 0x1b, 0x2d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast, @broadcast, @empty, @broadcast]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x53, 0x3, 0x3, [{@loopback, 0x7}, {@private=0xa010102, 0x6}, {@multicast2, 0x4}, {@local, 0xfffffffd}]}]}}}}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010003904ffffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="01980000131300001c0012800900010069706970000000000c00f9deba3194f042c50001557af69aab5d100b7a3fb2d570baf29a8ea122e5b17065fdcb04f12122e5b688fe3dcffa0bae70b9057b3acbd27700e6a96c3a17051f9e7239e0a581a3b037c09e3fc7a605dd3a2ba1d460b47405526b9b2e90ae408b6ff863026aef988d8a452bbee203a6fe2765ce6bfb9118e9499907cbd27a041d0646d3ba496289378fb3789ede7ede2de1dec28228d8f0b8dcee4e97163f2e96c6b61878396b47dc22af753eab75ee6b96"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) epoll_create1(0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa002803f}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1b}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44000) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) timer_delete(r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x80) (async) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) (async) write$nci(r4, 0x0, 0x14) (async) syz_emit_ethernet(0xba, &(0x7f0000000640)={@local, @empty, @val={@void, {0x8100, 0x5, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x1, 0xb, 0xa8, 0x66, 0x0, 0x5, 0x1, 0x0, @empty, @remote, {[@ra={0x94, 0x4, 0x1}, @generic={0x2, 0xa, "45b9afe20ee4a2c0"}, @generic={0x89, 0xd, "d581692ef3b270d7f86d86"}]}}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x9, 0x0, {0x1c, 0x4, 0x0, 0x17, 0x3b, 0x65, 0x7b98, 0x40, 0x2f, 0x4, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0x14, 0x91, 0x3, 0x2, [{@remote, 0x6558}, {@rand_addr=0x64010101, 0x9}]}, @rr={0x7, 0x3, 0x53}, @lsrr={0x83, 0x1b, 0x2d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast, @broadcast, @empty, @broadcast]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x53, 0x3, 0x3, [{@loopback, 0x7}, {@private=0xa010102, 0x6}, {@multicast2, 0x4}, {@local, 0xfffffffd}]}]}}}}}}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010003904ffffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="01980000131300001c0012800900010069706970000000000c00f9deba3194f042c50001557af69aab5d100b7a3fb2d570baf29a8ea122e5b17065fdcb04f12122e5b688fe3dcffa0bae70b9057b3acbd27700e6a96c3a17051f9e7239e0a581a3b037c09e3fc7a605dd3a2ba1d460b47405526b9b2e90ae408b6ff863026aef988d8a452bbee203a6fe2765ce6bfb9118e9499907cbd27a041d0646d3ba496289378fb3789ede7ede2de1dec28228d8f0b8dcee4e97163f2e96c6b61878396b47dc22af753eab75ee6b96"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) (async) 3.862923868s ago: executing program 1 (id=995): setns(0xc9, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0xffff, {0x0, 0x2, 0x0, 0x2}, {}, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24044085}, 0x2000800) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) memfd_secret(0x0) mount(&(0x7f0000000040)=@md0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='ocfs2\x00', 0x204001, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.750794986s ago: executing program 1 (id=996): writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4, 0x0, 0x4}) ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) 3.744187061s ago: executing program 1 (id=998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x6000840) r1 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}) r2 = socket$nl_route(0x10, 0x3, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x7, 0x7, 0x10, 0x80a, 0xffffffffffffffff, 0x81, '\x00', r3, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0xe}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x4, 0x2, 0x8, 0x1ff, 0x1a7, 0x8ce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0xfffffffc, 0xd1c8, 0x88c9, 0x1000, 0x7, 0x800, 0x8007, 0xc76, 0xdd, 0x386, 0x101, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0x5, 0x8, 0x932, 0x10000, 0x0, 0x7, 0x7, 0x401, 0xffffff4b, 0x7, 0x66c53844, 0xffffff80, 0x5, 0x9140, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x9b4c, 0x2, 0x5, 0x800, 0x5, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0x8001, 0x5, 0x8, 0xa2e, 0xd, 0x3c8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x7, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662e, 0x7, 0x5, 0x387, 0x400, 0x81, 0x0, 0xffff, 0xa60, 0x7ff, 0x8, 0x4, 0xf1, 0xffff, 0xa846, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x0, 0x7b, 0x400, 0xd33c, 0x8, 0x56, 0x3, 0x800, 0x7, 0x6, 0x2, 0x4, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x5, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x800, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x8000, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x101, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x50, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc5, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x4, 0x40, 0x18000000, 0xa, 0x5, 0x9, 0x0, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x8000, 0x1, 0x9, 0x7fffffff, 0x7, 0x5, 0x1, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0xfffffff7, 0x1000, 0x2, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x10004, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x0, 0x6, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x2, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x4, 0x7, 0x5, 0x4, 0x100, 0x1, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2, 0x9, 0x9, 0xd, 0x405, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0x7, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x5, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0xdd5, 0x80000000, 0x10000000, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x3, 0x1, 0x101, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x4, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0x5, 0x7f, 0x864, 0xfb, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x7, 0x3, 0x6, 0xd, 0x1, 0x42, 0x81, 0x2000004, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x98, 0x5, 0x1, 0x9, 0xfffffff6, {0x2, 0x2, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0xc4b2}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) write$tun(r0, &(0x7f0000000640)=ANY=[], 0x1aa) 3.576968452s ago: executing program 1 (id=1004): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000340)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@netfilter={0x7, 0x1, 0x331b}}, 0x20) socket$can_raw(0x1d, 0x3, 0x1) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) 3.468209237s ago: executing program 1 (id=1005): syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="120110927e3f31aca0914fd19e7303070101102505a8a440000102030109021b0001018780fc090400080200000009090501021000090305"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x25}, 0x10) writev(r1, &(0x7f0000000580)=[{&(0x7f00000002c0)="28988facbd40fc082370c4e7e401fa27776b65a831061a4825740569f3eb2f9697fbe400ad169ca7a844d014cd13257af27d3ea3cbf113454c370ddcd1706163a406327d3477c6ef4e407a547d00e3ace97ec27a97e5f8eb81f7b2ffd621ab905cae41024c9939d027ea67319cc9dabfcc44b478a30ca2c2e88b5e01bce62dadc79a06e0c5f3ce189bcd153f5b73cee76c6cd5e9bdbb1ca32d02cb1ae7d4faa1a0df87b045387584317113a2164b89e44810443c9f26267f3452263130adc81eb2f8", 0xc2}, {&(0x7f00000003c0)="08eb1db7f9dcea1901b870dba98ae5df33a844ed2e2c9ac7564951827741baf159551f3f8dcd6c8b5123e2945c0fda92fa979cba5613", 0x36}, {&(0x7f0000000500)="eddab7e0b09b830514bb4210a5eb05d23eb16c23e80c07633957a0787938307e48de0290a8909588a1389a84198bc275ce4b1e97e628e626bb982951f90d73739939", 0x42}], 0x3) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x0, 0x8001) syz_usb_ep_read(0xffffffffffffffff, 0x4, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r6) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20040044}, 0x24000010) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000000440)=0x80000005, &(0x7f00000000c0)=0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="e5f0a7ca7b907bcb386c08", @ANYRES16=r7, @ANYBLOB="02002abd7000ffdbdf252a000000060006000300000006000600030000000600040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x44084}, 0x40008c0) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="043406aa6597be17bc9b9d0aa28f049edaffaaaaaaaa10959e22118da905e4258ceb1b1e10035b8bafd30f27adc8797e68de75dae74b7e26f756b700bca57a0dc2d233aacd3af227f0aa5bd522c204c06703118a034a67528edf45b50ba6be334cb1b1f51a4a775317b758ba422672d27d6a6421402b063f856b48aa504aa5be9a5c7bf841bd0af7562e1e51a7f3da9f15bf7157bdf6ad7d3b7a1400e7c1eace2e6894083a6085829b5fe26c61d3aa7b86f2e5dfd79b0d6c080d94fac173013adb479f17452e4c6a92ee41746e5e9c7faa1d818108dcf125"], 0x9) syz_usb_ep_read(0xffffffffffffffff, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r4, 0x20, 0x1, 0x8, 0x200, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x8066, 0x0, 0x6e, 0x4, 0x0, @private=0xa010100, @broadcast}}}}) 2.996402314s ago: executing program 2 (id=1020): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002f00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x14) 602.103837ms ago: executing program 2 (id=1022): setns(0xc9, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x300) 587.741255ms ago: executing program 0 (id=1023): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x82a0}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x4}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x24048060) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r6) 518.455719ms ago: executing program 4 (id=1024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2004000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x64, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x10}}, 0xec}}, 0x0) 459.688048ms ago: executing program 2 (id=1025): writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4, 0x0, 0x4}) ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) 459.353654ms ago: executing program 4 (id=1026): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000600), 0x2008800, &(0x7f0000000640)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffe, 0x300040ac, 0x0, 0xffff, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) syz_clone3(&(0x7f0000000580)={0x365a64e647c54458, &(0x7f0000000140), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x3}, &(0x7f00000003c0)=""/217, 0xd9, &(0x7f00000004c0)=""/121, &(0x7f0000000540)=[r3], 0x1, {r0}}, 0x58) capget(&(0x7f00000006c0)={0x20071026, r4}, &(0x7f0000000700)={0xffff, 0x7, 0x2, 0x64, 0x3, 0x9}) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xa8f86, 0x1) r6 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) socket$inet(0x2, 0x1, 0x6) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e22, 0xeda7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r8, 0x101}, 0x8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r9, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 459.058042ms ago: executing program 0 (id=1027): r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x6, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000040)=[0x6, 0x446, 0x0, 0x3, 0x3, 0x3, 0x2d83fe85]) 456.133676ms ago: executing program 2 (id=1028): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x73, 0x400000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_open_dev$usbfs(&(0x7f0000000080), 0x8, 0x100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@bridge_delneigh={0x30, 0x1c, 0xc07, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, r6, 0x8, 0x10, 0xa}, [@NDA_DST_MAC={0xa}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 344.911876ms ago: executing program 0 (id=1029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x20, 0x1, 0x9, 0x801, 0x0, 0x0, {0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4000880) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000000)={0x0, "ea241af04c64a3157f9ccb1f1712df17"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0xfffe}) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000180)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xfffffffffffffffb, 0x3a, '\xa2%:', 0x3a, '', 0x3a, './dev/sda1', 0x3a, [0x43]}, 0x2e) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x4d, 0x0, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000014c0)={r3, 0xe0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000011c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001200)=[0x0], &(0x7f0000001240)=[0x0], 0x0, 0x7d, &(0x7f0000001280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001300), &(0x7f0000001340), 0x8, 0x3a, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000005000000000000000700000053768000100000009500002577fc2d89cf6342af9d17f7c1d60000000000"], &(0x7f0000001040)='syzkaller\x00', 0x10, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x2f, r7, 0x8, &(0x7f0000001140)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001180)={0x2, 0x8, 0x2}, 0x10, r8, r3, 0xa, &(0x7f0000001540)=[r3, r5, r3], &(0x7f0000001700)=[{0x2, 0x2, 0x7, 0x6}, {0x1, 0x1, 0x5, 0x4}, {0x4, 0x1, 0xe, 0x2}, {0x0, 0x4, 0x0, 0x9}, {0x1, 0x5, 0x5, 0x2}, {0x1, 0x5, 0x4, 0x4}, {0x0, 0x2, 0xa, 0x6}, {0x2, 0x4, 0x2, 0x4}, {0x2, 0x1, 0x10, 0x2}, {0x2, 0x4, 0x6, 0x6}], 0x10, 0x3}, 0x94) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000005c0)) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x7, 0xffffffff91020258, 0x200, 0x1, 0x4, 0x992, 0x0, 0x0, 0x124, 0x5}}, 0x50) r9 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r9, 0x2007ffb) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000002040)={r1, "f0a688fd53993d178708eca17b74ceaf"}) 269.6831ms ago: executing program 0 (id=1030): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) close(r3) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r13, 0x1, 0x70bd28, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x20008006) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000700)={&(0x7f0000000080), 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r13, 0x300, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd6e5}, {0x6, 0x11, 0x3ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x3861}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) 181.301225ms ago: executing program 0 (id=1031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x4000000) 181.003227ms ago: executing program 2 (id=1032): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x4000c3, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af33da4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5, 0x1e, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 128.840377ms ago: executing program 0 (id=1033): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) io_setup(0x3ff, &(0x7f0000000500)) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x5, {0x2f, 0x38, 0x5, 0x2, 0x0, 0x90, 0x4, 0x1000007d, 0x1}}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x240) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a300000000048000000030a01040000000000000000010000000900010073797a30000000000900030073797a31000000001400048008000140000000040800024000000064080007006e6174"], 0xdc}}, 0x40000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000080)={0xa1d4, 0xfffffffd, 0x2, 0x401, 0x4, 0x7d00}) 111.913253ms ago: executing program 2 (id=1034): syz_emit_ethernet(0x2e, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0a056020"], 0xd) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x901000) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x24}, r1}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0xfe0f}, 0x0) 0s ago: executing program 1 (id=1035): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) write(0xffffffffffffffff, &(0x7f0000000300)='pcspkr', 0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='0x1d6b', 0x6) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000b00), 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) (fail_nth: 7) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') kernel console output (not intermixed with test programs): xb0 [ 88.076440][ T7247] do_wp_page+0x1b15/0x45c0 [ 88.076465][ T7247] ? lock_acquire+0x1d1/0x380 [ 88.076482][ T7247] ? __pfx_do_wp_page+0x10/0x10 [ 88.076503][ T7247] ? do_raw_spin_lock+0x128/0x260 [ 88.076524][ T7247] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 88.076550][ T7247] __handle_mm_fault+0x1cd2/0x2f60 [ 88.076576][ T7247] ? lock_vma_under_rcu+0x11d/0x590 [ 88.076598][ T7247] ? __pfx___handle_mm_fault+0x10/0x10 [ 88.076624][ T7247] ? lock_vma_under_rcu+0x17c/0x590 [ 88.076667][ T7247] handle_mm_fault+0x363/0xa20 [ 88.076697][ T7247] do_user_addr_fault+0x59c/0x12f0 [ 88.076724][ T7247] exc_page_fault+0x6f/0xd0 [ 88.076745][ T7247] asm_exc_page_fault+0x26/0x30 [ 88.076762][ T7247] RIP: 0033:0x7f5d26f5df45 [ 88.076777][ T7247] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 88.076794][ T7247] RSP: 002b:00007f5d27efdde0 EFLAGS: 00010293 [ 88.076810][ T7247] RAX: 0000000000000008 RBX: 00007f5d27d57e20 RCX: 0000000000000000 [ 88.076821][ T7247] RDX: 0000000000000000 RSI: 00007f5d27032778 RDI: 00007f5d27d57e20 [ 88.076832][ T7247] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 88.076842][ T7247] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d27052491 [ 88.076852][ T7247] R13: ffffffffffffffe8 R14: 0000000000000058 R15: 00007f5d27032778 [ 88.076874][ T7247] [ 88.077058][ T7247] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 88.165276][ T42] audit: type=1400 audit(1789178972.952:517): avc: denied { getopt } for pid=7249 comm="syz.2.