last executing test programs: 2.7177583s ago: executing program 1 (id=1868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000005200)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20014044}, 0x58016) 2.658684877s ago: executing program 1 (id=1871): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r0, 0xae80, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 2.589524825s ago: executing program 1 (id=1874): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x738, 0x1709, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x42, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x18, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x20, 0x2, 0x1e, {0x1e, 0x3, "b84c12e95d45bf0a8f6f5f777be602a9cd3fee86d992c62c408fa2cc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.499509438s ago: executing program 2 (id=1886): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x48}}, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x0, 0x3, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.419378911s ago: executing program 0 (id=1887): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x82, 0x180) write(r0, &(0x7f0000000240)="7375623a2a9e68", 0x7) 997.37516ms ago: executing program 1 (id=1893): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_IE={0x4}]}, 0x38}}, 0x0) 908.275736ms ago: executing program 1 (id=1894): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001940)="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", 0x559, r1) keyctl$link(0x8, r2, r0) 908.134619ms ago: executing program 1 (id=1895): syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0xc, 0x40, 0xa, "", [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x7, 0xfff7, 0x6}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x3, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x40, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8, 0x7, 0x9}}}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 906.473245ms ago: executing program 0 (id=1896): r0 = fsopen(&(0x7f0000000c00)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='bdev\x00', &(0x7f0000000040)='\x00', 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1) 759.160071ms ago: executing program 0 (id=1897): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) 709.619658ms ago: executing program 0 (id=1898): syz_usb_connect(0x6, 0x36, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f00000003c0)=""/237, 0x37, 0xed, 0x1}, 0x20) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x14, &(0x7f0000000000), 0x1, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xffffffffffffff1c}, 0x70) 553.999863ms ago: executing program 2 (id=1899): r0 = syz_create_resource$binfmt(&(0x7f0000000540)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)=ANY=[], 0xfffffffffffffffe, 0x1000) 446.260346ms ago: executing program 2 (id=1900): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 446.013227ms ago: executing program 2 (id=1901): r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x103902, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x8000) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x2, 0x4, 0xffff, 0x8, "008ef14ba278887cb0080000001799317e6324"}) r2 = socket$inet6(0xa, 0x80002, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) 249.528447ms ago: executing program 3 (id=1902): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys_dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_dbg\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_dbg/bus/usb/devices/usb5/authorized_default\x00', 0x1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000240)={0x2c, 0x29, 0x1, {0x83, [{{0x10, 0x0, 0x7}, 0x2be6, 0x2, 0x9, './sys_dbg'}]}}, 0x2c) 199.767344ms ago: executing program 3 (id=1903): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40086602, 0x0) 199.440262ms ago: executing program 2 (id=1904): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000002380)=[{{&(0x7f00000008c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000007"], 0x50}}], 0x1, 0x800) 145.550136ms ago: executing program 0 (id=1905): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000680)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x4e21, @multicast1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_x_sa2={0x2, 0x13, 0x4, 0x0, 0x0, 0x70bd2b}]}, 0x60}}, 0x0) 145.369514ms ago: executing program 2 (id=1906): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b02010000000009040000018ea44300090585"], 0x0) 143.786726ms ago: executing program 3 (id=1907): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000140)={0x40, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_a, @initial, {0x0, 0x9}, @value=@ver_80211n={0x0, 0x9, 0x2, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x16, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20014880}, 0x28008004) 77.942385ms ago: executing program 0 (id=1908): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f00000000c0)="b4618023", 0x0, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}, 0x50) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x4, 0x80000000000001, 0x41, 0x2, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x14e1, 0x0, 0x3, 0x4, 0x2], 0x810d003, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 77.536905ms ago: executing program 3 (id=1909): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) 181.403µs ago: executing program 3 (id=1910): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x8, 0x7, 0x7, 0x4, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x65, 0x0, 0x7, 0x29, 0x0, @multicast2, @broadcast}}}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) 0s ago: executing program 3 (id=1911): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/acpi/uevent\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='add', 0xffffffd9) kernel console output (not intermixed with test programs): 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.412612][ T8030] RSP: 002b:00007fb5a8a17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.412633][ T8030] RAX: ffffffffffffffda RBX: 00007fb5a7e25fa0 RCX: 00007fb5a7b9e159 [ 110.412646][ T8030] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 110.412657][ T8030] RBP: 00007fb5a7c3506b R08: 0000000000000000 R09: 0000000000000000 [ 110.412669][ T8030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.412681][ T8030] R13: 00007fb5a7e26038 R14: 00007fb5a7e25fa0 R15: 00007fffbe047528 [ 110.412708][ T8030] [ 110.763178][ T8055] FAULT_INJECTION: forcing a failure. [ 110.763178][ T8055] name fail_futex, interval 1, probability 0, space 0, times 0 [ 110.763215][ T8055] CPU: 1 UID: 0 PID: 8055 Comm: syz.3.888 Not tainted syzkaller #0 PREEMPT(full) [ 110.763229][ T8055] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.763236][ T8055] Call Trace: [ 110.763241][ T8055] [ 110.763246][ T8055] dump_stack_lvl+0x100/0x190 [ 110.763270][ T8055] should_fail_ex.cold+0x5/0xa [ 110.763287][ T8055] get_futex_key+0x1d0/0x14f0 [ 110.763311][ T8055] ? __pfx_get_futex_key+0x10/0x10 [ 110.763330][ T8055] ? ___sys_sendmsg+0x127/0x1e0 [ 110.763347][ T8055] futex_wake+0xf4/0x5e0 [ 110.763360][ T8055] ? futex_wait+0x11e/0x370 [ 110.763374][ T8055] ? __pfx_futex_wake+0x10/0x10 [ 110.763388][ T8055] ? find_held_lock+0x2b/0x80 [ 110.763409][ T8055] do_futex+0x2b2/0x440 [ 110.763426][ T8055] ? __pfx_do_futex+0x10/0x10 [ 110.763446][ T8055] ? fput+0x7c/0x100 [ 110.763466][ T8055] __x64_sys_futex+0x34f/0x4d0 [ 110.763486][ T8055] ? __pfx___x64_sys_futex+0x10/0x10 [ 110.763509][ T8055] do_syscall_64+0x123/0x790 [ 110.763523][ T8055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.763536][ T8055] RIP: 0033:0x7f41fbf9e159 [ 110.763546][ T8055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.763557][ T8055] RSP: 002b:00007f41fce2c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 110.763569][ T8055] RAX: ffffffffffffffda RBX: 00007f41fc225fa8 RCX: 00007f41fbf9e159 [ 110.763577][ T8055] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f41fc225fac [ 110.763584][ T8055] RBP: 00007f41fc225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 110.763591][ T8055] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000000 [ 110.763598][ T8055] R13: 00007f41fc226038 R14: 00007ffe938198b0 R15: 00007ffe93819998 [ 110.763614][ T8055] [ 111.440564][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.899'. [ 111.440609][ T8082] FAULT_INJECTION: forcing a failure. [ 111.440609][ T8082] name failslab, interval 1, probability 0, space 0, times 0 [ 111.440633][ T8082] CPU: 3 UID: 0 PID: 8082 Comm: syz.1.899 Not tainted syzkaller #0 PREEMPT(full) [ 111.440653][ T8082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.440662][ T8082] Call Trace: [ 111.440668][ T8082] [ 111.440675][ T8082] dump_stack_lvl+0x100/0x190 [ 111.440702][ T8082] should_fail_ex.cold+0x5/0xa [ 111.440727][ T8082] should_failslab+0xc2/0x120 [ 111.440748][ T8082] kmem_cache_alloc_noprof+0x92/0x6a0 [ 111.440771][ T8082] ? skb_clone+0x190/0x400 [ 111.440809][ T8082] skb_clone+0x190/0x400 [ 111.440834][ T8082] netlink_deliver_tap+0xaed/0xcc0 [ 111.440861][ T8082] netlink_unicast+0x6a5/0x850 [ 111.440884][ T8082] ? __pfx_netlink_unicast+0x10/0x10 [ 111.440910][ T8082] netlink_ack+0x655/0xb80 [ 111.440936][ T8082] netlink_rcv_skb+0x333/0x420 [ 111.440956][ T8082] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.440981][ T8082] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.441009][ T8082] ? netlink_deliver_tap+0x1ae/0xcc0 [ 111.441032][ T8082] netlink_unicast+0x585/0x850 [ 111.441055][ T8082] ? __pfx_netlink_unicast+0x10/0x10 [ 111.441081][ T8082] netlink_sendmsg+0x8b0/0xda0 [ 111.441105][ T8082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.441127][ T8082] ? selinux_socket_sendmsg+0x198/0x2f0 [ 111.441152][ T8082] ____sys_sendmsg+0xa4d/0xbe0 [ 111.441167][ T8082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.441189][ T8082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.441215][ T8082] ___sys_sendmsg+0x190/0x1e0 [ 111.441235][ T8082] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.441252][ T8082] ? futex_wait+0x11e/0x370 [ 111.441277][ T8082] ? find_held_lock+0x2b/0x80 [ 111.441314][ T8082] __sys_sendmsg+0x160/0x210 [ 111.441336][ T8082] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.441369][ T8082] do_syscall_64+0x123/0x790 [ 111.441389][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.441408][ T8082] RIP: 0033:0x7fb5a7b9e159 [ 111.441422][ T8082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.441439][ T8082] RSP: 002b:00007fb5a8a17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.441456][ T8082] RAX: ffffffffffffffda RBX: 00007fb5a7e25fa0 RCX: 00007fb5a7b9e159 [ 111.441467][ T8082] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 111.441478][ T8082] RBP: 00007fb5a7c3506b R08: 0000000000000000 R09: 0000000000000000 [ 111.441487][ T8082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.441496][ T8082] R13: 00007fb5a7e26038 R14: 00007fb5a7e25fa0 R15: 00007fffbe047528 [ 111.441518][ T8082] [ 111.659268][ T8102] fuse: Bad value for 'fd' [ 111.705432][ T8104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.909'. [ 111.733419][ T43] kauditd_printk_skb: 97 callbacks suppressed [ 111.733437][ T43] audit: type=1800 audit(1791025551.454:1218): pid=8098 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.907" name="file1" dev="sda1" ino=2038 res=0 errno=0 [ 111.986151][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.918'. [ 112.003972][ T8128] fuse: Bad value for 'fd' [ 112.160806][ T43] audit: type=1800 audit(1791025551.884:1219): pid=8131 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.920" name="file1" dev="sda1" ino=2038 res=0 errno=0 [ 112.483785][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.928'. [ 112.483903][ T8150] FAULT_INJECTION: forcing a failure. [ 112.483903][ T8150] name fail_futex, interval 1, probability 0, space 0, times 0 [ 112.483932][ T8150] CPU: 1 UID: 0 PID: 8150 Comm: syz.0.928 Not tainted syzkaller #0 PREEMPT(full) [ 112.483954][ T8150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.483966][ T8150] Call Trace: [ 112.483974][ T8150] [ 112.483982][ T8150] dump_stack_lvl+0x100/0x190 [ 112.484116][ T8150] should_fail_ex.cold+0x5/0xa [ 112.484174][ T8150] get_futex_key+0x1d0/0x14f0 [ 112.484212][ T8150] ? __pfx_get_futex_key+0x10/0x10 [ 112.484240][ T8150] ? ___sys_sendmsg+0x127/0x1e0 [ 112.484275][ T8150] futex_wake+0xf4/0x5e0 [ 112.484293][ T8150] ? futex_wait+0x11e/0x370 [ 112.484317][ T8150] ? __pfx_futex_wake+0x10/0x10 [ 112.484343][ T8150] ? find_held_lock+0x2b/0x80 [ 112.484380][ T8150] do_futex+0x2b2/0x440 [ 112.484409][ T8150] ? __pfx_do_futex+0x10/0x10 [ 112.484438][ T8150] ? fput+0x7c/0x100 [ 112.484476][ T8150] __x64_sys_futex+0x34f/0x4d0 [ 112.484509][ T8150] ? __pfx___x64_sys_futex+0x10/0x10 [ 112.484548][ T8150] do_syscall_64+0x123/0x790 [ 112.484580][ T8150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.484603][ T8150] RIP: 0033:0x7f33d279e159 [ 112.484621][ T8150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.484641][ T8150] RSP: 002b:00007f33d36d00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.484663][ T8150] RAX: ffffffffffffffda RBX: 00007f33d2a25fa8 RCX: 00007f33d279e159 [ 112.484679][ T8150] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f33d2a25fac [ 112.484691][ T8150] RBP: 00007f33d2a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 112.484704][ T8150] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000000 [ 112.484717][ T8150] R13: 00007f33d2a26038 R14: 00007fffca2936c0 R15: 00007fffca2937a8 [ 112.484753][ T8150] [ 112.532449][ T8154] fuse: Bad value for 'fd' [ 112.701272][ T43] audit: type=1800 audit(1791025552.424:1220): pid=8156 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.932" name="file1" dev="sda1" ino=2038 res=0 errno=0 [ 112.843458][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'. [ 112.843582][ T8175] FAULT_INJECTION: forcing a failure. [ 112.843582][ T8175] name fail_futex, interval 1, probability 0, space 0, times 0 [ 112.843608][ T8175] CPU: 3 UID: 0 PID: 8175 Comm: syz.0.939 Not tainted syzkaller #0 PREEMPT(full) [ 112.843631][ T8175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.843644][ T8175] Call Trace: [ 112.843652][ T8175] [ 112.843661][ T8175] dump_stack_lvl+0x100/0x190 [ 112.843724][ T8175] should_fail_ex.cold+0x5/0xa [ 112.843753][ T8175] get_futex_key+0x1d0/0x14f0 [ 112.843786][ T8175] ? __pfx_get_futex_key+0x10/0x10 [ 112.843819][ T8175] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 112.843853][ T8175] futex_wait_setup+0x91/0x540 [ 112.843880][ T8175] __futex_wait+0x19f/0x300 [ 112.843902][ T8175] ? __pfx___futex_wait+0x10/0x10 [ 112.843921][ T8175] ? __pfx_try_to_wake_up+0x10/0x10 [ 112.843943][ T8175] ? futex_hash+0x311/0x400 [ 112.843971][ T8175] ? __pfx_futex_wake_mark+0x10/0x10 [ 112.843995][ T8175] ? find_held_lock+0x2b/0x80 [ 112.844022][ T8175] ? futex_wake+0x4ea/0x5e0 [ 112.844047][ T8175] futex_wait+0xe6/0x370 [ 112.844068][ T8175] ? __pfx_futex_wait+0x10/0x10 [ 112.844094][ T8175] ? find_held_lock+0x2b/0x80 [ 112.844127][ T8175] do_futex+0x265/0x440 [ 112.844157][ T8175] ? __pfx_do_futex+0x10/0x10 [ 112.844186][ T8175] ? fput+0x7c/0x100 [ 112.844216][ T8175] __x64_sys_futex+0x34f/0x4d0 [ 112.844248][ T8175] ? __pfx___x64_sys_futex+0x10/0x10 [ 112.844286][ T8175] do_syscall_64+0x123/0x790 [ 112.844312][ T8175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.844332][ T8175] RIP: 0033:0x7f33d279e159 [ 112.844355][ T8175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.844376][ T8175] RSP: 002b:00007f33d36d00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.844397][ T8175] RAX: ffffffffffffffda RBX: 00007f33d2a25fa8 RCX: 00007f33d279e159 [ 112.844411][ T8175] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f33d2a25fa8 [ 112.844424][ T8175] RBP: 00007f33d2a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 