last executing test programs: 12.788094539s ago: executing program 1 (id=745): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400090000bd7000fcdbdb25021f00ff", @ANYRES32, @ANYBLOB="14000600ff0f000010000000d1010000000000000800080030000000080002000a01"], 0x54}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 12.728642001s ago: executing program 1 (id=747): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000107"], 0x20}}, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0x10, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0x7, 0x3, 0x5, 0xfffffffffffffffe, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x56, &(0x7f0000000680)=""/86, 0x41100, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x5, 0x401, 0x3ff}, 0x10, 0x2faf, 0xffffffffffffffff, 0x1, &(0x7f00000007c0)=[0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000800)=[{0x2, 0x1, 0x7, 0xc}], 0x10, 0x9}, 0x94) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000ac0)={&(0x7f0000000900)=0x1, 0x7, &(0x7f00000009c0)=[{}], &(0x7f0000000a80)}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4005001}, 0x40050) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000b80)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r2, @ANYBLOB="090000000000100000003b0000000d0000008196b65c7f38c273457c34c71fe078c495d8c3feaef02ced1bf0519e4f21c67b130277edda30081e6e89d195ad09fc33a74a30fa816d1ae907d401f3f216cd526cc72e77b991fcbd0e0183cdd453a0936b7cf7ca6d71a4be0674c7795d6a9cef4808b6c85bc50ed30bfab872d7ab5d1d8c9869d852389948c1ed341e00696db9235419507d461b2c577c4806306634144bbeef7b074094b9510d2ccc66ff", @ANYRES32=r5, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) 12.419984759s ago: executing program 2 (id=757): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 12.419606799s ago: executing program 2 (id=759): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x7fff, 0xfff7}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/devices/usb1/1-0:1.0/usb1-port1/disable\x00', 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x46798708, 0x3a, '\x00', 0x3a, '\x00', 0x3a, './sys'}, 0x27) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x8073, 0x800) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, @stop_pts=0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000300)={0xc, r7}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r6, 0x3b71, &(0x7f00000003c0)={0x20, 0x0, &(0x7f0000000380), 0x6, 0x818}) write(r5, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r8 = syz_open_dev$usbmon(&(0x7f0000000180), 0x200, 0x101000) ioctl$MON_IOCQ_RING_SIZE(r8, 0x9205) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r9, &(0x7f0000000240)='1', 0x1) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r0, 0xc0386447, &(0x7f0000000100)={{0x8, 0x0, 0x0}, 0x8, 0x10, 0x4, 0x3, 0x0, 0xb703, 0xffffffffffffffff, 0x800}) 12.158173702s ago: executing program 2 (id=763): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010"], 0x20}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4005001}, 0x40050) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d801", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="bc01330080000000ffffffffffff080211000000f7ab87594b3f00000000000801000100dd7118aae49bd5937bad5fda023b2a5a78c05782f92fe27196352514ed223d61c8fc17d2692f2a2eecd8d55db037f220440957ec558232ad7346e19d0ffba41dae1bdf25fc38ceb7a7a77ac466c2bb6feb8de070b227826541a0d118d508fc18f3cc6f5f98db435cd2d27a5c0ce49292e72bb2dd32681a1a58e3ff43cdadc26f69deb1ef3ede9aec85a6554b2c7cd5af891f933549794b8d0f911ffdaed3ba6833441f94f5721cddaf7e6127b1f68192b4d5902dd5c215d8df43165c4061282fcbe5430fdf2448206d0e1561b338289d64b802476bd7d66916ec22a9ba727a7235efa7d79790006ecf9f6cf9dcdddfd6fc6d331c49964061c06dde5fba9c6d0c3e70ab41f94363dfcae6a3094be521aaeb94d767d83c334beb6c7fb826e4445bc76956fa8925f927e16204df31acbbd681b6d593a68b3b3756ff8a78ffb7134aff566b"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) 11.849935118s ago: executing program 3 (id=766): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2309000000000000000001000000050007ffffff9e000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) 11.84963642s ago: executing program 1 (id=767): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r1, 0x15, 0x0, @val=@perf_event={0x4b}}, 0x18) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000001c0)={0x3, @capture={0x0, 0x1, {0x0, 0x7ff}, 0xe315}}) 11.849388203s ago: executing program 3 (id=768): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000700)={0x0, @multicast2, @loopback}, &(0x7f0000000740)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000780)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000007c0)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xffffffff}, @ETHTOOL_A_RINGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x40}]}, 0x64}, 0x1, 0x0, 0x0, 0x8041}, 0xc0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 1.182209415s ago: executing program 1 (id=769): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) syz_init_net_socket$llc(0x1a, 0x3, 0x0) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) 1.181588638s ago: executing program 3 (id=770): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000340)={&(0x7f00000002c0)=[r1], 0x0, 0x1, 0x1}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r2) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="090326bd7000ffdbdf9504"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4c090) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ppoll(&(0x7f0000000140), 0x0, &(0x7f0000000500)={0x0, 0x3938700}, 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r6, 0x3b88, &(0x7f0000000140)={0xc}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000140)=0x8, &(0x7f0000000180)=0x4) r8 = signalfd(r5, &(0x7f00000001c0)={[0x10001]}, 0x8) r9 = syz_open_dev$hiddev(&(0x7f0000000240), 0x5, 0x80880) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r8, 0x24, &(0x7f0000000380)={0x8, 0x0, '\x00', @zc_export={r9}}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x8003}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000100)={r10, 0x401}) 1.181398255s ago: executing program 1 (id=771): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x0, 0x300000, 0x8}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') accept4(r3, &(0x7f0000000680)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000700)=0x80, 0x40000) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000100)={{0x9, 0x7f}, {0x9, 0x1003ff}, 0xfeffffff, 0x1}) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6, {0x0, 0xffffffffffffffff}}, './file0/../file0/../file0/../file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) write(r9, &(0x7f0000000300)='0 ', 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000380)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x48f6}], &(0x7f00000003c0)='GPL\x00', 0x24b, 0x3d, &(0x7f0000000400)=""/61, 0x41000, 0x0, '\x00', r4, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x10, 0x18ca, 0x5360}, 0x10, 0x1390f, r6, 0x3, 0x0, &(0x7f00000004c0)=[{0x0, 0x5, 0x9}, {0x0, 0x1, 0x6, 0x8}, {0x4, 0x1, 0x8}], 0x10, 0xf}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) 1.18111889s ago: executing program 0 (id=772): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000280)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x7fff, 0xfff7}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/devices/usb1/1-0:1.0/usb1-port1/disable\x00', 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x46798708, 0x3a, '\x00', 0x3a, '\x00', 0x3a, './sys'}, 0x27) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x8073, 0x800) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, @stop_pts=0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000300)={0xc, r7}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r6, 0x3b71, &(0x7f00000003c0)={0x20, 0x0, &(0x7f0000000380), 0x6, 0x818}) write(r5, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r8 = syz_open_dev$usbmon(&(0x7f0000000180), 0x200, 0x101000) ioctl$MON_IOCQ_RING_SIZE(r8, 0x9205) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r9, &(0x7f0000000240)='1', 0x1) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r0, 0xc0386447, &(0x7f0000000100)={{0x8, 0x0, 0x0}, 0x8, 0x10, 0x4, 0x3, 0x0, 0xb703, 0xffffffffffffffff, 0x800}) 1.181011358s ago: executing program 3 (id=773): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000f40), 0xa42, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, &(0x7f0000001000)={0x20, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r3], 0x28}}, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff004) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) 1.180897336s ago: executing program 1 (id=774): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000200280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 1.180649021s ago: executing program 0 (id=775): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) truncate(&(0x7f0000000340)='./file1\x00', 0x12) finit_module(r5, 0x0, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000001ec0)={0x2e, 0x20, 0x0, r0, 0xc0207512, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001e80)=@new_dev={0x2, 0xf4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2}}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) close(0x3) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0407fff1aaaaaaaaaa1091"], 0x102) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) 1.133127579s ago: executing program 0 (id=776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0xc0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x6000, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000200)=0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newsa={0x13c, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1)\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8, 0x3) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x8) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000e8a40)={0x0, ""/256, 0x0, 0x0}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$FBIOGETCMAP(r5, 0x4604, &(0x7f00000001c0)={0x3, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000100), &(0x7f0000000140), 0x0}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r5, 0x941c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000017c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000019c0)={r6, 0x6}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000e8c40)={0x0, 0x0, "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", "ea1861e39b4d6785c3369fb78b7c193129eecada323561cabc1b9bcc0481bf77938272f4d0180b4cbb38a23e1cdd1b35b0ccbac207c2f3e7e727d16a85b673e1362979568ad445c9733ffbb531c3fd75ed387f991cc0abb263cc072a790934213b31e1373126d29e2fa9a4321403b21ad24ee9413e55ce532f24b98469ff1755fee3da9905f0323d0e986cebb45d151a3a1796d5b20dc97329667c705a1471c92d26e4ca3c1828feda7d42fae0ef174e541aff13ac420d2f3562e7ceb2eba23b81c827bbc74fa97f008052cce67b02f55cc2f050819feffc22623a24e6d187e76658ddf572c7c4c4b483ccd3e85b4379993c6592480742d66095f22560201666a4ac72ded1fbd2b4b0ad57612b7de9dbd95a476770364601b75230b62631034856a9efb29e4a7cedfe62d5f86ee0b03b9d2eb78822c5f9a0db04b36f8283df7425d5f80f8814275fd57108b635df096e13cfe0c17c65899a483074ea48df9ad69051815124e75fbaf5200334451dcca0fbf993db7cc41c0084c874584e81b0b7e620048d7f6f63bbd5b0837403ccab10c7ba78863b3ee391d48e131d398972343d16cd0a417e36406a6cd76786322632bf43ee5d2a171dd7be7c074b289b42179bac8580767f37166c60bcf8dd7a2baa20e84ef1ec05bcf7f1cd63b5fdad91cfb71583d452e22e62fd6d908d729b3a91b30b74442849ab4344e4984daa21f61a4ba0c30642e594fbaf221667feafd8bd7f1215fb583c2ed410fd083d4b04e600f227e60866241fcf1fddcc0301169560acc9a0f0caac980f2ff4de5b0333fd6405b1ba91aa9473d54dbeb08ba3f09a48a2aaf87ec66670be09f67243cf7dd1f38775b27c0ee4ea4cd1e7e800666111c4c45b2bb38786b11cd690ec08b505955f226eed63f38710d738270691366ab76183a0e30b4f73574be3a71b092a76ade23a4111035b800757d0d04344e037fe606dbdafeacaed31990d72975070bb546263a07b1f83fdb64d8163af1b4edab6146584edc4d644d2673b26e525f7f5d0298dfb8153e21f42cb905db9181312c7cbe64dea35e21b5558c87adeeaa1e46467b898d5b15d504886c186df793dc16f4b344bb46f494f15ca5e96f0c952a1eb5a86a7cedc4b02bc2f5563caeeb94dfa43c3e27867a7562041325901b3d588fdfbb98abe12b88e714d93fbc7c7b746ac97a16b440299ec6ad46a40e311acb9573ff41589ca79991b216b61579dc0b859ab4dcedd22b355e5a29f029d0f3269aa676eb40dcafe0374af7eab885be86540328ed9f71029ec27ecdceb97881416dedc367baf6b2076d32dbceb5e51e834e5c1b11b028d69e51b4f8845ba8b247a0e8fb1ee0ed4d12aa826b911a7dd6e3d5b4f5bf67bf7e4a0fd3a15f5bcfd9dff919c3569116d343a00a817bf9ae9f2a20597e30681bc91c6b01759a37af2a2854705e1b4582cb4185cc0c49fe2651cc81623aba6f500c97a280602c9d207157fd80bf7bacc2aee8065812b1a8ece447e4b0b42d499bae207f9aefcb919c89b4a1db15846b7ca49d6b81eafc2e6744f0f1ab1072ecee65c63d2b6312c4971e9ad61f838647186e82de819f681a7e1c18477d6510a11e107a86d2c1f749fa2a2a7b94cd234d74347d22505806c059e25c8ca56300ea4d7769613a3a35d068c8ee6ca46e3496ba1a49cc175aa8d773a79af5e81872ff976d29034dc232f2e2dceba286d37649710725332ec36704621ed353fd2eadda2955a82467eb7a6195ce2039d7dbe48596e7ff47735621c86f2675560153d187560e18b85e34f32c8c5609f843fd8f409dd3d991e81e89de85b2aa1e5b4c2919e221ae5b26a335cf05320702a79c426c579fd7fc7a969b2e421e1cb943d8fe57ea26fc1e7a1a7103f86c314a7d806c4287bd925d38a0bb6d22cda631603ff437c99e69f2e80998dad8858b376d249dde02c37a4ea933d10a5863259f89643ecd3bad5fdf846b0e74afa83acdefe7d1fe75ce3c3d7c38fe96258f09dea7c2f4b9b7e9a6714575e8120da2722c383e1ef215c66e8e4a69f6b25bed33a7d6bb1274b048e0f712bb68d9e24f4d0ee539610f9730fedb1a03e7bcdefe62865763c14874a6658f6d2eed480788a979dad87f8a7a099ce32c5293f0102c223352b57b559835aa6e15421f9a59b0845319690ec8395d7b4b842cfad83b0f94561365adb8272c259e8a6c6a2290cd6383097a3d1666f4cc20b6b7bda395e907cc0856f3f1ea919fbbadd9f25af82207367c9a7a152b2dc6f69ff6041fa3229c9ab8bde8881b9428a3c2d2d86a974b22268f8b8577030b24360f3207bf2ca506ed721793edea9a760aaed5c0f18ba060b64ef501016c23a3b7e23603fb68e78ceb821d216d9c964dd71d47ca9b1fda30d4e43c3e715e5555286c31a45f66fea41d4cbb2b0d67dc0389e16d2e9dc0e6b3433b6cf23ae3432762867ad5d6f60a86ca73f5da8f2001b7d1ad114dd1d6f97a07538aa1358ce1c8b5d773ef473a54154eecebb2bcf1e37ac72d62230cc8fe98c6a1974c356fe1f1c1c8be199341f4a67c7b9c58a6355260c91dc71fdda526b22b3989af2ebf4c6f4461f170dc31642150b1b744667c1f29341c21295371b622df97fcec9ad9d9e91311df9251