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.382054][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.475'. [ 88.570506][ T7265] netlink: 108 bytes leftover after parsing attributes in process `syz.1.478'. [ 88.578820][ T7266] FAULT_INJECTION: forcing a failure. [ 88.578820][ T7266] name failslab, interval 1, probability 0, space 0, times 0 [ 88.578850][ T7266] CPU: 2 UID: 0 PID: 7266 Comm: syz.2.477 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.578874][ T7266] Tainted: [L]=SOFTLOCKUP [ 88.578880][ T7266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.578889][ T7266] Call Trace: [ 88.578895][ T7266] [ 88.578902][ T7266] dump_stack_lvl+0x100/0x190 [ 88.578935][ T7266] should_fail_ex.cold+0x5/0xa [ 88.578962][ T7266] should_failslab+0xc2/0x120 [ 88.578985][ T7266] kmem_cache_alloc_noprof+0x92/0x6a0 [ 88.578997][ T7266] ? __mpol_dup+0x74/0x390 [ 88.579015][ T7266] __mpol_dup+0x74/0x390 [ 88.579030][ T7266] ? __pfx___mpol_dup+0x10/0x10 [ 88.579049][ T7266] __do_sys_set_mempolicy_home_node+0x324/0x710 [ 88.579070][ T7266] ? __pfx___do_sys_set_mempolicy_home_node+0x10/0x10 [ 88.579088][ T7266] ? __x64_sys_futex+0x34f/0x4d0 [ 88.579130][ T7266] ? __x64_sys_futex+0x358/0x4d0 [ 88.579164][ T7266] do_syscall_64+0x123/0x790 [ 88.579188][ T7266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.579209][ T7266] RIP: 0033:0x7f5d26f9e159 [ 88.579224][ T7266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.579238][ T7266] RSP: 002b:00007f5d27ebd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c2 [ 88.579251][ T7266] RAX: ffffffffffffffda RBX: 00007f5d27226180 RCX: 00007f5d26f9e159 [ 88.579259][ T7266] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffa000 [ 88.579265][ T7266] RBP: 00007f5d2703503b R08: 0000000000000000 R09: 0000000000000000 [ 88.579272][ T7266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.579279][ T7266] R13: 00007f5d27226218 R14: 00007f5d27226180 R15: 00007ffd72f0e4e8 [ 88.579293][ T7266] [ 88.597519][ T42] audit: type=1400 audit(1789178973.382:518): avc: denied { search } for pid=7267 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.602421][ T6086] e1000 0000:00:06.0 eth0: Reset adapter [ 88.661282][ T7263] /dev/sr0: Can't open blockdev [ 88.687540][ T7274] syz.1.479 uses obsolete (PF_INET,SOCK_PACKET) [ 88.754948][ T7243] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 88.782216][ T7262] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 89.008000][ T6086] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 89.008901][ T6086] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 89.009855][ T6086] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 89.010863][ T6086] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 89.010880][ T6086] rtc rtc0: __rtc_set_alarm: err=-22 [ 89.243837][ T9] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 91.010635][ T6086] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 94.245434][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 94.245453][ T42] audit: type=1400 audit(1789178979.032:543): avc: denied { write } for pid=7327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.309030][ T42] audit: type=1400 audit(1789178979.092:544): avc: denied { write } for pid=7330 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.506486][ T42] audit: type=1400 audit(1789178982.292:545): avc: denied { write } for pid=7334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.567850][ T42] audit: type=1400 audit(1789178982.352:546): avc: denied { write } for pid=7337 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.317880][ T7343] netlink: 108 bytes leftover after parsing attributes in process `syz.2.488'. [ 98.370385][ T5738] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.372343][ T5738] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.373469][ T5738] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.376480][ T5738] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.378202][ T5738] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.426923][ T42] audit: type=1400 audit(1789178983.212:547): avc: denied { setopt } for pid=7340 comm="syz.0.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.637508][ T42] audit: type=1400 audit(1789178983.422:548): avc: denied { ioctl } for pid=7370 comm="syz.2.493" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x4d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 98.667180][ T7371] hfs: unable to load iocharset "io#harset" [ 98.842532][ T7384] FAULT_INJECTION: forcing a failure. [ 98.842532][ T7384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.842562][ T7384] CPU: 3 UID: 0 PID: 7384 Comm: syz.2.495 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.842602][ T7384] Tainted: [L]=SOFTLOCKUP [ 98.842608][ T7384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.842618][ T7384] Call Trace: [ 98.842644][ T7384] [ 98.842667][ T7384] dump_stack_lvl+0x100/0x190 [ 98.842699][ T7384] should_fail_ex.cold+0x5/0xa [ 98.842742][ T7384] _copy_to_user+0x32/0xd0 [ 98.842764][ T7384] simple_read_from_buffer+0xcb/0x170 [ 98.842789][ T7384] proc_fail_nth_read+0x1af/0x230 [ 98.842813][ T7384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.842837][ T7384] ? rw_verify_area+0xce/0x6d0 [ 98.842864][ T7384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.842885][ T7384] vfs_read+0x1e4/0xb40 [ 98.842903][ T7384] ? lock_acquire+0x1d1/0x380 [ 98.842921][ T7384] ? __fget_files+0x34/0x3d0 [ 98.842943][ T7384] ? __pfx_vfs_read+0x10/0x10 [ 98.842959][ T7384] ? find_held_lock+0x2b/0x80 [ 98.842984][ T7384] ? __fget_files+0x215/0x3d0 [ 98.843010][ T7384] ? __fget_files+0x21f/0x3d0 [ 98.843038][ T7384] ksys_read+0x12a/0x250 [ 98.843080][ T7384] ? __pfx_ksys_read+0x10/0x10 [ 98.843106][ T7384] do_syscall_64+0x123/0x790 [ 98.843133][ T7384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.843153][ T7384] RIP: 0033:0x7f5d26f5e98e [ 98.843168][ T7384] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 98.843185][ T7384] RSP: 002b:00007f5d27efefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 98.843203][ T7384] RAX: ffffffffffffffda RBX: 00007f5d27eff6c0 RCX: 00007f5d26f5e98e [ 98.843215][ T7384] RDX: 000000000000000f RSI: 00007f5d27eff0a0 RDI: 0000000000000004 [ 98.843226][ T7384] RBP: 00007f5d27eff090 R08: 0000000000000000 R09: 0000000000000000 [ 98.843238][ T7384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.843249][ T7384] R13: 00007f5d27226038 R14: 00007f5d27225fa0 R15: 00007ffd72f0e4e8 [ 98.843275][ T7384] [ 98.849542][ T7350] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.849585][ T7350] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.849872][ T7350] bridge_slave_0: entered allmulticast mode [ 98.850579][ T7350] bridge_slave_0: entered promiscuous mode [ 98.852096][ T7350] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.852162][ T7350] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.852218][ T7350] bridge_slave_1: entered allmulticast mode [ 98.855013][ T7350] bridge_slave_1: entered promiscuous mode [ 98.873215][ T7350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.876334][ T7350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.899156][ T7350] team0: Port device team_slave_0 added [ 98.901121][ T7350] team0: Port device team_slave_1 added [ 98.922765][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.922779][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.922797][ T7350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.924321][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.924332][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.924345][ T7350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.925854][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 98.940786][ T7387] batadv_slave_0: entered promiscuous mode [ 98.942104][ T7387] macvlan2: entered allmulticast mode [ 98.942118][ T7387] batadv_slave_0: entered allmulticast mode [ 98.972616][ T7350] hsr_slave_0: entered promiscuous mode [ 98.973274][ T7350] hsr_slave_1: entered promiscuous mode [ 98.973760][ T7350] debugfs: 'hsr0' already exists in 'hsr' [ 98.973774][ T7350] Cannot create hsr debugfs directory [ 98.985002][ T7392] netlink: 108 bytes leftover after parsing attributes in process `syz.2.497'. [ 99.035959][ T42] audit: type=1400 audit(1789178983.822:549): avc: denied { append } for pid=7393 comm="syz.2.498" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 99.036008][ T42] audit: type=1400 audit(1789178983.822:550): avc: denied { open } for pid=7393 comm="syz.2.498" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 99.036506][ T7394] random: crng reseeded on system resumption [ 99.046933][ T42] audit: type=1400 audit(1789178983.832:551): avc: denied { ioctl } for pid=7393 comm="syz.2.498" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 99.168021][ T7350] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.187288][ T7350] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.188055][ T7350] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.200019][ T7348] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 99.203337][ T7350] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.204151][ T7350] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.217609][ T7350] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.218358][ T7350] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.237693][ T7350] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.272677][ T42] audit: type=1400 audit(1789178984.062:552): avc: denied { create } for pid=7396 comm="syz.2.499" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.273045][ T42] audit: type=1400 audit(1789178984.062:553): avc: denied { map } for pid=7396 comm="syz.2.499" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.275453][ T42] audit: type=1400 audit(1789178984.062:554): avc: denied { read write } for pid=7396 comm="syz.2.499" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.296856][ T7404] comedi comedi3: das16m1: I/O base address not correctly aligned [ 99.297794][ T42] audit: type=1400 audit(1789178984.072:555): avc: denied { mounton } for pid=7396 comm="syz.2.499" path="/153/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 99.300050][ T7404] i2c i2c-0: new_device: Missing parameters [ 99.318914][ T7350] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.319005][ T7350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.320321][ T7350] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.320413][ T7350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.406616][ T7418] netlink: 108 bytes leftover after parsing attributes in process `syz.2.505'. [ 99.416484][ T7350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.444882][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.448533][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.468964][ T7350] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.491627][ T7427] netlink: 72 bytes leftover after parsing attributes in process `syz.1.506'. [ 99.522841][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.522895][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.528737][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.529757][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.632809][ T7426] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 99.853856][ T7451] netlink: 108 bytes leftover after parsing attributes in process `syz.0.514'. [ 99.934472][ T7350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.006590][ T7464] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 100.007178][ T42] audit: type=1400 audit(1789178984.792:556): avc: denied { map } for pid=7463 comm="syz.1.517" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 100.009485][ T42] audit: type=1400 audit(1789178984.792:557): avc: denied { execute } for pid=7463 comm="syz.1.517" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 100.013140][ T851] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 100.014676][ T851] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 100.017401][ T851] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 100.018350][ T851] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 100.018368][ T851] rtc rtc0: __rtc_set_alarm: err=-22 [ 100.168836][ T7350] veth0_vlan: entered promiscuous mode [ 100.181021][ T7350] veth1_vlan: entered promiscuous mode [ 100.204389][ T7350] veth0_macvtap: entered promiscuous mode [ 100.208067][ T7350] veth1_macvtap: entered promiscuous mode [ 100.215948][ T7350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.222399][ T7350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.227899][ T7469] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 100.291744][ T5803] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.292448][ T5803] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.292731][ T5803] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.319590][ T5803] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.328578][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.328602][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.354662][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.354682][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.373649][ T42] audit: type=1400 audit(1789178985.162:558): avc: denied { mounton } for pid=7350 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 100.375001][ T42] audit: type=1400 audit(1789178985.162:559): avc: denied { mounton } for pid=7350 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 100.383231][ T7483] netlink: 60 bytes leftover after parsing attributes in process `syz.0.523'. [ 100.383708][ T7483] netlink: 60 bytes leftover after parsing attributes in process `syz.0.523'. [ 100.384173][ T7483] netlink: 500 bytes leftover after parsing attributes in process `syz.0.523'. [ 100.385133][ T7483] netlink: 84 bytes leftover after parsing attributes in process `syz.0.523'. [ 100.448681][ T7487] FAULT_INJECTION: forcing a failure. [ 100.448681][ T7487] name failslab, interval 1, probability 0, space 0, times 0 [ 100.448702][ T7487] CPU: 0 UID: 0 PID: 7487 Comm: syz.4.489 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.448717][ T7487] Tainted: [L]=SOFTLOCKUP [ 100.448721][ T7487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.448728][ T7487] Call Trace: [ 100.448732][ T7487] [ 100.448737][ T7487] dump_stack_lvl+0x100/0x190 [ 100.448757][ T7487] should_fail_ex.cold+0x5/0xa [ 100.448774][ T7487] should_failslab+0xc2/0x120 [ 100.448789][ T7487] __kmalloc_cache_noprof+0x91/0x6d0 [ 100.448806][ T7487] ? rcu_is_watching+0x13/0xc0 [ 100.448820][ T7487] ? vhost_task_create+0xee/0x370 [ 100.448838][ T7487] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 100.448855][ T7487] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 100.448872][ T7487] vhost_task_create+0xee/0x370 [ 100.448890][ T7487] ? __pfx_vhost_task_create+0x10/0x10 [ 100.448911][ T7487] ? __pfx_vhost_task_fn+0x10/0x10 [ 100.448929][ T7487] ? register_lock_class+0x3f/0x7b0 [ 100.448941][ T7487] ? rcu_is_watching+0x13/0xc0 [ 100.448956][ T7487] ? trace_contention_end+0x126/0x160 [ 100.448971][ T7487] kvm_mmu_post_init_vm+0x1b3/0x360 [ 100.448985][ T7487] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 100.449000][ T7487] ? __pfx___mutex_lock+0x10/0x10 [ 100.449014][ T7487] ? kasan_quarantine_put+0x104/0x240 [ 100.449045][ T7487] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 100.449064][ T7487] ? lock_acquire+0x1d1/0x380 [ 100.449081][ T7487] ? do_raw_write_lock+0x11e/0x260 [ 100.449100][ T7487] ? find_held_lock+0x2b/0x80 [ 100.449124][ T7487] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 100.449146][ T7487] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 100.449171][ T7487] kvm_vcpu_ioctl+0x730/0x1700 [ 100.449195][ T7487] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 100.449220][ T7487] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 100.449241][ T7487] ? do_vfs_ioctl+0x226/0x13e0 [ 100.449260][ T7487] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 100.449272][ T7487] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 100.449287][ T7487] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 100.449301][ T7487] ? __fget_files+0x34/0x3d0 [ 100.449321][ T7487] ? selinux_file_ioctl+0x13b/0x290 [ 100.449332][ T7487] ? selinux_file_ioctl+0xb6/0x290 [ 100.449344][ T7487] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 