112.844437][ T8175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.844449][ T8175] R13: 00007f33d2a26038 R14: 00007fffca2936c0 R15: 00007fffca2937a8 [ 112.844477][ T8175] [ 113.121933][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.951'. [ 114.084507][ T8278] FAULT_INJECTION: forcing a failure. [ 114.084507][ T8278] name failslab, interval 1, probability 0, space 0, times 0 [ 114.084542][ T8278] CPU: 3 UID: 0 PID: 8278 Comm: syz.1.983 Not tainted syzkaller #0 PREEMPT(full) [ 114.084568][ T8278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.084583][ T8278] Call Trace: [ 114.084591][ T8278] [ 114.084600][ T8278] dump_stack_lvl+0x100/0x190 [ 114.084658][ T8278] should_fail_ex.cold+0x5/0xa [ 114.084694][ T8278] should_failslab+0xc2/0x120 [ 114.084741][ T8278] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 114.084774][ T8278] ? __alloc_skb+0x5b7/0x710 [ 114.084816][ T8278] ? __alloc_skb+0x140/0x710 [ 114.084856][ T8278] __alloc_skb+0x140/0x710 [ 114.084887][ T8278] ? __alloc_skb+0x5b7/0x710 [ 114.084920][ T8278] ? __pfx___alloc_skb+0x10/0x10 [ 114.084982][ T8278] netlink_ack+0x117/0xb80 [ 114.085026][ T8278] netlink_rcv_skb+0x333/0x420 [ 114.085060][ T8278] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.085101][ T8278] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 114.085145][ T8278] ? netlink_deliver_tap+0x1ae/0xcc0 [ 114.085182][ T8278] netlink_unicast+0x585/0x850 [ 114.085219][ T8278] ? __pfx_netlink_unicast+0x10/0x10 [ 114.085257][ T8278] netlink_sendmsg+0x8b0/0xda0 [ 114.085294][ T8278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.085331][ T8278] ? selinux_socket_sendmsg+0x198/0x2f0 [ 114.085378][ T8278] ____sys_sendmsg+0xa4d/0xbe0 [ 114.085422][ T8278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.085452][ T8278] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.085485][ T8278] ___sys_sendmsg+0x190/0x1e0 [ 114.085510][ T8278] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.085532][ T8278] ? futex_wait+0x11e/0x370 [ 114.085563][ T8278] ? find_held_lock+0x2b/0x80 [ 114.085610][ T8278] __sys_sendmsg+0x160/0x210 [ 114.085639][ T8278] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.085677][ T8278] do_syscall_64+0x123/0x790 [ 114.085707][ T8278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.085727][ T8278] RIP: 0033:0x7fb5a7b9e159 [ 114.085745][ T8278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.085766][ T8278] RSP: 002b:00007fb5a8a17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.085786][ T8278] RAX: ffffffffffffffda RBX: 00007fb5a7e25fa0 RCX: 00007fb5a7b9e159 [ 114.085800][ T8278] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 114.085814][ T8278] RBP: 00007fb5a7c3506b R08: 0000000000000000 R09: 0000000000000000 [ 114.085827][ T8278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.085840][ T8278] R13: 00007fb5a7e26038 R14: 00007fb5a7e25fa0 R15: 00007fffbe047528 [ 114.085868][ T8278] [ 114.854272][ T8335] FAULT_INJECTION: forcing a failure. [ 114.854272][ T8335] name fail_futex, interval 1, probability 0, space 0, times 0 [ 114.854307][ T8335] CPU: 1 UID: 0 PID: 8335 Comm: syz.2.1007 Not tainted syzkaller #0 PREEMPT(full) [ 114.854333][ T8335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.854346][ T8335] Call Trace: [ 114.854361][ T8335] [ 114.854369][ T8335] dump_stack_lvl+0x100/0x190 [ 114.854419][ T8335] should_fail_ex.cold+0x5/0xa [ 114.854450][ T8335] get_futex_key+0x1d0/0x14f0 [ 114.854483][ T8335] ? __pfx_get_futex_key+0x10/0x10 [ 114.854515][ T8335] ? ___sys_sendmsg+0x127/0x1e0 [ 114.854550][ T8335] futex_wake+0xf4/0x5e0 [ 114.854571][ T8335] ? futex_wait+0x11e/0x370 [ 114.854595][ T8335] ? __pfx_futex_wake+0x10/0x10 [ 114.854621][ T8335] ? find_held_lock+0x2b/0x80 [ 114.854662][ T8335] do_futex+0x2b2/0x440 [ 114.854695][ T8335] ? __pfx_do_futex+0x10/0x10 [ 114.854730][ T8335] ? fput+0x7c/0x100 [ 114.854827][ T8335] __x64_sys_futex+0x34f/0x4d0 [ 114.854866][ T8335] ? __pfx___x64_sys_futex+0x10/0x10 [ 114.854911][ T8335] do_syscall_64+0x123/0x790 [ 114.854945][ T8335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.854967][ T8335] RIP: 0033:0x7fa68bd9e159 [ 114.854985][ T8335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.855006][ T8335] RSP: 002b:00007fa68cbde0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.855033][ T8335] RAX: ffffffffffffffda RBX: 00007fa68c025fa8 RCX: 00007fa68bd9e159 [ 114.855047][ T8335] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa68c025fac [ 114.855060][ T8335] RBP: 00007fa68c025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 114.855072][ T8335] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000000 [ 114.855085][ T8335] R13: 00007fa68c026038 R14: 00007ffe0645b5e0 R15: 00007ffe0645b6c8 [ 114.855113][ T8335] [ 115.510697][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1030'. [ 115.947463][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1042'. [ 116.304778][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'. [ 116.913231][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1063'. [ 116.913255][ T8472] FAULT_INJECTION: forcing a failure. [ 116.913255][ T8472] name failslab, interval 1, probability 0, space 0, times 0 [ 116.913277][ T8472] CPU: 3 UID: 0 PID: 8472 Comm: syz.1.1063 Not tainted syzkaller #0 PREEMPT(full) [ 116.913298][ T8472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.913309][ T8472] Call Trace: [ 116.913316][ T8472] [ 116.913323][ T8472] dump_stack_lvl+0x100/0x190 [ 116.913369][ T8472] should_fail_ex.cold+0x5/0xa [ 116.913395][ T8472] should_failslab+0xc2/0x120 [ 116.913426][ T8472] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 116.913448][ T8472] ? __alloc_skb+0x5b7/0x710 [ 116.913477][ T8472] ? __alloc_skb+0x140/0x710 [ 116.913504][ T8472] __alloc_skb+0x140/0x710 [ 116.913527][ T8472] ? __alloc_skb+0x5b7/0x710 [ 116.913548][ T8472] ? __pfx___alloc_skb+0x10/0x10 [ 116.913603][ T8472] netlink_ack+0x117/0xb80 [ 116.913634][ T8472] netlink_rcv_skb+0x333/0x420 [ 116.913657][ T8472] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.913685][ T8472] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.913727][ T8472] ? netlink_deliver_tap+0x1ae/0xcc0 [ 116.913756][ T8472] netlink_unicast+0x585/0x850 [ 116.913782][ T8472] ? __pfx_netlink_unicast+0x10/0x10 [ 116.913811][ T8472] netlink_sendmsg+0x8b0/0xda0 [ 116.913838][ T8472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.913862][ T8472] ? selinux_socket_sendmsg+0x198/0x2f0 [ 116.913889][ T8472] ____sys_sendmsg+0xa4d/0xbe0 [ 116.913907][ T8472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.913932][ T8472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.913963][ T8472] ___sys_sendmsg+0x190/0x1e0 [ 116.913983][ T8472] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.914003][ T8472] ? futex_wait+0x11e/0x370 [ 116.914031][ T8472] ? find_held_lock+0x2b/0x80 [ 116.914073][ T8472] __sys_sendmsg+0x160/0x210 [ 116.914099][ T8472] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.914135][ T8472] do_syscall_64+0x123/0x790 [ 116.914166][ T8472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.914186][ T8472] RIP: 0033:0x7fb5a7b9e159 [ 116.914202][ T8472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.914219][ T8472] RSP: 002b:00007fb5a8a17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.914239][ T8472] RAX: ffffffffffffffda RBX: 00007fb5a7e25fa0 RCX: 00007fb5a7b9e159 [ 116.914251][ T8472] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 116.914262][ T8472] RBP: 00007fb5a7c3506b R08: 0000000000000000 R09: 0000000000000000 [ 116.914273][ T8472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.914283][ T8472] R13: 00007fb5a7e26038 R14: 00007fb5a7e25fa0 R15: 00007fffbe047528 [ 116.914306][ T8472] [ 117.296835][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1072'. [ 117.613666][ T8516] kvm: pic: single mode not supported [ 117.630954][ T8521] fuse: Bad value for 'group_id' [ 117.630977][ T8521] fuse: Bad value for 'group_id' [ 117.675138][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1084'. [ 118.096209][ T8545] fuse: Bad value for 'group_id' [ 118.096228][ T8545] fuse: Bad value for 'group_id' [ 118.153098][ T8547] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1094'. [ 118.286383][ T8551] kvm: pic: single mode not supported [ 118.572437][ T8566] fuse: Bad value for 'group_id' [ 118.572457][ T8566] fuse: Bad value for 'group_id' [ 118.612496][ T8568] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1103'. [ 118.745111][ T8577] kvm: pic: single mode not supported [ 118.954164][ T8587] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 119.082192][ T8598] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1115'. [ 119.345465][ T8611] kvm: pic: single mode not supported [ 119.602284][ T8623] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1125'. [ 119.821878][ T8633] kvm: pic: single mode not supported [ 119.998457][ T8647] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1135'. [ 119.998643][ T8647] FAULT_INJECTION: forcing a failure. [ 119.998643][ T8647] name fail_futex, interval 1, probability 0, space 0, times 0 [ 119.998668][ T8647] CPU: 1 UID: 0 PID: 8647 Comm: syz.2.1135 Not tainted syzkaller #0 PREEMPT(full) [ 119.998685][ T8647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.998695][ T8647] Call Trace: [ 119.998701][ T8647] [ 119.998707][ T8647] dump_stack_lvl+0x100/0x190 [ 119.998749][ T8647] should_fail_ex.cold+0x5/0xa [ 119.998778][ T8647] get_futex_key+0x1d0/0x14f0 [ 119.998804][ T8647] ? __pfx_get_futex_key+0x10/0x10 [ 119.998827][ T8647] ? ___sys_sendmsg+0x127/0x1e0 [ 119.998855][ T8647] futex_wake+0xf4/0x5e0 [ 119.998871][ T8647] ? futex_wait+0x11e/0x370 [ 119.998890][ T8647] ? __pfx_futex_wake+0x10/0x10 [ 119.998909][ T8647] ? find_held_lock+0x2b/0x80 [ 119.998940][ T8647] do_futex+0x2b2/0x440 [ 119.998965][ T8647] ? __pfx_do_futex+0x10/0x10 [ 119.998989][ T8647] ? fput+0x7c/0x100 [ 119.999021][ T8647] __x64_sys_futex+0x34f/0x4d0 [ 119.999047][ T8647] ? __pfx___x64_sys_futex+0x10/0x10 [ 119.999080][ T8647] do_syscall_64+0x123/0x790 [ 119.999107][ T8647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.999126][ T8647] RIP: 0033:0x7fa68bd9e159 [ 119.999141][ T8647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.999157][ T8647] RSP: 002b:00007fa68cbde0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.999174][ T8647] RAX: ffffffffffffffda RBX: 00007fa68c025fa8 RCX: 00007fa68bd9e159 [ 119.999185][ T8647] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa68c025fac [ 119.999195][ T8647] RBP: 00007fa68c025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 119.999204][ T8647] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000000 [ 119.999214][ T8647] R13: 00007fa68c026038 R14: 00007ffe0645b5e0 R15: 00007ffe0645b6c8 [ 119.999236][ T8647] [ 120.383570][ T8666] kvm: pic: single mode not supported [ 120.572001][ T8681] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1148'. [ 120.572093][ T8681] FAULT_INJECTION: forcing a failure. [ 120.572093][ T8681] name fail_futex, interval 1, probability 0, space 0, times 0 [ 120.572115][ T8681] CPU: 1 UID: 0 PID: 8681 Comm: syz.3.1148 Not tainted syzkaller #0 PREEMPT(full) [ 120.572135][ T8681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.572145][ T8681] Call Trace: [ 120.572152][ T8681] [ 120.572160][ T8681] dump_stack_lvl+0x100/0x190 [ 120.572204][ T8681] should_fail_ex.cold+0x5/0xa [ 120.572227][ T8681] get_futex_key+0x1d0/0x14f0 [ 120.572274][ T8681] ? __pfx_get_futex_key+0x10/0x10 [ 120.572306][ T8681] ? ___sys_sendmsg+0x127/0x1e0 [ 120.572338][ T8681] futex_wake+0xf4/0x5e0 [ 120.572357][ T8681] ? futex_wait+0x11e/0x370 [ 120.572380][ T8681] ? __pfx_futex_wake+0x10/0x10 [ 120.572405][ T8681] ? find_held_lock+0x2b/0x80 [ 120.572441][ T8681] do_futex+0x2b2/0x440 [ 120.572470][ T8681] ? __pfx_do_futex+0x10/0x10 [ 120.572501][ T8681] ? fput+0x7c/0x100 [ 120.572536][ T8681] __x64_sys_futex+0x34f/0x4d0 [ 120.572567][ T8681] ? __pfx___x64_sys_futex+0x10/0x10 [ 120.572606][ T8681] do_syscall_64+0x123/0x790 [ 120.572635][ T8681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.572656][ T8681] RIP: 0033:0x7f41fbf9e159 [ 120.572672][ T8681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.572690][ T8681] RSP: 002b:00007f41fce2c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.572716][ T8681] RAX: ffffffffffffffda RBX: 00007f41fc225fa8 RCX: 00007f41fbf9e159 [ 120.572730][ T8681] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f41fc225fac [ 120.572742][ T8681] RBP: 00007f41fc225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 120.572753][ T8681] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000000 [ 120.572764][ T8681] R13: 00007f41fc226038 R14: 00007ffe938198b0 R15: 00007ffe93819998 [ 120.572789][ T8681] [ 120.929009][ T8702] kvm: pic: single mode not supported [ 120.930756][ T8702] kvm: pic: single mode not supported [ 120.930769][ T8702] kvm: pic: level sensitive irq not supported [ 121.098578][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1162'. [ 121.440634][ T8736] kvm: pic: single mode not supported [ 121.442229][ T8736] kvm: pic: single mode not supported [ 121.442243][ T8736] kvm: pic: level sensitive irq not supported [ 121.576941][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'. [ 121.621891][ T8749] fuse: Unknown parameter 'grou00000000000000000000' [ 121.790094][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1184'. [ 121.790220][ T8767] FAULT_INJECTION: forcing a failure. [ 121.790220][ T8767] name fail_futex, interval 1, probability 0, space 0, times 0 [ 121.790250][ T8767] CPU: 2 UID: 0 PID: 8767 Comm: syz.0.1184 Not tainted syzkaller #0 PREEMPT(full) [ 121.790278][ T8767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.790290][ T8767] Call Trace: [ 121.790310][ T8767] [ 121.790319][ T8767] dump_stack_lvl+0x100/0x190 [ 121.790362][ T8767] should_fail_ex.cold+0x5/0xa [ 121.790396][ T8767] get_futex_key+0x1d0/0x14f0 [ 121.790432][ T8767] ? __pfx_get_futex_key+0x10/0x10 [ 121.790468][ T8767] ? ___sys_sendmsg+0x127/0x1e0 [ 121.790499][ T8767] futex_wake+0xf4/0x5e0 [ 121.790526][ T8767] ? __pfx_futex_wake+0x10/0x10 [ 121.790556][ T8767] ? find_held_lock+0x2b/0x80 [ 121.790595][ T8767] do_futex+0x2b2/0x440 [ 121.790629][ T8767] ? __pfx_do_futex+0x10/0x10 [ 121.790663][ T8767] ? fput+0x7c/0x100 [ 121.790696][ T8767] __x64_sys_futex+0x34f/0x4d0 [ 121.790731][ T8767] ? __pfx___x64_sys_futex+0x10/0x10 [ 121.790776][ T8767] do_syscall_64+0x123/0x790 [ 121.790803][ T8767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.790829][ T8767] RIP: 0033:0x7f33d279e159 [ 121.790850][ T8767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.790874][ T8767] RSP: 002b:00007f33d36d00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.790900][ T8767] RAX: ffffffffffffffda RBX: 00007f33d2a25fa8 RCX: 00007f33d279e159 [ 121.790916][ T8767] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f33d2a25fac [ 121.790932][ T8767] RBP: 00007f33d2a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 121.790945][ T8767] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000000 [ 121.790957][ T8767] R13: 00007f33d2a26038 R14: 00007fffca2936c0 R15: 00007fffca2937a8 [ 121.790988][ T8767] [ 121.843498][ T8769] kvm: pic: level sensitive irq not supported [ 121.912706][ T8775] fuse: Unknown parameter 'grou00000000000000000000' [ 122.219859][ T8798] fuse: Unknown parameter 'grou00000000000000000000' [ 122.297708][ T8802] kvm: pic: level sensitive irq not supported [ 122.481154][ T43] audit: type=1400 audit(1791025562.204:1221): avc: denied { ioctl } for pid=8814 comm="syz.1.1204" path="socket:[34645]" dev="sockfs" ino=34645 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.484224][ T43] audit: type=1400 audit(1791025562.204:1222): avc: denied { ioctl } for pid=8814 comm="syz.1.1204" path="socket:[34647]" dev="sockfs" ino=34647 