817d78088a4e21c02343d6253b83228075ad2ae098480e866bf53600b24ca16e1d31598d72a8a567a8a1564ad934f10ce133b7be89c483eb8dc296e09149f4130fa859a48f3d4ceb2858322dc2634a0c679a320a7bfe6fb92b3ee37677d8a4ed58c60ba114e863f81fb8483d21f50c7ce4e2360141da992dc0e21abccdc2678700f6764ca77a2a3de83312bbcd94ff758f20c876a245e4404d5c3f340aaba76360e0c811ca4834691f23530e3bbf95fcf9ac805d7cfbddc8835061b53124147ef9fca67f81c41c0c8e40d9148d21980be28f038ba5ec9befe7243d7accf573eedc17bd198efad213d524cbdc735f397864eaedfc292131ce7009024586b021397f93f97585134284c08447fe553169fc1215d0916199165b1d9e8f6a42265b5d901a033e4645f035a28183b07d2c7f323b80b462f7afcf0c5c74d21d0296d886f5e8ffc0157db66e8d1d7e34ca83a4fc3506ded64f09527808ff5ec213c682ed2ef434fab864767b4d43d2b64950333c387aec9b2c9a5f770333fe576f39b43921ebdfb828d5c873b836ecc9829eb3f32761bcb541b87b96519beb04f1d180586d1c1c5a83d3b380e69b335c7bc536c74da1c5bc4e08b982be745bcf4fd01efceb9dc9cd08a7f945a496ea53226fb1e565bd4fd1dc73feff4fb5b35f8f53089e0669497771806bbbe1aef5ea9c1ad75ad8461f009430206ef59ddaa340629663dc7a29cae7ebde33a1fad02fb7a9ccea38186a9b1cd158b266c25600bc6ed4abe0b8824c2dca3f4bbd7e57ad215204008442353cc7f564bf8201d5e5a1edf8b0a65cd1661a4c163b1b75a8ee4e2bea4a3d18b897bd02189038763080046ce52669bd0f692460c975bbef249a553656f89a49e4cd32c6eae27083449502face506d82086f43c1f1f828698ec78c6046957cd99a597cbcc146364f277e0376a1b39b81164bf29e93a3fe93b9bd683bede7f2af168848f38cdebfca01bb2510b29f9d5942ea94b200c94b06a17db44c5cf3ef21af1b9791c5ca27bf43a81589e6b2ebdbf9f75bf6b1e722626170e48ed887cedeeffbcd55d0b91820d2f086337e484ba067d958d8994f8258ac1652d65f90105cc7a6c6c5a4619413b01153cc28b6e6ee87ec5f28ddd7033fd6d322546ab73ae4442828b9aa267ffaf924a2a530e018416bc427aa1939d45dde4934eb665d9b8458fa975c0a86441dcb3f9e6f6569ee369e4dbb0f86e924806485c17e58f74c3a4e70f24acbd7044b5966c0b093e7029d883b1332fc8d640433c1b1722cf9d121e4f00f02ce5e6cfa76815e54e73c8e6ca9afd7331b5e63a483e201b862e6ca7a5755454506aca34d65dd83eb291cec2799defccf6eda2292805b1b685ceb1a89e47f74e429040d395e10b778857eefced9d7e160157e010488c636d98d0e2498914bafc79d13731d67535274e74593eb2973cf80d6b7445b8d5ec5cd0acbea015cb5e2026b47b3de27ebe671d34b2dda19d04ec00b48f87e66d27115b18e6436c064605e182d8cb69f66363af27120846bc5b894759bc565d5853f7a00192637420ff448091ed7bef11eabdb5f32c7b55f30d6758fbc71244d72e95b59ad7248c1ab2f03b1edab7a8120e4962a49bfce866c3b318689556bf87ab8c4c1283947ca402077f27e8f49e9e5afaa22d346a2980f4c254de9c415e8b4ad48af2455470456a1ffc353c4a434884ee6eedc93d9e37bc60ecac29bc7e7bb03dae3b366c0f4dc95d7a1ef5d77278345d9b8ca6d12e9383176ec416d8c00da70fe0df2588a285684b2b64bcd28829c4ce89d288f3ad493da437b8ba72cdadf9f306cd9e4ba6362675c5f96815606b26f785ca8253cebe167e2dbb65e655bec383375c26cdce5b172048a33084c168c6c57d8ad6a6e3e1c6b12354a8fee2783f50eb2b1400070291b894d9dcca8566bc8bdb24bb99e009ad88d979b7773c553f50b6b6f8f9f6c26068ad713c02135914f0212408c0a2520c3fcdab52d725da3855f4d552df3f6af25e557f6844e809b2ff9b4e969950be1fa39b1d6cc6d932ed11607ce67afad2f5b46ab81f79f45872412a28d5ae384bf5638d8e7d43929f606a7ee2b06e24ae5b691e5df1de53ea86ba7b1e650eefc080f925515e39138e8f572c389fc5212f83b0fd5594be41d6f3f683a8c6ef229ff89a00129f0410a9444bfcf5792e69029d8e0f01ed90cfa5ecab84d49017e895021d626823901a1121acc53672219ac60d590e6e8ffac761354bdb2558146b4d72187828b4781025d55e955fd45fba9ede3f825a867f74189f8dc54569c69743fa9f23081e959f72c38d379ac5d0643f2ad43d54b799f6fbbc5d8469949a96faae601d3df8236f3a6b6f09076874c6e958eec2a676bbce883ee77d06dd999b9af339b712d6c69d3b0153002db10bb94f039f3589985cd8c4f0a2048df73b6e08394daf32ca635022ee28db024c62c9ea3c318167462655a1e9c20e1ade99d4e86274d1b3b3b066fe77d3ccffb2e1b3f2c8ff210e45fdd76e89328461a2c84515f1d78e9a96f2498baa7de8c8fd36358dbff5d03c5ce34d9598b238c633186526638a3b39be6b0c80e29ae7ba40a064b2f37c3b573f95084f6fbc386c08a1b41dde7c1e25464f086f70162b01adfb99d3989d7c34fb3ca1d5f35f301e5382a9f84315f73dcd532d6d0ba65b639010fcbdb8c0998b1d7e00c5694857baed938f7abd588fa23a0d57b97ff3baab3763f5ad1bf7044ec1ba8b3600e8fadfae4b568c9a7b"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000e9c40)={{0x0, 0x5, 0xff, 0x7ff, 0x7c, 0xfffffffffffffff9, 0x10000, 0x200, 0xd45, 0x9, 0x9, 0x6, 0x7f, 0x8525, 0x200}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000eac40)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "b3824ec0c71733"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000ebc40)={{0x0, 0x5, 0x2, 0x1, 0xffffffffffffffff, 0xddda, 0x8000000000000000, 0x80, 0x79d, 0x4, 0x0, 0xa39c, 0x7dbd, 0x8}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000ecc40)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "1e30e3d4d042db"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000edc40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000eec40)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000eee40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "4671feb3b2328f"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f00000efe40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000f0e40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000f1040)={0x400, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r6, r7}, {r8, r9}, {r10, r11}, {0x0, r12}, {r13, r14}, {r15, r16}], 0xd, "a8617687e431ad"}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000200000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 1.132343699s ago: executing program 2 (id=778): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) mq_notify(r1, 0x0) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x1f) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x20, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x5b) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000340)={&(0x7f00000002c0)=[r5], &(0x7f0000000300), 0x1, 0x1}) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000280)={0x5, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1.127329847s ago: executing program 3 (id=779): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @remote, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x0, {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x8, 0x4) open(&(0x7f0000000140)='./file0\x00', 0x2a4c2, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r4, &(0x7f0000002140)=""/17, 0x11, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r6 = accept$nfc_llcp(r4, &(0x7f0000000200), &(0x7f0000000280)=0x60) recvmmsg(r6, &(0x7f0000004e80)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, 0x80, &(0x7f0000002380)=[{&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/206, 0xce}, {&(0x7f00000005c0)=""/73, 0x49}, {&(0x7f0000000640)=""/69, 0x45}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002180)=""/153, 0x99}, {&(0x7f0000002240)=""/200, 0xc8}, {&(0x7f0000002340)=""/56, 0x38}], 0x8, &(0x7f0000002400)=""/48, 0x30}, 0x7}, {{&(0x7f0000002440)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000003740)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/235, 0xeb}, {&(0x7f00000035c0)=""/91, 0x5b}, {&(0x7f0000003640)=""/168, 0xa8}, {&(0x7f0000003700)=""/1, 0x1}], 0x5, &(0x7f00000037c0)=""/193, 0xc1}, 0x4}, {{&(0x7f00000038c0)=@nfc, 0x80, &(0x7f0000004d40)=[{&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/65, 0x41}, {&(0x7f00000049c0)=""/166, 0xa6}, {&(0x7f0000004a80)=""/165, 0xa5}, {&(0x7f0000004b40)}, {&(0x7f0000004b80)=""/213, 0xd5}, {&(0x7f0000004c80)=""/145, 0x91}], 0x7, &(0x7f0000004dc0)=""/191, 0xbf}, 0x3a43}], 0x3, 0x10000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, &(0x7f0000000040)) write(r2, &(0x7f0000000040)="a9", 0x1) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101000) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r7, 0xc0086442, &(0x7f00000000c0)) 1.015742719s ago: executing program 2 (id=780): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000080)=[r1], &(0x7f00000000c0)=[0x8, 0xfffffffffffffffc], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000340)={&(0x7f00000002c0)=[r1], 0x0, 0x1, 0x1}) 969.981ms ago: executing program 3 (id=781): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000080)=""/149, 0x95}], 0x1, 0x9, 0x4317d336) write$input_event(r0, &(0x7f0000000080)={{}, 0x1, 0x1, 0x1}, 0x18) write$input_event(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r3, 0x707, 0x0) 969.431117ms ago: executing program 0 (id=782): r0 = socket(0x10, 0x803, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x222800, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a3000000000"], 0x118}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x3ff9}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x8001, @empty, 0x7ff}, 0x1c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = accept4$inet(r4, 0x0, &(0x7f0000000000), 0x100800) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4001, @remote}, 0x10) close(0x3) 969.284723ms ago: executing program 2 (id=783): syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x15ca, 0x1806, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x6, 0x0, 0xff, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff23, 0xa, 0x9, 0x13}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x3, 0x1, {0x8, 0x25, 0x1, 0x80, 0x30, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xfe, 0x6, 0xe, {0x8, 0x25, 0x1, 0x0, 0xc, 0x0, 0x6}}}}}}}}]}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x20000810) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 869.821389ms ago: executing program 0 (id=784): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='@'], 0x40}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) 0s ago: executing program 0 (id=785): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) (fail_nth: 8) kernel console output (not intermixed with test programs): hould_fail_ex.cold+0x5/0xa [ 67.401774][ T6565] _copy_from_user+0x2e/0xd0 [ 67.401790][ T6565] copy_msghdr_from_user+0x9f/0x4c0 [ 67.401802][ T6565] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 67.401818][ T6565] ___sys_sendmsg+0x106/0x1e0 [ 67.401829][ T6565] ? __pfx____sys_sendmsg+0x10/0x10 [ 67.401838][ T6565] ? __lock_acquire+0x49f/0x1a40 [ 67.401852][ T6565] ? get_pid_task+0x106/0x250 [ 67.401877][ T6565] __sys_sendmsg+0x160/0x210 [ 67.401891][ T6565] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.401911][ T6565] do_syscall_64+0x115/0x870 [ 67.401925][ T6565] ? clear_bhb_loop+0x70/0xc0 [ 67.401938][ T6565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.401948][ T6565] RIP: 0033:0x7fb374f9e0d9 [ 67.401958][ T6565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.401967][ T6565] RSP: 002b:00007fb375f1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.401978][ T6565] RAX: ffffffffffffffda RBX: 00007fb375225fa0 RCX: 00007fb374f9e0d9 [ 67.401985][ T6565] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 67.401991][ T6565] RBP: 00007fb375f1c090 R08: 0000000000000000 R09: 0000000000000000 [ 67.401997][ T6565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.402002][ T6565] R13: 00007fb375226038 R14: 00007fb375225fa0 R15: 00007ffe3cc75258 [ 67.402015][ T6565] [ 67.485666][ T5083] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 67.489241][ T5083] CPU: 1 UID: 0 PID: 5083 Comm: kworker/u34:1 Not tainted syzkaller #0 PREEMPT(full) [ 67.489258][ T5083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.489278][ T5083] Workqueue: hci2 hci_rx_work [ 67.489297][ T5083] Call Trace: [ 67.489302][ T5083] [ 67.489308][ T5083] dump_stack_lvl+0x100/0x190 [ 67.489406][ T5083] sysfs_warn_dup.cold+0x1c/0x28 [ 67.489424][ T5083] sysfs_create_dir_ns+0x24b/0x2b0 [ 67.489447][ T5083] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 67.489458][ T5083] ? find_held_lock+0x2b/0x80 [ 67.489469][ T5083] ? kobject_add_internal+0x25f/0x930 [ 67.489481][ T5083] ? kobject_add_internal+0x25f/0x930 [ 67.489493][ T5083] ? do_raw_spin_unlock+0x145/0x1e0 [ 67.489529][ T5083] kobject_add_internal+0x2c8/0x930 [ 67.489545][ T5083] kobject_add+0x16a/0x1e0 [ 67.489555][ T5083] ? __pfx_kobject_add+0x10/0x10 [ 67.489566][ T5083] ? class_to_subsys+0x10f/0x150 [ 67.489593][ T5083] ? kobject_put+0xb9/0x640 [ 67.489608][ T5083] ? _raw_spin_unlock+0x28/0x50 [ 67.489623][ T5083] device_add+0x294/0x1970 [ 67.489639][ T5083] ? __pfx_dev_set_name+0x10/0x10 [ 67.489650][ T5083] ? __pfx_device_add+0x10/0x10 [ 67.489666][ T5083] ? mgmt_send_event_skb+0x2fb/0x460 [ 67.489685][ T5083] hci_conn_add_sysfs+0x1a3/0x260 [ 67.489703][ T5083] le_conn_complete_evt+0x11eb/0x1f60 [ 67.489722][ T5083] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 67.489734][ T5083] ? hci_event_packet+0x186/0xcd0 [ 67.489746][ T5083] ? hci_event_packet+0x186/0xcd0 [ 67.489761][ T5083] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 67.489776][ T5083] ? skb_pull_data+0x15f/0x1e0 [ 67.489794][ T5083] hci_le_meta_evt+0x34a/0x5f0 [ 67.489808][ T5083] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 67.489824][ T5083] hci_event_packet+0x51c/0xcd0 [ 67.489837][ T5083] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 67.489851][ T5083] ? __pfx_hci_event_packet+0x10/0x10 [ 67.489865][ T5083] ? kcov_remote_start+0x384/0x670 [ 67.489879][ T5083] ? lockdep_hardirqs_on+0x78/0x100 [ 67.489896][ T5083] hci_rx_work+0x451/0xfc0 [ 67.489911][ T5083] process_one_work+0xa23/0x1940 [ 67.489929][ T5083] ? __pfx_process_one_work+0x10/0x10 [ 67.489945][ T5083] ? __pfx_hci_rx_work+0x10/0x10 [ 67.489958][ T5083] worker_thread+0x5ef/0xe50 [ 67.489973][ T5083] ? __pfx_worker_thread+0x10/0x10 [ 67.489986][ T5083] ? kthread+0x13a/0x450 [ 67.489995][ T5083] ? __pfx_worker_thread+0x10/0x10 [ 67.490007][ T5083] kthread+0x370/0x450 [ 67.490018][ T5083] ? __pfx_kthread+0x10/0x10 [ 67.490030][ T5083] ret_from_fork+0x72b/0xd50 [ 67.490047][ T5083] ? __pfx_ret_from_fork+0x10/0x10 [ 67.490062][ T5083] ? __switch_to+0x800/0x10f0 [ 67.490074][ T5083] ? __pfx_kthread+0x10/0x10 [ 67.490086][ T5083] ret_from_fork_asm+0x1a/0x30 [ 67.490109][ T5083] [ 67.490124][ T5083] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 67.525922][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 67.526976][ T5722] Bluetooth: hci4: command 0x1003 tx timeout [ 67.529285][ T5083] Bluetooth: hci2: failed to register connection device [ 67.665254][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 67.665266][ T43] audit: type=1400 audit(1786105671.155:351): avc: denied { load_policy } for pid=6568 