100.449360][ T7487] __x64_sys_ioctl+0x18e/0x210 [ 100.449372][ T7487] do_syscall_64+0x123/0x790 [ 100.449388][ T7487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.449400][ T7487] RIP: 0033:0x7f89afb9e159 [ 100.449410][ T7487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.449421][ T7487] RSP: 002b:00007f89b0b26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.449432][ T7487] RAX: ffffffffffffffda RBX: 00007f89afe25fa0 RCX: 00007f89afb9e159 [ 100.449439][ T7487] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 100.449446][ T7487] RBP: 00007f89b0b26090 R08: 0000000000000000 R09: 0000000000000000 [ 100.449452][ T7487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.449459][ T7487] R13: 00007f89afe26038 R14: 00007f89afe25fa0 R15: 00007ffe9a7b7af8 [ 100.449473][ T7487] [ 100.456287][ T5738] Bluetooth: hci3: command tx timeout [ 100.557203][ T42] audit: type=1400 audit(1789178985.342:560): avc: denied { call } for pid=7491 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 100.630274][ T7497] nfs: Bad value for 'port' [ 100.764475][ T7495] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 100.849686][ T7509] program syz.2.531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.013372][ T851] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 101.014118][ T851] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 101.014915][ T851] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 101.015688][ T851] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 101.015699][ T851] rtc rtc0: __rtc_set_alarm: err=-22 [ 101.042874][ T42] audit: type=1400 audit(1789178985.832:561): avc: denied { watch watch_reads } for pid=7512 comm="syz.0.530" path="/proc/406/task" dev="proc" ino=21505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 101.150751][ T5833] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 101.181723][ T7524] netlink: zone id is out of range [ 101.181743][ T7524] netlink: zone id is out of range [ 101.181750][ T7524] netlink: zone id is out of range [ 101.181757][ T7524] netlink: zone id is out of range [ 101.181763][ T7524] netlink: zone id is out of range [ 101.181771][ T7524] netlink: zone id is out of range [ 101.182074][ T7524] netlink: zone id is out of range [ 101.182084][ T7524] netlink: zone id is out of range [ 101.182091][ T7524] netlink: zone id is out of range [ 101.182098][ T7524] netlink: zone id is out of range [ 101.267819][ T7524] kvm: pic: non byte write [ 101.427531][ T7528] FAULT_INJECTION: forcing a failure. [ 101.427531][ T7528] name failslab, interval 1, probability 0, space 0, times 0 [ 101.427577][ T7528] CPU: 0 UID: 0 PID: 7528 Comm: syz.1.536 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.427613][ T7528] Tainted: [L]=SOFTLOCKUP [ 101.427621][ T7528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.427633][ T7528] Call Trace: [ 101.427644][ T7528] [ 101.427652][ T7528] dump_stack_lvl+0x100/0x190 [ 101.427694][ T7528] should_fail_ex.cold+0x5/0xa [ 101.427722][ T7528] should_failslab+0xc2/0x120 [ 101.427750][ T7528] __kmalloc_noprof+0xfc/0x840 [ 101.427772][ T7528] ? constrain_params_by_rules+0x175/0xd20 [ 101.427810][ T7528] constrain_params_by_rules+0x175/0xd20 [ 101.427837][ T7528] ? stack_depot_save_flags+0x27/0x9f0 [ 101.427872][ T7528] ? __kasan_kmalloc+0xaa/0xb0 [ 101.427893][ T7528] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 101.427922][ T7528] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 101.427944][ T7528] ? snd_pcm_oss_release+0x238/0x300 [ 101.427969][ T7528] ? __fput+0x3ff/0xb50 [ 101.427993][ T7528] ? task_work_run+0x150/0x240 [ 101.428024][ T7528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.428058][ T7528] ? rcu_is_watching+0x13/0xc0 [ 101.428085][ T7528] ? snd_interval_refine+0x2d0/0x580 [ 101.428108][ T7528] snd_pcm_hw_refine+0x82a/0xb40 [ 101.428137][ T7528] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 101.428166][ T7528] ? kasan_save_track+0x14/0x30 [ 101.428186][ T7528] ? __kasan_kmalloc+0xaa/0xb0 [ 101.428209][ T7528] ? __asan_memset+0x23/0x50 [ 101.428227][ T7528] ? _snd_pcm_hw_param_min+0x1ea/0x670 [ 101.428255][ T7528] snd_pcm_oss_change_params_locked+0x2594/0x39f0 [ 101.428295][ T7528] ? snd_pcm_oss_sync+0x243/0x840 [ 101.428322][ T7528] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 101.428352][ T7528] ? __pfx___mutex_lock+0x10/0x10 [ 101.428402][ T7528] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 101.428429][ T7528] snd_pcm_oss_sync+0x265/0x840 [ 101.428458][ T7528] snd_pcm_oss_release+0x238/0x300 [ 101.428484][ T7528] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 101.428509][ T7528] __fput+0x3ff/0xb50 [ 101.428539][ T7528] task_work_run+0x150/0x240 [ 101.428568][ T7528] ? __pfx_task_work_run+0x10/0x10 [ 101.428595][ T7528] ? __x64_sys_openat+0x12d/0x210 [ 101.428657][ T7528] exit_to_user_mode_loop+0x1d8/0x700 [ 101.428679][ T7528] ? rcu_is_watching+0x13/0xc0 [ 101.428708][ T7528] do_syscall_64+0x661/0x790 [ 101.428735][ T7528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.428753][ T7528] RIP: 0033:0x7ff34e79e159 [ 101.428770][ T7528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.428788][ T7528] RSP: 002b:00007ff34f648028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.428814][ T7528] RAX: ffffffffffffffea RBX: 00007ff34ea25fa0 RCX: 00007ff34e79e159 [ 101.428827][ T7528] RDX: 00000000000a6f81 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 101.428840][ T7528] RBP: 00007ff34e83503b R08: 0000000000000000 R09: 0000000000000000 [ 101.428853][ T7528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.428866][ T7528] R13: 00007ff34ea26038 R14: 00007ff34ea25fa0 R15: 00007ffec5f0be08 [ 101.428895][ T7528] [ 101.914158][ T7551] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 102.014572][ T851] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 102.015282][ T851] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 102.019089][ T851] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 102.023191][ T851] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 102.023206][ T851] rtc rtc0: __rtc_set_alarm: err=-22 [ 102.148049][ T7572] hsr_slave_0: left promiscuous mode [ 102.149015][ T7572] hsr_slave_1: left promiscuous mode [ 102.204642][ T7572] bond0: entered promiscuous mode [ 102.205757][ T7572] bond0: left promiscuous mode [ 102.663585][ T7587] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 102.779485][ T5738] Bluetooth: hci3: command tx timeout [ 103.014009][ T5877] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 103.014910][ T5877] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 103.016439][ T5877] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 103.017351][ T5877] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 103.017368][ T5877] rtc rtc0: __rtc_set_alarm: err=-22 [ 103.644936][ T7612] fuse: Bad value for 'fd' [ 103.659408][ T7611] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 103.693804][ T7619] __nla_validate_parse: 7 callbacks suppressed [ 103.693818][ T7619] netlink: 108 bytes leftover after parsing attributes in process `syz.2.568'. [ 103.730665][ T5881] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 103.737623][ T7620] syz.4.567 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 103.737662][ T7620] CPU: 0 UID: 0 PID: 7620 Comm: syz.4.567 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.737686][ T7620] Tainted: [L]=SOFTLOCKUP [ 103.737693][ T7620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.737703][ T7620] Call Trace: [ 103.737709][ T7620] [ 103.737716][ T7620] dump_stack_lvl+0x100/0x190 [ 103.737748][ T7620] dump_header+0xfb/0x606 [ 103.737772][ T7620] oom_kill_process.cold+0xd/0x380 [ 103.737803][ T7620] out_of_memory+0x340/0x14f0 [ 103.737834][ T7620] ? __pfx_out_of_memory+0x10/0x10 [ 103.737867][ T7620] mem_cgroup_out_of_memory+0xc6/0x130 [ 103.737890][ T7620] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 103.737909][ T7620] ? find_held_lock+0x2b/0x80 [ 103.737942][ T7620] ? do_raw_spin_unlock+0x145/0x1e0 [ 103.737968][ T7620] ? _raw_spin_unlock+0x28/0x50 [ 103.737994][ T7620] try_charge_memcg+0x783/0xf60 [ 103.738027][ T7620] ? __pfx_try_charge_memcg+0x10/0x10 [ 103.738054][ T7620] ? find_held_lock+0x2b/0x80 [ 103.738079][ T7620] ? rcu_read_unlock+0x17/0x60 [ 103.738105][ T7620] ? rcu_read_unlock+0x17/0x60 [ 103.738141][ T7620] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 103.738177][ T7620] ? kasan_unpoison+0x27/0x60 [ 103.738195][ T7620] __kmalloc_noprof+0x653/0x840 [ 103.738212][ T7620] ? __register_sysctl_table+0xac/0x1650 [ 103.738245][ T7620] __register_sysctl_table+0xac/0x1650 [ 103.738275][ T7620] ? lock_acquire+0x1d1/0x380 [ 103.738297][ T7620] ? __pfx___register_sysctl_table+0x10/0x10 [ 103.738325][ T7620] ? is_module_address+0x5f/0xf0 [ 103.738348][ T7620] ? is_module_address+0x5f/0xf0 [ 103.738378][ T7620] register_net_sysctl_sz+0x325/0x420 [ 103.738414][ T7620] __devinet_sysctl_register+0x1b9/0x360 [ 103.738443][ T7620] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 103.738473][ T7620] ? __asan_memcpy+0x3c/0x60 [ 103.738495][ T7620] devinet_init_net+0x334/0x8d0 [ 103.738521][ T7620] ? __pfx_devinet_init_net+0x10/0x10 [ 103.738545][ T7620] ops_init+0x1e2/0x5f0 [ 103.738572][ T7620] setup_net+0x118/0x3a0 [ 103.738594][ T7620] ? __pfx_setup_net+0x10/0x10 [ 103.738640][ T7620] copy_net_ns+0x345/0x7a0 [ 103.738668][ T7620] create_new_namespaces+0x3ea/0xac0 [ 103.738697][ T7620] unshare_nsproxy_namespaces+0xf2/0x220 [ 103.738723][ T7620] ksys_unshare+0x4a2/0xa70 [ 103.738747][ T7620] ? __pfx_ksys_unshare+0x10/0x10 [ 103.738780][ T7620] __x64_sys_unshare+0x31/0x40 [ 103.738809][ T7620] do_syscall_64+0x123/0x790 [ 103.738837][ T7620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.738857][ T7620] RIP: 0033:0x7f89afb9e159 [ 103.738875][ T7620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.738893][ T7620] RSP: 002b:00007f89b0b05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 103.738914][ T7620] RAX: ffffffffffffffda RBX: 00007f89afe26090 RCX: 00007f89afb9e159 [ 103.738926][ T7620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 103.738938][ T7620] RBP: 00007f89afc3503b R08: 0000000000000000 R09: 0000000000000000 [ 103.738950][ T7620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.738962][ T7620] R13: 00007f89afe26128 R14: 00007f89afe26090 R15: 00007ffe9a7b7af8 [ 103.738990][ T7620] [ 103.746649][ T7620] memory: usage 92kB, limit 96kB, failcnt 50 [ 103.746661][ T7620] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 103.746672][ T7620] kmem: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 103.746681][ T7620] Memory cgroup stats for /syz4/test: [ 103.747076][ T7620] cache 0 [ 103.747087][ T7620] rss 0 [ 103.747095][ T7620] rss_huge 0 [ 103.747102][ T7620] shmem 0 [ 103.747109][ T7620] mapped_file 0 [ 103.747116][ T7620] dirty 0 [ 103.747123][ T7620] writeback 0 [ 103.747130][ T7620] workingset_refault_anon 0 [ 103.747137][ T7620] workingset_refault_file 0 [ 103.747144][ T7620] swap 0 [ 103.747149][ T7620] swapcached 0 [ 103.747155][ T7620] pgpgin 0 [ 103.747161][ T7620] pgpgout 0 [ 103.747169][ T7620] pgfault 0 [ 103.747176][ T7620] pgmajfault 0 [ 103.747181][ T7620] inactive_anon 0 [ 103.747188][ T7620] active_anon 0 [ 103.747194][ T7620] inactive_file 0 [ 103.747201][ T7620] active_file 0 [ 103.747207][ T7620] unevictable 0 [ 103.747214][ T7620] hierarchical_memory_limit 98304 [ 103.747221][ T7620] hierarchical_memsw_limit 9223372036854771712 [ 103.747228][ T7620] total_cache 0 [ 103.747235][ T7620] total_rss 0 [ 103.747244][ T7620] total_rss_huge 0 [ 103.747251][ T7620] total_shmem 0 [ 103.747256][ T7620] total_mapped_file 0 [ 103.747263][ T7620] total_dirty 0 [ 103.747269][ T7620] total_writeback 0 [ 103.747277][ T7620] total_workingset_refault_anon 0 [ 103.747285][ T7620] total_workingset_refault_file 0 [ 103.747293][ T7620] total_swap 0 [ 103.747301][ T7620] total_swapcached 0 [ 103.747308][ T7620] total_pgpgin 0 [ 103.747314][ T7620] total_pgpgout 0 [ 103.747321][ T7620] total_pgfault 0 [ 103.747327][ T7620] total_pgmajfault 0 [ 103.747333][ T7620] total_inactive_anon 0 [ 103.747340][ T7620] total_active_anon 0 [ 103.747347][ T7620] total_inactive_file 0 [ 103.747357][ T7620] total_active_file 0 [ 103.747363][ T7620] total_unevictable 0 [ 103.747369][ T7620] anon_cost 0 [ 103.747376][ T7620] file_cost 0 [ 103.747384][ T7620] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.567,pid=7614,uid=0 [ 103.749640][ T7620] Memory cgroup out of memory: Killed process 7614 (syz.4.567) total-vm:102384kB, anon-rss:1428kB, file-rss:23136kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 103.771307][ T7624] netlink: 72 bytes leftover after parsing attributes in process `syz.2.570'. [ 103.850653][ T7627] netlink: 108 bytes leftover after parsing attributes in process `syz.4.571'. [ 103.884096][ T5881] usb 6-1: not running at top speed; connect to a high speed hub [ 103.884116][ T5881] usb 6-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=c7.fd [ 103.884923][ T5881] usb 6-1: config 8 has an invalid interface number: 168 but max is 1 [ 103.884938][ T5881] usb 6-1: config 8 has an invalid interface number: 79 but max is 1 [ 103.884952][ T5881] usb 6-1: config 8 has an invalid interface number: 21 but max is 1 [ 103.884967][ T5881] usb 6-1: config 8 has 3 interfaces, different from the descriptor's value: 2 [ 103.884982][ T5881] usb 6-1: config 8 has no interface number 0 [ 103.884994][ T5881] usb 6-1: config 8 has no interface number 1 [ 103.885009][ T5881] usb 6-1: config 8 has no interface number 2 [ 103.885051][ T5881] usb 6-1: config 8 interface 168 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.885074][ T5881] usb 6-1: too many endpoints for config 8 interface 79 altsetting 52: 105, using maximum allowed: 30 [ 103.885118][ T5881] usb 6-1: config 8 interface 79 altsetting 52 has an invalid descriptor for endpoint zero, skipping [ 103.885137][ T5881] usb 6-1: config 8 interface 79 altsetting 52 has 1 endpoint descriptor, different from the interface descriptor's value: 105 [ 103.885163][ T5881] usb 6-1: config 8 interface 21 altsetting 2 endpoint 0x9 has invalid maxpacket 68, setting to 64 [ 103.885176][ T5881] usb 6-1: config 8 interface 21 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 103.885187][ T5881] usb 6-1: config 8 interface 21 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 103.885198][ T5881] usb 6-1: config 8 interface 168 has no altsetting 0 [ 103.885207][ T5881] usb 6-1: config 8 interface 79 has no altsetting 0 [ 103.885216][ T5881] usb 6-1: config 8 interface 21 has no altsetting 0 [ 103.887001][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.887016][ T5881] usb 6-1: Product: 방箚ꡅⴵ妈뵷á”淳౰ꅭ麃裫輀韙啘검㮟龄٨诋캷裠ç°é„¹ã°•í‡ˆë–•îž‘裢뛾橠꨻⡼ [ 103.887051][ T5881] usb 6-1: Manufacturer: Ч [ 103.887058][ T5881] usb 6-1: SerialNumber: 쪽葤쳟í§æ¬…딾äžá´€æ¨³ï¦²á¢©êˆ†èã¯ã”ƒë¬Œà¦¸íŒ­æ§šî¸œâ«Šî®²â†€á¦¹ì¤˜â­ãººäµ°êˆ©â¥ç“®í‹²ä¶»ç‡™âˆ£ç…›ã¤ê’㶈퀄襊㦒㳤ᜣ鱠骋쫭㿴닢鷦㣦慵ꮔîœé´¡ä´¿å¸šâ™ë…¬á¿î‡žá¸™ê²½æ¬‹î£‘ܽ൲є笅첱᪢ࢽ藇 [ 103.889995][ T7629] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 104.002532][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 104.004685][ T6086] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 104.005615][ T6086] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 104.009830][ T6086] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 104.010698][ T6086] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 104.010709][ T6086] rtc rtc0: __rtc_set_alarm: err=-22 [ 104.114589][ T7641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.114888][ T7641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.123365][ T5881] iowarrior 6-1:8.168: no interrupt-in endpoint found [ 104.128090][ T5881] iowarrior 6-1:8.79: no interrupt-in endpoint found [ 104.130738][ T5881] iowarrior 6-1:8.21: no interrupt-in endpoint found [ 104.133339][ T5881] usb 6-1: USB disconnect, device number 6 [ 104.163868][ T7640] fuse: Bad value for 'fd' [ 104.169921][ T7638] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 104.202123][ T7647] netlink: 108 bytes leftover after parsing attributes in process `syz.0.577'. [ 104.202486][ T7649] FAULT_INJECTION: forcing a failure. [ 104.202486][ T7649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.202511][ T7649] CPU: 1 UID: 0 PID: 7649 Comm: syz.4.578 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.202531][ T7649] Tainted: [L]=SOFTLOCKUP [ 104.202536][ T7649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.202545][ T7649] Call Trace: [ 104.202563][ T7649] [ 104.202569][ T7649] dump_stack_lvl+0x100/0x190 [ 104.202596][ T7649] should_fail_ex.cold+0x5/0xa [ 104.202618][ T7649] strncpy_from_user+0x3b/0x2d0 [ 104.202633][ T7649] ? get_pid_task+0x106/0x250 [ 104.202655][ T7649] path_setxattrat+0x127/0x3b0 [ 104.202741][ T7649] ? __pfx_path_setxattrat+0x10/0x10 [ 104.202770][ T7649] ? ksys_write+0x190/0x250 [ 