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.646791][ T8831] fuse: Unknown parameter 'group_i00000000000000000000' [ 122.854819][ T8838] pic_ioport_write: 4 callbacks suppressed [ 122.854839][ T8838] kvm: pic: single mode not supported [ 122.856288][ T8838] kvm: pic: single mode not supported [ 122.856301][ T8838] kvm: pic: level sensitive irq not supported [ 123.033724][ T8854] fuse: Unknown parameter 'group_i00000000000000000000' [ 123.290041][ T8868] kvm: pic: single mode not supported [ 123.292454][ T8868] kvm: pic: single mode not supported [ 123.292470][ T8868] kvm: pic: level sensitive irq not supported [ 123.449323][ T8879] FAULT_INJECTION: forcing a failure. [ 123.449323][ T8879] name fail_futex, interval 1, probability 0, space 0, times 0 [ 123.449356][ T8879] CPU: 0 UID: 0 PID: 8879 Comm: syz.1.1230 Not tainted syzkaller #0 PREEMPT(full) [ 123.449383][ T8879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.449396][ T8879] Call Trace: [ 123.449409][ T8879] [ 123.449418][ T8879] dump_stack_lvl+0x100/0x190 [ 123.449462][ T8879] should_fail_ex.cold+0x5/0xa [ 123.449488][ T8879] get_futex_key+0x1d0/0x14f0 [ 123.449516][ T8879] ? __pfx_get_futex_key+0x10/0x10 [ 123.449539][ T8879] ? __pfx___resched_curr+0x10/0x10 [ 123.449564][ T8879] ? wakeup_preempt_fair+0x4a0/0xdc0 [ 123.449598][ T8879] futex_wait_setup+0x91/0x540 [ 123.449628][ T8879] __futex_wait+0x19f/0x300 [ 123.449670][ T8879] ? __pfx___futex_wait+0x10/0x10 [ 123.449689][ T8879] ? __pfx_try_to_wake_up+0x10/0x10 [ 123.449712][ T8879] ? futex_hash+0x311/0x400 [ 123.449738][ T8879] ? __pfx_futex_wake_mark+0x10/0x10 [ 123.449762][ T8879] ? find_held_lock+0x2b/0x80 [ 123.449790][ T8879] ? futex_wake+0x4ea/0x5e0 [ 123.449815][ T8879] futex_wait+0xe6/0x370 [ 123.449836][ T8879] ? __pfx_futex_wait+0x10/0x10 [ 123.449861][ T8879] ? find_held_lock+0x2b/0x80 [ 123.449893][ T8879] do_futex+0x265/0x440 [ 123.449920][ T8879] ? __pfx_do_futex+0x10/0x10 [ 123.449949][ T8879] ? fput+0x7c/0x100 [ 123.449985][ T8879] __x64_sys_futex+0x34f/0x4d0 [ 123.450016][ T8879] ? __pfx___x64_sys_futex+0x10/0x10 [ 123.450054][ T8879] do_syscall_64+0x123/0x790 [ 123.450083][ T8879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.450102][ T8879] RIP: 0033:0x7fb5a7b9e159 [ 123.450122][ T8879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.450139][ T8879] RSP: 002b:00007fb5a8a170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.450163][ T8879] RAX: ffffffffffffffda RBX: 00007fb5a7e25fa8 RCX: 00007fb5a7b9e159 [ 123.450176][ T8879] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb5a7e25fa8 [ 123.450188][ T8879] RBP: 00007fb5a7e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 123.450200][ T8879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.450211][ T8879] R13: 00007fb5a7e26038 R14: 00007fffbe047440 R15: 00007fffbe047528 [ 123.450237][ T8879] [ 123.514590][ T8884] fuse: Unknown parameter 'group_i00000000000000000000' [ 123.845232][ T8902] kvm: pic: single mode not supported [ 123.846672][ T8902] kvm: pic: single mode not supported [ 123.846685][ T8902] kvm: pic: level sensitive irq not supported [ 123.878651][ T8907] FAULT_INJECTION: forcing a failure. [ 123.878651][ T8907] name fail_futex, interval 1, probability 0, space 0, times 0 [ 123.878684][ T8907] CPU: 0 UID: 0 PID: 8907 Comm: syz.2.1240 Not tainted syzkaller #0 PREEMPT(full) [ 123.878703][ T8907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.878713][ T8907] Call Trace: [ 123.878719][ T8907] [ 123.878727][ T8907] dump_stack_lvl+0x100/0x190 [ 123.878779][ T8907] should_fail_ex.cold+0x5/0xa [ 123.878807][ T8907] get_futex_key+0x1d0/0x14f0 [ 123.878836][ T8907] ? __pfx_get_futex_key+0x10/0x10 [ 123.878858][ T8907] ? trace_ipi_send_cpu.constprop.0+0x73/0x220 [ 123.878882][ T8907] ? __smp_call_single_queue+0x17e/0x450 [ 123.878904][ T8907] ? __pfx___smp_call_single_queue+0x10/0x10 [ 123.878929][ T8907] futex_wait_setup+0x91/0x540 [ 123.878954][ T8907] __futex_wait+0x19f/0x300 [ 123.878974][ T8907] ? __pfx___futex_wait+0x10/0x10 [ 123.878990][ T8907] ? __pfx_try_to_wake_up+0x10/0x10 [ 123.879029][ T8907] ? futex_hash+0x311/0x400 [ 123.879053][ T8907] ? __pfx_futex_wake_mark+0x10/0x10 [ 123.879075][ T8907] ? find_held_lock+0x2b/0x80 [ 123.879103][ T8907] ? futex_wake+0x4ea/0x5e0 [ 123.879127][ T8907] futex_wait+0xe6/0x370 [ 123.879146][ T8907] ? __pfx_futex_wait+0x10/0x10 [ 123.879170][ T8907] ? find_held_lock+0x2b/0x80 [ 123.879201][ T8907] do_futex+0x265/0x440 [ 123.879226][ T8907] ? __pfx_do_futex+0x10/0x10 [ 123.879252][ T8907] ? fput+0x7c/0x100 [ 123.879277][ T8907] __x64_sys_futex+0x34f/0x4d0 [ 123.879306][ T8907] ? __pfx___x64_sys_futex+0x10/0x10 [ 123.879340][ T8907] do_syscall_64+0x123/0x790 [ 123.879362][ T8907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.879381][ T8907] RIP: 0033:0x7fa68bd9e159 [ 123.879397][ T8907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.879414][ T8907] RSP: 002b:00007fa68cbde0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.879432][ T8907] RAX: ffffffffffffffda RBX: 00007fa68c025fa8 RCX: 00007fa68bd9e159 [ 123.879444][ T8907] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa68c025fa8 [ 123.879455][ T8907] RBP: 00007fa68c025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 123.879465][ T8907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.879477][ T8907] R13: 00007fa68c026038 R14: 00007ffe0645b5e0 R15: 00007ffe0645b6c8 [ 123.879502][ T8907] [ 123.939655][ T8909] fuse: Unknown parameter 'group_id00000000000000000000' [ 124.202542][ T8930] FAULT_INJECTION: forcing a failure. [ 124.202542][ T8930] name fail_futex, interval 1, probability 0, space 0, times 0 [ 124.202575][ T8930] CPU: 2 UID: 0 PID: 8930 Comm: syz.3.1249 Not tainted syzkaller #0 PREEMPT(full) [ 124.202598][ T8930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.202610][ T8930] Call Trace: [ 124.202618][ T8930] [ 124.202626][ T8930] dump_stack_lvl+0x100/0x190 [ 124.202663][ T8930] should_fail_ex.cold+0x5/0xa [ 124.202694][ T8930] get_futex_key+0x1d0/0x14f0 [ 124.202725][ T8930] ? __pfx_get_futex_key+0x10/0x10 [ 124.202750][ T8930] ? put_pid.part.0+0xaf/0x150 [ 124.202777][ T8930] ? put_pid+0x24/0x30 [ 124.202801][ T8930] ? netlink_sendmsg+0x4ee/0xda0 [ 124.202846][ T8930] futex_wait_setup+0x91/0x540 [ 124.202881][ T8930] __futex_wait+0x19f/0x300 [ 124.202905][ T8930] ? __pfx___futex_wait+0x10/0x10 [ 124.202926][ T8930] ? futex_hash+0x311/0x400 [ 124.202957][ T8930] ? __pfx_futex_wake_mark+0x10/0x10 [ 124.202983][ T8930] ? __pfx_futex_hash+0x10/0x10 [ 124.203012][ T8930] ? ___sys_sendmsg+0x127/0x1e0 [ 124.203041][ T8930] futex_wait+0xe6/0x370 [ 124.203062][ T8930] ? __pfx_futex_wait+0x10/0x10 [ 124.203089][ T8930] ? find_held_lock+0x2b/0x80 [ 124.203125][ T8930] do_futex+0x265/0x440 [ 124.203172][ T8930] ? __pfx_do_futex+0x10/0x10 [ 124.203202][ T8930] ? fput+0x7c/0x100 [ 124.203233][ T8930] __x64_sys_futex+0x34f/0x4d0 [ 124.203266][ T8930] ? __pfx___x64_sys_futex+0x10/0x10 [ 124.203305][ T8930] do_syscall_64+0x123/0x790 [ 124.203329][ T8930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.203351][ T8930] RIP: 0033:0x7f41fbf9e159 [ 124.203368][ T8930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.203389][ T8930] RSP: 002b:00007f41fce2c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.203410][ T8930] RAX: ffffffffffffffda RBX: 00007f41fc225fa8 RCX: 00007f41fbf9e159 [ 124.203424][ T8930] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f41fc225fa8 [ 124.203438][ T8930] RBP: 00007f41fc225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 124.203450][ T8930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.203463][ T8930] R13: 00007f41fc226038 R14: 00007ffe938198b0 R15: 00007ffe93819998 [ 124.203489][ T8930] [ 124.281942][ T8935] fuse: Unknown parameter 'group_id00000000000000000000' [ 124.411995][ T8937] kvm: pic: single mode not supported [ 124.413409][ T8937] kvm: pic: single mode not supported [ 124.413421][ T8937] kvm: pic: level sensitive irq not supported [ 124.567857][ T8954] FAULT_INJECTION: forcing a failure. [ 124.567857][ T8954] name fail_futex, interval 1, probability 0, space 0, times 0 [ 124.567889][ T8954] CPU: 1 UID: 0 PID: 8954 Comm: syz.3.1259 Not tainted syzkaller #0 PREEMPT(full) [ 124.567910][ T8954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.567920][ T8954] Call Trace: [ 124.567926][ T8954] [ 124.567933][ T8954] dump_stack_lvl+0x100/0x190 [ 124.567963][ T8954] should_fail_ex.cold+0x5/0xa [ 124.567992][ T8954] get_futex_key+0x1d0/0x14f0 [ 124.568037][ T8954] ? __pfx_get_futex_key+0x10/0x10 [ 124.568065][ T8954] ? ___sys_sendmsg+0x127/0x1e0 [ 124.568089][ T8954] futex_wake+0xf4/0x5e0 [ 124.568105][ T8954] ? futex_wait+0x11e/0x370 [ 124.568126][ T8954] ? __pfx_futex_wake+0x10/0x10 [ 124.568147][ T8954] ? find_held_lock+0x2b/0x80 [ 124.568178][ T8954] do_futex+0x2b2/0x440 [ 124.568203][ T8954] ? __pfx_do_futex+0x10/0x10 [ 124.568228][ T8954] ? fput+0x7c/0x100 [ 124.568253][ T8954] __x64_sys_futex+0x34f/0x4d0 [ 124.568288][ T8954] ? __pfx___x64_sys_futex+0x10/0x10 [ 124.568323][ T8954] do_syscall_64+0x123/0x790 [ 124.568346][ T8954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.568364][ T8954] RIP: 0033:0x7f41fbf9e159 [ 124.568379][ T8954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.568394][ T8954] RSP: 002b:00007f41fce2c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.568412][ T8954] RAX: ffffffffffffffda RBX: 00007f41fc225fa8 RCX: 00007f41fbf9e159 [ 124.568423][ T8954] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f41fc225fac [ 124.568433][ T8954] RBP: 00007f41fc225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 124.568444][ T8954] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000000 [ 124.568454][ T8954] R13: 00007f41fc226038 R14: 00007ffe938198b0 R15: 00007ffe93819998 [ 124.568479][ T8954] [ 124.723161][ T8960] fuse: Unknown parameter 'group_id00000000000000000000' [ 124.909699][ T8970] kvm: pic: single mode not supported [ 124.911035][ T8970] kvm: pic: single mode not supported [ 124.911045][ T8970] kvm: pic: level sensitive irq not supported [ 125.074040][ T8985] fuse: Bad value for 'user_id' [ 125.074062][ T8985] fuse: Bad value for 'user_id' [ 125.368498][ T43] audit: type=1400 audit(1791025565.084:1223): avc: denied { execute } for pid=8989 comm="syz.0.1274" path="/293/file1" dev="tmpfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 125.451990][ T8996] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.820588][ T9002] FAULT_INJECTION: forcing a failure. [ 125.820588][ T9002] name failslab, interval 1, probability 0, space 0, times 0 [ 125.820619][ T9002] CPU: 0 UID: 0 PID: 9002 Comm: syz.1.1278 Not tainted syzkaller #0 PREEMPT(full) [ 125.820640][ T9002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.820651][ T9002] Call Trace: [ 125.820658][ T9002] [ 125.820666][ T9002] dump_stack_lvl+0x100/0x190 [ 125.820700][ T9002] should_fail_ex.cold+0x5/0xa [ 125.820738][ T9002] should_failslab+0xc2/0x120 [ 125.820765][ T9002] kmem_cache_alloc_noprof+0x92/0x6a0 [ 125.820789][ T9002] ? skb_clone+0x190/0x400 [ 125.820820][ T9002] skb_clone+0x190/0x400 [ 125.820847][ T9002] netlink_deliver_tap+0xaed/0xcc0 [ 125.820876][ T9002] netlink_unicast+0x6a5/0x850 [ 125.820903][ T9002] ? __pfx_netlink_unicast+0x10/0x10 [ 125.820935][ T9002] netlink_ack+0x655/0xb80 [ 125.820966][ T9002] netlink_rcv_skb+0x333/0x420 [ 125.820992][ T9002] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.821022][ T9002] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 125.821054][ T9002] ? netlink_deliver_tap+0x1ae/0xcc0 [ 125.821078][ T9002] netlink_unicast+0x585/0x850 [ 125.821101][ T9002] ? __pfx_netlink_unicast+0x10/0x10 [ 125.821126][ T9002] netlink_sendmsg+0x8b0/0xda0 [ 125.821182][ T9002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.821211][ T9002] ? selinux_socket_sendmsg+0x198/0x2f0 [ 125.821236][ T9002] ____sys_sendmsg+0xa4d/0xbe0 [ 125.821254][ T9002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.821280][ T9002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.821309][ T9002] ___sys_sendmsg+0x190/0x1e0 [ 125.821332][ T9002] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.821352][ T9002] ? futex_wait+0x11e/0x370 [ 125.821379][ T9002] ? find_held_lock+0x2b/0x80 [ 125.821421][ T9002] __sys_sendmsg+0x160/0x210 [ 125.821447][ T9002] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.821485][ T9002] do_syscall_64+0x123/0x790 [ 125.821508][ T9002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.821527][ T9002] RIP: 0033:0x7fb5a7b9e159 [ 125.821544][ T9002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.821562][ T9002] RSP: 002b:00007fb5a8a17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.821582][ T9002] RAX: ffffffffffffffda RBX: 00007fb5a7e25fa0 RCX: 00007fb5a7b9e159 [ 125.821594][ T9002] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 125.821605][ T9002] RBP: 00007fb5a7c3506b R08: 0000000000000000 R09: 0000000000000000 [ 125.821615][ T9002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.821626][ T9002] R13: 00007fb5a7e26038 R14: 00007fb5a7e25fa0 R15: 00007fffbe047528 [ 125.821651][ T9002] [ 125.952171][ T9006] kvm: pic: level sensitive irq not supported [ 126.093186][ T9011] fuse: Bad value for 'user_id' [ 126.093207][ T9011] fuse: Bad value for 'user_id' [ 126.196085][ T9019] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 126.329125][ T9025] IPv6: addrconf: prefix option has invalid lifetime [ 126.510946][ T9036] fuse: Bad value for 'user_id' [ 126.510966][ T9036] fuse: Bad value for 'user_id' [ 126.609952][ T9041] kvm: pic: level sensitive irq not supported [ 126.813011][ T9052] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 127.078317][ T9065] fuse: Bad value for 'fd' [ 127.180708][ T9069] kvm: pic: level sensitive irq not supported [ 127.298244][ T9077] FAULT_INJECTION: forcing a failure. [ 127.298244][ T9077] name fail_futex, interval 1, probability 0, space 0, times 0 [ 127.298287][ T9077] CPU: 1 UID: 0 PID: 9077 Comm: syz.1.1307 Not tainted syzkaller #0 PREEMPT(full) [ 127.298315][ T9077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.298329][ T9077] Call Trace: [ 127.298338][ T9077] [ 127.298347][ T9077] dump_stack_lvl+0x100/0x190 [ 127.298387][ T9077] should_fail_ex.cold+0x5/0xa [ 127.298422][ T9077] get_futex_key+0x1d0/0x14f0 [ 127.298457][ T9077] ? __pfx_get_futex_key+0x10/0x10 [ 127.298490][ T9077] ? ___sys_sendmsg+0x127/0x1e0 [ 127.298522][ T9077] futex_wake+0xf4/0x5e0 [ 127.298544][ T9077] ? futex_wait+0x11e/0x370 [ 127.298573][ T9077] ? __pfx_futex_wake+0x10/0x10 [ 127.298601][ T9077] ? find_held_lock+0x2b/0x80 [ 127.298642][ T9077] do_futex+0x2b2/0x440 [ 127.298675][ T9077] ? __pfx_do_futex+0x10/0x10 [ 127.298737][ T9077] ? fput+0x7c/0x100 [ 127.298773][ T9077] __x64_sys_futex+0x34f/0x4d0 [ 127.298811][ T9077] ? __pfx___x64_sys_futex+0x10/0x10 [ 127.298856][ T9077] do_syscall_64+0x123/0x790 [ 127.298883][ T9077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.298906][ T9077] RIP: 0033:0x7fb5a7b9e159 [ 127.298928][ T9077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.298951][ T9077] RSP: 002b:00007fb5a8a170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.298975][ T9077] RAX: ffffffffffffffda RBX: 00007fb5a7e25fa8 RCX: 00007fb5a7b9e159 [ 127.298990][ T9077] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb5a7e25fac [ 127.299004][ T9077] RBP: 00007fb5a7e25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 127.299016][ T9077] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000000 [ 127.299049][ T9077] R13: 00007fb5a7e26038 R14: 00007fffbe047440 R15: 00007fffbe047528 [ 127.299080][ T9077] [ 127.567704][ T9090] fuse: Bad value for 'fd' [ 127.896046][ T9108] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1318'. [ 128.220997][ T9118] fuse: Bad value for 'fd' [ 128.917671][ T9130] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1327'. [ 128.917696][ T9130] FAULT_INJECTION: forcing a failure. [ 128.917696][ T9130] name failslab, interval 1, probability 0, space 0, times 0 [ 128.917722][ T9130] CPU: 3 UID: 0 PID: 9130 Comm: syz.1.1327 Not tainted syzkaller #0 PREEMPT(full) [ 128.917745][ T9130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.917756][ T9130] Call Trace: [ 128.917762][ T9130] [ 128.917771][ T9130] dump_stack_lvl+0x100/0x190 [ 128.917804][ T9130] should_fail_ex.cold+0x5/0xa [ 128.917832][ T9130] should_failslab+0xc2/0x120 [ 128.917864][ T9130] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 128.917891][ T9130] ? __alloc_skb+0x5b7/0x710 [ 128.917918][ T9130] ? __alloc_skb+0x140/0x710 [ 128.917946][ T9130] __alloc_skb+0x140/0x710 [ 128.917969][ T9130] ? __alloc_skb+0x5b7/0x710 [ 128.917993][ T9130] ? __pfx___alloc_skb+0x10/0x10 [ 128.918026][ T9130] netlink_ack+0x117/0xb80 [ 128.918058][ T9130] netlink_rcv_skb+0x333/0x420 [ 128.918085][ T9130] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 128.918116][ T9130] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 128.918150][ T9130] ? netlink_deliver_tap+0x1ae/0xcc0 [ 128.918178][ T9130] netlink_unicast+0x585/0x850 [ 128.918206][ T9130] ? __pfx_netlink_unicast+0x10/0x10 [ 128.918237][ T9130] netlink_sendmsg+0x8b0/0xda0 [ 128.918266][ T9130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.918294][ T9130] ? selinux_socket_sendmsg+0x198/0x2f0 [ 128.918322][ T9130] ____sys_sendmsg+0xa4d/0xbe0 [ 128.918341][ T9130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.918368][ T9130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.918398][ T9130] ___sys_sendmsg+0x190/0x1e0 [ 128.918422][ T9130] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.918443][ T9130] ? futex_wait+0x11e/0x370 [ 128.918473][ T9130] ? find_held_lock+0x2b/0x80 [ 128.918518][ T9130] __sys_sendmsg+0x160/0x210 [ 128.918545][ T9130] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.918584][ T9130] do_syscall_64+0x123/0x790 [ 128.918608][ T9130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.918628][ T9130] RIP: 0033:0x7fb5a7b9e159 [ 128.918644][ T9130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.918664][ T9130] RSP: 002b:00007fb5a8a17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.918683][ T9130] RAX: ffffffffffffffda RBX: 00007fb5a7e25fa0 RCX: 00007fb5a7b9e159 [ 128.918696][ T9130] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 128.918708][ T9130] RBP: 00007fb5a7c3506b R08: 0000000000000000 R09: 0000000000000000 [ 128.918720][ T9130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.918731][ T9130] R13: 00007fb5a7e26038 R14: 00007fb5a7e25fa0 R15: 00007fffbe047528 [ 128.918757][ T9130] [ 129.218230][ T9140] fuse: Bad value for 'fd' [ 129.436167][ T9156] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1337'. [ 129.731289][ T9163] kvm: apic: phys broadcast and lowest prio [ 130.088412][ T9172] fuse: Bad value for 'fd' [ 130.260085][ T9181] FAULT_INJECTION: forcing a failure. [ 130.260085][ T9181] name fail_futex, interval 1, probability 0, space 0, times 0 [ 130.260116][ T9181] CPU: 3 UID: 0 PID: 9181 Comm: syz.1.1348 Not tainted syzkaller #0 PREEMPT(full) [ 130.260137][ T9181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.260147][ T9181] Call Trace: [ 130.260162][ T9181] [ 130.260169][ T9181] dump_stack_lvl+0x100/0x190 [ 130.260208][ T9181] should_fail_ex.cold+0x5/0xa [ 130.260229][ T9181] get_futex_key+0x1d0/0x14f0 [ 130.260252][ T9181] ? __pfx_get_futex_key+0x10/0x10 [ 130.260280][ T9181] futex_wake+0xf4/0x5e0 [ 130.260298][ T9181] ? __pfx_futex_wake+0x10/0x10 [ 130.260315][ T9181] ? percpu_counter_add_batch+0xb9/0x230 [ 130.260342][ T9181] ? errseq_sample+0x51/0x70 [ 130.260361][ T9181] ? file_init_path+0x48e/0x670 [ 130.260386][ T9181] do_futex+0x2b2/0x440 [ 130.260408][ T9181] ? __pfx_do_futex+0x10/0x10 [ 130.260429][ T9181] ? fd_install+0x223/0x580 [ 130.260453][ T9181] __x64_sys_futex+0x34f/0x4d0 [ 130.260475][ T9181] ? __sys_socket+0xac/0x260 [ 130.260497][ T9181] ? __pfx___x64_sys_futex+0x10/0x10 [ 130.260530][ T9181] do_syscall_64+0x123/0x790 [ 130.260580][ T9181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.260598][ T9181] RIP: 0033:0x7fb5a7b9e159 [ 130.260612][ T9181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.260627][ T9181] RSP: 002b:00007fb5a8a170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.260648][ T9181] RAX: ffffffffffffffda RBX: 00007fb5a7e25fa8 RCX: 00007fb5a7b9e159 [ 130.260660][ T9181] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb5a7e25fac [ 130.260670][ T9181] RBP: 00007fb5a7e25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 130.260679][ T9181] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 130.260688][ T9181] R13: 00007fb5a7e26038 R14: 00007fffbe047440 R15: 00007fffbe047528 [ 130.260710][ T9181] [ 130.384683][ T9187] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1349'. [ 130.436289][ T9191] fuse: Bad value for 'fd' [ 131.308553][ T9213] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1360'. [ 131.308655][ T9213] FAULT_INJECTION: forcing a failure. [ 131.308655][ T9213] name fail_futex, interval 1, probability 0, space 0, times 0 [ 131.308678][ T9213] CPU: 1 UID: 0 PID: 9213 Comm: syz.1.1360 Not tainted syzkaller #0 PREEMPT(full) [ 131.308706][ T9213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.308718][ T9213] Call Trace: [ 131.308725][ T9213] [ 131.308733][ T9213] dump_stack_lvl+0x100/0x190 [ 131.308768][ T9213] should_fail_ex.cold+0x5/0xa [ 131.308794][ T9213] get_futex_key+0x1d0/0x14f0 [ 131.308823][ T9213] ? __pfx_get_futex_key+0x10/0x10 [ 131.308850][ T9213] ? ___sys_sendmsg+0x127/0x1e0 [ 131.308874][ T9213] futex_wake+0xf4/0x5e0 [ 131.308892][ T9213] ? futex_wait+0x11e/0x370 [ 131.308914][ T9213] ? __pfx_futex_wake+0x10/0x10 [ 131.308936][ T9213] ? find_held_lock+0x2b/0x80 [ 131.308967][ T9213] do_futex+0x2b2/0x440 [ 131.308992][ T9213] ? __pfx_do_futex+0x10/0x10 [ 131.309016][ T9213] ? fput+0x7c/0x100 [ 131.309043][ T9213] __x64_sys_futex+0x34f/0x4d0 [ 131.309071][ T9213] ? __pfx___x64_sys_futex+0x10/0x10 [ 131.309106][ T9213] do_syscall_64+0x123/0x790 [ 131.309129][ T9213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.309147][ T9213] RIP: 0033:0x7fb5a7b9e159 [ 131.309162][ T9213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.309178][ T9213] RSP: 002b:00007fb5a8a170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 131.309196][ T9213] RAX: ffffffffffffffda RBX: 00007fb5a7e25fa8 RCX: 00007fb5a7b9e159 [ 131.309207][ T9213] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb5a7e25fac [ 131.309217][ T9213] RBP: 00007fb5a7e25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 131.309227][ T9213] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000000 [ 131.309237][ T9213] R13: 00007fb5a7e26038 R14: 00007fffbe047440 R15: 00007fffbe047528 [ 131.309259][ T9213] [ 131.411836][ T9215] fuse: Invalid rootmode [ 131.930688][ T9236] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1369'. [ 131.988353][ T9238] fuse: Invalid rootmode [ 132.032607][ T9234] xt_bpf: check failed: parse error [ 132.045918][ T9241] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1371'. [ 132.046018][ T9241] netlink: 'syz.0.1371': attribute type 1 has an invalid length. [ 132.545201][ T9258] FAULT_INJECTION: forcing a failure. [ 132.545201][ T9258] name failslab, interval 1, probability 0, space 0, times 0 [ 132.545240][ T9258] CPU: 2 UID: 60929 PID: 9258 Comm: syz.1.1377 Not tainted syzkaller #0 PREEMPT(full) [ 132.545265][ T9258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.545279][ T9258] Call Trace: [ 132.545287][ T9258] [ 132.545296][ T9258] dump_stack_lvl+0x100/0x190 [ 132.545350][ T9258] should_fail_ex.cold+0x5/0xa [ 132.545380][ T9258] should_failslab+0xc2/0x120 [ 132.545416][ T9258] __kmalloc_noprof+0xfc/0x840 [ 132.545443][ T9258] ? mpi_resize+0x1ac/0x250 [ 132.545475][ T9258] mpi_resize+0x1ac/0x250 [ 132.545505][ T9258] mpi_sub_ui+0x173/0x910 [ 132.545532][ T9258] rsa_check_payload+0x58/0xc0 [ 132.545560][ T9258] rsa_enc+0x198/0x3b0 [ 132.545586][ T9258] ? __pfx_rsa_enc+0x10/0x10 [ 132.545612][ T9258] ? __virt_addr_valid+0x239/0x430 [ 132.545635][ T9258] ? sg_init_one+0xf5/0x1b0 [ 132.545659][ T9258] rsassa_pkcs1_verify+0x4eb/0xc20 [ 132.545694][ T9258] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 132.545737][ T9258] ? rsa_max_size+0xd/0x70 [ 132.545761][ T9258] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 132.545791][ T9258] public_key_verify_signature+0x5ee/0x910 [ 132.545827][ T9258] ? __pfx_public_key_verify_signature+0x10/0x10 [ 132.545864][ T9258] ? asymmetric_key_generate_id+0x7e/0x180 [ 132.545904][ T9258] x509_check_for_self_signed+0x325/0x510 [ 132.545935][ T9258] x509_cert_parse+0x60c/0x910 [ 132.545964][ T9258] x509_key_preparse+0x65/0x9c0 [ 132.545995][ T9258] asymmetric_key_preparse+0xce/0x1d0 [ 132.546016][ T9258] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 132.546039][ T9258] __key_create_or_update+0x463/0xe30 [ 132.546072][ T9258] ? __pfx___key_create_or_update+0x10/0x10 [ 132.546101][ T9258] ? lookup_user_key+0x3f3/0x1300 [ 132.546138][ T9258] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 132.546164][ T9258] ? __pfx_keyring_search_iterator+0x10/0x10 [ 132.546198][ T9258] key_create_or_update+0x42/0x60 [ 132.546229][ T9258] __do_sys_add_key+0x2e8/0x460 [ 132.546252][ T9258] ? __pfx___do_sys_add_key+0x10/0x10 [ 132.546270][ T9258] ? set_cred_ucounts+0x10f/0x200 [ 132.546301][ T9258] do_syscall_64+0x123/0x790 [ 132.546335][ T9258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.546381][ T9258] RIP: 0033:0x7fb5a7b9e159 [ 132.546401][ T9258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.546422][ T9258] RSP: 002b:00007fb5a8a17028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 132.546443][ T9258] RAX: ffffffffffffffda RBX: 00007fb5a7e25fa0 RCX: 00007fb5a7b9e159 [ 132.546456][ T9258] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 132.546467][ T9258] RBP: 00007fb5a7c3506b R08: 000000001ae8673c R09: 0000000000000000 [ 132.546483][ T9258] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 132.546495][ T9258] R13: 00007fb5a7e26038 R14: 00007fb5a7e25fa0 R15: 00007fffbe047528 [ 132.546525][ T9258] [ 132.621883][ T9262] fuse: Invalid rootmode [ 132.675219][ T43] audit: type=1400 audit(1791025572.394:1224): avc: denied { mount } for pid=9263 comm="syz.0.1381" name="/" dev="ramfs" ino=40654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 132.699102][ T43] audit: type=1400 audit(1791025572.424:1225): avc: denied { read append } for pid=9265 comm="syz.1.1380" name="event3" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 132.699655][ T43] audit: type=1400 audit(1791025572.424:1226): avc: denied { open } for pid=9265 comm="syz.1.1380" path="/dev/input/event3" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 133.361925][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.363754][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.593375][ T43] audit: type=1400 audit(1791025573.314:1227): avc: denied { getopt } for pid=9283 comm="syz.3.1387" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.693532][ T9291] fuse: Bad value for 'rootmode' [ 134.286615][ T43] audit: type=1326 audit(1791025574.004:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.1.1397" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a7b9e159 code=0x7ffc0000 [ 134.286938][ T43] audit: type=1326 audit(1791025574.004:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.1.1397" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a7b9e159 code=0x7ffc0000 [ 134.288970][ T43] audit: type=1326 audit(1791025574.014:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.1.1397" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a7b9e159 code=0x7ffc0000 [ 134.289102][ T43] audit: type=1326 audit(1791025574.014:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.1.1397" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a7b9e159 code=0x7ffc0000 [ 134.299874][ T43] audit: type=1326 audit(1791025574.024:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.1.1397" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5a7b5e98e code=0x7ffc0000 [ 134.299917][ T43] audit: type=1326 audit(1791025574.024:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.1.1397" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a7b9e159 code=0x7ffc0000 [ 134.414832][ T9317] fuse: Bad value for 'rootmode' [ 134.638489][ T9327] loop1: detected capacity change from 0 to 7 [ 134.718954][ T9327] Dev loop1: unable to read RDB block 7 [ 134.718991][ T9327] loop1: unable to read partition table [ 134.719170][ T9327] loop1: partition table beyond EOD, truncated [ 134.724595][ T9327] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 134.769546][ T9330] Invalid logical block size (2045) [ 134.885023][ T9339] fuse: Bad value for 'rootmode' [ 134.889348][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1411'. [ 135.547907][ T9359] kvm: apic: phys broadcast and lowest prio [ 135.794559][ T9368] fuse: Unknown parameter 'use00000000000000000000' [ 137.066321][ T9395] fuse: Unknown parameter 'use00000000000000000000' [ 137.285181][ T9407] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (39424 ns). Using initial count to start timer. [ 137.362802][ T9418] fuse: Unknown parameter 'use00000000000000000000' [ 137.699322][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 137.699347][ T43] audit: type=1400 audit(1791025577.414:1243): avc: denied { mount } for pid=9429 comm="syz.0.1447" name="/" dev="configfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 137.700383][ T43] audit: type=1400 audit(1791025577.424:1244): avc: denied { search } for pid=9429 comm="syz.0.1447" name="/" dev="configfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 137.702580][ T43] audit: type=1400 audit(1791025577.424:1245): avc: denied { search } for pid=9429 comm="syz.0.1447" name="/" dev="configfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 137.702785][ T43] audit: type=1400 audit(1791025577.424:1246): avc: denied { read } for pid=9429 comm="syz.0.1447" name="/" dev="configfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 137.703193][ T43] audit: type=1400 audit(1791025577.424:1247): avc: denied { read open } for pid=9429 comm="syz.0.1447" path="/" dev="configfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 137.831545][ T9442] fuse: Unknown parameter 'user_i00000000000000000000' [ 138.055442][ T43] audit: type=1400 audit(1791025577.774:1248): avc: denied { append } for pid=9451 comm="syz.0.1457" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 138.080468][ T9459] SELinux: syz.1.1458 (9459) wrote to user. This is no longer supported. [ 138.184233][ T9463] fuse: Unknown parameter 'user_i00000000000000000000' [ 138.392146][ T43] audit: type=1400 audit(1791025578.114:1249): avc: denied { create } for pid=9480 comm="syz.1.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 138.404973][ T43] audit: type=1400 audit(1791025578.124:1250): avc: denied { create } for pid=9480 comm="syz.1.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.408576][ T43] audit: type=1400 audit(1791025578.134:1251): avc: denied { write } for pid=9480 comm="syz.1.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.408751][ T43] audit: type=1400 audit(1791025578.134:1252): avc: denied { nlmsg_write } for pid=9480 comm="syz.1.