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 67.667284][ T6569] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 67.667530][ T6569] SELinux: failed to load policy [ 67.691168][ T6569] netlink: 32 bytes leftover after parsing attributes in process `syz.0.242'. [ 67.697699][ T43] audit: type=1400 audit(1786105671.195:352): avc: denied { setopt } for pid=6568 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.705508][ T43] audit: type=1400 audit(1786105671.195:353): avc: denied { create } for pid=6568 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 67.713501][ T43] audit: type=1400 audit(1786105671.195:354): avc: denied { ioctl } for pid=6568 comm="syz.0.242" path="socket:[10756]" dev="sockfs" ino=10756 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 67.809805][ T6577] netlink: 444 bytes leftover after parsing attributes in process `syz.3.244'. [ 68.037471][ T43] audit: type=1804 audit(1786105671.525:355): pid=6583 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.247" name="/newroot/73/file0" dev="tmpfs" ino=414 res=1 errno=0 [ 68.075534][ T6587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.249'. [ 68.080953][ T6587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.249'. [ 68.089801][ T6587] gretap0: entered promiscuous mode [ 68.093264][ T6587] gretap0: left promiscuous mode [ 68.139959][ T6591] netlink: 44 bytes leftover after parsing attributes in process `syz.0.251'. [ 68.143823][ T6591] netlink: 'syz.0.251': attribute type 6 has an invalid length. [ 68.146560][ T6591] netlink: 'syz.0.251': attribute type 5 has an invalid length. [ 68.149719][ T6591] netlink: 'syz.0.251': attribute type 4 has an invalid length. [ 68.587962][ T6615] syzkaller1: entered promiscuous mode [ 68.589869][ T6615] syzkaller1: entered allmulticast mode [ 68.648750][ T6617] warning: `syz.1.261' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.691426][ T43] audit: type=1400 audit(1786105672.185:356): avc: denied { write } for pid=6620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.772303][ T43] audit: type=1400 audit(1786105672.265:357): avc: denied { write } for pid=6625 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.846936][ T43] audit: type=1400 audit(1786105672.345:358): avc: denied { write } for pid=6629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.911470][ T43] audit: type=1400 audit(1786105672.405:359): avc: denied { write } for pid=6635 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.081544][ T6648] FAULT_INJECTION: forcing a failure. [ 69.081544][ T6648] name failslab, interval 1, probability 0, space 0, times 0 [ 69.085353][ T6648] CPU: 0 UID: 0 PID: 6648 Comm: syz.1.268 Not tainted syzkaller #0 PREEMPT(full) [ 69.085367][ T6648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.085374][ T6648] Call Trace: [ 69.085378][ T6648] [ 69.085383][ T6648] dump_stack_lvl+0x100/0x190 [ 69.085402][ T6648] should_fail_ex.cold+0x5/0xa [ 69.085416][ T6648] should_failslab+0xc2/0x120 [ 69.085433][ T6648] __kmalloc_cache_noprof+0x91/0x6c0 [ 69.085444][ T6648] ? sctp_add_bind_addr+0xae/0x3e0 [ 69.085461][ T6648] sctp_add_bind_addr+0xae/0x3e0 [ 69.085476][ T6648] sctp_copy_local_addr_list+0x349/0x550 [ 69.085495][ T6648] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 69.085533][ T6648] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 69.085551][ T6648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.085566][ T6648] sctp_bind_addr_copy+0xe0/0x530 [ 69.085583][ T6648] sctp_connect_new_asoc+0x1c9/0x770 [ 69.085596][ T6648] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 69.085609][ T6648] ? selinux_sctp_bind_connect+0xe0/0x230 [ 69.085628][ T6648] sctp_sendmsg+0x1743/0x22e0 [ 69.085643][ T6648] ? __pfx_sctp_sendmsg+0x10/0x10 [ 69.085653][ T6648] ? sock_has_perm+0x25a/0x2f0 [ 69.085666][ T6648] ? __pfx_sock_has_perm+0x10/0x10 [ 69.085688][ T6648] ? __pfx_sctp_sendmsg+0x10/0x10 [ 69.085700][ T6648] inet_sendmsg+0x11c/0x140 [ 69.085716][ T6648] ____sys_sendmsg+0x9c9/0xbe0 [ 69.085732][ T6648] ? __pfx_inet_sendmsg+0x10/0x10 [ 69.085747][ T6648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.085766][ T6648] ? __pfx__kstrtoull+0x10/0x10 [ 69.085779][ T6648] ___sys_sendmsg+0x190/0x1e0 [ 69.085810][ T6648] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.085836][ T6648] ? find_held_lock+0x2b/0x80 [ 69.085869][ T6648] __sys_sendmmsg+0x20c/0x440 [ 69.085902][ T6648] ? __pfx___sys_sendmmsg+0x10/0x10 [ 69.085916][ T6648] ? ksys_write+0x190/0x250 [ 69.085936][ T6648] ? fput+0x79/0x100 [ 69.085948][ T6648] ? ksys_write+0x1ac/0x250 [ 69.085957][ T6648] ? __pfx_ksys_write+0x10/0x10 [ 69.085969][ T6648] __x64_sys_sendmmsg+0x9c/0x100 [ 69.085982][ T6648] ? lockdep_hardirqs_on+0x78/0x100 [ 69.085997][ T6648] do_syscall_64+0x115/0x870 [ 69.086009][ T6648] ? clear_bhb_loop+0x70/0xc0 [ 69.086023][ T6648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.086034][ T6648] RIP: 0033:0x7fb374f9e0d9 [ 69.086045][ T6648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.086054][ T6648] RSP: 002b:00007fb375f1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 69.086065][ T6648] RAX: ffffffffffffffda RBX: 00007fb375225fa0 RCX: 00007fb374f9e0d9 [ 69.086071][ T6648] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 69.086077][ T6648] RBP: 00007fb375f1c090 R08: 0000000000000000 R09: 0000000000000000 [ 69.086083][ T6648] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 69.086089][ T6648] R13: 00007fb375226038 R14: 00007fb375225fa0 R15: 00007ffe3cc75258 [ 69.086102][ T6648] [ 69.175108][ T6656] netlink: 380 bytes leftover after parsing attributes in process `syz.0.270'. [ 69.242817][ T43] audit: type=1400 audit(1786105672.735:360): avc: denied { allowed } for pid=6659 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 69.934403][ T6673] FAULT_INJECTION: forcing a failure. [ 69.934403][ T6673] name failslab, interval 1, probability 0, space 0, times 0 [ 69.939826][ T6673] CPU: 2 UID: 0 PID: 6673 Comm: syz.3.278 Not tainted syzkaller #0 PREEMPT(full) [ 69.939848][ T6673] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.939859][ T6673] Call Trace: [ 69.939865][ T6673] [ 69.939873][ T6673] dump_stack_lvl+0x100/0x190 [ 69.939903][ T6673] should_fail_ex.cold+0x5/0xa [ 69.939926][ T6673] should_failslab+0xc2/0x120 [ 69.939952][ T6673] __kmalloc_noprof+0xfc/0x820 [ 69.939972][ T6673] ? rcu_is_watching+0x12/0xc0 [ 69.940000][ T6673] ? tomoyo_realpath_from_path+0xb6/0x690 [ 69.940023][ T6673] tomoyo_realpath_from_path+0xb6/0x690 [ 69.940046][ T6673] tomoyo_path_number_perm+0x23c/0x580 [ 69.940070][ T6673] ? tomoyo_path_number_perm+0x22e/0x580 [ 69.940096][ T6673] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 69.940145][ T6673] ? find_held_lock+0x2b/0x80 [ 69.940162][ T6673] ? __fget_files+0x215/0x3d0 [ 69.940180][ T6673] ? hook_file_ioctl_common+0x140/0x440 [ 69.940199][ T6673] ? __fget_files+0x215/0x3d0 [ 69.940221][ T6673] ? __fget_files+0x21f/0x3d0 [ 69.940244][ T6673] security_file_ioctl+0xd3/0x230 [ 69.940273][ T6673] __x64_sys_ioctl+0xb7/0x210 [ 69.940305][ T6673] do_syscall_64+0x115/0x870 [ 69.940327][ T6673] ? clear_bhb_loop+0x70/0xc0 [ 69.940349][ T6673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.940367][ T6673] RIP: 0033:0x7f416019e0d9 [ 69.940382][ T6673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.940399][ T6673] RSP: 002b:00007f4161078028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.940416][ T6673] RAX: ffffffffffffffda RBX: 00007f4160425fa0 RCX: 00007f416019e0d9 [ 69.940427][ T6673] RDX: 0000200000000180 RSI: 00000000c01064c4 RDI: 0000000000000003 [ 69.940438][ T6673] RBP: 00007f4161078090 R08: 0000000000000000 R09: 0000000000000000 [ 69.940448][ T6673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.940457][ T6673] R13: 00007f4160426038 R14: 00007f4160425fa0 R15: 00007fffed031d88 [ 69.940481][ T6673] [ 69.940489][ T6673] ERROR: Out of memory at tomoyo_realpath_from_path. [ 70.437343][ T6703] FAULT_INJECTION: forcing a failure. [ 70.437343][ T6703] name failslab, interval 1, probability 0, space 0, times 0 [ 70.441202][ T6703] CPU: 0 UID: 0 PID: 6703 Comm: syz.1.289 Not tainted syzkaller #0 PREEMPT(full) [ 70.441216][ T6703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.441223][ T6703] Call Trace: [ 70.441227][ T6703] [ 70.441232][ T6703] dump_stack_lvl+0x100/0x190 [ 70.441251][ T6703] should_fail_ex.cold+0x5/0xa [ 70.441266][ T6703] should_failslab+0xc2/0x120 [ 70.441281][ T6703] __kmalloc_cache_noprof+0x91/0x6c0 [ 70.441292][ T6703] ? sctp_add_bind_addr+0xae/0x3e0 [ 70.441309][ T6703] sctp_add_bind_addr+0xae/0x3e0 [ 70.441328][ T6703] sctp_copy_local_addr_list+0x349/0x550 [ 70.441347][ T6703] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 70.441364][ T6703] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 70.441382][ T6703] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.441397][ T6703] sctp_bind_addr_copy+0xe0/0x530 [ 70.441414][ T6703] sctp_connect_new_asoc+0x1c9/0x770 [ 70.441427][ T6703] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 70.441439][ T6703] ? selinux_sctp_bind_connect+0xe0/0x230 [ 70.441459][ T6703] sctp_sendmsg+0x1743/0x22e0 [ 70.441473][ T6703] ? __pfx_sctp_sendmsg+0x10/0x10 [ 70.441484][ T6703] ? sock_has_perm+0x25a/0x2f0 [ 70.441497][ T6703] ? __pfx_sock_has_perm+0x10/0x10 [ 70.441539][ T6703] ? __pfx_sctp_sendmsg+0x10/0x10 [ 70.441551][ T6703] inet_sendmsg+0x11c/0x140 [ 70.441568][ T6703] ____sys_sendmsg+0x9c9/0xbe0 [ 70.441596][ T6703] ? __pfx_inet_sendmsg+0x10/0x10 [ 70.441612][ T6703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.441631][ T6703] ? __pfx__kstrtoull+0x10/0x10 [ 70.441645][ T6703] ___sys_sendmsg+0x190/0x1e0 [ 70.441656][ T6703] ? __pfx____sys_sendmsg+0x10/0x10 [ 70.441672][ T6703] ? find_held_lock+0x2b/0x80 [ 70.441709][ T6703] __sys_sendmmsg+0x20c/0x440 [ 70.441725][ T6703] ? __pfx___sys_sendmmsg+0x10/0x10 [ 70.441738][ T6703] ? ksys_write+0x190/0x250 [ 70.441758][ T6703] ? fput+0x79/0x100 [ 70.441770][ T6703] ? ksys_write+0x1ac/0x250 [ 70.441779][ T6703] ? __pfx_ksys_write+0x10/0x10 [ 70.441791][ T6703] __x64_sys_sendmmsg+0x9c/0x100 [ 70.441804][ T6703] ? lockdep_hardirqs_on+0x78/0x100 [ 70.441818][ T6703] do_syscall_64+0x115/0x870 [ 70.441831][ T6703] ? clear_bhb_loop+0x70/0xc0 [ 70.441844][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.441855][ T6703] RIP: 0033:0x7fb374f9e0d9 [ 70.441865][ T6703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.441874][ T6703] RSP: 002b:00007fb375f1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 70.441886][ T6703] RAX: ffffffffffffffda RBX: 00007fb375225fa0 RCX: 00007fb374f9e0d9 [ 70.441892][ T6703] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 70.441898][ T6703] RBP: 00007fb375f1c090 R08: 0000000000000000 R09: 0000000000000000 [ 70.441904][ T6703] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 70.441909][ T6703] R13: 00007fb375226038 R14: 00007fb375225fa0 R15: 00007ffe3cc75258 [ 70.441922][ T6703] [ 70.492783][ T6708] FAULT_INJECTION: forcing a failure. [ 70.492783][ T6708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.541127][ T6708] CPU: 1 UID: 0 PID: 6708 Comm: syz.3.291 Not tainted syzkaller #0 PREEMPT(full) [ 70.541141][ T6708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.541149][ T6708] Call Trace: [ 70.541153][ T6708] [ 70.541158][ T6708] dump_stack_lvl+0x100/0x190 [ 70.541177][ T6708] should_fail_ex.cold+0x5/0xa [ 70.541191][ T6708] _copy_from_iter+0x1f4/0x1690 [ 70.541209][ T6708] ? __asan_memset+0x23/0x50 [ 70.541222][ T6708] ? __pfx__copy_from_iter+0x10/0x10 [ 70.541236][ T6708] ? __pfx___alloc_skb+0x10/0x10 [ 70.541254][ T6708] netlink_sendmsg+0x808/0xda0 [ 70.541268][ T6708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.541280][ T6708] ? selinux_socket_sendmsg+0x198/0x2f0 [ 70.541298][ T6708] ____sys_sendmsg+0xa4d/0xbe0 [ 70.541314][ T6708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.541326][ T6708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.541347][ T6708] ___sys_sendmsg+0x190/0x1e0 [ 70.541358][ T6708] ? __pfx____sys_sendmsg+0x10/0x10 [ 70.541367][ T6708] ? __lock_acquire+0x49f/0x1a40 [ 70.541380][ T6708] ? get_pid_task+0x106/0x250 [ 70.541403][ T6708] __sys_sendmsg+0x160/0x210 [ 70.541417][ T6708] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.541436][ T6708] do_syscall_64+0x115/0x870 [ 70.541451][ T6708] ? clear_bhb_loop+0x70/0xc0 [ 70.541463][ T6708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.541474][ T6708] RIP: 0033:0x7f416019e0d9 [ 70.541485][ T6708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.541495][ T6708] RSP: 002b:00007f4161078028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.541529][ T6708] RAX: ffffffffffffffda RBX: 00007f4160425fa0 RCX: 00007f416019e0d9 [ 70.541539][ T6708] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 70.541547][ T6708] RBP: 00007f4161078090 R08: 0000000000000000 R09: 0000000000000000 [ 70.541556][ T6708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.541565][ T6708] R13: 00007f4160426038 R14: 00007f4160425fa0 R15: 00007fffed031d88 [ 70.541581][ T6708] [ 70.627042][ T24] usb 7-1: USB disconnect, device number 3 [ 70.887698][ T6746] gretap0: entered promiscuous mode [ 70.892935][ T6746] gretap0: left promiscuous mode [ 70.972826][ T6750] __nla_validate_parse: 6 callbacks suppressed [ 70.972839][ T6750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.306'. [ 71.097051][ T6765] FAULT_INJECTION: forcing a failure. [ 71.097051][ T6765] name failslab, interval 1, probability 0, space 0, times 0 [ 71.101152][ T6765] CPU: 0 UID: 0 PID: 6765 Comm: syz.2.312 Not tainted syzkaller #0 PREEMPT(full) [ 71.101166][ T6765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.101173][ T6765] Call Trace: [ 71.101177][ T6765] [ 71.101181][ T6765] dump_stack_lvl+0x100/0x190 [ 71.101200][ T6765] should_fail_ex.cold+0x5/0xa [ 71.101214][ T6765] should_failslab+0xc2/0x120 [ 71.101229][ T6765] __kmalloc_noprof+0xfc/0x820 [ 71.101242][ T6765] ? tomoyo_encode2+0xfb/0x3c0 [ 71.101256][ T6765] tomoyo_encode2+0xfb/0x3c0 [ 71.101267][ T6765] tomoyo_encode+0x29/0x50 [ 71.101276][ T6765] tomoyo_realpath_from_path+0x18c/0x690 [ 71.101290][ T6765] tomoyo_path_number_perm+0x23c/0x580 [ 71.101305][ T6765] ? tomoyo_path_number_perm+0x22e/0x580 [ 71.101320][ T6765] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 71.101352][ T6765] ? find_held_lock+0x2b/0x80 [ 71.101362][ T6765] ? __fget_files+0x215/0x3d0 [ 71.101373][ T6765] ? hook_file_ioctl_common+0x140/0x440 [ 71.101384][ T6765] ? __fget_files+0x215/0x3d0 [ 71.101397][ T6765] ? __fget_files+0x21f/0x3d0 [ 71.101409][ T6765] security_file_ioctl+0xd3/0x230 [ 71.101426][ T6765] __x64_sys_ioctl+0xb7/0x210 [ 71.101443][ T6765] do_syscall_64+0x115/0x870 [ 71.101457][ T6765] ? clear_bhb_loop+0x70/0xc0 [ 71.101469][ T6765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.101480][ T6765] RIP: 0033:0x7f4aa479e0d9 [ 71.101490][ T6765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.101520][ T6765] RSP: 002b:00007f4aa558c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.101532][ T6765] RAX: ffffffffffffffda RBX: 00007f4aa4a25fa0 RCX: 00007f4aa479e0d9 [ 71.101539][ T6765] RDX: 0000200000000180 RSI: 00000000c01064c4 RDI: 0000000000000003 [ 71.101545][ T6765] RBP: 00007f4aa558c090 R08: 0000000000000000 R09: 0000000000000000 [ 71.101551][ T6765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.101557][ T6765] R13: 00007f4aa4a26038 R14: 00007f4aa4a25fa0 R15: 00007ffc6b57de88 [ 71.101570][ T6765] [ 71.101580][ T6765] ERROR: Out of memory at tomoyo_realpath_from_path. [ 71.111927][ T6767] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 71.145900][ T5876] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 71.172134][ T6767] can0: slcan on ttyS3. [ 71.221128][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.223724][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.257648][ T6767] can0 (unregistered): slcan off ttyS3. [ 71.366022][ T5876] usb 8-1: Using ep0 maxpacket: 16 [ 71.369033][ T5876] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 71.373754][ T5876] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 71.377151][ T5876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.379601][ T5876] usb 8-1: Product: syz [ 71.380924][ T5876] usb 8-1: Manufacturer: syz [ 71.382395][ T5876] usb 8-1: SerialNumber: syz [ 71.391391][ T5876] usb 8-1: config 0 descriptor?? [ 72.929637][ T6841] FAULT_INJECTION: forcing a failure. [ 72.929637][ T6841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.950231][ T6841] CPU: 1 UID: 0 PID: 6841 Comm: syz.1.336 Not tainted syzkaller #0 PREEMPT(full) [ 72.950248][ T6841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.950256][ T6841] Call Trace: [ 72.950261][ T6841] [ 72.950266][ T6841] dump_stack_lvl+0x100/0x190 [ 72.950286][ T6841] should_fail_ex.cold+0x5/0xa [ 72.950303][ T6841] _copy_to_user+0x32/0xd0 [ 72.950322][ T6841] simple_read_from_buffer+0xcb/0x170 [ 72.950335][ T6841] proc_fail_nth_read+0x1af/0x230 [ 72.950353][ T6841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 72.950371][ T6841] ? rw_verify_area+0xce/0x6d0 [ 72.950386][ T6841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 72.950403][ T6841] vfs_read+0x1e4/0xb40 [ 72.950420][ T6841] ? __pfx_vfs_read+0x10/0x10 [ 72.950436][ T6841] ? __fget_files+0x215/0x3d0 [ 72.950450][ T6841] ? __fget_files+0x21f/0x3d0 [ 72.950464][ T6841] ksys_read+0x12a/0x250 [ 72.950472][ T6841] ? __pfx_ksys_read+0x10/0x10 [ 72.950492][ T6841] do_syscall_64+0x115/0x870 [ 72.950506][ T6841] ? clear_bhb_loop+0x70/0xc0 [ 72.950518][ T6841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.950529][ T6841] RIP: 0033:0x7fb374f5e90e [ 72.950540][ T6841] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 72.950549][ T6841] RSP: 002b:00007fb375f1bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.950560][ T6841] RAX: ffffffffffffffda RBX: 00007fb375f1c6c0 RCX: 00007fb374f5e90e [ 72.950567][ T6841] RDX: 000000000000000f RSI: 00007fb375f1c0a0 RDI: 0000000000000004 [ 72.950572][ T6841] RBP: 00007fb375f1c090 R08: 0000000000000000 R09: 0000000000000000 [ 72.950578][ T6841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.950584][ T6841] R13: 00007fb375226038 R14: 00007fb375225fa0 R15: 00007ffe3cc75258 [ 72.950597][ T6841] [ 73.031067][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 73.034543][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'. [ 73.126075][ T64] Bluetooth: hci3: command tx timeout [ 73.143436][ T6863] FAULT_INJECTION: forcing a failure. [ 73.143436][ T6863] name failslab, interval 1, probability 0, space 0, times 0 [ 73.149113][ T6863] CPU: 1 UID: 0 PID: 6863 Comm: syz.1.344 Not tainted syzkaller #0 PREEMPT(full) [ 73.149128][ T6863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.149135][ T6863] Call Trace: [ 73.149139][ T6863] [ 73.149144][ T6863] dump_stack_lvl+0x100/0x190 [ 73.149162][ T6863] should_fail_ex.cold+0x5/0xa [ 73.149178][ T6863] should_failslab+0xc2/0x120 [ 73.149194][ T6863] __kmalloc_cache_noprof+0x91/0x6c0 [ 73.149205][ T6863] ? sctp_add_bind_addr+0xae/0x3e0 [ 73.149223][ T6863] sctp_add_bind_addr+0xae/0x3e0 [ 73.149238][ T6863] sctp_copy_local_addr_list+0x349/0x550 [ 73.149256][ T6863] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 73.149273][ T6863] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 73.149291][ T6863] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.149306][ T6863] sctp_bind_addr_copy+0xe0/0x530 [ 73.149323][ T6863] sctp_connect_new_asoc+0x1c9/0x770 [ 73.149340][ T6863] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 73.149353][ T6863] ? selinux_sctp_bind_connect+0xe0/0x230 [ 73.149372][ T6863] sctp_sendmsg+0x1743/0x22e0 [ 73.149387][ T6863] ? __pfx_sctp_sendmsg+0x10/0x10 [ 73.149397][ T6863] ? sock_has_perm+0x25a/0x2f0 [ 73.149410][ T6863] ? __pfx_sock_has_perm+0x10/0x10 [ 73.149432][ T6863] ? __pfx_sctp_sendmsg+0x10/0x10 [ 73.149444][ T6863] inet_sendmsg+0x11c/0x140 [ 73.149460][ T6863] ____sys_sendmsg+0x9c9/0xbe0 [ 73.149476][ T6863] ? __pfx_inet_sendmsg+0x10/0x10 [ 73.149518][ T6863] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.149537][ T6863] ? __pfx__kstrtoull+0x10/0x10 [ 73.149551][ T6863] ___sys_sendmsg+0x190/0x1e0 [ 73.149574][ T6863] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.149592][ T6863] ? find_held_lock+0x2b/0x80 [ 73.149611][ T6863] __sys_sendmmsg+0x20c/0x440 [ 73.149626][ T6863] ? __pfx___sys_sendmmsg+0x10/0x10 [ 73.149638][ T6863] ? ksys_write+0x190/0x250 [ 73.149658][ T6863] ? fput+0x79/0x100 [ 73.149670][ T6863] ? ksys_write+0x1ac/0x250 [ 73.149679][ T6863] ? __pfx_ksys_write+0x10/0x10 [ 73.149691][ T6863] __x64_sys_sendmmsg+0x9c/0x100 [ 73.149704][ T6863] ? lockdep_hardirqs_on+0x78/0x100 [ 73.149718][ T6863] do_syscall_64+0x115/0x870 [ 73.149731][ T6863] ? clear_bhb_loop+0x70/0xc0 [ 73.149743][ T6863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.149754][ T6863] RIP: 0033:0x7fb374f9e0d9 [ 73.149764][ T6863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.149774][ T6863] RSP: 002b:00007fb375f1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 73.149785][ T6863] RAX: ffffffffffffffda RBX: 00007fb375225fa0 RCX: 00007fb374f9e0d9 [ 73.149791][ T6863] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 73.149797][ T6863] RBP: 00007fb375f1c090 R08: 0000000000000000 R09: 0000000000000000 [ 73.149804][ T6863] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 73.149810][ T6863] R13: 00007fb375226038 R14: 00007fb375225fa0 R15: 00007ffe3cc75258 [ 73.149823][ T6863] [ 73.283640][ T6867] FAULT_INJECTION: forcing a failure. [ 73.283640][ T6867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.288243][ T6867] CPU: 2 UID: 0 PID: 6867 Comm: syz.1.345 Not tainted syzkaller #0 PREEMPT(full) [ 73.288259][ T6867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.288265][ T6867] Call Trace: [ 73.288270][ T6867] [ 73.288275][ T6867] dump_stack_lvl+0x100/0x190 [ 73.288294][ T6867] should_fail_ex.cold+0x5/0xa [ 73.288308][ T6867] _copy_from_user+0x2e/0xd0 [ 73.288324][ T6867] drm_syncobj_array_find+0x83/0x3a0 [ 73.288356][ T6867] drm_syncobj_query_ioctl+0x25d/0xa90 [ 73.288373][ T6867] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 73.288386][ T6867] ? find_held_lock+0x2b/0x80 [ 73.288397][ T6867] ? drm_dev_exit+0x41/0x60 [ 73.288408][ T6867] ? drm_dev_exit+0x41/0x60 [ 73.288422][ T6867] drm_ioctl_kernel+0x1f3/0x3e0 [ 73.288434][ T6867] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 73.288448][ T6867] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 73.288463][ T6867] drm_ioctl+0x5e6/0xc60 [ 73.288476][ T6867] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 73.288490][ T6867] ? __pfx_drm_ioctl+0x10/0x10 [ 73.288507][ T6867] ? selinux_file_ioctl+0x13b/0x290 [ 73.288523][ T6867] ? selinux_file_ioctl+0xb6/0x290 [ 73.288540][ T6867] ? __pfx_drm_ioctl+0x10/0x10 [ 73.288551][ T6867] __x64_sys_ioctl+0x18e/0x210 [ 73.288569][ T6867] do_syscall_64+0x115/0x870 [ 73.288583][ T6867] ? clear_bhb_loop+0x70/0xc0 [ 73.288596][ T6867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.288606][ T6867] RIP: 0033:0x7fb374f9e0d9 [ 73.288617][ T6867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.288627][ T6867] RSP: 002b:00007fb375f1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.288637][ T6867] RAX: ffffffffffffffda RBX: 00007fb375225fa0 RCX: 00007fb374f9e0d9 [ 73.288644][ T6867] RDX: 0000200000000340 RSI: 00000000c01864cb RDI: 0000000000000003 [ 73.288650][ T6867] RBP: 00007fb375f1c090 R08: 0000000000000000 R09: 0000000000000000 [ 73.288656][ T6867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.288661][ T6867] R13: 00007fb375226038 R14: 00007fb375225fa0 R15: 00007ffe3cc75258 [ 73.288674][ T6867] [ 73.415921][ T24] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 73.587904][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.591729][ T24] usb 7-1: config 0 has no interfaces? [ 73.593854][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 73.597893][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.604265][ T24] usb 7-1: config 0 descriptor?? [ 73.764349][ T6876] FAULT_INJECTION: forcing a failure. [ 73.764349][ T6876] name failslab, interval 1, probability 0, space 0, times 0 [ 73.768953][ T6876] CPU: 3 UID: 0 PID: 6876 Comm: syz.1.347 Not tainted syzkaller #0 PREEMPT(full) [ 73.768971][ T6876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.768980][ T6876] Call Trace: [ 73.768985][ T6876] [ 73.768990][ T6876] dump_stack_lvl+0x100/0x190 [ 73.769014][ T6876] should_fail_ex.cold+0x5/0xa [ 73.769033][ T6876] should_failslab+0xc2/0x120 [ 73.769052][ T6876] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 73.769070][ T6876] ? __alloc_skb+0x5b7/0x710 [ 73.769086][ T6876] ? __alloc_skb+0x140/0x710 [ 73.769104][ T6876] __alloc_skb+0x140/0x710 [ 73.769118][ T6876] ? __alloc_skb+0x5b7/0x710 [ 73.769133][ T6876] ? __pfx___alloc_skb+0x10/0x10 [ 73.769154][ T6876] netlink_ack+0x117/0xb80 [ 73.769168][ T6876] ? avc_has_perm_noaudit+0x145/0x3b0 [ 73.769190][ T6876] netlink_rcv_skb+0x333/0x420 [ 73.769204][ T6876] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 73.769224][ T6876] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 73.769246][ T6876] ? ns_capable+0xd2/0xf0 [ 73.769266][ T6876] nfnetlink_rcv+0x1b3/0x440 [ 73.769288][ T6876] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 73.769305][ T6876] ? netlink_deliver_tap+0x1ae/0xcc0 [ 73.769330][ T6876] netlink_unicast+0x585/0x850 [ 73.769347][ T6876] ? __pfx_netlink_unicast+0x10/0x10 [ 73.769366][ T6876] netlink_sendmsg+0x8b0/0xda0 [ 73.769382][ T6876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.769398][ T6876] ? selinux_socket_sendmsg+0x198/0x2f0 [ 73.769420][ T6876] ____sys_sendmsg+0xa4d/0xbe0 [ 73.769440][ T6876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.769456][ T6876] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.769507][ T6876] ___sys_sendmsg+0x190/0x1e0 [ 73.769523][ T6876] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.769535][ T6876] ? __lock_acquire+0x49f/0x1a40 [ 73.769553][ T6876] ? get_pid_task+0x106/0x250 [ 73.769586][ T6876] __sys_sendmsg+0x160/0x210 [ 73.769603][ T6876] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.769630][ T6876] do_syscall_64+0x115/0x870 [ 73.769649][ T6876] ? clear_bhb_loop+0x70/0xc0 [ 73.769665][ T6876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.769680][ T6876] RIP: 0033:0x7fb374f9e0d9 [ 73.769692][ T6876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.769706][ T6876] RSP: 002b:00007fb375f1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.769721][ T6876] RAX: ffffffffffffffda RBX: 00007fb375225fa0 RCX: 00007fb374f9e0d9 [ 73.769730][ T6876] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 73.769739][ T6876] RBP: 00007fb375f1c090 R08: 0000000000000000 R09: 0000000000000000 [ 73.769747][ T6876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.769755][ T6876] R13: 00007fb375226038 R14: 00007fb375225fa0 R15: 00007ffe3cc75258 [ 73.769774][ T6876] [ 73.821817][ T6861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.844501][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 73.844513][ T43] audit: type=1400 audit(1786105677.335:379): avc: denied { bind } for pid=6877 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.847422][ T6861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.850860][ T43] audit: type=1400 audit(1786105677.335:380): avc: denied { setopt } for pid=6877 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.857459][ T64] Bluetooth: hci1: Malformed LE Event: 0x0d [ 73.858158][ T1482] usb 7-1: USB disconnect, device number 4 [ 73.891480][ T43] audit: type=1400 audit(1786105677.385:381): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 73.955667][ T43] audit: type=1400 audit(1786105677.445:382): avc: denied { create } for pid=6881 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.962911][ T43] audit: type=1400 audit(1786105677.455:383): avc: denied { write } for pid=6881 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.969467][ T43] audit: type=1400 audit(1786105677.455:384): avc: denied { nlmsg_write } for pid=6881 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.199337][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 74.203067][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'. [ 74.239912][ T6897] FAULT_INJECTION: forcing a failure. [ 74.239912][ T6897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.244689][ T6897] CPU: 3 UID: 0 PID: 6897 Comm: syz.0.356 Not tainted syzkaller #0 PREEMPT(full) [ 74.244704][ T6897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.244711][ T6897] Call Trace: [ 74.244716][ T6897] [ 74.244721][ T6897] dump_stack_lvl+0x100/0x190 [ 74.244739][ T6897] should_fail_ex.cold+0x5/0xa [ 74.244755][ T6897] _copy_from_user+0x2e/0xd0 [ 74.244770][ T6897] drm_syncobj_array_find+0x83/0x3a0 [ 74.244787][ T6897] drm_syncobj_reset_ioctl+0x20b/0x370 [ 74.244801][ T6897] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 74.244814][ T6897] ? drm_dev_exit+0x41/0x60 [ 74.244826][ T6897] ? drm_dev_exit+0x41/0x60 [ 74.244840][ T6897] drm_ioctl_kernel+0x1f3/0x3e0 [ 74.244852][ T6897] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 74.244865][ T6897] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 74.244881][ T6897] drm_ioctl+0x5e6/0xc60 [ 74.244894][ T6897] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 74.244908][ T6897] ? __pfx_drm_ioctl+0x10/0x10 [ 74.244924][ T6897] ? selinux_file_ioctl+0x13b/0x290 [ 74.244941][ T6897] ? selinux_file_ioctl+0xb6/0x290 [ 74.244957][ T6897] ? __pfx_drm_ioctl+0x10/0x10 [ 74.244969][ T6897] __x64_sys_ioctl+0x18e/0x210 [ 74.244986][ T6897] do_syscall_64+0x115/0x870 [ 74.245001][ T6897] ? clear_bhb_loop+0x70/0xc0 [ 74.245014][ T6897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.245025][ T6897] RIP: 0033:0x7f6792b9e0d9 [ 74.245035][ T6897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.245045][ T6897] RSP: 002b:00007f6793b4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.245057][ T6897] RAX: ffffffffffffffda RBX: 00007f6792e25fa0 RCX: 00007f6792b9e0d9 [ 74.245064][ T6897] RDX: 0000200000000180 RSI: 00000000c01064c4 RDI: 0000000000000003 [ 74.245070][ T6897] RBP: 00007f6793b4b090 R08: 0000000000000000 R09: 0000000000000000 [ 74.245076][ T6897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.245082][ T6897] R13: 00007f6792e26038 R14: 00007f6792e25fa0 R15: 00007ffd1b2672d8 [ 74.245095][ T6897] [ 74.459155][ T43] audit: type=1400 audit(1786105677.955:385): avc: denied { nlmsg_read } for pid=6906 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.758733][ T42] usb 8-1: USB disconnect, device number 4 [ 74.797442][ T6917] netlink: 72 bytes leftover after parsing attributes in process `syz.3.363'. [ 74.877328][ T6920] netlink: 'syz.3.364': attribute type 4 has an invalid length. [ 74.898078][ T6920] netlink: 'syz.3.364': attribute type 4 has an invalid length. [ 74.909528][ T43] audit: type=1400 audit(1786105678.405:386): avc: denied { shutdown } for pid=6922 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.935972][ T43] audit: type=1400 audit(1786105678.425:387): avc: denied { ioctl } for pid=6926 comm="syz.1.368" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=14569 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.938701][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 74.949931][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'. [ 74.959551][ T6927] XFS (mtdblock0): Invalid superblock magic number [ 75.045582][ T43] audit: type=1804 audit(1786105678.535:388): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.370" name="/newroot/102/file0" dev="tmpfs" ino=591 res=1 errno=0 [ 75.104743][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'. [ 75.108239][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.374'. [ 75.266053][ T42] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 75.404485][ T6963] XFS (mtdblock0): Invalid superblock magic number [ 75.427876][ T42] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.435883][ T42] usb 8-1: config 0 has no interfaces? [ 75.442227][ T42] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 75.454885][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.465097][ T42] usb 8-1: config 0 descriptor?? [ 75.476427][ T6974] cgroup: No subsys list or none specified [ 75.618205][ T6984] netlink: 'syz.0.388': attribute type 1 has an invalid length. [ 75.646451][ T6984] veth3: entered allmulticast mode [ 75.650586][ T6984] bond1: (slave veth3): Enslaving as an active interface with a down link [ 75.659945][ T6984] macvlan2: entered promiscuous mode [ 75.661702][ T6984] macvlan2: entered allmulticast mode [ 75.663754][ T6984] bond1: entered promiscuous mode [ 75.668115][ T6984] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 75.671794][ T6984] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 75.674797][ T6925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.681587][ T6984] bond1: left promiscuous mode [ 75.681970][ T6925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.689355][ T64] Bluetooth: hci0: Malformed LE Event: 0x0d [ 75.692589][ T24] usb 8-1: USB disconnect, device number 5 [ 75.950135][ T6990] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 76.201141][ T7001] FAULT_INJECTION: forcing a failure. [ 76.201141][ T7001] name failslab, interval 1, probability 0, space 0, times 0 [ 76.205170][ T7001] CPU: 0 UID: 0 PID: 7001 Comm: syz.1.395 Not tainted syzkaller #0 PREEMPT(full) [ 76.205194][ T7001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.205209][ T7001] Call Trace: [ 76.205224][ T7001] [ 76.205231][ T7001] dump_stack_lvl+0x100/0x190 [ 76.205315][ T7001] should_fail_ex.cold+0x5/0xa [ 76.205344][ T7001] should_failslab+0xc2/0x120 [ 76.205375][ T7001] __kmalloc_noprof+0xfc/0x820 [ 76.205388][ T7001] ? rcu_is_watching+0x12/0xc0 [ 76.205412][ T7001] ? tomoyo_realpath_from_path+0xb6/0x690 [ 76.205445][ T7001] tomoyo_realpath_from_path+0xb6/0x690 [ 76.205458][ T7001] tomoyo_path_number_perm+0x23c/0x580 [ 76.205490][ T7001] ? tomoyo_path_number_perm+0x22e/0x580 [ 76.205508][ T7001] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 76.205536][ T7001] ? find_held_lock+0x2b/0x80 [ 76.205546][ T7001] ? __fget_files+0x215/0x3d0 [ 76.205558][ T7001] ? hook_file_ioctl_common+0x140/0x440 [ 76.205570][ T7001] ? __fget_files+0x215/0x3d0 [ 76.205583][ T7001] ? __fget_files+0x21f/0x3d0 [ 76.205596][ T7001] security_file_ioctl+0xd3/0x230 [ 76.205626][ T7001] __x64_sys_ioctl+0xb7/0x210 [ 76.205646][ T7001] do_syscall_64+0x115/0x870 [ 76.205663][ T7001] ? clear_bhb_loop+0x70/0xc0 [ 76.205678][ T7001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.205689][ T7001] RIP: 0033:0x7fb374f9e0d9 [ 76.205699][ T7001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.205709][ T7001] RSP: 002b:00007fb375f1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.205727][ T7001] RAX: ffffffffffffffda RBX: 00007fb375225fa0 RCX: 00007fb374f9e0d9 [ 76.205734][ T7001] RDX: 0000200000000340 RSI: 00000000c01864cb RDI: 0000000000000003 [ 76.205740][ T7001] RBP: 00007fb375f1c090 R08: 0000000000000000 R09: 0000000000000000 [ 76.205746][ T7001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.205752][ T7001] R13: 00007fb375226038 R14: 00007fb375225fa0 R15: 00007ffe3cc75258 [ 76.205764][ T7001] [ 76.205769][ T7001] ERROR: Out of memory at tomoyo_realpath_from_path. [ 76.234752][ T7003] tipc: Started in network mode [ 76.283533][ T7003] tipc: Node identity 5d070000000000000001, cluster identity 4711 [ 76.332004][ T7009] __nla_validate_parse: 6 callbacks suppressed [ 76.332021][ T7009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.399'. [ 76.342425][ T7009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.399'. [ 76.378850][ T7009] gretap0: entered promiscuous mode [ 76.383447][ T7009] gretap0: left promiscuous mode [ 76.634921][ T7022] support for cryptoloop has been removed. Use dm-crypt instead. [ 76.650482][ T7022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.403'. [ 76.839725][ T7028] netlink: 444 bytes leftover after parsing attributes in process `syz.1.404'. [ 76.975872][ T9] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 77.147687][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.151041][ T9] usb 7-1: config 0 has no interfaces? [ 77.152841][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 77.155767][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.160322][ T9] usb 7-1: config 0 descriptor?? [ 77.198550][ T7035] FAULT_INJECTION: forcing a failure. [ 77.198550][ T7035] name failslab, interval 1, probability 0, space 0, times 0 [ 77.202582][ T7035] CPU: 1 UID: 0 PID: 7035 Comm: syz.0.408 Not tainted syzkaller #0 PREEMPT(full) [ 77.202596][ T7035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.202603][ T7035] Call Trace: [ 77.202608][ T7035] [ 77.202613][ T7035] dump_stack_lvl+0x100/0x190 [ 77.202632][ T7035] should_fail_ex.cold+0x5/0xa [ 77.202647][ T7035] should_failslab+0xc2/0x120 [ 77.202663][ T7035] __kmalloc_noprof+0xfc/0x820 [ 77.202676][ T7035] ? tomoyo_encode2+0xfb/0x3c0 [ 77.202690][ T7035] tomoyo_encode2+0xfb/0x3c0 [ 77.202701][ T7035] tomoyo_encode+0x29/0x50 [ 77.202710][ T7035] tomoyo_realpath_from_path+0x18c/0x690 [ 77.202724][ T7035] tomoyo_path_number_perm+0x23c/0x580 [ 77.202739][ T7035] ? tomoyo_path_number_perm+0x22e/0x580 [ 77.202754][ T7035] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 77.202781][ T7035] ? find_held_lock+0x2b/0x80 [ 77.202793][ T7035] ? __fget_files+0x215/0x3d0 [ 77.202804][ T7035] ? hook_file_ioctl_common+0x140/0x440 [ 77.202816][ T7035] ? __fget_files+0x215/0x3d0 [ 77.202829][ T7035] ? __fget_files+0x21f/0x3d0 [ 77.202841][ T7035] security_file_ioctl+0xd3/0x230 [ 77.202858][ T7035] __x64_sys_ioctl+0xb7/0x210 [ 77.202880][ T7035] do_syscall_64+0x115/0x870 [ 77.202895][ T7035] ? clear_bhb_loop+0x70/0xc0 [ 77.202908][ T7035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.202919][ T7035] RIP: 0033:0x7f6792b9e0d9 [ 77.202929][ T7035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.202940][ T7035] RSP: 002b:00007f6793b4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.202951][ T7035] RAX: ffffffffffffffda RBX: 00007f6792e25fa0 RCX: 00007f6792b9e0d9 [ 77.202957][ T7035] RDX: 0000200000000340 RSI: 00000000c01864cb RDI: 0000000000000003 [ 77.202963][ T7035] RBP: 00007f6793b4b090 R08: 0000000000000000 R09: 0000000000000000 [ 77.202969][ T7035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.202976][ T7035] R13: 00007f6792e26038 R14: 00007f6792e25fa0 R15: 00007ffd1b2672d8 [ 77.202988][ T7035] [ 77.202999][ T7035] ERROR: Out of memory at tomoyo_realpath_from_path. [ 77.348940][ T7039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.410'. [ 77.351863][ T7039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.410'. [ 77.358133][ T7039] gretap0: entered promiscuous mode [ 77.360957][ T7039] gretap0: left promiscuous mode [ 77.367366][ T7026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.370922][ T7026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.374663][ T64] Bluetooth: hci1: Malformed LE Event: 0x0d [ 77.375362][ T1482] usb 7-1: USB disconnect, device number 5 [ 77.454132][ T7041] netlink: 32 bytes leftover after parsing attributes in process `syz.3.411'. [ 77.472485][ T7043] x_tables: duplicate underflow at hook 1 [ 77.474718][ T7043] x_tables: duplicate underflow at hook 2 [ 77.502288][ T7045] netlink: 72 bytes leftover after parsing attributes in process `syz.0.413'. [ 77.531867][ T7046] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 77.871925][ T7053] netlink: 40 bytes leftover after parsing attributes in process `syz.1.416'. [ 78.292101][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 78.527640][ T7085] overlayfs: failed to resolve './file0': -2 [ 78.645891][ T5829] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 78.797543][ T5829] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.801743][ T5829] usb 6-1: config 0 has no interfaces? [ 78.803511][ T5829] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 78.807613][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.812980][ T5829] usb 6-1: config 0 descriptor?? [ 78.917068][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 78.917081][ T43] audit: type=1400 audit(1786105682.415:411): avc: denied { create } for pid=7092 comm="syz.2.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 78.926851][ T43] audit: type=1400 audit(1786105682.415:412): avc: denied { ioctl } for pid=7092 comm="syz.2.431" path="socket:[13655]" dev="sockfs" ino=13655 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 78.948445][ T43] audit: type=1400 audit(1786105682.445:413): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.963848][ T43] audit: type=1400 audit(1786105682.455:414): avc: denied { setopt } for pid=7094 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.019085][ T64] Bluetooth: hci2: adv larger than maximum supported [ 79.019113][ T64] Bluetooth: hci2: Malformed LE Event: 0x0d [ 79.027563][ T7102] FAULT_INJECTION: forcing a failure. [ 79.027563][ T7102] name failslab, interval 1, probability 0, space 0, times 0 [ 79.027969][ T5872] usb 6-1: USB disconnect, device number 2 [ 79.031967][ T7102] CPU: 2 UID: 0 PID: 7102 Comm: syz.2.434 Not tainted syzkaller #0 PREEMPT(full) [ 79.031986][ T7102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.031993][ T7102] Call Trace: [ 79.031998][ T7102] [ 79.032003][ T7102] dump_stack_lvl+0x100/0x190 [ 79.032022][ T7102] should_fail_ex.cold+0x5/0xa [ 79.032037][ T7102] should_failslab+0xc2/0x120 [ 79.032052][ T7102] __kmalloc_noprof+0xfc/0x820 [ 79.032064][ T7102] ? drm_syncobj_array_find+0x34/0x3a0 [ 79.032112][ T7102] drm_syncobj_array_find+0x34/0x3a0 [ 79.032124][ T7102] ? __lock_acquire+0x49f/0x1a40 [ 79.032140][ T7102] drm_syncobj_query_ioctl+0x25d/0xa90 [ 79.032157][ T7102] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 79.032171][ T7102] ? find_held_lock+0x2b/0x80 [ 79.032180][ T7102] ? drm_dev_exit+0x41/0x60 [ 79.032192][ T7102] ? drm_dev_exit+0x41/0x60 [ 79.032207][ T7102] drm_ioctl_kernel+0x1f3/0x3e0 [ 79.032220][ T7102] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 79.032235][ T7102] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 79.032250][ T7102] drm_ioctl+0x5e6/0xc60 [ 79.032263][ T7102] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 79.032277][ T7102] ? __pfx_drm_ioctl+0x10/0x10 [ 79.032293][ T7102] ? selinux_file_ioctl+0x13b/0x290 [ 79.032310][ T7102] ? selinux_file_ioctl+0xb6/0x290 [ 79.032327][ T7102] ? __pfx_drm_ioctl+0x10/0x10 [ 79.032339][ T7102] __x64_sys_ioctl+0x18e/0x210 [ 79.032356][ T7102] do_syscall_64+0x115/0x870 [ 79.032371][ T7102] ? clear_bhb_loop+0x70/0xc0 [ 79.032384][ T7102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.032395][ T7102] RIP: 0033:0x7f4aa479e0d9 [ 79.032405][ T7102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.032415][ T7102] RSP: 002b:00007f4aa558c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.032427][ T7102] RAX: ffffffffffffffda RBX: 00007f4aa4a25fa0 RCX: 00007f4aa479e0d9 [ 79.032434][ T7102] RDX: 0000200000000340 RSI: 00000000c01864cb RDI: 0000000000000003 [ 79.032440][ T7102] RBP: 00007f4aa558c090 R08: 0000000000000000 R09: 0000000000000000 [ 79.032447][ T7102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.032453][ T7102] R13: 00007f4aa4a26038 R14: 00007f4aa4a25fa0 R15: 00007ffc6b57de88 [ 79.032465][ T7102] [ 79.323990][ T43] audit: type=1400 audit(1786105682.815:415): avc: denied { append } for pid=7113 comm="syz.2.440" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 79.340993][ T43] audit: type=1400 audit(1786105682.835:416): avc: denied { mounton } for pid=7111 comm="syz.0.439" path="/123/file0" dev="tmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 79.345145][ T7112] capability: warning: `syz.0.439' uses deprecated v2 capabilities in a way that may be insecure [ 79.468189][ T7112] openvswitch: netlink: Multiple metadata blocks provided [ 79.660875][ T7134] overlayfs: failed to resolve './file2': -2 [ 79.799898][ T7140] FAULT_INJECTION: forcing a failure. [ 79.799898][ T7140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.804020][ T7140] CPU: 0 UID: 0 PID: 7140 Comm: syz.1.450 Not tainted syzkaller #0 PREEMPT(full) [ 79.804036][ T7140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.804043][ T7140] Call Trace: [ 79.804048][ T7140] [ 79.804053][ T7140] dump_stack_lvl+0x100/0x190 [ 79.804072][ T7140] should_fail_ex.cold+0x5/0xa [ 79.804086][ T7140] _copy_from_user+0x2e/0xd0 [ 79.804104][ T7140] drm_syncobj_array_find+0x83/0x3a0 [ 79.804120][ T7140] drm_syncobj_query_ioctl+0x25d/0xa90 [ 79.804137][ T7140] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 79.804151][ T7140] ? find_held_lock+0x2b/0x80 [ 79.804161][ T7140] ? drm_dev_exit+0x41/0x60 [ 79.804173][ T7140] ? drm_dev_exit+0x41/0x60 [ 79.804187][ T7140] drm_ioctl_kernel+0x1f3/0x3e0 [ 79.804199][ T7140] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 79.804213][ T7140] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 79.804228][ T7140] drm_ioctl+0x5e6/0xc60 [ 79.804241][ T7140] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 79.804255][ T7140] ? __pfx_drm_ioctl+0x10/0x10 [ 79.804282][ T7140] ? selinux_file_ioctl+0x13b/0x290 [ 79.804302][ T7140] ? selinux_file_ioctl+0xb6/0x290 [ 79.804319][ T7140] ? __pfx_drm_ioctl+0x10/0x10 [ 79.804331][ T7140] __x64_sys_ioctl+0x18e/0x210 [ 79.804348][ T7140] do_syscall_64+0x115/0x870 [ 79.804363][ T7140] ? clear_bhb_loop+0x70/0xc0 [ 79.804375][ T7140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.804386][ T7140] RIP: 0033:0x7fb374f9e0d9 [ 79.804397][ T7140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.804407][ T7140] RSP: 002b:00007fb375f1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.804418][ T7140] RAX: ffffffffffffffda RBX: 00007fb375225fa0 RCX: 00007fb374f9e0d9 [ 79.804425][ T7140] RDX: 0000200000000340 RSI: 00000000c01864cb RDI: 0000000000000003 [ 79.804431][ T7140] RBP: 00007fb375f1c090 R08: 0000000000000000 R09: 0000000000000000 [ 79.804437][ T7140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.804443][ T7140] R13: 00007fb375226038 R14: 00007fb375225fa0 R15: 00007ffe3cc75258 [ 79.804456][ T7140] [ 79.856070][ T1570] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 79.920649][ T43] audit: type=1400 audit(1786105683.415:417): avc: denied { connect } for pid=7143 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.928782][ T43] audit: type=1400 audit(1786105683.415:418): avc: denied { prog_load } for pid=7143 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.037428][ T1570] usb 8-1: Using ep0 maxpacket: 16 [ 80.041977][ T1570] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 80.048295][ T1570] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 80.052256][ T1570] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.055634][ T1570] usb 8-1: Product: syz [ 80.058807][ T1570] usb 8-1: Manufacturer: syz [ 80.060977][ T1570] usb 8-1: SerialNumber: syz [ 80.065270][ T1570] usb 8-1: config 0 descriptor?? [ 80.071178][ T1570] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 80.076236][ T1570] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 80.121749][ T7148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65532 sclass=netlink_route_socket pid=7148 comm=syz.0.454 [ 80.198150][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 80.227624][ T7151] bond2: entered promiscuous mode [ 80.232152][ T7151] netlink: 'syz.0.455': attribute type 1 has an invalid length. [ 80.268207][ T43] audit: type=1400 audit(1786105683.765:419): avc: denied { map_create } for pid=7153 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.273941][ T43] audit: type=1400 audit(1786105683.765:420): avc: denied { allowed } for pid=7153 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 80.367767][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.371083][ T9] usb 6-1: config 0 has no interfaces? [ 80.372810][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 80.378295][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.382626][ T9] usb 6-1: config 0 descriptor?? [ 80.591881][ T64] Bluetooth: hci2: adv larger than maximum supported [ 80.591900][ T64] Bluetooth: hci2: Malformed LE Event: 0x0d [ 80.593602][ T5829] usb 6-1: USB disconnect, device number 3 [ 80.635974][ T149] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 80.682471][ T1570] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 80.786850][ T149] usb 5-1: not running at top speed; connect to a high speed hub [ 80.790228][ T149] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 80.795442][ T149] usb 5-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 80.798618][ T149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.801138][ T149] usb 5-1: Product: syz [ 80.802522][ T149] usb 5-1: Manufacturer: syz [ 80.803985][ T149] usb 5-1: SerialNumber: syz [ 81.048394][ T7164] cdrom: dropping to single frame dma [ 81.096387][ T149] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 81.098624][ T1570] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 81.099282][ T149] usb 5-1: MIDIStreaming interface descriptor not found [ 81.104888][ T1570] em28xx 8-1:0.0: board has no eeprom [ 81.136036][ T1482] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 81.136305][ T149] usb 5-1: USB disconnect, device number 4 [ 81.165876][ T1570] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 81.168620][ T1570] em28xx 8-1:0.0: dvb set to bulk mode. [ 81.172811][ T29] em28xx 8-1:0.0: Binding DVB extension [ 81.184236][ T1570] usb 8-1: USB disconnect, device number 6 [ 81.187614][ T1570] em28xx 8-1:0.0: Disconnecting em28xx [ 81.209821][ T7177] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.226447][ T29] em28xx 8-1:0.0: Registering input extension [ 81.229956][ T1570] em28xx 8-1:0.0: Closing input extension [ 81.250976][ T1570] em28xx 8-1:0.0: Freeing device [ 81.308489][ T1482] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.312032][ T1482] usb 7-1: config 0 has no interfaces? [ 81.313772][ T1482] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 81.318370][ T1482] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.323637][ T1482] usb 7-1: config 0 descriptor?? [ 81.450810][ T34] cfg80211: failed to load regulatory.db [ 81.472808][ T7185] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:21 [ 81.478764][ T7185] usbcore.quirks: string doesn't fit in 127 chars. [ 81.537428][ T7173] __nla_validate_parse: 7 callbacks suppressed [ 81.537441][ T7173] netlink: 100 bytes leftover after parsing attributes in process `syz.2.465'. [ 81.543540][ T34] usb 7-1: USB disconnect, device number 6 [ 81.638777][ T7199] netlink: 52 bytes leftover after parsing attributes in process `syz.3.472'. [ 81.704470][ T7205] trusted_key: encrypted_key: insufficient parameters specified [ 81.783704][ T7209] netlink: 444 bytes leftover after parsing attributes in process `syz.0.474'. [ 82.147143][ T7215] netlink: 'syz.1.479': attribute type 2 has an invalid length. [ 82.150732][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 82.173825][ T7220] FAULT_INJECTION: forcing a failure. [ 82.173825][ T7220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.179757][ T7220] CPU: 0 UID: 0 PID: 7220 Comm: syz.2.478 Not tainted syzkaller #0 PREEMPT(full) [ 82.179781][ T7220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.179792][ T7220] Call Trace: [ 82.179800][ T7220] [ 82.179807][ T7220] dump_stack_lvl+0x100/0x190 [ 82.179838][ T7220] should_fail_ex.cold+0x5/0xa [ 82.179862][ T7220] _copy_from_user+0x2e/0xd0 [ 82.179890][ T7220] trace_parse_run_command+0xbb/0x3b0 [ 82.179914][ T7220] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 82.179943][ T7220] vfs_write+0x2aa/0x1050 [ 82.179973][ T7220] ? __pfx_probes_write+0x10/0x10 [ 82.179998][ T7220] ? __pfx_vfs_write+0x10/0x10 [ 82.180025][ T7220] ? __fget_files+0x215/0x3d0 [ 82.180049][ T7220] ? __fget_files+0x21f/0x3d0 [ 82.180075][ T7220] ksys_write+0x12a/0x250 [ 82.180091][ T7220] ? __pfx_ksys_write+0x10/0x10 [ 82.180115][ T7220] do_syscall_64+0x115/0x870 [ 82.180139][ T7220] ? clear_bhb_loop+0x70/0xc0 [ 82.180161][ T7220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.180179][ T7220] RIP: 0033:0x7f4aa479e0d9 [ 82.180195][ T7220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.180212][ T7220] RSP: 002b:00007f4aa558c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.180231][ T7220] RAX: ffffffffffffffda RBX: 00007f4aa4a25fa0 RCX: 00007f4aa479e0d9 [ 82.180242][ T7220] RDX: 000000000000000f RSI: 0000200000000180 RDI: 0000000000000004 [ 82.180253][ T7220] RBP: 00007f4aa558c090 R08: 0000000000000000 R09: 0000000000000000 [ 82.180269][ T7220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.180279][ T7220] R13: 00007f4aa4a26038 R14: 00007f4aa4a25fa0 R15: 00007ffc6b57de88 [ 82.180303][ T7220] [ 82.252311][ T7223] ima: rule for LSM 'u' is undefined [ 82.354169][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'. [ 82.357973][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.483'. [ 82.395637][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.484'. [ 82.398594][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.484'. [ 82.448752][ T7234] 9p: Bad value for 'rfdno' [ 82.575198][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.487'. [ 82.620731][ T7241] FAULT_INJECTION: forcing a failure. [ 82.620731][ T7241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.626465][ T7241] CPU: 3 UID: 0 PID: 7241 Comm: syz.0.488 Not tainted syzkaller #0 PREEMPT(full) [ 82.626490][ T7241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.626501][ T7241] Call Trace: [ 82.626507][ T7241] [ 82.626516][ T7241] dump_stack_lvl+0x100/0x190 [ 82.626542][ T7241] should_fail_ex.cold+0x5/0xa [ 82.626557][ T7241] _copy_to_user+0x32/0xd0 [ 82.626574][ T7241] drm_ioctl+0x608/0xc60 [ 82.626590][ T7241] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 82.626605][ T7241] ? __pfx_drm_ioctl+0x10/0x10 [ 82.626621][ T7241] ? selinux_file_ioctl+0x13b/0x290 [ 82.626638][ T7241] ? selinux_file_ioctl+0xb6/0x290 [ 82.626655][ T7241] ? __pfx_drm_ioctl+0x10/0x10 [ 82.626667][ T7241] __x64_sys_ioctl+0x18e/0x210 [ 82.626684][ T7241] do_syscall_64+0x115/0x870 [ 82.626699][ T7241] ? clear_bhb_loop+0x70/0xc0 [ 82.626712][ T7241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.626723][ T7241] RIP: 0033:0x7f6792b9e0d9 [ 82.626733][ T7241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.626744][ T7241] RSP: 002b:00007f6793b4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.626756][ T7241] RAX: ffffffffffffffda RBX: 00007f6792e25fa0 RCX: 00007f6792b9e0d9 [ 82.626762][ T7241] RDX: 0000200000000340 RSI: 00000000c01864cb RDI: 0000000000000003 [ 82.626771][ T7241] RBP: 00007f6793b4b090 R08: 0000000000000000 R09: 0000000000000000 [ 82.626781][ T7241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.626790][ T7241] R13: 00007f6792e26038 R14: 00007f6792e25fa0 R15: 00007ffd1b2672d8 [ 82.626810][ T7241] [ 82.752202][ T7248] netlink: 72 bytes leftover after parsing attributes in process `syz.0.492'. [ 82.797567][ T7252] pimreg: entered allmulticast mode [ 82.867993][ T7250] pimreg: left allmulticast mode [ 83.018016][ T7221] ima: policy update failed [ 83.285984][ T34] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 83.473642][ T34] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 83.482470][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 83.486978][ T34] usb 6-1: Product: syz [ 83.488831][ T34] usb 6-1: Manufacturer: syz [ 83.491675][ T34] usb 6-1: SerialNumber: syz [ 83.495482][ T34] usb 6-1: config 0 descriptor?? [ 83.501232][ T34] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 83.503925][ T34] dvb-usb: bulk message failed: -22 (2/0) [ 83.509365][ T34] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 83.513035][ T34] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 83.517155][ T34] usb 6-1: media controller created [ 83.525746][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.701100][ T7270] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 83.727739][ T34] cxusb: set interface failed [ 83.729359][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 83.752484][ T34] DVB: Unable to find symbol mt352_attach() [ 83.755758][ T34] dvb-usb: bulk message failed: -22 (5/0) [ 83.759251][ T34] zl10353_read_register: readreg error (reg=127, ret==-121) [ 83.762548][ T34] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 83.800195][ T7299] gretap0: entered promiscuous mode [ 83.802811][ T7299] gretap0: left promiscuous mode [ 83.806824][ T34] rc_core: IR keymap rc-dvico-mce not found [ 83.809740][ T34] Registered IR keymap rc-empty [ 83.814761][ T34] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 83.824415][ T34] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input11 [ 83.830518][ T34] dvb-usb: schedule remote query interval to 100 msecs. [ 83.833500][ T34] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 83.838876][ T34] usb 6-1: USB disconnect, device number 4 [ 83.901854][ T7301] netlink: 'syz.0.511': attribute type 11 has an invalid length. [ 83.914212][ T34] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 83.942767][ T43] kauditd_printk_skb: 35 callbacks suppressed [ 83.942787][ T43] audit: type=1400 audit(1786105687.435:456): avc: denied { create } for pid=7300 comm="syz.0.