104.202786][ T7649] ? ksys_write+0x190/0x250 [ 104.202818][ T7649] ? fput+0x7c/0x100 [ 104.202838][ T7649] ? ksys_write+0x1ac/0x250 [ 104.202854][ T7649] ? __pfx_ksys_write+0x10/0x10 [ 104.202875][ T7649] __x64_sys_setxattr+0xc6/0x140 [ 104.202896][ T7649] ? do_syscall_64+0xae/0x790 [ 104.202914][ T7649] ? lockdep_hardirqs_on+0x7d/0x110 [ 104.202928][ T7649] do_syscall_64+0x123/0x790 [ 104.202943][ T7649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.202955][ T7649] RIP: 0033:0x7f89afb9e159 [ 104.202965][ T7649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.202976][ T7649] RSP: 002b:00007f89b0b26028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 104.202989][ T7649] RAX: ffffffffffffffda RBX: 00007f89afe25fa0 RCX: 00007f89afb9e159 [ 104.202996][ T7649] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 00002000000001c0 [ 104.203003][ T7649] RBP: 00007f89b0b26090 R08: 0000000000000000 R09: 0000000000000000 [ 104.203009][ T7649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.203016][ T7649] R13: 00007f89afe26038 R14: 00007f89afe25fa0 R15: 00007ffe9a7b7af8 [ 104.203051][ T7649] [ 104.233095][ T7653] netlink: 'syz.0.579': attribute type 13 has an invalid length. [ 104.235352][ T7652] netlink: 108 bytes leftover after parsing attributes in process `syz.4.580'. [ 104.491112][ T7669] netlink: 108 bytes leftover after parsing attributes in process `syz.2.587'. [ 104.507782][ T7663] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 104.525120][ T7674] usb usb8: usbfs: process 7674 (syz.2.589) did not claim interface 0 before use [ 104.548799][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 104.548817][ T42] audit: type=1400 audit(1789178989.332:572): avc: denied { append } for pid=7675 comm="syz.0.590" name="comedi3" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.553336][ T7677] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200080 (ahci[0000:00:1f.2]) [ 104.577885][ T42] audit: type=1400 audit(1789178989.362:573): avc: denied { ioctl } for pid=7670 comm="syz.4.588" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=22860 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 104.607945][ T7682] netlink: 108 bytes leftover after parsing attributes in process `syz.0.591'. [ 104.631887][ T7671] netlink: 'syz.4.588': attribute type 7 has an invalid length. [ 104.677670][ T7693] netlink: 72 bytes leftover after parsing attributes in process `syz.1.593'. [ 104.756715][ T42] audit: type=1326 audit(1789178989.542:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.0.595" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5437b9e159 code=0x0 [ 104.849591][ T5738] Bluetooth: hci3: command tx timeout [ 104.930154][ T25] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 105.014832][ T5877] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 105.015822][ T5877] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 105.016731][ T5877] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 105.017649][ T5877] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 105.017666][ T5877] rtc rtc0: __rtc_set_alarm: err=-22 [ 105.079517][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 105.081819][ T25] usb 7-1: unable to get BOS descriptor or descriptor too short [ 105.081866][ T25] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 105.086030][ T25] usb 7-1: string descriptor 0 read error: -22 [ 105.086137][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.093386][ T25] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 105.093409][ T25] dw2102: su3000_power_ctrl: 1, initialized 0 [ 105.093697][ T25] dvb-usb: bulk message failed: -22 (2/0) [ 105.100456][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.101533][ T25] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 105.101558][ T25] usb 7-1: media controller created [ 105.101744][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 105.101753][ T25] dw2102: i2c transfer failed. [ 105.101769][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 105.101775][ T25] dw2102: i2c transfer failed. [ 105.101781][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 105.101787][ T25] dw2102: i2c transfer failed. [ 105.101792][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 105.101798][ T25] dw2102: i2c transfer failed. [ 105.101804][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 105.101810][ T25] dw2102: i2c transfer failed. [ 105.101815][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 105.101821][ T25] dw2102: i2c transfer failed. [ 105.101825][ T25] dvb-usb: MAC address: 02:02:02:02:02:02 [ 105.116855][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.140636][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 105.140656][ T25] dw2102: command 0x0e transfer failed. [ 105.140663][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 105.140681][ T25] dw2102: command 0x0e transfer failed. [ 105.321963][ T7697] syzkaller1: entered promiscuous mode [ 105.321988][ T7697] syzkaller1: entered allmulticast mode [ 105.331858][ T7697] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 105.337519][ T7697] bond2: (slave lo): Enslaving as an active interface with an up link [ 105.449506][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 105.449529][ T25] dw2102: command 0x0e transfer failed. [ 105.449536][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 105.449548][ T25] dw2102: command 0x0e transfer failed. [ 105.449554][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 105.449563][ T25] dw2102: command 0x51 transfer failed. [ 105.453743][ T7697] dvb-usb: bulk message failed: -22 (4/0) [ 105.453764][ T7697] dw2102: i2c transfer failed. [ 105.474915][ T25] DVB: Unable to find symbol ds3000_attach() [ 105.474929][ T25] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 105.510230][ T7716] netlink: 108 bytes leftover after parsing attributes in process `syz.1.598'. [ 105.519626][ T25] rc_core: IR keymap rc-su3000 not found [ 105.519642][ T25] Registered IR keymap rc-empty [ 105.525331][ T25] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 105.530057][ T25] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input7 [ 105.552725][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 105.552747][ T25] dw2102: su3000_power_ctrl: 0, initialized 1 [ 105.552757][ T25] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 105.558494][ T25] usb 7-1: USB disconnect, device number 5 [ 105.676377][ T7717] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 105.704909][ T7722] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input8 [ 105.747663][ T25] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 105.767841][ T42] audit: type=1400 audit(1789178990.552:575): avc: denied { open } for pid=7725 comm="syz.1.602" path="/dev/ptyq6" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 105.767871][ T7729] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 105.771357][ T42] audit: type=1400 audit(1789178990.562:576): avc: denied { ioctl } for pid=7725 comm="syz.1.602" path="/dev/ptyq6" dev="devtmpfs" ino=133 ioctlcmd=0x5439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 105.869636][ T42] audit: type=1400 audit(1789178990.662:577): avc: denied { read } for pid=7732 comm="syz.1.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 106.014693][ T5877] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 106.018073][ T5877] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 106.019057][ T5877] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 106.022607][ T5877] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 106.022626][ T5877] rtc rtc0: __rtc_set_alarm: err=-22 [ 106.281436][ T7748] nvme_rdma: malformed address passed: 172:20.20.25:4 [ 106.313980][ T42] audit: type=1400 audit(1789178991.102:578): avc: denied { lock } for pid=7750 comm="syz.2.609" path="socket:[19901]" dev="sockfs" ino=19901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.318997][ T42] audit: type=1400 audit(1789178991.102:579): avc: denied { setattr } for pid=7750 comm="syz.2.609" name="NETLINK" dev="sockfs" ino=19901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.319234][ T42] audit: type=1400 audit(1789178991.102:580): avc: denied { getopt } for pid=7750 comm="syz.2.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.494047][ T7755] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 106.547776][ T42] audit: type=1400 audit(1789178991.332:581): avc: denied { bind } for pid=7759 comm="syz.1.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.549568][ T7760] random: crng reseeded on system resumption [ 106.652162][ T5877] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 106.810296][ T5877] usb 7-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 106.811341][ T5877] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.811389][ T5877] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 106.811406][ T5877] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 106.811425][ T5877] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.813535][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.813554][ T5877] usb 7-1: Product: syz [ 106.813565][ T5877] usb 7-1: Manufacturer: syz [ 106.813577][ T5877] usb 7-1: SerialNumber: syz [ 106.954387][ T7780] FAULT_INJECTION: forcing a failure. [ 106.954387][ T7780] name failslab, interval 1, probability 0, space 0, times 0 [ 106.954423][ T7780] CPU: 1 UID: 0 PID: 7780 Comm: syz.1.620 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.954464][ T7780] Tainted: [L]=SOFTLOCKUP [ 106.954471][ T7780] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.954482][ T7780] Call Trace: [ 106.954489][ T7780] [ 106.954497][ T7780] dump_stack_lvl+0x100/0x190 [ 106.954539][ T7780] should_fail_ex.cold+0x5/0xa [ 106.954568][ T7780] should_failslab+0xc2/0x120 [ 106.954597][ T7780] __kmalloc_cache_noprof+0x91/0x6d0 [ 106.954626][ T7780] ? fscontext_alloc_log+0x4a/0x1b0 [ 106.954650][ T7780] fscontext_alloc_log+0x4a/0x1b0 [ 106.954671][ T7780] __x64_sys_fsopen+0x159/0x220 [ 106.954692][ T7780] do_syscall_64+0x123/0x790 [ 106.954725][ T7780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.954745][ T7780] RIP: 0033:0x7ff34e79e159 [ 106.954760][ T7780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.954777][ T7780] RSP: 002b:00007ff34f648028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 106.954795][ T7780] RAX: ffffffffffffffda RBX: 00007ff34ea25fa0 RCX: 00007ff34e79e159 [ 106.954808][ T7780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 106.954819][ T7780] RBP: 00007ff34e83503b R08: 0000000000000000 R09: 0000000000000000 [ 106.954830][ T7780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.954841][ T7780] R13: 00007ff34ea26038 R14: 00007ff34ea25fa0 R15: 00007ffec5f0be08 [ 106.954867][ T7780] [ 106.972513][ T7777] netlink: 'syz.4.619': attribute type 5 has an invalid length. [ 107.011822][ T30] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 107.012676][ T30] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 107.019919][ T30] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 107.021100][ T30] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 107.021116][ T30] rtc rtc0: __rtc_set_alarm: err=-22 [ 107.025813][ T5877] usb 7-1: usb_control_msg returned -71 [ 107.025851][ T5877] usbtmc 7-1:1.0: can't read capabilities [ 107.065957][ T5877] usb 7-1: USB disconnect, device number 6 [ 107.190860][ T7798] net_ratelimit: 498 callbacks suppressed [ 107.190877][ T7798] netlink: Unknown conntrack attr (type=12293, max=9) [ 107.190898][ T7798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.428534][ T7813] overlayfs: overlapping lowerdir path [ 107.464419][ T7816] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 107.464826][ T7816] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare [ 107.475744][ T7816] CIFS: VFS: Error connecting to socket. Aborting operation. [ 107.475833][ T7816] CIFS: VFS: cifs_mount failed w/return code = -111 [ 107.476585][ T7819] use of bytesused == 0 is deprecated and will be removed in the future, [ 107.476596][ T7819] use the actual size instead. [ 107.590076][ T5877] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 107.723745][ T7828] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 107.750029][ T5877] usb 7-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 107.750931][ T5877] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.750955][ T5877] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 107.750965][ T5877] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 107.750977][ T5877] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.752898][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.752910][ T5877] usb 7-1: Product: syz [ 107.752917][ T5877] usb 7-1: Manufacturer: syz [ 107.752924][ T5877] usb 7-1: SerialNumber: syz [ 107.776037][ T7837] Device name not specified. [ 107.776037][ T7837] [ 107.963514][ T5877] usb 7-1: usb_control_msg returned -32 [ 107.963553][ T5877] usbtmc 7-1:1.0: can't read capabilities [ 108.038575][ T7858] macsec1: entered promiscuous mode [ 108.038601][ T7858] macsec1: entered allmulticast mode [ 108.040927][ T7858] netlink: 'syz.4.650': attribute type 39 has an invalid length. [ 108.124754][ T7855] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 108.252895][ T7866] FAULT_INJECTION: forcing a failure. [ 108.252895][ T7866] name failslab, interval 1, probability 0, space 0, times 0 [ 108.252924][ T7866] CPU: 2 UID: 0 PID: 7866 Comm: syz.1.654 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.252940][ T7866] Tainted: [L]=SOFTLOCKUP [ 108.252944][ T7866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.252951][ T7866] Call Trace: [ 108.252955][ T7866] [ 108.252959][ T7866] dump_stack_lvl+0x100/0x190 [ 108.252989][ T7866] should_fail_ex.cold+0x5/0xa [ 108.253005][ T7866] should_failslab+0xc2/0x120 [ 108.253022][ T7866] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 108.253035][ T7866] ? __alloc_skb+0x5b7/0x710 [ 108.253050][ T7866] ? __alloc_skb+0x140/0x710 [ 108.253064][ T7866] __alloc_skb+0x140/0x710 [ 108.253074][ T7866] ? __alloc_skb+0x5b7/0x710 [ 108.253085][ T7866] ? __pfx___alloc_skb+0x10/0x10 [ 108.253101][ T7866] netlink_ack+0x117/0xb80 [ 108.253112][ T7866] ? __lock_acquire+0x5c0/0x1f40 [ 108.253127][ T7866] netlink_rcv_skb+0x333/0x420 [ 108.253139][ T7866] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 108.253154][ T7866] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 108.253170][ T7866] ? netlink_deliver_tap+0x1ae/0xcc0 [ 108.253190][ T7866] netlink_unicast+0x585/0x850 [ 108.253204][ T7866] ? __pfx_netlink_unicast+0x10/0x10 [ 108.253219][ T7866] netlink_sendmsg+0x8b0/0xda0 [ 108.253232][ T7866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.253245][ T7866] ? selinux_socket_sendmsg+0x198/0x2f0 [ 108.253266][ T7866] ____sys_sendmsg+0xa4d/0xbe0 [ 108.253281][ T7866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.253293][ T7866] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.253312][ T7866] ? lock_acquire+0x1d1/0x380 [ 108.253323][ T7866] ? get_pid_task+0x2a/0x250 [ 108.253339][ T7866] ___sys_sendmsg+0x190/0x1e0 [ 108.253356][ T7866] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.253372][ T7866] ? get_pid_task+0x106/0x250 [ 108.253392][ T7866] ? find_held_lock+0x2b/0x80 [ 108.253416][ T7866] __sys_sendmsg+0x160/0x210 [ 108.253429][ T7866] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.253448][ T7866] do_syscall_64+0x123/0x790 [ 108.253468][ T7866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.253479][ T7866] RIP: 0033:0x7ff34e79e159 [ 108.253490][ T7866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.253501][ T7866] RSP: 002b:00007ff34f648028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.253513][ T7866] RAX: ffffffffffffffda RBX: 00007ff34ea25fa0 RCX: 00007ff34e79e159 [ 108.253520][ T7866] RDX: 0000000000004040 RSI: 0000200000000180 RDI: 0000000000000003 [ 108.253527][ T7866] RBP: 00007ff34f648090 R08: 0000000000000000 R09: 0000000000000000 [ 108.253533][ T7866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.253540][ T7866] R13: 00007ff34ea26038 R14: 00007ff34ea25fa0 R15: 00007ffec5f0be08 [ 108.253553][ T7866] [ 108.327237][ T7874] usbtmc 7-1:1.0: usb_control_msg returned -32 [ 108.349157][ T7756] warning: `syz.2.611' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.358578][ T7872] kvm: pic: non byte write [ 108.862420][ T25] usb 7-1: USB disconnect, device number 7 [ 108.914313][ T7897] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 108.943514][ T7903] __nla_validate_parse: 11 callbacks suppressed [ 108.943527][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 108.972802][ T7908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7908 comm=syz.2.665 [ 108.973561][ T7908] netlink: 'syz.2.665': attribute type 3 has an invalid length. [ 108.973725][ T7908] netlink: 'syz.2.665': attribute type 3 has an invalid length. [ 109.007252][ T5877] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 109.007968][ T5877] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 109.008716][ T5877] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 109.009864][ T5877] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 109.009876][ T5877] rtc rtc0: __rtc_set_alarm: err=-22 [ 109.020826][ T7910] netlink: 72 bytes leftover after parsing attributes in process `syz.2.666'. [ 109.084772][ T7913] netlink: 84 bytes leftover after parsing attributes in process `syz.2.667'. [ 109.161251][ T7919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.191862][ T7924] Attempt to restore checkpoint with obsolete wellknown handles [ 109.247628][ T7928] binder: 7927:7928 ioctl 80286722 2000000016c0 returned -22 [ 109.289515][ T7932] netlink: 72 bytes leftover after parsing attributes in process `syz.0.675'. [ 109.291220][ T7934] netlink: 84 bytes leftover after parsing attributes in process `syz.1.677'. [ 109.573214][ T7962] netlink: 108 bytes leftover after parsing attributes in process `syz.4.686'. [ 109.594380][ T7966] netlink: 72 bytes leftover after parsing attributes in process `syz.1.687'. [ 109.757188][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 109.757208][ T42] audit: type=1400 audit(1789178994.542:595): avc: denied { mmap_zero } for pid=7972 comm="syz.1.