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.448167][ T9490] fuse: Unknown parameter 'user_i00000000000000000000' [ 138.557384][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 138.697545][ T9] usb 7-1: device descriptor read/64, error -71 [ 138.857370][ T5817] kernel write not supported for file /input/event2 (pid: 5817 comm: kworker/2:4) [ 138.947298][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 139.097130][ T9] usb 7-1: device descriptor read/64, error -71 [ 139.137237][ T5817] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 139.218730][ T9] usb usb7-port1: attempt power cycle [ 139.314880][ T5817] usb 8-1: unable to get BOS descriptor or descriptor too short [ 139.314926][ T5817] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 139.317067][ T5817] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.317090][ T5817] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 139.317126][ T5817] usb 8-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 139.317153][ T5817] usb 8-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 139.317183][ T5817] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 139.317203][ T5817] usb 8-1: config 1 interface 1 has no altsetting 0 [ 139.320128][ T5817] usb 8-1: string descriptor 0 read error: -22 [ 139.320260][ T5817] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.461760][ T9512] fuse: Unknown parameter 'user_id00000000000000000000' [ 139.577202][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 139.598349][ T9] usb 7-1: device descriptor read/8, error -71 [ 139.847222][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 139.868351][ T9] usb 7-1: device descriptor read/8, error -71 [ 139.869843][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1484'. [ 139.954047][ T5817] usb 8-1: 2:0: cannot get min/max values for control 2 (id 2) [ 139.982186][ T9] usb usb7-port1: unable to enumerate USB device [ 140.132548][ T5817] usb 8-1: USB disconnect, device number 2 [ 140.513052][ T9537] fuse: Unknown parameter 'user_id00000000000000000000' [ 140.661512][ T9543] kvm: apic: phys broadcast and lowest prio [ 141.007923][ T9561] fuse: Unknown parameter 'user_id00000000000000000000' [ 141.156932][ T9570] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 141.344931][ T9586] fuse: Bad value for 'fd' [ 141.494813][ T9595] warning: `syz.2.1515' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 141.587296][ T9608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9608 comm=syz.0.1519 [ 141.626203][ T9613] fuse: Bad value for 'fd' [ 141.731022][ T9621] kvm: apic: phys broadcast and lowest prio [ 141.827283][ T1728] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 141.966434][ T9646] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 141.977917][ T1728] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 141.978986][ T1728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.981987][ T1728] usb 5-1: config 0 descriptor?? [ 141.986513][ T1728] cp210x 5-1:0.0: cp210x converter detected [ 142.109630][ T9654] fuse: Bad value for 'fd' [ 142.199277][ T1728] usb 5-1: cp210x converter now attached to ttyUSB0 [ 142.390476][ T1728] usb 5-1: USB disconnect, device number 2 [ 142.416853][ T1728] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 142.418279][ T1728] cp210x 5-1:0.0: device disconnected [ 142.464843][ T9674] Bluetooth: MGMT ver 1.23 [ 142.938876][ T9691] fuse: Unknown parameter '00000000000000000003' [ 143.053350][ T43] kauditd_printk_skb: 43 callbacks suppressed [ 143.053466][ T43] audit: type=1400 audit(1791025582.774:1296): avc: denied { append } for pid=9697 comm="syz.2.1545" name="loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.055568][ T43] audit: type=1400 audit(1791025582.774:1297): avc: denied { map } for pid=9697 comm="syz.2.1545" path="/dev/loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.056262][ T43] audit: type=1400 audit(1791025582.774:1298): avc: denied { write execute } for pid=9697 comm="syz.2.1545" path="/dev/loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.108567][ T9699] ip_tables: iptables: counters copy to user failed while replacing table [ 143.295488][ T9701] kvm: apic: phys broadcast and lowest prio [ 143.554165][ T9714] fuse: Unknown parameter '00000000000000000003' [ 143.597234][ T10] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 143.638522][ T43] audit: type=1400 audit(1791025583.364:1299): avc: denied { write } for pid=9717 comm="syz.1.1553" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 143.640989][ T9718] usb usb1: usbfs: process 9718 (syz.1.1553) did not claim interface 0 before use [ 143.767885][ T10] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 143.768924][ T10] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.768953][ T10] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.768976][ T10] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.769002][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 143.769030][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.776608][ T10] usb 7-1: config 0 descriptor?? [ 143.878771][ T43] audit: type=1400 audit(1791025583.604:1300): avc: denied { setopt } for pid=9723 comm="syz.0.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.099936][ T9735] fuse: Unknown parameter '00000000000000000003' [ 144.163828][ T43] audit: type=1400 audit(1791025583.884:1301): avc: denied { read write } for pid=9738 comm="syz.0.1562" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 144.163879][ T43] audit: type=1400 audit(1791025583.884:1302): avc: denied { open } for pid=9738 comm="syz.0.1562" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 144.217682][ T10] input: HID 17ef:6047 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:17EF:6047.0002/input/input5 [ 144.339363][ T10] lenovo 0003:17EF:6047.0002: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 144.414237][ T43] audit: type=1400 audit(1791025584.134:1303): avc: denied { read } for pid=9750 comm="syz.3.1567" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 144.553264][ T9753] kvm: apic: phys broadcast and lowest prio [ 144.701419][ T9760] fuse: Unknown parameter '00000000000000000003' [ 145.027114][ T5830] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 145.116450][ T43] audit: type=1326 audit(1791025584.834:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.0.1565" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d279e159 code=0x7fc00000 [ 145.177221][ T5830] usb 6-1: Using ep0 maxpacket: 8 [ 145.178258][ T5830] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 145.180070][ T5830] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.180092][ T5830] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 145.180142][ T5830] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 145.182618][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.182641][ T5830] usb 6-1: Product: syz [ 145.182655][ T5830] usb 6-1: Manufacturer: syz [ 145.182669][ T5830] usb 6-1: SerialNumber: syz [ 145.813867][ T5830] usb 6-1: clock source 0 is not valid, cannot use [ 145.946369][ T9784] fuse: Unknown parameter '00000000000000000003' [ 146.026898][ T1356] usb 7-1: USB disconnect, device number 6 [ 146.115123][ T9786] kvm: apic: phys broadcast and lowest prio [ 146.217421][ T5830] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 146.276906][ T5830] usb 6-1: USB disconnect, device number 2 [ 146.349593][ T9802] fuse: Unknown parameter '00000000000000000003' [ 146.353216][ T5742] udevd[5742]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.361331][ T43] audit: type=1400 audit(1791025586.074:1305): avc: denied { watch watch_reads } for pid=9801 comm="syz.2.1589" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 146.457445][ T9814] Bluetooth: MGMT ver 1.23 [ 146.519074][ T9813] kvm: apic: phys broadcast and lowest prio [ 147.171708][ T9831] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 147.370144][ T9806] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 147.448924][ T9835] fuse: Unknown parameter 'fd00000000000000000003' [ 147.492773][ T9838] input: syz0 as /devices/virtual/input/input6 [ 147.590987][ T9842] kvm: apic: phys broadcast and lowest prio [ 147.817177][ T5888] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 147.962974][ T9860] fuse: Unknown parameter 'fd00000000000000000003' [ 147.991150][ T5888] usb 7-1: unable to get BOS descriptor or descriptor too short [ 147.991199][ T5888] usb 7-1: New USB device found, idVendor=056a, idProduct=00ef, bcdDevice= 0.40 [ 147.992523][ T5888] usb 7-1: config 1 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.992558][ T5888] usb 7-1: config 1 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.992580][ T5888] usb 7-1: config 1 interface 0 has no altsetting 0 [ 148.003078][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.003112][ T5888] usb 7-1: Product: syz [ 148.003129][ T5888] usb 7-1: Manufacturer: syz [ 148.003147][ T5888] usb 7-1: SerialNumber: syz [ 148.200825][ T9879] fuse: Unknown parameter 'fd00000000000000000003' [ 148.260491][ T9883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1621'. [ 148.413485][ T9889] FAULT_INJECTION: forcing a failure. [ 148.413485][ T9889] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 148.413518][ T9889] CPU: 3 UID: 0 PID: 9889 Comm: syz.3.1624 Not tainted syzkaller #0 PREEMPT(full) [ 148.413542][ T9889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.413554][ T9889] Call Trace: [ 148.413562][ T9889] [ 148.413585][ T9889] dump_stack_lvl+0x100/0x190 [ 148.413679][ T9889] should_fail_ex.cold+0x5/0xa [ 148.413705][ T9889] ? prepare_alloc_pages+0x16d/0x5b0 [ 148.413759][ T9889] should_fail_alloc_page+0xeb/0x140 [ 148.413790][ T9889] prepare_alloc_pages+0x1f0/0x5b0 [ 148.413823][ T9889] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 148.413855][ T9889] ? rcu_is_watching+0x13/0xc0 [ 148.413887][ T9889] ? __lock_acquire+0x5c0/0x1f40 [ 148.413912][ T9889] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 148.413937][ T9889] ? __css_rstat_updated+0x1ce/0x590 [ 148.413967][ T9889] ? lock_acquire+0x1d1/0x380 [ 148.414003][ T9889] ? __lock_acquire+0x5c0/0x1f40 [ 148.414026][ T9889] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.414052][ T9889] ? policy_nodemask+0xed/0x4f0 [ 148.414083][ T9889] alloc_pages_mpol+0x201/0x550 [ 148.414112][ T9889] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 148.414147][ T9889] folio_alloc_mpol_noprof+0x36/0x260 [ 148.414169][ T9889] shmem_alloc_folio+0x135/0x160 [ 148.414199][ T9889] shmem_alloc_and_add_folio+0x371/0xd40 [ 148.414236][ T9889] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 148.414269][ T9889] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 148.414306][ T9889] shmem_get_folio_gfp+0x75b/0x1980 [ 148.414333][ T9889] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 148.414367][ T9889] ? filemap_map_pages+0x1155/0x2060 [ 148.414399][ T9889] shmem_fault+0x1fb/0xa30 [ 148.414421][ T9889] ? __pfx_shmem_fault+0x10/0x10 [ 148.414443][ T9889] ? __pfx_filemap_map_pages+0x10/0x10 [ 148.414475][ T9889] ? find_held_lock+0x2b/0x80 [ 148.414506][ T9889] ? __pfx_filemap_map_pages+0x10/0x10 [ 148.414533][ T9889] __do_fault+0x10b/0x440 [ 148.414558][ T9889] do_fault+0xb3f/0x1830 [ 148.414584][ T9889] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 148.414605][ T9889] ? __pfx_do_fault+0x10/0x10 [ 148.414636][ T9889] ? rcu_read_unlock+0x2d/0xb0 [ 148.414656][ T9889] ? rcu_read_unlock+0x2d/0xb0 [ 148.414675][ T9889] ? __pte_offset_map+0x179/0x310 [ 148.414704][ T9889] __handle_mm_fault+0x150b/0x2f60 [ 148.414743][ T9889] ? __pfx___handle_mm_fault+0x10/0x10 [ 148.414775][ T9889] ? pte_offset_map_lock+0x174/0x320 [ 148.414801][ T9889] ? find_held_lock+0x2b/0x80 [ 148.414830][ T9889] ? find_held_lock+0x2b/0x80 [ 148.414858][ T9889] ? follow_page_pte+0x536/0x1050 [ 148.414899][ T9889] handle_mm_fault+0x363/0xa20 [ 148.414934][ T9889] __get_user_pages+0x8ae/0x2c30 [ 148.414966][ T9889] ? __pfx_mt_find+0x10/0x10 [ 148.415023][ T9889] ? __pfx___get_user_pages+0x10/0x10 [ 148.415061][ T9889] populate_vma_page_range+0x267/0x3f0 [ 148.415092][ T9889] ? __pfx_populate_vma_page_range+0x10/0x10 [ 148.415116][ T9889] ? __pfx_find_vma_intersection+0x10/0x10 [ 148.415149][ T9889] __mm_populate+0x107/0x3a0 [ 148.415176][ T9889] ? __pfx___mm_populate+0x10/0x10 [ 148.415205][ T9889] ? up_write+0x2dc/0x5b0 [ 148.415233][ T9889] vm_mmap_pgoff+0x441/0x470 [ 148.415259][ T9889] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 148.415288][ T9889] ? __pfx_do_futex+0x10/0x10 [ 148.415321][ T9889] ksys_mmap_pgoff+0xe4/0x610 [ 148.415348][ T9889] ? __x64_sys_futex+0x358/0x4d0 [ 148.415376][ T9889] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 148.415399][ T9889] ? fput+0x7c/0x100 [ 148.415426][ T9889] ? __pfx___x64_sys_futex+0x10/0x10 [ 148.415452][ T9889] ? ksys_write+0x1ac/0x250 [ 148.415475][ T9889] ? __pfx_ksys_write+0x10/0x10 [ 148.415525][ T9889] __x64_sys_mmap+0x125/0x190 [ 148.415555][ T9889] do_syscall_64+0x123/0x790 [ 148.415581][ T9889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.415603][ T9889] RIP: 0033:0x7f41fbf9e159 [ 148.415626][ T9889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.415645][ T9889] RSP: 002b:00007f41fce2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 148.415667][ T9889] RAX: ffffffffffffffda RBX: 00007f41fc225fa0 RCX: 00007f41fbf9e159 [ 148.415681][ T9889] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 148.415695][ T9889] RBP: 00007f41fc03506b R08: ffffffffffffffff R09: 0000000000000000 [ 148.415709][ T9889] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 148.415722][ T9889] R13: 00007f41fc226038 R14: 00007f41fc225fa0 R15: 00007ffe93819998 [ 148.415751][ T9889] [ 148.467083][ T5746] Bluetooth: hci0: command 0x080f tx timeout [ 148.577215][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 148.651766][ T5888] usbhid 7-1:1.0: can't add hid device: -71 [ 148.651855][ T5888] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 148.654660][ T5888] usb 7-1: USB disconnect, device number 7 [ 148.738373][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 148.739478][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.741884][ T9] usb 5-1: config 0 descriptor?? [ 148.745917][ T9] cp210x 5-1:0.0: cp210x converter detected [ 148.979050][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 148.979075][ T43] audit: type=1400 audit(1791025588.704:1316): avc: denied { read } for pid=9901 comm="syz.1.1630" path="socket:[48203]" dev="sockfs" ino=48203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 149.031259][ T43] audit: type=1400 audit(1791025588.754:1317): avc: denied { create } for pid=9901 comm="syz.1.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.032231][ T43] audit: type=1400 audit(1791025588.754:1318): avc: denied { setopt } for pid=9901 comm="syz.1.