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 109.917742][ T7984] netlink: 'syz.4.694': attribute type 3 has an invalid length. [ 109.917757][ T7984] netlink: 'syz.4.694': attribute type 2 has an invalid length. [ 109.917764][ T7984] netlink: 'syz.4.694': attribute type 5 has an invalid length. [ 110.038210][ T7989] netlink: 'syz.4.696': attribute type 15 has an invalid length. [ 110.065545][ T7991] netlink: 108 bytes leftover after parsing attributes in process `syz.1.697'. [ 110.144310][ T7994] netlink: 72 bytes leftover after parsing attributes in process `syz.1.698'. [ 110.224930][ T7998] FAULT_INJECTION: forcing a failure. [ 110.224930][ T7998] name failslab, interval 1, probability 0, space 0, times 0 [ 110.225132][ T7998] CPU: 1 UID: 0 PID: 7998 Comm: syz.4.699 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.225159][ T7998] Tainted: [L]=SOFTLOCKUP [ 110.225174][ T7998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.225184][ T7998] Call Trace: [ 110.225191][ T7998] [ 110.225198][ T7998] dump_stack_lvl+0x100/0x190 [ 110.225240][ T7998] should_fail_ex.cold+0x5/0xa [ 110.225264][ T7998] should_failslab+0xc2/0x120 [ 110.225293][ T7998] kmem_cache_alloc_noprof+0x92/0x6a0 [ 110.225315][ T7998] ? mas_preallocate+0xc22/0xee0 [ 110.225348][ T7998] mas_preallocate+0xc22/0xee0 [ 110.225373][ T7998] ? __pfx_mas_preallocate+0x10/0x10 [ 110.225400][ T7998] ? __asan_memset+0x23/0x50 [ 110.225417][ T7998] ? init_multi_vma_prep+0x33c/0x650 [ 110.225443][ T7998] commit_merge+0x3cc/0x2150 [ 110.225468][ T7998] ? __vma_start_write+0x1c6/0x280 [ 110.225493][ T7998] ? __pfx_commit_merge+0x10/0x10 [ 110.225524][ T7998] ? __pfx___vma_start_write+0x10/0x10 [ 110.225546][ T7998] ? __pfx_mas_prev+0x10/0x10 [ 110.225573][ T7998] ? dup_anon_vma+0x74/0x2f0 [ 110.225599][ T7998] vma_modify+0xd81/0x29b0 [ 110.225636][ T7998] ? __pfx_vma_modify+0x10/0x10 [ 110.225667][ T7998] ? lock_acquire+0x1d1/0x380 [ 110.225695][ T7998] vma_modify_flags+0x2c3/0x460 [ 110.225724][ T7998] ? __pfx_vma_modify_flags+0x10/0x10 [ 110.225764][ T7998] ? __pfx_futex_wake_mark+0x10/0x10 [ 110.225800][ T7998] mlock_fixup+0x4a8/0xc60 [ 110.225832][ T7998] ? __pfx_mlock_fixup+0x10/0x10 [ 110.225872][ T7998] apply_mlockall_flags.isra.0+0x3b8/0x640 [ 110.225904][ T7998] ? __pfx_apply_mlockall_flags.isra.0+0x10/0x10 [ 110.225943][ T7998] ? __pfx___might_resched+0x10/0x10 [ 110.225967][ T7998] ? down_write_killable+0x152/0x240 [ 110.226001][ T7998] __do_sys_munlockall+0xc7/0x270 [ 110.226023][ T7998] do_syscall_64+0x123/0x790 [ 110.226049][ T7998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.226070][ T7998] RIP: 0033:0x7f89afb9e159 [ 110.226087][ T7998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.226105][ T7998] RSP: 002b:00007f89b0b26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 110.226125][ T7998] RAX: ffffffffffffffda RBX: 00007f89afe25fa0 RCX: 00007f89afb9e159 [ 110.226157][ T7998] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.226175][ T7998] RBP: 00007f89afe25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 110.226187][ T7998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.226199][ T7998] R13: 00007f89afe26038 R14: 00007f89afe25fa0 R15: 00007ffe9a7b7af8 [ 110.226227][ T7998] [ 110.363471][ T42] audit: type=1400 audit(1789178995.152:596): avc: denied { create } for pid=7999 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.530059][ T8008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.704'. [ 110.762375][ T8018] usb usb8: usbfs: process 8018 (syz.1.707) did not claim interface 0 before use [ 110.860010][ T8023] overlayfs: missing 'lowerdir' [ 110.965572][ T42] audit: type=1400 audit(1789178995.752:597): avc: denied { remount } for pid=8020 comm="syz.2.709" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 111.163923][ T8030] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 111.164987][ T42] audit: type=1400 audit(1789178995.952:598): avc: denied { write } for pid=8029 comm="syz.1.712" name="sched_switch" dev="tracefs" ino=24594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 111.165185][ T42] audit: type=1400 audit(1789178995.952:599): avc: denied { add_name } for pid=8029 comm="syz.1.712" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 111.165543][ T42] audit: type=1400 audit(1789178995.952:600): avc: denied { create } for pid=8029 comm="syz.1.712" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 111.307840][ T42] audit: type=1400 audit(1789178996.092:601): avc: denied { getopt } for pid=8040 comm="syz.1.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 111.539635][ T5877] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 111.689604][ T5877] usb 7-1: Using ep0 maxpacket: 16 [ 111.690104][ T5877] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 1.00 [ 111.690130][ T5877] usb 7-1: no configurations [ 111.690136][ T5877] usb 7-1: can't read configurations, error -22 [ 111.819558][ T5877] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 111.832950][ T8073] netlink: Failed to add helper -22 [ 111.832984][ T8073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.837026][ T42] audit: type=1400 audit(1789178996.622:602): avc: denied { accept } for pid=8070 comm="syz.1.724" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.960193][ T42] audit: type=1400 audit(1789178996.752:603): avc: denied { write } for pid=8075 comm="syz.0.725" name="dbroot" dev="configfs" ino=22351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 111.960445][ T42] audit: type=1400 audit(1789178996.752:604): avc: denied { open } for pid=8075 comm="syz.0.725" path="/198/my_configfs/target/dbroot" dev="configfs" ino=22351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 111.970740][ T5877] usb 7-1: Using ep0 maxpacket: 16 [ 111.971043][ T8076] xt_REDIRECT: bad rangesize 26624. [ 111.976783][ T5882] hid_parser_main: 4 callbacks suppressed [ 111.976800][ T5882] hid-generic 0000:0000:0000.0004: unknown main item tag 0x6 [ 111.977666][ T5877] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 1.00 [ 111.977697][ T5877] usb 7-1: no configurations [ 111.977712][ T5877] usb 7-1: can't read configurations, error -22 [ 111.981792][ T5877] usb usb7-port1: attempt power cycle [ 111.984906][ T5882] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 112.100024][ T8076] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 112.313198][ T8080] FAULT_INJECTION: forcing a failure. [ 112.313198][ T8080] name failslab, interval 1, probability 0, space 0, times 0 [ 112.313234][ T8080] CPU: 0 UID: 0 PID: 8080 Comm: syz.4.726 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.313269][ T8080] Tainted: [L]=SOFTLOCKUP [ 112.313276][ T8080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.313288][ T8080] Call Trace: [ 112.313295][ T8080] [ 112.313304][ T8080] dump_stack_lvl+0x100/0x190 [ 112.313354][ T8080] should_fail_ex.cold+0x5/0xa [ 112.313401][ T8080] should_failslab+0xc2/0x120 [ 112.313434][ T8080] __kmalloc_noprof+0xfc/0x840 [ 112.313455][ T8080] ? __fget_files+0x215/0x3d0 [ 112.313480][ T8080] ? io_cache_alloc_new+0x45/0xe0 [ 112.313516][ T8080] io_cache_alloc_new+0x45/0xe0 [ 112.313544][ T8080] io_rsrc_node_alloc+0x221/0x2b0 [ 112.313572][ T8080] io_sqe_files_register+0x2a7/0x970 [ 112.313604][ T8080] ? __pfx_io_sqe_files_register+0x10/0x10 [ 112.313642][ T8080] __do_sys_io_uring_register+0xf69/0x1bc0 [ 112.313672][ T8080] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.313706][ T8080] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 112.313736][ T8080] ? __x64_sys_futex+0x34f/0x4d0 [ 112.313762][ T8080] ? __x64_sys_futex+0x358/0x4d0 [ 112.313789][ T8080] ? fput+0x7c/0x100 [ 112.313814][ T8080] ? __pfx___x64_sys_futex+0x10/0x10 [ 112.313840][ T8080] ? ksys_write+0x1ac/0x250 [ 112.313860][ T8080] ? __pfx_ksys_write+0x10/0x10 [ 112.313888][ T8080] do_syscall_64+0x123/0x790 [ 112.313918][ T8080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.313939][ T8080] RIP: 0033:0x7f89afb9e159 [ 112.313955][ T8080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.313973][ T8080] RSP: 002b:00007f89b0b26028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 112.313993][ T8080] RAX: ffffffffffffffda RBX: 00007f89afe25fa0 RCX: 00007f89afb9e159 [ 112.314006][ T8080] RDX: 0000200000002d40 RSI: 0000000000000002 RDI: 0000000000000005 [ 112.314018][ T8080] RBP: 00007f89afc3503b R08: 0000000000000000 R09: 0000000000000000 [ 112.314030][ T8080] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 112.314042][ T8080] R13: 00007f89afe26038 R14: 00007f89afe25fa0 R15: 00007ffe9a7b7af8 [ 112.314070][ T8080] [ 112.329831][ T5877] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 112.350478][ T5877] usb 7-1: Using ep0 maxpacket: 16 [ 112.351071][ T5877] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 1.00 [ 112.351102][ T5877] usb 7-1: no configurations [ 112.351112][ T5877] usb 7-1: can't read configurations, error -22 [ 112.489637][ T5877] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 112.522193][ T5877] usb 7-1: Using ep0 maxpacket: 16 [ 112.522949][ T5877] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 1.00 [ 112.523000][ T5877] usb 7-1: no configurations [ 112.523012][ T5877] usb 7-1: can't read configurations, error -22 [ 112.524262][ T5877] usb usb7-port1: unable to enumerate USB device [ 112.642157][ T8085] netlink: 'syz.4.728': attribute type 21 has an invalid length. [ 112.736947][ T8091] kvm [8090]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 113.009556][ T5877] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 113.017123][ T8101] ublk_ctrl_add_dev: invalid recovery flags 10 [ 113.121733][ T8106] Unable to locate . in FUNC.INSTANCE [ 113.172231][ T5877] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 113.173585][ T5877] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 113.173623][ T5877] usb 6-1: can't read configurations, error -71 [ 113.318453][ T8108] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 113.323820][ T8111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=8111 comm=syz.4.738 [ 113.323837][ T8111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8111 comm=syz.4.738 [ 113.323849][ T8111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=8111 comm=syz.4.738 [ 113.323860][ T8111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8111 comm=syz.4.738 [ 113.323872][ T8111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8111 comm=syz.4.738 [ 113.324957][ T8111] netlink: 'syz.4.738': attribute type 7 has an invalid length. [ 113.582561][ T8116] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 113.700447][ T8134] binder: BC_ACQUIRE_RESULT not supported [ 113.700460][ T8134] binder: 8132:8134 ioctl c0306201 2000000001c0 returned -22 [ 113.762648][ T8139] FAULT_INJECTION: forcing a failure. [ 113.762648][ T8139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.762668][ T8139] CPU: 2 UID: 0 PID: 8139 Comm: syz.4.746 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.762684][ T8139] Tainted: [L]=SOFTLOCKUP [ 113.762688][ T8139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.762694][ T8139] Call Trace: [ 113.762698][ T8139] [ 113.762703][ T8139] dump_stack_lvl+0x100/0x190 [ 113.762731][ T8139] should_fail_ex.cold+0x5/0xa [ 113.762747][ T8139] _copy_to_user+0x32/0xd0 [ 113.762763][ T8139] simple_read_from_buffer+0xcb/0x170 [ 113.762778][ T8139] proc_fail_nth_read+0x1af/0x230 [ 113.762792][ T8139] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.762807][ T8139] ? rw_verify_area+0xce/0x6d0 [ 113.762823][ T8139] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.762836][ T8139] vfs_read+0x1e4/0xb40 [ 113.762847][ T8139] ? lock_acquire+0x1d1/0x380 [ 113.762859][ T8139] ? __fget_files+0x34/0x3d0 [ 113.762872][ T8139] ? __pfx_vfs_read+0x10/0x10 [ 113.762882][ T8139] ? find_held_lock+0x2b/0x80 [ 113.762897][ T8139] ? __fget_files+0x215/0x3d0 [ 113.762930][ T8139] ? __fget_files+0x21f/0x3d0 [ 113.762947][ T8139] ksys_read+0x12a/0x250 [ 113.762958][ T8139] ? __pfx_ksys_read+0x10/0x10 [ 113.762968][ T8139] ? v4l2_ioctl+0x1c5/0x250 [ 113.763018][ T8139] do_syscall_64+0x123/0x790 [ 113.763038][ T8139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.763049][ T8139] RIP: 0033:0x7f89afb5e98e [ 113.763059][ T8139] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.763070][ T8139] RSP: 002b:00007f89b0b25fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.763081][ T8139] RAX: ffffffffffffffda RBX: 00007f89b0b266c0 RCX: 00007f89afb5e98e [ 113.763088][ T8139] RDX: 000000000000000f RSI: 00007f89b0b260a0 RDI: 0000000000000004 [ 113.763095][ T8139] RBP: 00007f89b0b26090 R08: 0000000000000000 R09: 0000000000000000 [ 113.763101][ T8139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.763107][ T8139] R13: 00007f89afe26038 R14: 00007f89afe25fa0 R15: 00007ffe9a7b7af8 [ 113.763122][ T8139] [ 113.797803][ T8127] gretap1: entered promiscuous mode [ 113.930495][ T8143] xt_IDLETIMER: label is empty or not nul-terminated [ 113.989481][ T8152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=8152 comm=syz.0.752 [ 114.126921][ T8165] FAULT_INJECTION: forcing a failure. [ 114.126921][ T8165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.126954][ T8165] CPU: 1 UID: 0 PID: 8165 Comm: syz.1.757 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.127002][ T8165] Tainted: [L]=SOFTLOCKUP [ 114.127009][ T8165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.127020][ T8165] Call Trace: [ 114.127026][ T8165] [ 114.127034][ T8165] dump_stack_lvl+0x100/0x190 [ 114.127065][ T8165] should_fail_ex.cold+0x5/0xa [ 114.127091][ T8165] _copy_to_user+0x32/0xd0 [ 114.127113][ T8165] simple_read_from_buffer+0xcb/0x170 [ 114.127144][ T8165] proc_fail_nth_read+0x1af/0x230 [ 114.127167][ T8165] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.127190][ T8165] ? rw_verify_area+0xce/0x6d0 [ 114.127216][ T8165] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.127236][ T8165] vfs_read+0x1e4/0xb40 [ 114.127255][ T8165] ? lock_acquire+0x1d1/0x380 [ 114.127273][ T8165] ? __fget_files+0x34/0x3d0 [ 114.127294][ T8165] ? __pfx_vfs_read+0x10/0x10 [ 114.127310][ T8165] ? find_held_lock+0x2b/0x80 [ 114.127335][ T8165] ? __fget_files+0x215/0x3d0 [ 114.127360][ T8165] ? __fget_files+0x21f/0x3d0 [ 114.127389][ T8165] ksys_read+0x12a/0x250 [ 114.127406][ T8165] ? __pfx_ksys_read+0x10/0x10 [ 114.127431][ T8165] do_syscall_64+0x123/0x790 [ 114.127511][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.127539][ T8165] RIP: 0033:0x7ff34e75e98e [ 114.127554][ T8165] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 114.127571][ T8165] RSP: 002b:00007ff34f647fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.127588][ T8165] RAX: ffffffffffffffda RBX: 00007ff34f6486c0 RCX: 00007ff34e75e98e [ 114.127600][ T8165] RDX: 000000000000000f RSI: 00007ff34f6480a0 RDI: 0000000000000003 [ 114.127611][ T8165] RBP: 00007ff34f648090 R08: 0000000000000000 R09: 0000000000000000 [ 114.127622][ T8165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.127631][ T8165] R13: 00007ff34ea26038 R14: 00007ff34ea25fa0 R15: 00007ffec5f0be08 [ 114.127655][ T8165] [ 114.654314][ T8201] X.509: Couldn't decode AuthKeyIdentifier [ 114.843269][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 114.843286][ T42] audit: type=1400 audit(1789178999.632:653): avc: denied { ioctl } for pid=8212 comm="syz.2.778" path="socket:[25760]" dev="sockfs" ino=25760 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 115.003427][ T42] audit: type=1400 audit(1789178999.792:654): avc: denied { getopt } for pid=8222 comm="syz.2.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.024315][ T8224] input: syz0 as /devices/virtual/input/input9 [ 115.124764][ T42] audit: type=1800 audit(1789178999.912:655): pid=8230 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.785" name=02 dev="sda1" ino=2041 res=0 errno=0 [ 115.132211][ T8231] Bluetooth: MGMT ver 1.23 [ 115.538777][ T8252] nftables ruleset with unbound chain [ 115.640796][ T8262] Invalid source name [ 115.640815][ T8262] UBIFS error (pid: 8262): cannot open "ubifs", error -22 [ 115.733494][ T42] audit: type=1400 audit(1789179000.522:656): avc: denied { map } for pid=8269 comm="syz.2.800" path="/215/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=2691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 115.772004][ T42] audit: type=1400 audit(1789179000.562:657): avc: denied { ioctl } for pid=8269 comm="syz.2.800" path="/215/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=2691 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 115.784955][ T42] audit: type=1400 audit(1789179000.562:658): avc: denied { unmount } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 115.813715][ T42] audit: type=1400 audit(1789179000.602:659): avc: denied { watch } for pid=8271 comm="syz.1.802" path="/219/bus" dev="tmpfs" ino=1187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 115.813877][ T42] audit: type=1400 audit(1789179000.602:660): avc: denied { watch_sb watch_reads } for pid=8271 comm="syz.1.802" path="/219/bus" dev="tmpfs" ino=1187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.817321][ T8272] __nla_validate_parse: 7 callbacks suppressed [ 115.817339][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.802'. [ 115.903323][ T42] audit: type=1400 audit(1789179000.692:661): avc: denied { name_bind } for pid=8278 comm="syz.1.804" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 115.937086][ T8282] No buffer was provided with the request [ 116.096941][ T42] audit: type=1400 audit(1789179000.882:662): avc: denied { read } for pid=8292 comm="syz.1.809" path="socket:[25890]" dev="sockfs" ino=25890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 116.716271][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.813'. [ 116.823796][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.814'. [ 116.836760][ T8310] comedi comedi1: dt2814: I/O base address or length out of range [ 116.896499][ T8314] netlink: 72 bytes leftover after parsing attributes in process `syz.4.816'. [ 117.055651][ T8331] o2cb: This node has not been configured. [ 117.055665][ T8331] o2cb: Cluster check failed. Fix errors before retrying. [ 117.055682][ T8331] (syz.1.821,8331,3):user_dlm_register:674 ERROR: status = -22 [ 117.055704][ T8331] (syz.1.821,8331,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "trace" [ 117.060765][ T8325] nvme nvme0: rdma connection establishment failed (-104) [ 117.150273][ T8336] FAULT_INJECTION: forcing a failure. [ 117.150273][ T8336] name failslab, interval 1, probability 0, space 0, times 0 [ 117.150303][ T8336] CPU: 3 UID: 0 PID: 8336 Comm: syz.0.823 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.150323][ T8336] Tainted: [L]=SOFTLOCKUP [ 117.150329][ T8336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.150462][ T8336] Call Trace: [ 117.150470][ T8336] [ 117.150476][ T8336] dump_stack_lvl+0x100/0x190 [ 117.150515][ T8336] should_fail_ex.cold+0x5/0xa [ 117.150565][ T8336] should_failslab+0xc2/0x120 [ 117.150589][ T8336] __kmalloc_noprof+0xfc/0x840 [ 117.150604][ T8336] ? tomoyo_encode2+0xfb/0x3c0 [ 117.150624][ T8336] tomoyo_encode2+0xfb/0x3c0 [ 117.150643][ T8336] tomoyo_encode+0x29/0x50 [ 117.150658][ T8336] tomoyo_realpath_from_path+0x18c/0x690 [ 117.150680][ T8336] tomoyo_mount_acl+0x1b6/0x8b0 [ 117.150695][ T8336] ? is_bpf_text_address+0x8a/0x1a0 [ 117.150714][ T8336] ? is_bpf_text_address+0x8a/0x1a0 [ 117.150734][ T8336] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 117.150759][ T8336] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 117.150774][ T8336] ? kernel_text_address+0x8d/0x100 [ 117.150798][ T8336] ? unwind_get_return_address+0x59/0xa0 [ 117.150819][ T8336] ? arch_stack_walk+0xa6/0xf0 [ 117.150840][ T8336] ? __lock_acquire+0x5c0/0x1f40 [ 117.150867][ T8336] ? tomoyo_mount_permission+0x1f6/0x460 [ 117.150885][ T8336] ? tomoyo_domain+0xb2/0x150 [ 117.150903][ T8336] ? tomoyo_profile+0x47/0x60 [ 117.150927][ T8336] tomoyo_mount_permission+0x214/0x460 [ 117.150946][ T8336] ? tomoyo_mount_permission+0x1f6/0x460 [ 117.150991][ T8336] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 117.151024][ T8336] security_sb_mount+0xdd/0x270 [ 117.151055][ T8336] path_mount+0x158/0x24c0 [ 117.151085][ T8336] ? __pfx_path_mount+0x10/0x10 [ 117.151108][ T8336] ? lockdep_hardirqs_on+0x7d/0x110 [ 117.151141][ T8336] ? putname+0xb1/0x110 [ 117.151164][ T8336] ? kmem_cache_free+0x127/0x6c0 [ 117.151206][ T8336] ? __x64_sys_mount+0x293/0x310 [ 117.151231][ T8336] __x64_sys_mount+0x293/0x310 [ 117.151259][ T8336] ? __pfx___x64_sys_mount+0x10/0x10 [ 117.151294][ T8336] do_syscall_64+0x123/0x790 [ 117.151320][ T8336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.151339][ T8336] RIP: 0033:0x7f5437b9e159 [ 117.151355][ T8336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.151371][ T8336] RSP: 002b:00007f5438a5b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 117.151389][ T8336] RAX: ffffffffffffffda RBX: 00007f5437e25fa0 RCX: 00007f5437b9e159 [ 117.151401][ T8336] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 117.151411][ T8336] RBP: 00007f5438a5b090 R08: 0000200000000040 R09: 0000000000000000 [ 117.151422][ T8336] R10: 0000000000086022 R11: 0000000000000246 R12: 0000000000000001 [ 117.151432][ T8336] R13: 00007f5437e26038 R14: 00007f5437e25fa0 R15: 00007ffc1833d5b8 [ 117.151456][ T8336] [ 117.158627][ T8336] ERROR: Out of memory at tomoyo_realpath_from_path. [ 117.244739][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.825'. [ 117.245461][ T8340] FAULT_INJECTION: forcing a failure. [ 117.245461][ T8340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.245485][ T8340] CPU: 0 UID: 0 PID: 8340 Comm: syz.0.824 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.245502][ T8340] Tainted: [L]=SOFTLOCKUP [ 117.245507][ T8340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.245514][ T8340] Call Trace: [ 117.245519][ T8340] [ 117.245524][ T8340] dump_stack_lvl+0x100/0x190 [ 117.245548][ T8340] should_fail_ex.cold+0x5/0xa [ 117.245566][ T8340] _copy_to_user+0x32/0xd0 [ 117.245581][ T8340] simple_read_from_buffer+0xcb/0x170 [ 117.245598][ T8340] proc_fail_nth_read+0x1af/0x230 [ 117.245614][ T8340] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.245631][ T8340] ? rw_verify_area+0xce/0x6d0 [ 117.245649][ T8340] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.245664][ T8340] vfs_read+0x1e4/0xb40 [ 117.245677][ T8340] ? lock_acquire+0x1d1/0x380 [ 117.245690][ T8340] ? __fget_files+0x34/0x3d0 [ 117.245705][ T8340] ? __pfx_vfs_read+0x10/0x10 [ 117.245737][ T8340] ? find_held_lock+0x2b/0x80 [ 117.245757][ T8340] ? __fget_files+0x215/0x3d0 [ 117.245775][ T8340] ? __fget_files+0x21f/0x3d0 [ 117.245794][ T8340] ksys_read+0x12a/0x250 [ 117.245806][ T8340] ? __pfx_ksys_read+0x10/0x10 [ 117.245823][ T8340] do_syscall_64+0x123/0x790 [ 117.245841][ T8340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.245854][ T8340] RIP: 0033:0x7f5437b5e98e [ 117.245865][ T8340] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 117.245878][ T8340] RSP: 002b:00007f5438a5afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.245891][ T8340] RAX: ffffffffffffffda RBX: 00007f5438a5b6c0 RCX: 00007f5437b5e98e [ 117.245899][ T8340] RDX: 000000000000000f RSI: 00007f5438a5b0a0 RDI: 0000000000000003 [ 117.245906][ T8340] RBP: 00007f5438a5b090 R08: 0000000000000000 R09: 0000000000000000 [ 117.245914][ T8340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.245921][ T8340] R13: 00007f5437e26038 R14: 00007f5437e25fa0 R15: 00007ffc1833d5b8 [ 117.245937][ T8340] [ 117.336052][ T8343] netlink: 'syz.0.826': attribute type 2 has an invalid length. [ 117.336069][ T8343] netlink: 'syz.0.826': attribute type 7 has an invalid length. [ 117.354448][ T8343] Uý: entered promiscuous mode [ 117.521411][ T8345] wg0 speed is unknown, defaulting to 1000 [ 117.521465][ T8345] wg0 speed is unknown, defaulting to 1000 [ 117.533377][ T8345] wg0 speed is unknown, defaulting to 1000 [ 117.538672][ T8345] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 117.538709][ T8345] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 117.538747][ T8345] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 117.548672][ T8345] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.556803][ T8345] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 117.618865][ T8345] wg0 speed is unknown, defaulting to 1000 [ 117.623862][ T8345] wg0 speed is unknown, defaulting to 1000 [ 117.625051][ T8345] wg0 speed is unknown, defaulting to 1000 [ 117.626376][ T8345] wg0 speed is unknown, defaulting to 1000 [ 117.628820][ T8345] wg0 speed is unknown, defaulting to 1000 [ 117.857238][ T8364] netlink: 72 bytes leftover after parsing attributes in process `syz.0.835'. [ 117.884318][ T8367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.836'. [ 118.185810][ T8377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.839'. [ 118.272588][ T5833] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 118.314846][ T8386] FAULT_INJECTION: forcing a failure. [ 118.314846][ T8386] name failslab, interval 1, probability 0, space 0, times 0 [ 118.314875][ T8386] CPU: 1 UID: 0 PID: 8386 Comm: syz.4.843 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.314896][ T8386] Tainted: [L]=SOFTLOCKUP [ 118.314901][ T8386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.314910][ T8386] Call Trace: [ 118.314915][ T8386] [ 118.314921][ T8386] dump_stack_lvl+0x100/0x190 [ 118.314989][ T8386] should_fail_ex.cold+0x5/0xa [ 118.315011][ T8386] should_failslab+0xc2/0x120 [ 118.315033][ T8386] __kmalloc_cache_noprof+0x91/0x6d0 [ 118.315055][ T8386] ? iommufd_ioas_allow_iovas+0x27e/0x5a0 [ 118.315075][ T8386] iommufd_ioas_allow_iovas+0x27e/0x5a0 [ 118.315093][ T8386] ? __pfx_iommufd_ioas_allow_iovas+0x10/0x10 [ 118.315118][ T8386] iommufd_fops_ioctl+0x358/0x520 [ 118.315136][ T8386] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 118.315153][ T8386] ? __fget_files+0x34/0x3d0 [ 118.315204][ T8386] ? selinux_file_ioctl+0x13b/0x290 [ 118.315221][ T8386] ? selinux_file_ioctl+0xb6/0x290 [ 118.315237][ T8386] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 118.315256][ T8386] __x64_sys_ioctl+0x18e/0x210 [ 118.315273][ T8386] do_syscall_64+0x123/0x790 [ 118.315300][ T8386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.315315][ T8386] RIP: 0033:0x7f89afb9e159 [ 118.315328][ T8386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.315342][ T8386] RSP: 002b:00007f89b0b26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.315359][ T8386] RAX: ffffffffffffffda RBX: 00007f89afe25fa0 RCX: 00007f89afb9e159 [ 118.315369][ T8386] RDX: 00002000000000c0 RSI: 0000000000003b82 RDI: 0000000000000003 [ 118.315378][ T8386] RBP: 00007f89b0b26090 R08: 0000000000000000 R09: 0000000000000000 [ 118.315387][ T8386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.315397][ T8386] R13: 00007f89afe26038 R14: 00007f89afe25fa0 R15: 00007ffe9a7b7af8 [ 118.315418][ T8386] [ 118.365308][ T8390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.844'. [ 118.456145][ T5833] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 118.458560][ T5833] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 118.458590][ T5833] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 118.458611][ T5833] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 118.458642][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.462905][ T8372] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 118.493201][ T5833] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 118.513799][ T8397] FAULT_INJECTION: forcing a failure. [ 118.513799][ T8397] name failslab, interval 1, probability 0, space 0, times 0 [ 118.513827][ T8397] CPU: 2 UID: 0 PID: 8397 Comm: syz.4.848 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.513848][ T8397] Tainted: [L]=SOFTLOCKUP [ 118.513854][ T8397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.513863][ T8397] Call Trace: [ 118.513868][ T8397] [ 118.513874][ T8397] dump_stack_lvl+0x100/0x190 [ 118.513900][ T8397] should_fail_ex.cold+0x5/0xa [ 118.513922][ T8397] should_failslab+0xc2/0x120 [ 118.513940][ T8397] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 118.513957][ T8397] ? __d_alloc+0x35/0xa50 [ 118.513980][ T8397] __d_alloc+0x35/0xa50 [ 118.514001][ T8397] d_alloc_pseudo+0x1c/0xc0 [ 118.514016][ T8397] alloc_file_pseudo+0x118/0x290 [ 118.514038][ T8397] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 118.514064][ T8397] __shmem_file_setup+0x205/0x460 [ 118.514087][ T8397] ? __pfx___shmem_file_setup+0x10/0x10 [ 118.514109][ T8397] ? __rwlock_init+0x37/0x150 [ 118.514134][ T8397] drm_gem_object_init+0x180/0x1b0 [ 118.514160][ T8397] ? __pfx_drm_gem_object_init+0x10/0x10 [ 118.514186][ T8397] ? vgem_gem_create_object+0x3b/0xb0 [ 118.514212][ T8397] ? __pfx_vgem_gem_create_object+0x10/0x10 [ 118.514239][ T8397] __drm_gem_shmem_create+0x107/0x410 [ 118.514266][ T8397] drm_gem_shmem_create_with_handle+0x28/0x120 [ 118.514293][ T8397] drm_gem_shmem_dumb_create+0x83/0xa0 [ 118.514317][ T8397] ? find_held_lock+0x2b/0x80 [ 118.514339][ T8397] drm_mode_create_dumb+0x272/0x300 [ 118.514366][ T8397] drm_mode_create_dumb_ioctl+0x24/0xe0 [ 118.514390][ T8397] drm_ioctl_kernel+0x1f3/0x3e0 [ 118.514408][ T8397] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 118.514433][ T8397] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 118.514459][ T8397] drm_ioctl+0x5e6/0xc60 [ 118.514483][ T8397] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 118.514508][ T8397] ? __pfx_drm_ioctl+0x10/0x10 [ 118.514525][ T8397] ? __fget_files+0x34/0x3d0 [ 118.514551][ T8397] ? selinux_file_ioctl+0x13b/0x290 [ 118.514570][ T8397] ? selinux_file_ioctl+0xb6/0x290 [ 118.514582][ T8397] ? __pfx_drm_ioctl+0x10/0x10 [ 118.514596][ T8397] __x64_sys_ioctl+0x18e/0x210 [ 118.514608][ T8397] do_syscall_64+0x123/0x790 [ 118.514626][ T8397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.514637][ T8397] RIP: 0033:0x7f89afb9e159 [ 118.514647][ T8397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.514658][ T8397] RSP: 002b:00007f89b0b26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.514670][ T8397] RAX: ffffffffffffffda RBX: 00007f89afe25fa0 RCX: 00007f89afb9e159 [ 118.514677][ T8397] RDX: 0000200000000040 RSI: 00000000c02064b2 RDI: 0000000000000006 [ 118.514687][ T8397] RBP: 00007f89b0b26090 R08: 0000000000000000 R09: 0000000000000000 [ 118.514696][ T8397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.514706][ T8397] R13: 00007f89afe26038 R14: 00007f89afe25fa0 R15: 00007ffe9a7b7af8 [ 118.514728][ T8397] [ 118.756650][ T8406] pim6reg1: entered promiscuous mode [ 118.756667][ T8406] pim6reg1: entered allmulticast mode [ 118.759933][ T5833] usb 7-1: USB disconnect, device number 12 [ 118.952582][ T8414] netlink: 72 bytes leftover after parsing attributes in process `syz.4.855'. [ 119.223896][ T8417] input: syz1 as /devices/virtual/input/input11 [ 119.630834][ T8449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65501 sclass=netlink_route_socket pid=8449 comm=syz.2.868 [ 119.783358][ T8459] trusted_key: encrypted_key: key trusted:syz not found [ 119.783842][ T8459] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 119.808230][ T5738] Bluetooth: hci3: Invalid connection link type handle 0x00c8 [ 119.808442][ T8461] netlink: Invalid conntrack timeout [ 119.808457][ T8461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.001318][ T8471] syzkaller1: entered promiscuous mode [ 120.001333][ T8471] syzkaller1: entered allmulticast mode [ 120.525413][ T8488] TC_ACT_REPEAT abuse ? [ 120.895174][ T8512] program syz.4.890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.004828][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 121.004846][ T42] audit: type=1400 audit(1789179005.534:696): avc: denied { write } for pid=8517 comm="syz.0.893" name="tracing_on" dev="tracefs" ino=2741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 121.006127][ T42] audit: type=1400 audit(1789179005.534:697): avc: denied { open } for pid=8517 comm="syz.0.893" path="/242/dir0/tracing_on" dev="tracefs" ino=2741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 121.117200][ T8527] netlink: 'syz.0.897': attribute type 2 has an invalid length. [ 121.129321][ T8527] tmpfs: Unknown parameter '18446744073709551615ÿÿÿÿnr_ino' [ 121.226649][ T8532] __nla_validate_parse: 3 callbacks suppressed [ 121.226669][ T8532] netlink: 16 bytes leftover after parsing attributes in process `syz.4.899'. [ 121.226694][ T8532] netlink: 16 bytes leftover after parsing attributes in process `syz.4.899'. [ 121.531286][ T5738] Bluetooth: unknown link type 193 [ 121.531357][ T5738] Bluetooth: hci2: connection err: -111 [ 121.600319][ T8543] netlink: 72 bytes leftover after parsing attributes in process `syz.2.904'. [ 121.716747][ T42] audit: type=1400 audit(1789179006.199:698): avc: denied { shutdown } for pid=8553 comm="syz.0.