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.182051][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 149.225328][ T43] audit: type=1400 audit(1791025588.944:1319): avc: denied { load_policy } for pid=9909 comm="syz.3.1633" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 149.358215][ T9] usb 5-1: USB disconnect, device number 3 [ 149.366156][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 149.369951][ T9] cp210x 5-1:0.0: device disconnected [ 149.517168][ T1356] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 149.669752][ T1356] usb 7-1: unable to get BOS descriptor or descriptor too short [ 149.670426][ T1356] usb 7-1: not running at top speed; connect to a high speed hub [ 149.670461][ T1356] usb 7-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 149.672022][ T1356] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.672050][ T1356] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.674734][ T1356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.674764][ T1356] usb 7-1: Product: syz [ 149.674783][ T1356] usb 7-1: Manufacturer: syz [ 149.674801][ T1356] usb 7-1: SerialNumber: syz [ 149.727802][ T43] audit: type=1400 audit(1791025589.454:1320): avc: denied { watch } for pid=9926 comm="syz.3.1641" path="/424" dev="tmpfs" ino=2304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 149.727968][ T43] audit: type=1400 audit(1791025589.454:1321): avc: denied { watch_sb } for pid=9926 comm="syz.3.1641" path="/424" dev="tmpfs" ino=2304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 149.895968][ T1356] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 149.901663][ T1356] usb 7-1: USB disconnect, device number 8 [ 150.112469][ T9941] kvm: apic: phys broadcast and lowest prio [ 150.317323][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 150.477944][ T10] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 150.479249][ T10] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.479280][ T10] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.479304][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 150.479333][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.482532][ T10] usb 6-1: config 0 descriptor?? [ 150.497470][ T10] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count [ 150.520929][ T9958] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 150.806020][ T9965] kvm: apic: phys broadcast and lowest prio [ 150.914901][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 150.915015][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 150.927798][ T10] usb 6-1: USB disconnect, device number 3 [ 151.187181][ T58] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 151.207203][ T5817] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 151.369772][ T5817] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.371892][ T5817] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.372023][ T58] usb 7-1: unable to get BOS descriptor or descriptor too short [ 151.372057][ T58] usb 7-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40 [ 151.372394][ T5817] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.372433][ T5817] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1392, setting to 1024 [ 151.372459][ T5817] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.381069][ T5817] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.381096][ T5817] usb 8-1: Product: syz [ 151.381108][ T5817] usb 8-1: Manufacturer: syz [ 151.381128][ T5817] usb 8-1: SerialNumber: syz [ 151.398363][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.398386][ T58] usb 7-1: Product: syz [ 151.398398][ T58] usb 7-1: Manufacturer: syz [ 151.398409][ T58] usb 7-1: SerialNumber: syz [ 151.424819][ T58] usb 7-1: 1:1 : bogus bTerminalLink 217 [ 151.469808][T10000] program syz.1.1668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.617957][ T58] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 151.662468][ T58] usb 7-1: USB disconnect, device number 9 [ 151.713872][ T9804] udevd[9804]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.756051][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1671'. [ 151.938787][ T43] audit: type=1400 audit(1791025591.664:1322): avc: denied { mounton } for pid=10012 comm="syz.1.1672" path="/proc/1119/task" dev="proc" ino=48451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 151.963220][ T43] audit: type=1400 audit(1791025591.684:1323): avc: denied { associate } for pid=10014 comm="syz.1.1672" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 152.186501][ T43] audit: type=1400 audit(1791025591.904:1324): avc: denied { write } for pid=10018 comm="syz.2.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 152.235215][T10023] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 152.281426][T10027] program syz.2.1678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.416597][ T5817] cdc_ncm 8-1:1.0: bind() failure [ 152.424733][ T5817] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 152.424770][ T5817] cdc_ncm 8-1:1.1: bind() failure [ 152.517298][ T1356] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 152.620491][ T5817] usb 8-1: USB disconnect, device number 3 [ 152.651984][ T43] audit: type=1400 audit(1791025592.374:1325): avc: denied { nlmsg_read } for pid=10034 comm="syz.0.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.688281][ T1356] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.688312][ T1356] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 152.691688][ T1356] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.691711][ T1356] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 152.691741][ T1356] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.693495][ T1356] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.693518][ T1356] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 152.693547][ T1356] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.704397][ T1356] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.704420][ T1356] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 152.704452][ T1356] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.705638][ T1356] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.705658][ T1356] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 152.705683][ T1356] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.706891][ T1356] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.706904][ T1356] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 152.706923][ T1356] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.708649][ T1356] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.708662][ T1356] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 152.708682][ T1356] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.709617][ T1356] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.709635][ T1356] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 152.709668][ T1356] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.710521][ T1356] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.710533][ T1356] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 152.710552][ T1356] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.712416][ T1356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.712429][ T1356] usb 6-1: Product: syz [ 152.712436][ T1356] usb 6-1: Manufacturer: syz [ 152.712444][ T1356] usb 6-1: SerialNumber: syz [ 152.722740][ T1356] cdc_ncm 6-1:1.0: skipping garbage [ 152.722761][ T1356] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 152.722798][ T1356] cdc_ncm 6-1:1.0: bind() failure [ 152.919663][ T1356] usb 6-1: USB disconnect, device number 4 [ 153.197812][T10043] SELinux: invalid class [ 153.238545][T10043] SELinux: failed to load policy [ 153.507360][ T5817] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 153.662677][ T5817] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.663799][ T5817] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.663846][ T5817] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.668745][ T5817] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.668771][ T5817] usb 8-1: Product: syz [ 153.668784][ T5817] usb 8-1: Manufacturer: syz [ 153.668796][ T5817] usb 8-1: SerialNumber: syz [ 153.679112][ T5817] usb 8-1: selecting invalid altsetting 1 [ 154.088320][ T5817] cdc_ncm 8-1:1.0: failed GET_NTB_PARAMETERS [ 154.088383][ T5817] cdc_ncm 8-1:1.0: bind() failure [ 154.319505][ T5817] usb 8-1: USB disconnect, device number 4 [ 154.377230][ T58] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 154.538105][ T58] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.539523][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.539547][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.539564][ T58] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.539596][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.541698][ T58] usb 6-1: config 0 descriptor?? [ 154.954394][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 154.954407][ T43] audit: type=1400 audit(1791025594.674:1328): avc: denied { write } for pid=10093 comm="syz.3.1706" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 154.967206][ T58] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 154.997178][ T1356] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 155.002867][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1707'. [ 155.158561][ T58] usb 6-1: USB disconnect, device number 5 [ 155.159850][ T1356] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 155.163115][ T1356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.173334][ T1356] usb 5-1: config 0 descriptor?? [ 155.175744][ T1356] ums-realtek 5-1:0.0: USB Mass Storage device detected [ 155.287206][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 155.382270][ T1356] usb 5-1: USB disconnect, device number 4 [ 155.443178][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 155.445661][ T10] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 155.447136][ T10] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 155.447160][ T10] usb 8-1: config 179 has no interface number 0 [ 155.447195][ T10] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 155.447218][ T10] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 155.447244][ T10] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 155.447268][ T10] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 155.447297][ T10] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 155.447335][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.452014][T10099] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 155.659451][ T5887] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 155.680126][ T1356] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input7 [ 155.809178][ T5887] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.811017][ T5887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 155.811144][ T5887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 155.811169][ T5887] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.811204][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.819422][ T5887] usb 7-1: config 0 descriptor?? [ 155.821162][T10106] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 155.871207][ T58] usb 8-1: USB disconnect, device number 5 [ 155.871267][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 155.871308][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 156.263233][ T5887] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 156.541133][ T5887] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 156.568726][ T5887] usb 7-1: USB disconnect, device number 10 [ 156.594049][T10122] fido_id[10122]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/7-1/report_descriptor': No such file or directory [ 156.842354][T10127] program syz.1.1717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.922419][ T43] audit: type=1400 audit(1791025596.644:1329): avc: denied { read write } for pid=10132 comm="syz.0.1719" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 156.922755][ T43] audit: type=1400 audit(1791025596.644:1330): avc: denied { open } for pid=10132 comm="syz.0.1719" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 156.925924][ T43] audit: type=1400 audit(1791025596.644:1331): avc: denied { ioctl } for pid=10132 comm="syz.0.1719" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 156.929557][ T43] audit: type=1400 audit(1791025596.654:1332): avc: denied { set_context_mgr } for pid=10132 comm="syz.0.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 157.166727][T10140] vhci_hcd vhci_hcd.0: failed to lookup sock [ 157.295274][ T43] audit: type=1400 audit(1791025597.014:1333): avc: denied { write } for pid=10150 comm="syz.0.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 157.359528][ T43] audit: type=1400 audit(1791025597.084:1334): avc: denied { write } for pid=10155 comm="syz.0.1730" name="unix" dev="proc" ino=4026532988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 157.514844][ T43] audit: type=1400 audit(1791025597.234:1335): avc: denied { accept } for pid=10161 comm="syz.0.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 157.566231][T10171] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 157.586039][ T43] audit: type=1400 audit(1791025597.304:1336): avc: denied { node_bind } for pid=10173 comm="syz.1.1738" saddr=ffff:ffff:: src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 157.657176][ T25] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 157.808218][ T25] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.809193][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 157.809223][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 157.809245][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 157.809278][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.817236][ T25] usb 7-1: config 0 descriptor?? [ 157.818002][T10166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.943426][ T43] audit: type=1400 audit(1791025597.664:1337): avc: denied { connect } for pid=10181 comm="syz.3.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.272724][ T25] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 158.293389][ T25] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 158.533874][ T25] usb 7-1: USB disconnect, device number 11 [ 159.027202][ T5888] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 159.207200][ T5888] usb 5-1: Invalid ep0 maxpacket: 64 [ 159.358238][ T5888] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 159.497244][ T1728] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 159.517088][ T5888] usb 5-1: Invalid ep0 maxpacket: 64 [ 159.517620][ T5888] usb usb5-port1: attempt power cycle [ 159.658068][ T1728] usb 8-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 159.659017][ T1728] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.659040][ T1728] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 159.659078][ T1728] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.663442][ T1728] usb 8-1: config 0 descriptor?? [ 159.807497][ T5830] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 159.869605][ T1728] Bluetooth: Can't get state to change to load ram patch err [ 159.869623][ T1728] Bluetooth: Loading patch file failed [ 159.869645][ T1728] ath3k 8-1:0.0: probe with driver ath3k failed with error -121 [ 159.879671][ T5888] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 159.897789][ T5888] usb 5-1: Invalid ep0 maxpacket: 64 [ 159.967050][ T5830] usb 6-1: Using ep0 maxpacket: 32 [ 159.967841][ T5830] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 159.968828][ T5830] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 159.968850][ T5830] usb 6-1: config 0 has no interface number 0 [ 159.968886][ T5830] usb 6-1: config 0 interface 184 has no altsetting 0 [ 159.970745][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.970764][ T5830] usb 6-1: Product: syz [ 159.970776][ T5830] usb 6-1: Manufacturer: syz [ 159.970788][ T5830] usb 6-1: SerialNumber: syz [ 159.974592][ T5830] usb 6-1: config 0 descriptor?? [ 160.027199][ T5888] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 160.047930][ T5888] usb 5-1: Invalid ep0 maxpacket: 64 [ 160.048173][ T5888] usb usb5-port1: unable to enumerate USB device [ 160.070722][ T25] usb 8-1: USB disconnect, device number 6 [ 160.581334][ T5830] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 160.581357][ T5830] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 160.638068][T10257] input: syz1 as /devices/virtual/input/input10 [ 160.645695][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 160.645716][ T43] audit: type=1400 audit(1791025600.364:1344): avc: denied { read } for pid=5123 comm="acpid" name="event4" dev="devtmpfs" ino=2965 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 160.645791][ T43] audit: type=1400 audit(1791025600.364:1345): avc: denied { open } for pid=5123 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2965 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 160.645834][ T43] audit: type=1400 audit(1791025600.364:1346): avc: denied { ioctl } for pid=5123 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2965 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 160.895619][T10271] FAULT_INJECTION: forcing a failure. [ 160.895619][T10271] name