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.719874][ T42] audit: type=1400 audit(1789179006.199:699): avc: denied { write } for pid=8553 comm="syz.0.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.754423][ T8559] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200080 (ahci[0000:00:1f.2]) [ 121.766122][ T8560] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 121.793297][ T8561] overlayfs: failed lookup in lower (newroot/245, name='file0', err=-40): overlapping layers [ 121.793883][ T8561] overlayfs: failed lookup in lower (newroot/245, name='file0', err=-40): overlapping layers [ 121.967468][ T8574] netlink: 72 bytes leftover after parsing attributes in process `syz.1.916'. [ 122.001448][ T8577] netlink: 7 bytes leftover after parsing attributes in process `syz.4.917'. [ 122.018142][ T8577] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 122.134381][ T42] audit: type=1400 audit(1789179006.592:700): avc: denied { read write } for pid=8587 comm="syz.0.921" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 122.134412][ T42] audit: type=1400 audit(1789179006.592:701): avc: denied { open } for pid=8587 comm="syz.0.921" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 122.142610][ T42] audit: type=1400 audit(1789179006.601:702): avc: denied { ioctl } for pid=8587 comm="syz.0.921" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 122.179531][ T5738] Bluetooth: hci1: link tx timeout [ 122.180763][ T5738] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.213124][ T8591] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 122.383946][ T8602] FAULT_INJECTION: forcing a failure. [ 122.383946][ T8602] name failslab, interval 1, probability 0, space 0, times 0 [ 122.383989][ T8602] CPU: 0 UID: 0 PID: 8602 Comm: syz.2.927 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.384033][ T8602] Tainted: [L]=SOFTLOCKUP [ 122.384043][ T8602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.384058][ T8602] Call Trace: [ 122.384080][ T8602] [ 122.384092][ T8602] dump_stack_lvl+0x100/0x190 [ 122.384150][ T8602] should_fail_ex.cold+0x5/0xa [ 122.384191][ T8602] should_failslab+0xc2/0x120 [ 122.384229][ T8602] __kmalloc_noprof+0xfc/0x840 [ 122.384256][ T8602] ? __fget_files+0x215/0x3d0 [ 122.384290][ T8602] ? io_cache_alloc_new+0x45/0xe0 [ 122.384336][ T8602] io_cache_alloc_new+0x45/0xe0 [ 122.384374][ T8602] io_rsrc_node_alloc+0x221/0x2b0 [ 122.384412][ T8602] io_sqe_files_register+0x2a7/0x970 [ 122.384454][ T8602] ? __pfx_io_sqe_files_register+0x10/0x10 [ 122.384504][ T8602] __do_sys_io_uring_register+0xf69/0x1bc0 [ 122.384542][ T8602] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 122.384585][ T8602] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 122.384654][ T8602] ? __x64_sys_futex+0x34f/0x4d0 [ 122.384689][ T8602] ? __x64_sys_futex+0x358/0x4d0 [ 122.384729][ T8602] ? xfd_validate_state+0x129/0x190 [ 122.384770][ T8602] do_syscall_64+0x123/0x790 [ 122.384807][ T8602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.384833][ T8602] RIP: 0033:0x7f5d26f9e159 [ 122.384855][ T8602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.384878][ T8602] RSP: 002b:00007f5d27eff028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 122.384911][ T8602] RAX: ffffffffffffffda RBX: 00007f5d27225fa0 RCX: 00007f5d26f9e159 [ 122.384927][ T8602] RDX: 0000200000002d40 RSI: 0000000000000002 RDI: 0000000000000005 [ 122.384943][ T8602] RBP: 00007f5d2703503b R08: 0000000000000000 R09: 0000000000000000 [ 122.384959][ T8602] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 122.384974][ T8602] R13: 00007f5d27226038 R14: 00007f5d27225fa0 R15: 00007ffd72f0e4e8 [ 122.385010][ T8602] [ 122.409213][ T8606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.439166][ T8604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.512720][ T8613] binder: 8611:8613 ioctl 8933 200000000140 returned -22 [ 122.723721][ T42] audit: type=1400 audit(1789179007.144:703): avc: denied { read } for pid=8628 comm="syz.2.938" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 122.738535][ T8633] lo: entered allmulticast mode [ 122.738728][ T8633] tunl0: entered allmulticast mode [ 122.738903][ T8633] gre0: entered allmulticast mode [ 122.739070][ T8633] gretap0: entered allmulticast mode [ 122.742345][ T8633] erspan0: entered allmulticast mode [ 122.742501][ T8633] ip_vti0: entered allmulticast mode [ 122.742638][ T8633] ip6_vti0: entered allmulticast mode [ 122.742727][ T8633] sit0: entered allmulticast mode [ 122.742815][ T8633] ip6tnl0: entered allmulticast mode [ 122.742961][ T8633] ip6gre0: entered allmulticast mode [ 122.743064][ T8633] syz_tun: entered allmulticast mode [ 122.743188][ T8633] ip6gretap0: entered allmulticast mode [ 122.743282][ T8633] bridge0: entered allmulticast mode [ 122.743388][ T8633] vcan0: entered allmulticast mode [ 122.743518][ T8633] bond0: entered allmulticast mode [ 122.743534][ T8633] bond_slave_0: entered allmulticast mode [ 122.743546][ T8633] bond_slave_1: entered allmulticast mode [ 122.745835][ T8633] team0: entered allmulticast mode [ 122.745851][ T8633] team_slave_0: entered allmulticast mode [ 122.745863][ T8633] team_slave_1: entered allmulticast mode [ 122.746053][ T8633] @0Ù: entered allmulticast mode [ 122.746184][ T8633] nlmon0: entered allmulticast mode [ 122.746333][ T8633] batadv0: entered allmulticast mode [ 122.746457][ T8633] vxcan0: entered allmulticast mode [ 122.746571][ T8633] vxcan1: entered allmulticast mode [ 122.746682][ T8633] veth0: entered allmulticast mode [ 122.746829][ T8633] veth1: entered allmulticast mode [ 122.746965][ T8633] wg0: entered allmulticast mode [ 122.747094][ T8633] wg1: entered allmulticast mode [ 122.747218][ T8633] wg2: entered allmulticast mode [ 122.747388][ T8633] veth0_to_bridge: entered allmulticast mode [ 122.747862][ T8633] veth1_to_bridge: entered allmulticast mode [ 122.753200][ T8633] veth0_to_bond: entered allmulticast mode [ 122.753450][ T8633] veth1_to_bond: entered allmulticast mode [ 122.753683][ T8633] veth0_to_team: entered allmulticast mode [ 122.753976][ T8633] veth1_to_team: entered allmulticast mode [ 122.754221][ T8633] veth0_to_batadv: entered allmulticast mode [ 122.754358][ T8633] batadv_slave_0: entered allmulticast mode [ 122.754540][ T8633] veth1_to_batadv: entered allmulticast mode [ 122.754673][ T8633] batadv_slave_1: entered allmulticast mode [ 122.754798][ T8633] xfrm0: entered allmulticast mode [ 122.754924][ T8633] veth0_to_hsr: entered allmulticast mode [ 122.755124][ T8633] hsr_slave_0: entered allmulticast mode [ 122.755260][ T8633] veth1_to_hsr: entered allmulticast mode [ 122.758696][ T8633] hsr_slave_1: entered allmulticast mode [ 122.758858][ T8633] hsr0: entered allmulticast mode [ 122.759007][ T8633] veth1_virt_wifi: entered allmulticast mode [ 122.759129][ T8633] veth0_virt_wifi: entered allmulticast mode [ 122.759233][ T8633] virt_wifi0: entered allmulticast mode [ 122.759337][ T8633] veth1_vlan: entered allmulticast mode [ 122.759451][ T8633] veth0_vlan: entered allmulticast mode [ 122.759556][ T8633] vlan0: entered allmulticast mode [ 122.759677][ T8633] vlan1: entered allmulticast mode [ 122.759838][ T8633] macvlan0: entered allmulticast mode [ 122.760198][ T8633] macvlan1: entered allmulticast mode [ 122.760371][ T8633] ipvlan0: entered allmulticast mode [ 122.760832][ T8633] ipvlan1: entered allmulticast mode [ 122.760953][ T8633] veth1_macvtap: entered allmulticast mode [ 122.763689][ T8633] veth0_macvtap: entered allmulticast mode [ 122.763820][ T8633] macvtap0: entered allmulticast mode [ 122.763936][ T8633] macsec0: entered allmulticast mode [ 122.764053][ T8633] geneve0: entered allmulticast mode [ 122.764173][ T8633] geneve1: entered allmulticast mode [ 122.764288][ T8633] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 122.764383][ T8633] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 122.764477][ T8633] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 122.764569][ T8633] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 122.764666][ T8633] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 122.764779][ T8633] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 122.764889][ T8633] bond1: entered allmulticast mode [ 122.765027][ T8633] vxlan0: entered allmulticast mode [ 122.765275][ T8633] mac80211_hwsim hwsim11 wlan2: entered allmulticast mode [ 122.765415][ T8633] ip6erspan0: entered allmulticast mode [ 122.765503][ T8633] gretap1: entered allmulticast mode [ 122.768138][ T8633] macsec1: entered allmulticast mode [ 122.768447][ T8633] Uý: entered allmulticast mode [ 122.919331][ T8639] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 122.929944][ T8639] syzkaller0: entered promiscuous mode [ 122.929965][ T8639] syzkaller0: entered allmulticast mode [ 123.032925][ T42] audit: type=1400 audit(1789179007.434:704): avc: denied { ioctl } for pid=8628 comm="syz.2.938" path="/236/trace/trace" dev="tracefs" ino=2650 ioctlcmd=0x2282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 123.185368][ T8642] openvswitch: netlink: EtherType 300 is less than min 600 [ 123.195439][ T8642] geneve2: entered allmulticast mode [ 123.249579][ T8649] geneve2: entered allmulticast mode [ 123.394925][ T8656] FAULT_INJECTION: forcing a failure. [ 123.394925][ T8656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.394986][ T8656] CPU: 2 UID: 0 PID: 8656 Comm: syz.2.945 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.395018][ T8656] Tainted: [L]=SOFTLOCKUP [ 123.395023][ T8656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.395032][ T8656] Call Trace: [ 123.395037][ T8656] [ 123.395044][ T8656] dump_stack_lvl+0x100/0x190 [ 123.395083][ T8656] should_fail_ex.cold+0x5/0xa [ 123.395107][ T8656] _copy_from_user+0x2e/0xd0 [ 123.395128][ T8656] io_sqe_files_register+0x219/0x970 [ 123.395168][ T8656] ? __pfx_io_sqe_files_register+0x10/0x10 [ 123.395197][ T8656] __do_sys_io_uring_register+0xf69/0x1bc0 [ 123.395220][ T8656] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 123.395246][ T8656] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 123.395268][ T8656] ? __x64_sys_futex+0x34f/0x4d0 [ 123.395286][ T8656] ? __x64_sys_futex+0x358/0x4d0 [ 123.395309][ T8656] ? xfd_validate_state+0x129/0x190 [ 123.395333][ T8656] do_syscall_64+0x123/0x790 [ 123.395354][ T8656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.395369][ T8656] RIP: 0033:0x7f5d26f9e159 [ 123.395381][ T8656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.395395][ T8656] RSP: 002b:00007f5d27eff028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 123.395410][ T8656] RAX: ffffffffffffffda RBX: 00007f5d27225fa0 RCX: 00007f5d26f9e159 [ 123.395419][ T8656] RDX: 0000200000002d40 RSI: 0000000000000002 RDI: 0000000000000005 [ 123.395428][ T8656] RBP: 00007f5d2703503b R08: 0000000000000000 R09: 0000000000000000 [ 123.395435][ T8656] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 123.395444][ T8656] R13: 00007f5d27226038 R14: 00007f5d27225fa0 R15: 00007ffd72f0e4e8 [ 123.395463][ T8656] [ 123.618698][ T8661] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 123.717229][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.951'. [ 123.763303][ T42] audit: type=1400 audit(1789179008.108:705): avc: denied { create } for pid=8673 comm="syz.0.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 123.855793][ T8674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=8674 comm=syz.0.953 [ 123.933450][ T8689] tmpfs: Unknown parameter 'smackfsfloor' [ 123.989153][ T8696] devpts: Bad value for 'max' [ 123.990637][ T8696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.962'. [ 123.998478][ T8696] evm: overlay not supported [ 124.142851][ T8712] netlink: 20 bytes leftover after parsing attributes in process `syz.4.970'. [ 124.189818][ T8719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8719 comm=syz.1.973 [ 124.189846][ T8719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=8719 comm=syz.1.973 [ 124.190038][ T8718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=8718 comm=syz.1.973 [ 124.265854][ T6086] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 124.272725][ T6086] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 124.273706][ T6086] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 124.274636][ T6086] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 124.274654][ T6086] rtc rtc0: __rtc_set_alarm: err=-22 [ 124.308342][ T8729] FAULT_INJECTION: forcing a failure. [ 124.308342][ T8729] name failslab, interval 1, probability 0, space 0, times 0 [ 124.308365][ T8729] CPU: 2 UID: 0 PID: 8729 Comm: syz.4.976 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.308381][ T8729] Tainted: [L]=SOFTLOCKUP [ 124.308385][ T8729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.308392][ T8729] Call Trace: [ 124.308397][ T8729] [ 124.308403][ T8729] dump_stack_lvl+0x100/0x190 [ 124.308438][ T8729] should_fail_ex.cold+0x5/0xa [ 124.308456][ T8729] should_failslab+0xc2/0x120 [ 124.308473][ T8729] kmem_cache_alloc_noprof+0x92/0x6a0 [ 124.308489][ T8729] ? anon_vma_clone+0x2b3/0xca0 [ 124.308513][ T8729] anon_vma_clone+0x2b3/0xca0 [ 124.308539][ T8729] dup_anon_vma+0x1c5/0x2f0 [ 124.308567][ T8729] vma_modify+0xd5c/0x29b0 [ 124.308611][ T8729] ? __pfx_vma_modify+0x10/0x10 [ 124.308646][ T8729] ? lock_acquire+0x1d1/0x380 [ 124.308666][ T8729] vma_modify_flags+0x2c3/0x460 [ 124.308685][ T8729] ? __pfx_vma_modify_flags+0x10/0x10 [ 124.308709][ T8729] ? __pfx_futex_wake_mark+0x10/0x10 [ 124.308732][ T8729] mlock_fixup+0x4a8/0xc60 [ 124.308752][ T8729] ? __pfx_mlock_fixup+0x10/0x10 [ 124.308774][ T8729] apply_mlockall_flags.isra.0+0x3b8/0x640 [ 124.308793][ T8729] ? __pfx_apply_mlockall_flags.isra.0+0x10/0x10 [ 124.308816][ T8729] ? __pfx___might_resched+0x10/0x10 [ 124.308830][ T8729] ? down_write_killable+0x152/0x240 [ 124.308858][ T8729] __do_sys_munlockall+0xc7/0x270 [ 124.308870][ T8729] do_syscall_64+0x123/0x790 [ 124.308888][ T8729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.308900][ T8729] RIP: 0033:0x7f89afb9e159 [ 124.308911][ T8729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.308922][ T8729] RSP: 002b:00007f89b0b05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 124.308933][ T8729] RAX: ffffffffffffffda RBX: 00007f89afe26090 RCX: 00007f89afb9e159 [ 124.308941][ T8729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.308947][ T8729] RBP: 00007f89afe26090 R08: 0000000000000000 R09: 0000000000000000 [ 124.308953][ T8729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.308960][ T8729] R13: 00007f89afe26128 R14: 00007f89afe26090 R15: 00007ffe9a7b7af8 [ 124.308974][ T8729] [ 124.374992][ T5738] Bluetooth: hci1: command 0x0406 tx timeout [ 124.508248][ T8737] sctp: [Deprecated]: syz.2.980 (pid 8737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.508248][ T8737] Use struct sctp_sack_info instead [ 124.508551][ T8737] sctp: [Deprecated]: syz.2.980 (pid 8737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.508551][ T8737] Use struct sctp_sack_info instead [ 124.589333][ T8734] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 125.146988][ T8749] genirq: Flags mismatch irq 28. 00200000 (pcmmio) vs. 00200000 (virtio1-input) [ 125.199234][ T8753] FAULT_INJECTION: forcing a failure. [ 125.199234][ T8753] name failslab, interval 1, probability 0, space 0, times 0 [ 125.199271][ T8753] CPU: 3 UID: 0 PID: 8753 Comm: syz.2.986 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.199301][ T8753] Tainted: [L]=SOFTLOCKUP [ 125.199309][ T8753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.199323][ T8753] Call Trace: [ 125.199330][ T8753] [ 125.199339][ T8753] dump_stack_lvl+0x100/0x190 [ 125.199377][ T8753] should_fail_ex.cold+0x5/0xa [ 125.199409][ T8753] should_failslab+0xc2/0x120 [ 125.199437][ T8753] __kmalloc_noprof+0xfc/0x840 [ 125.199458][ T8753] ? __fget_files+0x215/0x3d0 [ 125.199485][ T8753] ? io_cache_alloc_new+0x45/0xe0 [ 125.199521][ T8753] io_cache_alloc_new+0x45/0xe0 [ 125.199551][ T8753] io_rsrc_node_alloc+0x221/0x2b0 [ 125.199581][ T8753] io_sqe_files_register+0x2a7/0x970 [ 125.199615][ T8753] ? __pfx_io_sqe_files_register+0x10/0x10 [ 125.199655][ T8753] __do_sys_io_uring_register+0xf69/0x1bc0 [ 125.199695][ T8753] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 125.199725][ T8753] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 125.199760][ T8753] ? __x64_sys_futex+0x34f/0x4d0 [ 125.199811][ T8753] ? __x64_sys_futex+0x358/0x4d0 [ 125.199845][ T8753] ? xfd_validate_state+0x129/0x190 [ 125.199879][ T8753] do_syscall_64+0x123/0x790 [ 125.199909][ T8753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.199929][ T8753] RIP: 0033:0x7f5d26f9e159 [ 125.199947][ T8753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.199966][ T8753] RSP: 002b:00007f5d27eff028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 125.199985][ T8753] RAX: ffffffffffffffda RBX: 00007f5d27225fa0 RCX: 00007f5d26f9e159 [ 125.200000][ T8753] RDX: 0000200000002d40 RSI: 0000000000000002 RDI: 0000000000000005 [ 125.200014][ T8753] RBP: 00007f5d2703503b R08: 0000000000000000 R09: 0000000000000000 [ 125.200028][ T8753] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 125.200058][ T8753] R13: 00007f5d27226038 R14: 00007f5d27225fa0 R15: 00007ffd72f0e4e8 [ 125.200086][ T8753] [ 125.246968][ T8757] netlink: 28 bytes leftover after parsing attributes in process `syz.4.988'. [ 125.246994][ T8757] netlink: 28 bytes leftover after parsing attributes in process `syz.4.988'. [ 125.267312][ T6086] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 125.268300][ T6086] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 125.277175][ T6086] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 125.278764][ T6086] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 125.278792][ T6086] rtc rtc0: __rtc_set_alarm: err=-22 [ 125.336537][ T8762] syz.1.990 (8762) used obsolete PPPIOCDETACH ioctl [ 125.338414][ T8762] overlayfs: missing 'lowerdir' [ 125.533654][ T8778] FAULT_INJECTION: forcing a failure. [ 125.533654][ T8778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.533694][ T8778] CPU: 1 UID: 0 PID: 8778 Comm: syz.2.997 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.533720][ T8778] Tainted: [L]=SOFTLOCKUP [ 125.533727][ T8778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.533738][ T8778] Call Trace: [ 125.533745][ T8778] [ 125.533753][ T8778] dump_stack_lvl+0x100/0x190 [ 125.533785][ T8778] should_fail_ex.cold+0x5/0xa [ 125.533812][ T8778] _copy_from_user+0x2e/0xd0 [ 125.533834][ T8778] io_sqe_files_register+0x219/0x970 [ 125.533874][ T8778] ? __pfx_io_sqe_files_register+0x10/0x10 [ 125.533913][ T8778] __do_sys_io_uring_register+0xf69/0x1bc0 [ 125.533943][ T8778] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 125.533972][ T8778] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 125.534001][ T8778] ? __x64_sys_futex+0x34f/0x4d0 [ 125.534028][ T8778] ? __x64_sys_futex+0x358/0x4d0 [ 125.534057][ T8778] ? xfd_validate_state+0x129/0x190 [ 125.534089][ T8778] do_syscall_64+0x123/0x790 [ 125.534117][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.534137][ T8778] RIP: 0033:0x7f5d26f9e159 [ 125.534153][ T8778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.534171][ T8778] RSP: 002b:00007f5d27eff028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 125.534203][ T8778] RAX: ffffffffffffffda RBX: 00007f5d27225fa0 RCX: 00007f5d26f9e159 [ 125.534216][ T8778] RDX: 0000200000002d40 RSI: 0000000000000002 RDI: 0000000000000005 [ 125.534229][ T8778] RBP: 00007f5d2703503b R08: 0000000000000000 R09: 0000000000000000 [ 125.534241][ T8778] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 125.534250][ T8778] R13: 00007f5d27226038 R14: 00007f5d27225fa0 R15: 00007ffd72f0e4e8 [ 125.534271][ T8778] [ 125.613647][ T8792] trusted_key: syz.2.999 sent an empty control message without MSG_MORE. [ 125.643773][ T8792] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it! [ 125.817000][ T8810] FAULT_INJECTION: forcing a failure. [ 125.817000][ T8810] name failslab, interval 1, probability 0, space 0, times 0 [ 125.817043][ T8810] CPU: 0 UID: 0 PID: 8810 Comm: syz.2.1007 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.817072][ T8810] Tainted: [L]=SOFTLOCKUP [ 125.817079][ T8810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.817091][ T8810] Call Trace: [ 125.817098][ T8810] [ 125.817106][ T8810] dump_stack_lvl+0x100/0x190 [ 125.817139][ T8810] should_fail_ex.cold+0x5/0xa [ 125.817170][ T8810] should_failslab+0xc2/0x120 [ 125.817197][ T8810] __kmalloc_noprof+0xfc/0x840 [ 125.817217][ T8810] ? __fget_files+0x215/0x3d0 [ 125.817242][ T8810] ? io_cache_alloc_new+0x45/0xe0 [ 125.817277][ T8810] io_cache_alloc_new+0x45/0xe0 [ 125.817306][ T8810] io_rsrc_node_alloc+0x221/0x2b0 [ 125.817337][ T8810] io_sqe_files_register+0x2a7/0x970 [ 125.817369][ T8810] ? __pfx_io_sqe_files_register+0x10/0x10 [ 125.817408][ T8810] __do_sys_io_uring_register+0xf69/0x1bc0 [ 125.817438][ T8810] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 125.817466][ T8810] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 125.817495][ T8810] ? __x64_sys_futex+0x34f/0x4d0 [ 125.817519][ T8810] ? __x64_sys_futex+0x358/0x4d0 [ 125.817546][ T8810] ? xfd_validate_state+0x129/0x190 [ 125.817575][ T8810] do_syscall_64+0x123/0x790 [ 125.817602][ T8810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.817620][ T8810] RIP: 0033:0x7f5d26f9e159 [ 125.817636][ T8810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.817652][ T8810] RSP: 002b:00007f5d27eff028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 125.817672][ T8810] RAX: ffffffffffffffda RBX: 00007f5d27225fa0 RCX: 00007f5d26f9e159 [ 125.817684][ T8810] RDX: 0000200000002d40 RSI: 0000000000000002 RDI: 0000000000000005 [ 125.817695][ T8810] RBP: 00007f5d2703503b R08: 0000000000000000 R09: 0000000000000000 [ 125.817706][ T8810] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 125.817718][ T8810] R13: 00007f5d27226038 R14: 00007f5d27225fa0 R15: 00007ffd72f0e4e8 [ 125.817741][ T8810] [ 125.871948][ T8814] jffs2: notice: (8814) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 126.037124][ T8829] bond0: entered promiscuous mode [ 126.037160][ T8829] bond_slave_0: entered promiscuous mode [ 126.037356][ T8829] bond_slave_1: entered promiscuous mode [ 126.040593][ T8829] gretap0: entered promiscuous mode [ 126.046294][ T8829] hsr1: entered promiscuous mode [ 126.162818][ T8831] /dev/sr0: Can't open blockdev [ 126.251240][ T8844] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8844 comm=syz.0.1015 [ 128.585289][ T8769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 128.589936][ T8779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 128.667369][ T8850] __nla_validate_parse: 3 callbacks suppressed [ 128.667392][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'. [ 128.754051][ T8852] gretap2: entered allmulticast mode [ 128.757635][ T8852] team0: Port device gretap2 added [ 128.773067][ T8852] bridge0: port 3(team0) entered blocking state [ 128.773177][ T8852] bridge0: port 3(team0) entered disabled state [ 128.774703][ T8852] team0: entered promiscuous mode [ 128.774716][ T8852] team_slave_0: entered promiscuous mode [ 128.774821][ T8852] team_slave_1: entered promiscuous mode [ 128.774905][ T8852] gretap2: entered promiscuous mode [ 128.886393][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 128.886421][ T42] audit: type=1400 audit(1789179012.909:713): avc: denied { bind } for pid=8859 comm="syz.2.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.903523][ T42] audit: type=1400 audit(1789179012.918:714): avc: denied { ioctl } for pid=8864 comm="syz.0.1029" path="socket:[29158]" dev="sockfs" ino=29158 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.022090][ T8870] overlayfs: failed to resolve './bus': -2 [ 129.188131][ T5734] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 129.203059][ T8877] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 129.203331][ T42] audit: type=1400 audit(1789179013.199:715): avc: denied { write } for pid=8882 comm="syz.1.1035" name="functions" dev="configfs" ino=24720 scontext=root:sysadm_ ** replaying previous printk message ** [ 129.203331][ T42] audit: type=1400 audit(1789179013.199:715): avc: denied { write } for pid=8882 comm="syz.1.1035" name="functions" dev="configfs" ino=24720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.210843][ T42] audit: type=1400 audit(1789179013.208:716): avc: denied { write } for pid=8882 comm="syz.1.1035" name="header" dev="configfs" ino=31771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.211617][ T42] audit: type=1400 audit(1789179013.208:717): avc: denied { write } for pid=8882 comm="syz.1.1035" name="uncompressed" dev="configfs" ino=31772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.212552][ T8883] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 129.212569][ T8883] audit: out of memory in audit_log_start [ 129.216266][ T42] audit: type=1400 audit(1789179013.208:718): avc: denied { write } for pid=8882 comm="syz.1.1035" name="h" dev="configfs" ino=31781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.217468][ T8883] [ 129.264999][ T6086] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 129.265809][ T6086] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 129.266713][ T6086] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 129.267647][ T6086] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 129.267663][ T6086] rtc rtc0: __rtc_set_alarm: err=-22 [ 129.279250][ T42] audit: type=1400 audit(1789179013.208:719): avc: denied { create } for pid=8882 comm="syz.1.1035" name="u" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 129.279296][ T42] audit: type=1400 audit(1789179013.208:720): avc: denied { write } for pid=8882 comm="syz.1.1035" name="h" dev="configfs" ino=31781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.302038][ T8883] ====================================================== [ 129.305078][ T8883] WARNING: possible circular locking dependency detected [ 129.308645][ T8883] syzkaller #0 Tainted: G L [ 129.312213][ T8883] ------------------------------------------------------ [ 129.315898][ T8883] syz.1.1035/8883 is trying to acquire lock: [ 129.318400][ T8883] ffffffff903fbc88 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 129.323223][ T8883] [ 129.323223][ T8883] but task is already holding lock: [ 129.326256][ T8883] ffff88803986cd40 (&sb->s_type->i_mutex_key#38){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 129.330470][ T8883] [ 129.330470][ T8883] which lock already depends on the new lock. [ 129.330470][ T8883] [ 129.334831][ T8883] [ 129.334831][ T8883] the existing dependency chain (in reverse order) is: [ 129.339610][ T8883] [ 129.339610][ T8883] -> #3 (&sb->s_type->i_mutex_key#38){++++}-{4:4}: [ 129.344014][ T8883] lock_acquire+0x1d1/0x380 [ 129.346112][ T8883] down_write+0x8b/0x1f0 [ 129.348124][ T8883] configfs_depend_item_unlocked+0xf3/0x6a0 [ 129.350768][ T8883] usbg_make_tpg+0x251/0x610 [ 129.352916][ T8883] target_fabric_make_tpg+0xab/0x8c0 [ 129.355706][ T8883] configfs_mkdir+0x525/0xd40 [ 129.358215][ T8883] vfs_mkdir+0x364/0x850 [ 129.360651][ T8883] filename_mkdirat+0x48b/0x5e0 [ 129.363132][ T8883] __x64_sys_mkdir+0x6b/0x90 [ 129.365506][ T8883] do_syscall_64+0x123/0x790 [ 129.367934][ T8883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.370956][ T8883] [ 129.370956][ T8883] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 129.374431][ T8883] lock_acquire+0x1d1/0x380 [ 129.376597][ T8883] __mutex_lock+0x1a4/0x1bd0 [ 129.378683][ T8883] tcm_alloc_inst+0x5f/0x1e0 [ 129.380867][ T8883] try_get_usb_function_instance+0x136/0x1f0 [ 129.384043][ T8883] usb_get_function_instance+0x16/0x70 [ 129.387156][ T8883] function_make+0x18c/0x3f0 [ 129.389689][ T8883] configfs_mkdir+0x525/0xd40 [ 129.392042][ T8883] vfs_mkdir+0x364/0x850 [ 129.394081][ T8883] filename_mkdirat+0x48b/0x5e0 [ 129.396326][ T8883] __x64_sys_mkdir+0x6b/0x90 [ 129.398505][ T8883] do_syscall_64+0x123/0x790 [ 129.400642][ T8883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.403307][ T8883] [ 129.403307][ T8883] -> #1 (func_lock){+.+.}-{4:4}: [ 129.406650][ T8883] lock_acquire+0x1d1/0x380 [ 129.409131][ T8883] __mutex_lock+0x1a4/0x1bd0 [ 129.411877][ T8883] try_get_usb_function_instance+0x26/0x1f0 [ 129.414707][ T8883] usb_get_function_instance+0x16/0x70 [ 129.417162][ T8883] function_make+0x18c/0x3f0 [ 129.419274][ T8883] configfs_mkdir+0x525/0xd40 [ 129.421394][ T8883] vfs_mkdir+0x364/0x850 [ 129.423409][ T8883] filename_mkdirat+0x48b/0x5e0 [ 129.425624][ T8883] __x64_sys_mkdir+0x6b/0x90 [ 129.427771][ T8883] do_syscall_64+0x123/0x790 [ 129.429927][ T8883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.433063][ T8883] [ 129.433063][ T8883] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 129.437246][ T8883] check_prev_add+0xeb/0xe60 [ 129.439362][ T8883] __lock_acquire+0x1528/0x1f40 [ 129.441536][ T8883] lock_acquire+0x1d1/0x380 [ 129.443667][ T8883] __mutex_lock+0x1a4/0x1bd0 [ 129.445819][ T8883] uvcg_streaming_header_allow_link+0x7c/0x650 [ 129.448613][ T8883] configfs_symlink+0x695/0x1340 [ 129.450891][ T8883] vfs_symlink+0x178/0x4d0 [ 129.453419][ T8883] filename_symlinkat+0x2a6/0x560 [ 129.456369][ T8883] __x64_sys_symlinkat+0x9c/0xe0 [ 129.458896][ T8883] do_syscall_64+0x123/0x790 [ 129.461062][ T8883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.463759][ T8883] [ 129.463759][ T8883] other info that might help us debug this: [ 129.463759][ T8883] [ 129.467956][ T8883] Chain exists of: [ 129.467956][ T8883] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#38 [ 129.467956][ T8883] [ 129.474057][ T8883] Possible unsafe locking scenario: [ 129.474057][ T8883] [ 129.477156][ T8883] CPU0 CPU1 [ 129.479457][ T8883] ---- ---- [ 129.482408][ T8883] lock(&sb->s_type->i_mutex_key#38); [ 129.485614][ T8883] lock(tpg_instances_lock); [ 129.490106][ T8883] lock(&sb->s_type->i_mutex_key#38); [ 129.493409][ T8883] lock(gadget_subsys.su_mutex); [ 129.495526][ T8883] [ 129.495526][ T8883] *** DEADLOCK *** [ 129.495526][ T8883] [ 129.498869][ T8883] locks held by syz.1.1035/8883: 2, last CPU#2: [ 129.501469][ T8883] #0: ffff888023b18460 (sb_writers#25){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 129.505417][ T8883] #1: ffff88803986cd40 (&sb->s_type->i_mutex_key#38){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 129.510116][ T8883] [ 129.510116][ T8883] stack backtrace: [ 129.512775][ T8883] CPU: 2 UID: 0 PID: 8883 Comm: syz.1.1035 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.518247][ T8883] Tainted: [L]=SOFTLOCKUP [ 129.520234][ T8883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.524412][ T8883] Call Trace: [ 129.525841][ T8883] [ 129.527104][ T8883] dump_stack_lvl+0x100/0x190 [ 129.529092][ T8883] print_circular_bug.cold+0x178/0x1be [ 129.531540][ T8883] check_noncircular+0x146/0x160 [ 129.534144][ T8883] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 129.537121][ T8883] check_prev_add+0xeb/0xe60 [ 129.539089][ T8883] __lock_acquire+0x1528/0x1f40 [ 129.541128][ T8883] lock_acquire+0x1d1/0x380 [ 129.543073][ T8883] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 129.545669][ T8883] ? __pfx___might_resched+0x10/0x10 [ 129.547860][ T8883] ? audit_inode_permission+0x1ea/0x2a0 [ 129.550162][ T8883] __mutex_lock+0x1a4/0x1bd0 [ 129.552115][ T8883] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 129.554754][ T8883] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 129.557396][ T8883] ? __lock_acquire+0xe8b/0x1f40 [ 129.559471][ T8883] ? __pfx___mutex_lock+0x10/0x10 [ 129.561563][ T8883] ? selinux_inode_permission+0x14a/0x1130 [ 129.564048][ T8883] ? __pfx___might_resched+0x10/0x10 [ 129.566262][ T8883] ? make_vfsgid+0xf1/0x140 [ 129.568221][ T8883] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 129.570921][ T8883] ? security_inode_permission+0xbf/0x250 [ 129.573321][ T8883] uvcg_streaming_header_allow_link+0x7c/0x650 [ 129.576252][ T8883] ? inode_permission+0x374/0x620 [ 129.578400][ T8883] ? mntput_no_expire+0xe7/0x220 [ 129.580502][ T8883] configfs_symlink+0x695/0x1340 [ 129.582632][ T8883] ? __pfx_configfs_symlink+0x10/0x10 [ 129.584931][ T8883] vfs_symlink+0x178/0x4d0 [ 129.586885][ T8883] filename_symlinkat+0x2a6/0x560 [ 129.589167][ T8883] ? __pfx_filename_symlinkat+0x10/0x10 [ 129.591648][ T8883] ? strncpy_from_user+0x19d/0x2d0 [ 129.593863][ T8883] ? do_getname+0x191/0x390 [ 129.595801][ T8883] __x64_sys_symlinkat+0x9c/0xe0 [ 129.597897][ T8883] do_syscall_64+0x123/0x790 [ 129.599855][ T8883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.602483][ T8883] RIP: 0033:0x7ff34e79e159 [ 129.604669][ T8883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.613020][ T8883] RSP: 002b:00007ff34f648028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 129.616156][ T8883] RAX: ffffffffffffffda RBX: 00007ff34ea25fa0 RCX: 00007ff34e79e159 [ 129.619468][ T8883] RDX: 0000200000001600 RSI: ffffffffffffff9c RDI: 0000200000001500 [ 129.622845][ T8883] RBP: 00007ff34e83503b R08: 0000000000000000 R09: 0000000000000000 [ 129.626234][ T8883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.629986][ T8883] R13: 00007ff34ea26038 R14: 00007ff34ea25fa0 R15: 00007ffec5f0be08 [ 129.634085][ T8883] [ 133.769197][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.769237][ T1441] ieee802154 phy1 wpan1: encryption failed: -22