failslab, interval 1, probability 0, space 0, times 0 [ 160.895748][T10271] CPU: 0 UID: 0 PID: 10271 Comm: syz.2.1776 Not tainted syzkaller #0 PREEMPT(full) [ 160.895773][T10271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.895785][T10271] Call Trace: [ 160.895803][T10271] [ 160.895812][T10271] dump_stack_lvl+0x100/0x190 [ 160.895856][T10271] should_fail_ex.cold+0x5/0xa [ 160.895882][T10271] should_failslab+0xc2/0x120 [ 160.895919][T10271] __kmalloc_noprof+0xfc/0x840 [ 160.895936][T10271] ? rcu_is_watching+0x13/0xc0 [ 160.895957][T10271] ? tomoyo_realpath_from_path+0xb6/0x690 [ 160.895981][T10271] tomoyo_realpath_from_path+0xb6/0x690 [ 160.896012][T10271] tomoyo_check_open_permission+0x2af/0x3c0 [ 160.896035][T10271] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 160.896065][T10271] ? hook_file_open+0x248/0x8e0 [ 160.896102][T10271] ? path_get+0x61/0x80 [ 160.896133][T10271] tomoyo_file_open+0x6b/0x90 [ 160.896155][T10271] security_file_open+0xb5/0x1e0 [ 160.896185][T10271] do_dentry_open+0x588/0x14d0 [ 160.896216][T10271] vfs_open+0x82/0x3f0 [ 160.896244][T10271] path_openat+0x19fa/0x2440 [ 160.896279][T10271] ? __pfx_path_openat+0x10/0x10 [ 160.896313][T10271] do_file_open+0x20e/0x430 [ 160.896343][T10271] ? __pfx_do_file_open+0x10/0x10 [ 160.896392][T10271] ? _raw_spin_unlock+0x28/0x50 [ 160.896437][T10271] ? alloc_fd+0x471/0x7a0 [ 160.896481][T10271] do_sys_openat2+0x10f/0x1e0 [ 160.896517][T10271] ? __pfx_do_sys_openat2+0x10/0x10 [ 160.896553][T10271] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 160.896591][T10271] __x64_sys_openat+0x12d/0x210 [ 160.896627][T10271] ? __pfx___x64_sys_openat+0x10/0x10 [ 160.896667][T10271] do_syscall_64+0x123/0x790 [ 160.896695][T10271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.896716][T10271] RIP: 0033:0x7fa68bd5e98e [ 160.896735][T10271] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 160.896753][T10271] RSP: 002b:00007fa68cbddb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 160.896784][T10271] RAX: ffffffffffffffda RBX: 00007fa68cbde6c0 RCX: 00007fa68bd5e98e [ 160.896801][T10271] RDX: 0000000000000002 RSI: 00007fa68cbddc00 RDI: ffffffffffffff9c [ 160.896815][T10271] RBP: 00007fa68be3506b R08: 0000000000000000 R09: 0000000000000000 [ 160.896827][T10271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.896838][T10271] R13: 00007fa68c026038 R14: 00007fa68c025fa0 R15: 00007ffe0645b6c8 [ 160.896865][T10271] [ 160.896874][T10271] ERROR: Out of memory at tomoyo_realpath_from_path. [ 160.991576][T10275] SELinux: ebitmap: truncated map [ 160.992055][T10275] SELinux: invalid class [ 160.998433][T10275] SELinux: failed to load policy [ 161.141123][ T43] audit: type=1400 audit(1791025600.864:1347): avc: denied { relabelfrom } for pid=10281 comm="syz.2.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 161.141259][ T43] audit: type=1400 audit(1791025600.864:1348): avc: denied { relabelto } for pid=10281 comm="syz.2.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 161.177260][ T42] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 161.246097][ T912] kernel read not supported for file /vcs (pid: 912 comm: kworker/1:2) [ 161.327985][ T42] usb 8-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 161.329248][ T42] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.329266][ T42] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 161.330705][ T42] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.330725][ T42] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 161.332311][ T42] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.332330][ T42] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 161.335475][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.335493][ T42] usb 8-1: Product: syz [ 161.335503][ T42] usb 8-1: Manufacturer: syz [ 161.335560][ T42] usb 8-1: SerialNumber: syz [ 161.549340][ T42] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.549446][ T42] usb 8-1: MIDIStreaming interface descriptor not found [ 161.594224][ T5830] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 161.594243][ T5830] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 161.594254][ T5830] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 161.594365][ T5830] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 161.596545][ T5830] usb 6-1: USB disconnect, device number 6 [ 161.611637][ T42] usb 8-1: USB disconnect, device number 7 [ 161.656932][ T9804] udevd[9804]: setting mode of /dev/bus/usb/008/007 to 020664 failed: No such file or directory [ 161.657555][ T9804] udevd[9804]: setting owner of /dev/bus/usb/008/007 to uid=0, gid=0 failed: No such file or directory [ 161.676784][ T5753] udevd[5753]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.084785][T10303] program syz.3.1790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.107278][ T5888] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 162.273053][T10310] SELinux: invalid class [ 162.291571][ T5888] usb 7-1: unable to get BOS descriptor or descriptor too short [ 162.291596][ T5888] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 162.293332][ T5888] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.293346][ T5888] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.297532][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.297545][ T5888] usb 7-1: Product: syz [ 162.297553][ T5888] usb 7-1: Manufacturer: syz [ 162.297561][ T5888] usb 7-1: SerialNumber: syz [ 162.312057][ T5888] usb 7-1: selecting invalid altsetting 1 [ 162.312390][ T5888] usb 7-1: unit 6 not found! [ 162.313847][T10310] SELinux: failed to load policy [ 162.355967][ T43] audit: type=1400 audit(1791025602.074:1349): avc: denied { remount } for pid=10312 comm="syz.1.1794" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 162.709253][ T5888] usb 7-1: 2:0: cannot get min/max values for control 1 (id 2) [ 162.754536][ T5888] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 162.759115][ T5888] usb 7-1: USB disconnect, device number 12 [ 162.792610][ T9809] udevd[9809]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.097212][ T1728] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 163.130949][ T43] audit: type=1400 audit(1791025602.854:1350): avc: denied { mount } for pid=10333 comm="syz.1.1803" name="/" dev="ecryptfs" ino=2749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ecryptfs_t tclass=filesystem permissive=1 [ 163.151199][ T43] audit: type=1400 audit(1791025602.874:1351): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ecryptfs_t tclass=filesystem permissive=1 [ 163.206626][T10336] kvm: apic: phys broadcast and lowest prio [ 163.264395][ T43] audit: type=1400 audit(1791025602.984:1352): avc: denied { append } for pid=10344 comm="syz.1.1807" name="001" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 163.267854][ T1728] usb 5-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 163.268859][ T1728] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 66, changing to 4 [ 163.270797][ T1728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.270818][ T1728] usb 5-1: Product: syz [ 163.270830][ T1728] usb 5-1: Manufacturer: syz [ 163.270842][ T1728] usb 5-1: SerialNumber: syz [ 163.352732][T10349] SELinux: failed to load policy [ 163.409609][ T43] audit: type=1400 audit(1791025603.134:1353): avc: denied { read } for pid=10352 comm="syz.3.1812" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 163.489257][ T1728] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 163.493093][ T1728] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 163.496121][ T1728] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 163.510656][ T1728] usb 5-1: USB disconnect, device number 9 [ 163.587276][T10358] Bluetooth: MGMT ver 1.23 [ 163.587313][T10358] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 163.637194][ T5830] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 163.797068][ T5830] usb 6-1: Using ep0 maxpacket: 32 [ 163.798343][ T5830] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 163.799320][ T5830] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 163.799342][ T5830] usb 6-1: config 0 has no interface number 0 [ 163.801572][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.801594][ T5830] usb 6-1: Product: syz [ 163.801607][ T5830] usb 6-1: Manufacturer: syz [ 163.801620][ T5830] usb 6-1: SerialNumber: syz [ 163.805056][ T5830] usb 6-1: config 0 descriptor?? [ 164.368661][T10371] kvm: apic: phys broadcast and lowest prio [ 164.422351][ T5830] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 164.422380][ T5830] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 164.424812][ T5830] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 164.425009][ T5830] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 164.440451][ T5830] usb 6-1: USB disconnect, device number 7 [ 164.478786][T10380] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1823'. [ 164.479655][T10380] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1823'. [ 164.606145][T10386] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 164.793183][ T5830] hid-generic 8005:057E:0306.0006: unknown main item tag 0x0 [ 164.797115][ T5830] input: syz0 as /devices/virtual/misc/uhid/8005:057E:0306.0006/input/input11 [ 164.807242][ T1728] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 164.819419][ T5830] hid-generic 8005:057E:0306.0006: input,hidraw1: HID v0.03 Gamepad [syz0] on syz0 [ 164.999182][ T1728] usb 5-1: unable to get BOS descriptor or descriptor too short [ 164.999224][ T1728] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 165.000579][ T1728] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.000605][ T1728] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 165.000651][ T1728] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 165.000687][ T1728] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 165.000724][ T1728] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 165.000750][ T1728] usb 5-1: config 1 interface 1 has no altsetting 0 [ 165.003806][ T1728] usb 5-1: string descriptor 0 read error: -22 [ 165.003921][ T1728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.030374][ T1356] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 165.179746][ T1356] usb 8-1: unable to get BOS descriptor or descriptor too short [ 165.182625][ T1356] usb 8-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 165.182668][ T1356] usb 8-1: no configurations [ 165.182681][ T1356] usb 8-1: can't read configurations, error -22 [ 165.629477][ T1728] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 165.660984][ T1728] usb 5-1: USB disconnect, device number 10 [ 165.687702][ T5888] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 165.786079][T10409] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1837'. [ 165.838790][ T5888] usb 7-1: not running at top speed; connect to a high speed hub [ 165.838819][ T5888] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 165.841536][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.841559][ T5888] usb 7-1: Product: syz [ 165.841571][ T5888] usb 7-1: Manufacturer: syz [ 165.841583][ T5888] usb 7-1: SerialNumber: syz [ 165.852001][ T5888] keyspan 7-1:1.0: Keyspan 4 port adapter converter detected [ 165.856870][ T5888] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 165.861278][ T5888] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 165.866853][ T5888] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 165.876234][ T5888] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 165.956735][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 165.956749][ T43] audit: type=1400 audit(1791025605.674:1367): avc: denied { ioctl } for pid=10415 comm="syz.3.1840" path="socket:[50844]" dev="sockfs" ino=50844 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.193295][ T43] audit: type=1400 audit(1791025605.914:1368): avc: denied { bind } for pid=10424 comm="syz.3.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.209743][ T43] audit: type=1400 audit(1791025605.934:1369): avc: denied { map } for pid=10424 comm="syz.3.1845" path="socket:[49985]" dev="sockfs" ino=49985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.209928][ T43] audit: type=1400 audit(1791025605.934:1370): avc: denied { read write } for pid=10424 comm="syz.3.1845" path="socket:[49985]" dev="sockfs" ino=49985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.267598][ T1728] usb 7-1: USB disconnect, device number 13 [ 166.275145][ T1728] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 166.292802][ T1728] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 166.313610][ T1728] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 166.326343][ T1728] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 166.337785][ T1728] keyspan 7-1:1.0: device disconnected [ 166.867086][ T1356] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 167.026011][ T1356] usb 6-1: Using ep0 maxpacket: 8 [ 167.034595][ T1356] usb 6-1: unable to get BOS descriptor or descriptor too short [ 167.034741][ T1356] usb 6-1: New USB device found, idVendor=12d1, idProduct=1c05, bcdDevice=39.5c [ 167.045328][ T1356] usb 6-1: config 128 has an invalid interface number: 206 but max is 1 [ 167.045405][ T1356] usb 6-1: config 128 has no interface number 1 [ 167.054166][ T1356] usb 6-1: config 128 interface 206 has no altsetting 0 [ 167.054247][ T1356] usb 6-1: config 128 interface 0 has no altsetting 0 [ 167.068533][ T1356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.068656][ T1356] usb 6-1: Product: syz [ 167.068901][ T1356] usb 6-1: Manufacturer: syz [ 167.068918][ T1356] usb 6-1: SerialNumber: syz [ 167.158365][ T43] audit: type=1400 audit(1791025606.874:1371): avc: denied { getattr } for pid=10442 comm="syz.3.1851" name="/" dev="dmabuf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 167.263948][T10445] netlink: 'syz.3.1852': attribute type 1 has an invalid length. [ 167.263971][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1852'. [ 167.336573][ T1356] rndis_host 6-1:128.206: skipping garbage [ 167.336632][ T1356] rndis_host 6-1:128.206: rndis: master #0/ffff888039023000 slave #1/0000000000000000 [ 167.337521][ T1356] option 6-1:128.206: GSM modem (1-port) converter detected [ 167.356194][ T1356] usb 6-1: USB disconnect, device number 8 [ 167.358257][ T1356] option 6-1:128.206: device disconnected [ 168.086677][ T43] audit: type=1400 audit(1791025607.804:1372): avc: denied { accept } for pid=10460 comm="syz.3.1858" path="socket:[50068]" dev="sockfs" ino=50068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 168.735927][ T43] audit: type=1400 audit(1791025609.450:1373): avc: denied { create } for pid=10474 comm="syz.3.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.741475][ T43] audit: type=1400 audit(1791025609.460:1374): avc: denied { setopt } for pid=10474 comm="syz.3.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.752860][ T43] audit: type=1400 audit(1791025609.460:1375): avc: denied { bind } for pid=10474 comm="syz.3.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.752924][ T43] audit: type=1400 audit(1791025609.470:1376): avc: denied { name_bind } for pid=10474 comm="syz.3.1863" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 168.760342][ T1728] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 168.859520][T10483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1866'. [ 168.938211][ T1728] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 168.939218][ T1728] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 168.939242][ T1728] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.939269][ T1728] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.960353][ T1728] hub 7-1:4.0: USB hub found [ 169.147307][ T1728] hub 7-1:4.0: 2 ports detected [ 169.147352][ T1728] usb 7-1: selecting invalid altsetting 1 [ 169.147365][ T1728] hub 7-1:4.0: Using single TT (err -22) [ 169.297204][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 169.299195][ T5817] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 169.447837][ T5817] usb 8-1: New USB device found, idVendor=1b3d, idProduct=0111, bcdDevice= d.9c [ 169.448863][ T5817] usb 8-1: config 12 has an invalid interface number: 84 but max is 0 [ 169.448884][ T5817] usb 8-1: config 12 has no interface number 0 [ 169.448916][ T5817] usb 8-1: config 12 interface 84 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 169.448933][ T5817] usb 8-1: config 12 interface 84 has no altsetting 0 [ 169.448958][ T5817] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.460378][ T10] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 169.461474][ T5817] ftdi_sio 8-1:12.84: FTDI USB Serial Device converter detected [ 169.463453][ T5817] ftdi_sio ttyUSB0: unknown device type: 0xd9c [ 169.463982][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30 [ 169.464019][ T10] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.464040][ T10] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 169.464060][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 169.464086][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.471237][ T10] usb 6-1: config 0 descriptor?? [ 169.558526][ T1728] usb 7-1: USB disconnect, device number 14 [ 169.659059][T10238] usb 8-1: USB disconnect, device number 10 [ 169.661925][T10238] ftdi_sio 8-1:12.84: device disconnected [ 169.889427][ T10] saitek 0003:0738:1709.0007: unknown main item tag 0x1 [ 169.889458][ T10] saitek 0003:0738:1709.0007: unbalanced delimiter at end of report description [ 169.890020][ T10] saitek 0003:0738:1709.0007: parse failed [ 169.890092][ T10] saitek 0003:0738:1709.0007: probe with driver saitek failed with error -22 [ 170.090619][ T5830] usb 6-1: USB disconnect, device number 9 [ 170.224537][T10532] fuse: Unknown parameter '0x000000000000000a' [ 170.345379][T10539] input: syz0 as /devices/virtual/input/input12 [ 171.027136][ T5817] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 171.122607][ T43] kauditd_printk_skb: 64 callbacks suppressed [ 171.122627][ T43] audit: type=1400 audit(1791025611.840:1441): avc: denied { mounton } for pid=10558 comm="syz.2.1899" path="/426/file0" dev="tmpfs" ino=2312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 171.126394][ T43] audit: type=1400 audit(1791025611.840:1442): avc: denied { mount } for pid=10558 comm="syz.2.1899" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 171.148897][ T43] audit: type=1400 audit(1791025611.870:1443): avc: denied { unmount } for pid=5745 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 171.177278][ T43] audit: type=1400 audit(1791025611.890:1444): avc: denied { mount } for pid=10560 comm="syz.2.1900" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 171.177881][ T43] audit: type=1400 audit(1791025611.900:1445): avc: denied { read write } for pid=10560 comm="syz.2.1900" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 171.177989][ T43] audit: type=1400 audit(1791025611.900:1446): avc: denied { open } for pid=10560 comm="syz.2.1900" path="/427/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 171.201666][ T43] audit: type=1400 audit(1791025611.920:1447): avc: denied { unmount } for pid=5745 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 171.211110][ T5817] usb 6-1: unable to get BOS descriptor or descriptor too short [ 171.211162][ T5817] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.212448][ T5817] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 171.212551][ T5817] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 171.212576][ T5817] usb 6-1: config 1 interface 0 has no altsetting 0 [ 171.216837][ T5817] usb 6-1: string descriptor 0 read error: -22 [ 171.217253][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.222733][T10549] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 171.222794][T10549] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 171.227677][ T5817] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 171.391300][ T43] audit: type=1400 audit(1791025612.110:1448): avc: denied { mount } for pid=10565 comm="syz.3.1902" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 171.416015][ T43] audit: type=1400 audit(1791025612.130:1449): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 171.429318][ T5830] usb 6-1: USB disconnect, device number 10 [ 171.451887][ T43] audit: type=1400 audit(1791025612.170:1450): avc: denied { create } for pid=10568 comm="syz.2.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 171.681359][T10585] ================================================================== [ 171.681379][T10585] BUG: KASAN: global-out-of-bounds in kobject_synth_uevent+0x79d/0x7d0 [ 171.681426][T10585] Read of size 1 at addr ffffffff8d7277ff by task syz.3.1911/10585 [ 171.681441][T10585] [ 171.681449][T10585] CPU: 0 UID: 0 PID: 10585 Comm: syz.3.1911 Not tainted syzkaller #0 PREEMPT(full) [ 171.681479][T10585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 171.681491][T10585] Call Trace: [ 171.681498][T10585] [ 171.681505][T10585] dump_stack_lvl+0x100/0x190 [ 171.681538][T10585] print_report+0x13d/0x4b0 [ 171.681565][T10585] ? __virt_addr_valid+0x239/0x430 [ 171.681587][T10585] ? kobject_synth_uevent+0x79d/0x7d0 [ 171.681615][T10585] kasan_report+0xdf/0x1c0 [ 171.681649][T10585] ? kobject_synth_uevent+0x79d/0x7d0 [ 171.681674][T10585] kobject_synth_uevent+0x79d/0x7d0 [ 171.681700][T10585] ? find_held_lock+0x2b/0x80 [ 171.681726][T10585] ? bus_to_subsys+0x10f/0x150 [ 171.681746][T10585] ? __pfx_kobject_synth_uevent+0x10/0x10 [ 171.681778][T10585] ? do_raw_spin_unlock+0x145/0x1e0 [ 171.681807][T10585] bus_uevent_store+0x3d/0x90 [ 171.681828][T10585] ? __pfx_bus_uevent_store+0x10/0x10 [ 171.681849][T10585] bus_attr_store+0x74/0xb0 [ 171.681869][T10585] ? __pfx_bus_attr_store+0x10/0x10 [ 171.681887][T10585] sysfs_kf_write+0xf2/0x150 [ 171.681913][T10585] kernfs_fop_write_iter+0x3e0/0x5f0 [ 171.681934][T10585] ? __pfx_sysfs_kf_write+0x10/0x10 [ 171.681961][T10585] vfs_write+0x6af/0x1050 [ 171.681981][T10585] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 171.682029][T10585] ? __pfx_vfs_write+0x10/0x10 [ 171.682052][T10585] ? find_held_lock+0x2b/0x80 [ 171.682090][T10585] ksys_write+0x12a/0x250 [ 171.682113][T10585] ? __pfx_ksys_write+0x10/0x10 [ 171.682142][T10585] do_syscall_64+0x123/0x790 [ 171.682165][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.682185][T10585] RIP: 0033:0x7f41fbf9e159 [ 171.682201][T10585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.682220][T10585] RSP: 002b:00007f41fce2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.682241][T10585] RAX: ffffffffffffffda RBX: 00007f41fc225fa0 RCX: 00007f41fbf9e159 [ 171.682255][T10585] RDX: 00000000ffffffd9 RSI: 0000200000000600 RDI: 0000000000000003 [ 171.682270][T10585] RBP: 00007f41fc03506b R08: 0000000000000000 R09: 0000000000000000 [ 171.682283][T10585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.682294][T10585] R13: 00007f41fc226038 R14: 00007f41fc225fa0 R15: 00007ffe93819998 [ 171.682313][T10585] [ 171.682321][T10585] [ 171.682326][T10585] The buggy address belongs to the variable: [ 171.682332][T10585] kobject_actions+0xdff/0x4e80 [ 171.682355][T10585] [ 171.682359][T10585] The buggy address belongs to the physical page: [ 171.682367][T10585] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xd727 [ 171.682394][T10585] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 171.682424][T10585] raw: 00fff00000002000 ffffea000035c9c8 ffffea000035c9c8 0000000000000000 [ 171.682443][T10585] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 171.682454][T10585] page dumped because: kasan: bad access detected [ 171.682464][T10585] page_owner info is not present (never set?) [ 171.682471][T10585] [ 171.682476][T10585] Memory state around the buggy address: [ 171.682486][T10585] ffffffff8d727680: 00 04 f9 f9 f9 f9 f9 f9 00 04 f9 f9 f9 f9 f9 f9 [ 171.682500][T10585] ffffffff8d727700: 00 06 f9 f9 f9 f9 f9 f9 00 06 f9 f9 f9 f9 f9 f9 [ 171.682514][T10585] >ffffffff8d727780: 00 00 01 f9 f9 f9 f9 f9 00 00 02 f9 f9 f9 f9 f9 [ 171.682531][T10585] ^ [ 171.682542][T10585] ffffffff8d727800: 00 06 f9 f9 f9 f9 f9 f9 00 07 f9 f9 f9 f9 f9 f9 [ 171.682556][T10585] ffffffff8d727880: 00 00 06 f9 f9 f9 f9 f9 00 04 f9 f9 f9 f9 f9 f9 [ 171.682566][T10585] ================================================================== [ 171.682597][T10585] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 171.868791][T10585] CPU: 0 UID: 0 PID: 10585 Comm: syz.3.1911 Not tainted syzkaller #0 PREEMPT(full) [ 171.872500][T10585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 171.876983][T10585] Call Trace: [ 171.878770][T10585] [ 171.880744][T10585] dump_stack_lvl+0x100/0x190 [ 171.883425][T10585] vpanic+0x553/0x970 [ 171.885228][T10585] ? __pfx_vpanic+0x10/0x10 [ 171.887216][T10585] ? mark_held_locks+0x40/0x70 [ 171.889337][T10585] ? irqentry_exit+0x24d/0xa10 [ 171.891303][T10585] ? kobject_synth_uevent+0x79d/0x7d0 [ 171.893502][T10585] panic+0xd1/0xe0 [ 171.895122][T10585] ? __pfx_panic+0x10/0x10 [ 171.896870][T10585] check_panic_on_warn.cold+0x19/0x34 [ 171.899127][T10585] end_report.part.0+0x3a/0x90 [ 171.900730][T10585] kasan_report.cold+0xe/0x18 [ 171.902809][T10585] ? kobject_synth_uevent+0x79d/0x7d0 [ 171.905166][T10585] kobject_synth_uevent+0x79d/0x7d0 [ 171.907477][T10585] ? find_held_lock+0x2b/0x80 [ 171.909467][T10585] ? bus_to_subsys+0x10f/0x150 [ 171.911584][T10585] ? __pfx_kobject_synth_uevent+0x10/0x10 [ 171.913971][T10585] ? do_raw_spin_unlock+0x145/0x1e0 [ 171.916293][T10585] bus_uevent_store+0x3d/0x90 [ 171.918285][T10585] ? __pfx_bus_uevent_store+0x10/0x10 [ 171.920941][T10585] bus_attr_store+0x74/0xb0 [ 171.922988][T10585] ? __pfx_bus_attr_store+0x10/0x10 [ 171.925596][T10585] sysfs_kf_write+0xf2/0x150 [ 171.927743][T10585] kernfs_fop_write_iter+0x3e0/0x5f0 [ 171.929974][T10585] ? __pfx_sysfs_kf_write+0x10/0x10 [ 171.932296][T10585] vfs_write+0x6af/0x1050 [ 171.934106][T10585] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 171.936361][T10585] ? __pfx_vfs_write+0x10/0x10 [ 171.938436][T10585] ? find_held_lock+0x2b/0x80 [ 171.941398][T10585] ksys_write+0x12a/0x250 [ 171.944400][T10585] ? __pfx_ksys_write+0x10/0x10 [ 171.946872][T10585] do_syscall_64+0x123/0x790 [ 171.948874][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.951271][T10585] RIP: 0033:0x7f41fbf9e159 [ 171.953599][T10585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.962315][T10585] RSP: 002b:00007f41fce2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.968311][T10585] RAX: ffffffffffffffda RBX: 00007f41fc225fa0 RCX: 00007f41fbf9e159 [ 171.972564][T10585] RDX: 00000000ffffffd9 RSI: 0000200000000600 RDI: 0000000000000003 [ 171.976483][T10585] RBP: 00007f41fc03506b R08: 0000000000000000 R09: 0000000000000000 [ 171.980946][T10585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.985528][T10585] R13: 00007f41fc226038 R14: 00007f41fc225fa0 R15: 00007ffe93819998 [ 171.992767][T10585] [ 171.995510][T10585] Kernel Offset: disabled [ 171.997830][T10585] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:06:51 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b1bad5 RDI=ffffffff9bc76f60 RBP=ffffffff9bc76f20 RSP=ffffc90005627328 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3866666666666666 R12=0000000000000000 R13=0000000000000035 R14=0000000000000002 R15=ffffc90005627640 RIP=ffffffff85b1baff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f41fce2c6c0 ffffffff 00c00000 GS =0000 ffff8880d5b4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=00000000268af000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=00000000ffffffff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe93819e86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe93819e86 00007ffe93819e8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41fc03564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41fc03568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41fc0357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41fc035680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41fc1f25f8 00007f41fc1f25c8 00007f41fc1f2600 00007f41fc1f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=00000000ffffffff RCX=0000000000000002 RDX=1ffff11003ed3960 RSI=ffffffff8e368905 RDI=ffffffff8c623a80 RBP=ffffc90000187df0 RSP=ffffc90000187ca0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=ffff88806a53bf00 R15=dffffc0000000000 RIP=ffffffff8bd38bc0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f41fcd5da08 CR3=000000002cbfd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555594398860 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddeb7f2e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fddeb7f2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555594394f98 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff04058004 1c10000008000801 52be029610000590 031010000580030e ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0176a20010000200 04dc028004021000 00080006015bdc0e 08000280030fffff ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040fffffffffffff 040fffffffffffff 040010000fffffff ffffff042210000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010100002800401 0800080274904087 fffffff810000280 030fffffffffffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010010000fffffff ffffff041fffffff f608000210000680 040100000008060c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0104ee0004010000 0208060210000100 00000806080104e0 0010000803188081 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 809e080000030010 0010100002800401 0800080274904087 fffffff810000280 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030fffffffffffff 040fffffffffffff 040fffffffffffff 040010000fffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080002a8030008 0002a00300000000 0000000000006461 656101ffffffffff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000167fb3 RBX=ffff88801f69a580 RCX=ffffffff8bd2c215 RDX=0000000000000001 RSI=ffffffff8e38edcf RDI=ffffffff8c623a80 RBP=ffffed1003ed34b0 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4c67bd R10=ffff88806a633deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bd2a74f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c38c152 CR3=000000004e928000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6576697372756365 725f64656772656d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0645bbb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0645bbb6 00007ffe0645bbbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa68be3564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa68be3568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa68be357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa68be35680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=8000000000000002 RBX=ffffea000124bf40 RCX=ffffffff826208c6 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc9000397f4d8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000c00b R14=ffff88804e9147c0 R15=ffffea000124bf40 RIP=ffffffff820c4281 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055558b4b7500 ffffffff 00c00000 GS =0000 ffff8880d5e4e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f33d35556c8 CR3=000000004e908000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379735f65676173 752e746363617570 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffca293c96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffca293c96 00007fffca293c9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33d283564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33d283568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33d28357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33d2835680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000