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.035086][ T43] audit: type=1804 audit(1786105687.525:457): pid=7310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.515" name="/newroot/90/file0" dev="tmpfs" ino=523 res=1 errno=0 [ 84.161867][ T43] audit: type=1400 audit(1786105687.655:458): avc: denied { listen } for pid=7319 comm="syz.3.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.167827][ T43] audit: type=1400 audit(1786105687.655:459): avc: denied { connect } for pid=7319 comm="syz.3.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.173644][ T43] audit: type=1400 audit(1786105687.665:460): avc: denied { setopt } for pid=7319 comm="syz.3.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.227597][ T7323] hugetlbfs: Unknown parameter '•-…º]:èžã._uÞò{Y”Óó œ˜¼' [ 85.121218][ T7350] gretap0: entered promiscuous mode [ 85.126516][ T7350] gretap0: left promiscuous mode [ 85.272205][ T7364] vlan2: entered promiscuous mode [ 85.274033][ T7364] gretap0: entered promiscuous mode [ 85.422431][ T43] audit: type=1400 audit(1786105688.915:461): avc: denied { block_suspend } for pid=7366 comm="syz.2.537" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.430525][ T43] audit: type=1400 audit(1786105688.925:462): avc: denied { lock } for pid=7366 comm="syz.2.537" path="socket:[16924]" dev="sockfs" ino=16924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 85.448718][ T7375] FAULT_INJECTION: forcing a failure. [ 85.448718][ T7375] name failslab, interval 1, probability 0, space 0, times 0 [ 85.452576][ T7375] CPU: 2 UID: 0 PID: 7375 Comm: syz.0.539 Not tainted syzkaller #0 PREEMPT(full) [ 85.452590][ T7375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.452608][ T7375] Call Trace: [ 85.452621][ T7375] [ 85.452625][ T7375] dump_stack_lvl+0x100/0x190 [ 85.452685][ T7375] should_fail_ex.cold+0x5/0xa [ 85.452706][ T7375] should_failslab+0xc2/0x120 [ 85.452734][ T7375] __kmalloc_cache_noprof+0x91/0x6c0 [ 85.452745][ T7375] ? sctp_add_bind_addr+0xae/0x3e0 [ 85.452766][ T7375] sctp_add_bind_addr+0xae/0x3e0 [ 85.452781][ T7375] sctp_copy_local_addr_list+0x349/0x550 [ 85.452799][ T7375] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 85.452817][ T7375] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 85.452835][ T7375] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.452855][ T7375] sctp_bind_addr_copy+0xe0/0x530 [ 85.452873][ T7375] sctp_connect_new_asoc+0x1c9/0x770 [ 85.452886][ T7375] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 85.452898][ T7375] ? selinux_sctp_bind_connect+0xe0/0x230 [ 85.452935][ T7375] sctp_sendmsg+0x1743/0x22e0 [ 85.452950][ T7375] ? __pfx_sctp_sendmsg+0x10/0x10 [ 85.452961][ T7375] ? sock_has_perm+0x25a/0x2f0 [ 85.452974][ T7375] ? __pfx_sock_has_perm+0x10/0x10 [ 85.452996][ T7375] ? __pfx_sctp_sendmsg+0x10/0x10 [ 85.453008][ T7375] inet_sendmsg+0x11c/0x140 [ 85.453025][ T7375] ____sys_sendmsg+0x9c9/0xbe0 [ 85.453041][ T7375] ? __pfx_inet_sendmsg+0x10/0x10 [ 85.453056][ T7375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.453074][ T7375] ? __pfx__kstrtoull+0x10/0x10 [ 85.453089][ T7375] ___sys_sendmsg+0x190/0x1e0 [ 85.453100][ T7375] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.453116][ T7375] ? find_held_lock+0x2b/0x80 [ 85.453136][ T7375] __sys_sendmmsg+0x20c/0x440 [ 85.453151][ T7375] ? __pfx___sys_sendmmsg+0x10/0x10 [ 85.453164][ T7375] ? ksys_write+0x190/0x250 [ 85.453189][ T7375] ? fput+0x79/0x100 [ 85.453202][ T7375] ? ksys_write+0x1ac/0x250 [ 85.453211][ T7375] ? __pfx_ksys_write+0x10/0x10 [ 85.453222][ T7375] __x64_sys_sendmmsg+0x9c/0x100 [ 85.453236][ T7375] ? lockdep_hardirqs_on+0x78/0x100 [ 85.453251][ T7375] do_syscall_64+0x115/0x870 [ 85.453265][ T7375] ? clear_bhb_loop+0x70/0xc0 [ 85.453279][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.453290][ T7375] RIP: 0033:0x7f6792b9e0d9 [ 85.453301][ T7375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.453311][ T7375] RSP: 002b:00007f6793b4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 85.453329][ T7375] RAX: ffffffffffffffda RBX: 00007f6792e25fa0 RCX: 00007f6792b9e0d9 [ 85.453336][ T7375] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 85.453342][ T7375] RBP: 00007f6793b4b090 R08: 0000000000000000 R09: 0000000000000000 [ 85.453348][ T7375] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 85.453355][ T7375] R13: 00007f6792e26038 R14: 00007f6792e25fa0 R15: 00007ffd1b2672d8 [ 85.453367][ T7375] [ 85.791020][ T43] audit: type=1400 audit(1786105689.285:463): avc: denied { write } for pid=7387 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.842664][ T43] audit: type=1400 audit(1786105689.335:464): avc: denied { write } for pid=7391 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.891078][ T5435] veth1_vlan: left promiscuous mode [ 85.899464][ T43] audit: type=1400 audit(1786105689.395:465): avc: denied { ioctl } for pid=7396 comm="syz.2.544" path="socket:[15817]" dev="sockfs" ino=15817 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.733473][ T7466] FAULT_INJECTION: forcing a failure. [ 86.733473][ T7466] name failslab, interval 1, probability 0, space 0, times 0 [ 86.741374][ T7466] CPU: 0 UID: 0 PID: 7466 Comm: syz.1.554 Not tainted syzkaller #0 PREEMPT(full) [ 86.741391][ T7466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.741398][ T7466] Call Trace: [ 86.741402][ T7466] [ 86.741407][ T7466] dump_stack_lvl+0x100/0x190 [ 86.741449][ T7466] should_fail_ex.cold+0x5/0xa [ 86.741465][ T7466] should_failslab+0xc2/0x120 [ 86.741480][ T7466] __kmalloc_cache_noprof+0x91/0x6c0 [ 86.741492][ T7466] ? sctp_add_bind_addr+0xae/0x3e0 [ 86.741509][ T7466] sctp_add_bind_addr+0xae/0x3e0 [ 86.741525][ T7466] sctp_copy_local_addr_list+0x349/0x550 [ 86.741543][ T7466] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 86.741560][ T7466] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 86.741578][ T7466] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.741596][ T7466] sctp_bind_addr_copy+0xe0/0x530 [ 86.741613][ T7466] sctp_connect_new_asoc+0x1c9/0x770 [ 86.741626][ T7466] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 86.741639][ T7466] ? selinux_sctp_bind_connect+0xe0/0x230 [ 86.741658][ T7466] sctp_sendmsg+0x1743/0x22e0 [ 86.741673][ T7466] ? __pfx_sctp_sendmsg+0x10/0x10 [ 86.741684][ T7466] ? sock_has_perm+0x25a/0x2f0 [ 86.741697][ T7466] ? __pfx_sock_has_perm+0x10/0x10 [ 86.741719][ T7466] ? __pfx_sctp_sendmsg+0x10/0x10 [ 86.741731][ T7466] inet_sendmsg+0x11c/0x140 [ 86.741748][ T7466] ____sys_sendmsg+0x9c9/0xbe0 [ 86.741764][ T7466] ? __pfx_inet_sendmsg+0x10/0x10 [ 86.741779][ T7466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.741797][ T7466] ? __pfx__kstrtoull+0x10/0x10 [ 86.741811][ T7466] ___sys_sendmsg+0x190/0x1e0 [ 86.741823][ T7466] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.741839][ T7466] ? find_held_lock+0x2b/0x80 [ 86.741857][ T7466] __sys_sendmmsg+0x20c/0x440 [ 86.741872][ T7466] ? __pfx___sys_sendmmsg+0x10/0x10 [ 86.741886][ T7466] ? ksys_write+0x190/0x250 [ 86.741916][ T7466] ? fput+0x79/0x100 [ 86.741935][ T7466] ? ksys_write+0x1ac/0x250 [ 86.741951][ T7466] ? __pfx_ksys_write+0x10/0x10 [ 86.741970][ T7466] __x64_sys_sendmmsg+0x9c/0x100 [ 86.741993][ T7466] ? lockdep_hardirqs_on+0x78/0x100 [ 86.742016][ T7466] do_syscall_64+0x115/0x870 [ 86.742032][ T7466] ? clear_bhb_loop+0x70/0xc0 [ 86.742045][ T7466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.742056][ T7466] RIP: 0033:0x7fb374f9e0d9 [ 86.742067][ T7466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.742078][ T7466] RSP: 002b:00007fb375efb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 86.742094][ T7466] RAX: ffffffffffffffda RBX: 00007fb375226090 RCX: 00007fb374f9e0d9 [ 86.742101][ T7466] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 86.742107][ T7466] RBP: 00007fb375efb090 R08: 0000000000000000 R09: 0000000000000000 [ 86.742113][ T7466] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 86.742119][ T7466] R13: 00007fb375226128 R14: 00007fb375226090 R15: 00007ffe3cc75258 [ 86.742132][ T7466] [ 87.114788][ T7489] netlink: 'syz.2.560': attribute type 4 has an invalid length. [ 87.123156][ T7489] netlink: 'syz.2.560': attribute type 4 has an invalid length. [ 87.824246][ T7528] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.827917][ T7528] block device autoloading is deprecated and will be removed. [ 87.980217][ T7530] __nla_validate_parse: 9 callbacks suppressed [ 87.980231][ T7530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.576'. [ 87.984981][ T7530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.576'. [ 87.991924][ T7530] gretap0: entered promiscuous mode [ 87.994365][ T7530] gretap0: left promiscuous mode [ 88.263736][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.580'. [ 88.266630][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.580'. [ 88.296437][ T7542] ======================================================= [ 88.296437][ T7542] WARNING: The mand mount option has been deprecated and [ 88.296437][ T7542] and is ignored by this kernel. Remove the mand [ 88.296437][ T7542] option from the mount to silence this warning. [ 88.296437][ T7542] ======================================================= [ 88.309104][ T7542] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 88.353186][ T7542] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 88.356701][ T7542] overlayfs: failed to look up (tracing) for ino (-66) [ 88.517101][ T7551] kvm: MWAIT instruction emulated as NOP! [ 88.708893][ T7572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.592'. [ 88.758779][ T7572] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7572 comm=syz.3.592 [ 88.780182][ T7572] ieee802154 phy0 wpan0: encryption failed: -22 [ 88.808070][ T7588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.598'. [ 88.811400][ T7588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.598'. [ 88.831926][ T7591] ip_tables: iptables: counters copy to user failed while replacing table [ 89.021558][ T43] kauditd_printk_skb: 23 callbacks suppressed [ 89.021571][ T43] audit: type=1400 audit(1786105692.515:489): avc: denied { write } for pid=7610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.067456][ T43] audit: type=1400 audit(1786105692.565:490): avc: denied { write } for pid=7614 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.159290][ T43] audit: type=1400 audit(1786105692.655:491): avc: denied { write } for pid=7623 comm="syz.0.607" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 89.180718][ T43] audit: type=1400 audit(1786105692.655:492): avc: denied { getopt } for pid=7623 comm="syz.0.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.183448][ T7633] binder: 7632:7633 ioctl c0306201 200000000040 returned -14 [ 89.201494][ T43] audit: type=1400 audit(1786105692.675:493): avc: denied { write } for pid=7632 comm="syz.3.610" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 89.208691][ T7627] Bluetooth: MGMT ver 1.23 [ 89.208845][ T43] audit: type=1400 audit(1786105692.695:494): avc: denied { write } for pid=7631 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.212455][ T7627] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 89.221459][ T7627] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 89.227688][ T7627] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 89.229877][ T7627] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 89.232004][ T7627] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 89.234296][ T7627] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 89.236886][ T7627] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 89.239210][ T7627] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 89.241373][ T7627] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 89.244637][ T7627] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 89.244994][ T43] audit: type=1400 audit(1786105692.735:495): avc: denied { write } for pid=7638 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.247313][ T7627] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 89.260784][ T43] audit: type=1804 audit(1786105692.755:496): pid=7641 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.612" name="/newroot/190/file0" dev="tmpfs" ino=1079 res=1 errno=0 [ 89.262027][ T7627] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 89.328791][ T43] audit: type=1400 audit(1786105692.825:497): avc: denied { mount } for pid=7647 comm="syz.1.614" name="/" dev="autofs" ino=17216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 89.366035][ T43] audit: type=1400 audit(1786105692.855:498): avc: denied { write } for pid=7653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.380821][ T7659] xfrm0 speed is unknown, defaulting to 1000 [ 89.383313][ T7659] xfrm0 speed is unknown, defaulting to 1000 [ 89.390998][ T7659] xfrm0 speed is unknown, defaulting to 1000 [ 89.394056][ T7659] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 89.400777][ T7659] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 89.406171][ T7659] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 89.415214][ T7659] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 89.422949][ T7659] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 89.449850][ T7659] xfrm0 speed is unknown, defaulting to 1000 [ 89.459849][ T7659] xfrm0 speed is unknown, defaulting to 1000 [ 89.464746][ T7659] xfrm0 speed is unknown, defaulting to 1000 [ 89.468297][ T7659] xfrm0 speed is unknown, defaulting to 1000 [ 89.550465][ T7679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7679 comm=syz.1.623 [ 89.610631][ T7684] openvswitch: netlink: Actions may not be safe on all matching packets [ 89.613848][ T7685] netlink: 28 bytes leftover after parsing attributes in process `syz.2.626'. [ 89.617040][ T7685] netlink: 28 bytes leftover after parsing attributes in process `syz.2.626'. [ 89.619247][ T7684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.625'. [ 89.622738][ T7685] gretap0: entered promiscuous mode [ 89.625223][ T7685] gretap0: left promiscuous mode [ 89.633705][ T7684] binder_alloc: 7682: binder_alloc_buf size 24560 failed, no address space [ 89.639873][ T7684] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 89.682213][ T7689] netlink: 'syz.1.628': attribute type 21 has an invalid length. [ 89.684831][ T7689] netlink: 'syz.1.628': attribute type 4 has an invalid length. [ 89.688391][ T7689] netlink: 'syz.1.628': attribute type 5 has an invalid length. [ 89.791381][ T7693] bridge1: entered promiscuous mode [ 89.793099][ T7693] bridge1: entered allmulticast mode [ 89.889956][ T7708] tmpfs: Unknown parameter 'q¯.ta' [ 90.228708][ T7735] gretap0: entered promiscuous mode [ 90.231997][ T7735] gretap0: left promiscuous mode [ 90.480794][ T7753] jffs2: notice: (7753) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.196079][ T1482] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 91.357225][ T1482] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 91.360740][ T1482] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.364213][ T1482] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.367418][ T1482] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 91.372341][ T1482] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 91.375621][ T1482] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 91.378294][ T1482] usb 8-1: Manufacturer: syz [ 91.382877][ T1482] usb 8-1: config 0 descriptor?? [ 91.627509][ T7798] xt_socket: unknown flags 0x48 [ 91.758687][ T7812] FAULT_INJECTION: forcing a failure. [ 91.758687][ T7812] name failslab, interval 1, probability 0, space 0, times 0 [ 91.762761][ T7812] CPU: 3 UID: 0 PID: 7812 Comm: syz.1.674 Not tainted syzkaller #0 PREEMPT(full) [ 91.762776][ T7812] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.762791][ T7812] Call Trace: [ 91.762808][ T7812] [ 91.762813][ T7812] dump_stack_lvl+0x100/0x190 [ 91.762903][ T7812] should_fail_ex.cold+0x5/0xa [ 91.762930][ T7812] should_failslab+0xc2/0x120 [ 91.762964][ T7812] __kmalloc_cache_noprof+0x91/0x6c0 [ 91.762977][ T7812] ? sctp_add_bind_addr+0xae/0x3e0 [ 91.763016][ T7812] sctp_add_bind_addr+0xae/0x3e0 [ 91.763032][ T7812] sctp_copy_local_addr_list+0x349/0x550 [ 91.763050][ T7812] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 91.763068][ T7812] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 91.763090][ T7812] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 91.763116][ T7812] sctp_bind_addr_copy+0xe0/0x530 [ 91.763133][ T7812] sctp_connect_new_asoc+0x1c9/0x770 [ 91.763146][ T7812] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 91.763159][ T7812] ? selinux_sctp_bind_connect+0xe0/0x230 [ 91.763217][ T7812] sctp_sendmsg+0x1743/0x22e0 [ 91.763236][ T7812] ? __pfx_sctp_sendmsg+0x10/0x10 [ 91.763247][ T7812] ? sock_has_perm+0x25a/0x2f0 [ 91.763260][ T7812] ? __pfx_sock_has_perm+0x10/0x10 [ 91.763306][ T7812] ? __pfx_sctp_sendmsg+0x10/0x10 [ 91.763326][ T7812] inet_sendmsg+0x11c/0x140 [ 91.763358][ T7812] ____sys_sendmsg+0x9c9/0xbe0 [ 91.763380][ T7812] ? __pfx_inet_sendmsg+0x10/0x10 [ 91.763396][ T7812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.763415][ T7812] ? __pfx__kstrtoull+0x10/0x10 [ 91.763435][ T7812] ___sys_sendmsg+0x190/0x1e0 [ 91.763447][ T7812] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.763464][ T7812] ? find_held_lock+0x2b/0x80 [ 91.763494][ T7812] __sys_sendmmsg+0x20c/0x440 [ 91.763515][ T7812] ? __pfx___sys_sendmmsg+0x10/0x10 [ 91.763534][ T7812] ? ksys_write+0x190/0x250 [ 91.763566][ T7812] ? fput+0x79/0x100 [ 91.763581][ T7812] ? ksys_write+0x1ac/0x250 [ 91.763590][ T7812] ? __pfx_ksys_write+0x10/0x10 [ 91.763602][ T7812] __x64_sys_sendmmsg+0x9c/0x100 [ 91.763621][ T7812] ? lockdep_hardirqs_on+0x78/0x100 [ 91.763651][ T7812] do_syscall_64+0x115/0x870 [ 91.763671][ T7812] ? clear_bhb_loop+0x70/0xc0 [ 91.763693][ T7812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.763710][ T7812] RIP: 0033:0x7fb374f9e0d9 [ 91.763720][ T7812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.763731][ T7812] RSP: 002b:00007fb375efb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 91.763753][ T7812] RAX: ffffffffffffffda RBX: 00007fb375226090 RCX: 00007fb374f9e0d9 [ 91.763760][ T7812] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 91.763767][ T7812] RBP: 00007fb375efb090 R08: 0000000000000000 R09: 0000000000000000 [ 91.763773][ T7812] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 91.763779][ T7812] R13: 00007fb375226128 R14: 00007fb375226090 R15: 00007ffe3cc75258 [ 91.763793][ T7812] [ 91.873589][ T1482] usbhid 8-1:0.0: can't add hid device: -71 [ 91.881080][ T1482] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 91.891475][ T1482] usb 8-1: USB disconnect, device number 7 [ 92.175686][ T7844] FAULT_INJECTION: forcing a failure. [ 92.175686][ T7844] name failslab, interval 1, probability 0, space 0, times 0 [ 92.179977][ T7844] CPU: 3 UID: 0 PID: 7844 Comm: syz.2.685 Not tainted syzkaller #0 PREEMPT(full) [ 92.179991][ T7844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.179999][ T7844] Call Trace: [ 92.180003][ T7844] [ 92.180009][ T7844] dump_stack_lvl+0x100/0x190 [ 92.180028][ T7844] should_fail_ex.cold+0x5/0xa [ 92.180044][ T7844] should_failslab+0xc2/0x120 [ 92.180059][ T7844] __kmalloc_noprof+0xfc/0x820 [ 92.180071][ T7844] ? rcu_is_watching+0x12/0xc0 [ 92.180090][ T7844] ? tomoyo_realpath_from_path+0xb6/0x690 [ 92.180104][ T7844] tomoyo_realpath_from_path+0xb6/0x690 [ 92.180118][ T7844] tomoyo_path_number_perm+0x23c/0x580 [ 92.180133][ T7844] ? tomoyo_path_number_perm+0x22e/0x580 [ 92.180149][ T7844] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 92.180177][ T7844] ? find_held_lock+0x2b/0x80 [ 92.180187][ T7844] ? __fget_files+0x215/0x3d0 [ 92.180198][ T7844] ? hook_file_ioctl_common+0x140/0x440 [ 92.180210][ T7844] ? __fget_files+0x215/0x3d0 [ 92.180223][ T7844] ? __fget_files+0x21f/0x3d0 [ 92.180236][ T7844] security_file_ioctl+0xd3/0x230 [ 92.180269][ T7844] __x64_sys_ioctl+0xb7/0x210 [ 92.180292][ T7844] do_syscall_64+0x115/0x870 [ 92.180307][ T7844] ? clear_bhb_loop+0x70/0xc0 [ 92.180320][ T7844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.180333][ T7844] RIP: 0033:0x7f4aa479e0d9 [ 92.180344][ T7844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.180355][ T7844] RSP: 002b:00007f4aa558c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.180366][ T7844] RAX: ffffffffffffffda RBX: 00007f4aa4a25fa0 RCX: 00007f4aa479e0d9 [ 92.180375][ T7844] RDX: 0000200000000340 RSI: 00000000c01864cb RDI: 0000000000000003 [ 92.180381][ T7844] RBP: 00007f4aa558c090 R08: 0000000000000000 R09: 0000000000000000 [ 92.180387][ T7844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.180393][ T7844] R13: 00007f4aa4a26038 R14: 00007f4aa4a25fa0 R15: 00007ffc6b57de88 [ 92.180407][ T7844] [ 92.180412][ T7844] ERROR: Out of memory at tomoyo_realpath_from_path. [ 92.315939][ T1482] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 92.469733][ T1482] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.473767][ T1482] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 8228, setting to 64 [ 92.477342][ T1482] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 92.481198][ T1482] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 92.483953][ T1482] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.497958][ T1482] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 92.507982][ T1482] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 92.516331][ T1482] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 92.523664][ T1482] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 92.529341][ T1482] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 92.532032][ T1482] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 92.536222][ T1482] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 92.641618][ T7858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.660196][ T7858] macvlan2: entered promiscuous mode [ 92.662326][ T7858] macvlan2: entered allmulticast mode [ 92.665757][ T7858] bond1: entered promiscuous mode [ 92.669462][ T7858] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 92.680052][ T7858] bond1: left promiscuous mode [ 92.803709][ T7873] 0x000000000001-0x00000000048e : "" [ 92.815158][ T7873] ftl_cs: FTL header corrupt! [ 92.834799][ T34] usb 8-1: USB disconnect, device number 8 [ 92.846551][ T34] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 92.872719][ T34] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 92.879365][ T34] keyspan 8-1:1.0: device disconnected [ 93.049060][ T7889] __nla_validate_parse: 18 callbacks suppressed [ 93.049074][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'. [ 93.053737][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'. [ 93.209737][ T7897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.705'. [ 93.212611][ T7897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.705'. [ 93.344746][ T7899] kvm: kvm [7898]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 93.350362][ T7899] kvm: kvm [7898]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 93.552726][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'. [ 93.603619][ T7918] FAULT_INJECTION: forcing a failure. [ 93.603619][ T7918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.609029][ T7918] CPU: 2 UID: 0 PID: 7918 Comm: syz.0.714 Not tainted syzkaller #0 PREEMPT(full) [ 93.609044][ T7918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.609058][ T7918] Call Trace: [ 93.609068][ T7918] [ 93.609073][ T7918] dump_stack_lvl+0x100/0x190 [ 93.609129][ T7918] should_fail_ex.cold+0x5/0xa [ 93.609150][ T7918] _copy_from_user+0x2e/0xd0 [ 93.609184][ T7918] copy_msghdr_from_user+0x9f/0x4c0 [ 93.609200][ T7918] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 93.609216][ T7918] ___sys_sendmsg+0x106/0x1e0 [ 93.609227][ T7918] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.609236][ T7918] ? __lock_acquire+0x49f/0x1a40 [ 93.609265][ T7918] ? get_pid_task+0x106/0x250 [ 93.609290][ T7918] __sys_sendmsg+0x160/0x210 [ 93.609305][ T7918] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.609325][ T7918] do_syscall_64+0x115/0x870 [ 93.609339][ T7918] ? clear_bhb_loop+0x70/0xc0 [ 93.609353][ T7918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.609364][ T7918] RIP: 0033:0x7f6792b9e0d9 [ 93.609374][ T7918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.609384][ T7918] RSP: 002b:00007f6793b4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.609425][ T7918] RAX: ffffffffffffffda RBX: 00007f6792e25fa0 RCX: 00007f6792b9e0d9 [ 93.609432][ T7918] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 93.609438][ T7918] RBP: 00007f6793b4b090 R08: 0000000000000000 R09: 0000000000000000 [ 93.609444][ T7918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.609451][ T7918] R13: 00007f6792e26038 R14: 00007f6792e25fa0 R15: 00007ffd1b2672d8 [ 93.609464][ T7918] [ 93.772171][ T7926] FAULT_INJECTION: forcing a failure. [ 93.772171][ T7926] name failslab, interval 1, probability 0, space 0, times 0 [ 93.778734][ T7926] CPU: 0 UID: 0 PID: 7926 Comm: syz.3.718 Not tainted syzkaller #0 PREEMPT(full) [ 93.778766][ T7926] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.778773][ T7926] Call Trace: [ 93.778778][ T7926] [ 93.778783][ T7926] dump_stack_lvl+0x100/0x190 [ 93.778803][ T7926] should_fail_ex.cold+0x5/0xa [ 93.778818][ T7926] should_failslab+0xc2/0x120 [ 93.778845][ T7926] __kmalloc_cache_noprof+0x91/0x6c0 [ 93.778857][ T7926] ? sctp_add_bind_addr+0xae/0x3e0 [ 93.778874][ T7926] sctp_add_bind_addr+0xae/0x3e0 [ 93.778890][ T7926] sctp_copy_local_addr_list+0x349/0x550 [ 93.778908][ T7926] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 93.778926][ T7926] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 93.778944][ T7926] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 93.778960][ T7926] sctp_bind_addr_copy+0xe0/0x530 [ 93.778978][ T7926] sctp_connect_new_asoc+0x1c9/0x770 [ 93.778992][ T7926] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 93.779004][ T7926] ? selinux_sctp_bind_connect+0xe0/0x230 [ 93.779025][ T7926] sctp_sendmsg+0x1743/0x22e0 [ 93.779040][ T7926] ? __pfx_sctp_sendmsg+0x10/0x10 [ 93.779051][ T7926] ? sock_has_perm+0x25a/0x2f0 [ 93.779064][ T7926] ? __pfx_sock_has_perm+0x10/0x10 [ 93.779095][ T7926] ? __pfx_sctp_sendmsg+0x10/0x10 [ 93.779107][ T7926] inet_sendmsg+0x11c/0x140 [ 93.779123][ T7926] ____sys_sendmsg+0x9c9/0xbe0 [ 93.779140][ T7926] ? __pfx_inet_sendmsg+0x10/0x10 [ 93.779155][ T7926] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.779174][ T7926] ? __pfx__kstrtoull+0x10/0x10 [ 93.779188][ T7926] ___sys_sendmsg+0x190/0x1e0 [ 93.779199][ T7926] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.779216][ T7926] ? find_held_lock+0x2b/0x80 [ 93.779235][ T7926] __sys_sendmmsg+0x20c/0x440 [ 93.779250][ T7926] ? __pfx___sys_sendmmsg+0x10/0x10 [ 93.779263][ T7926] ? ksys_write+0x190/0x250 [ 93.779285][ T7926] ? fput+0x79/0x100 [ 93.779297][ T7926] ? ksys_write+0x1ac/0x250 [ 93.779306][ T7926] ? __pfx_ksys_write+0x10/0x10 [ 93.779318][ T7926] __x64_sys_sendmmsg+0x9c/0x100 [ 93.779332][ T7926] ? lockdep_hardirqs_on+0x78/0x100 [ 93.779346][ T7926] do_syscall_64+0x115/0x870 [ 93.779360][ T7926] ? clear_bhb_loop+0x70/0xc0 [ 93.779373][ T7926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.779384][ T7926] RIP: 0033:0x7f416019e0d9 [ 93.779394][ T7926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.779405][ T7926] RSP: 002b:00007f4161078028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 93.779417][ T7926] RAX: ffffffffffffffda RBX: 00007f4160425fa0 RCX: 00007f416019e0d9 [ 93.779423][ T7926] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 93.779430][ T7926] RBP: 00007f4161078090 R08: 0000000000000000 R09: 0000000000000000 [ 93.779435][ T7926] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 93.779442][ T7926] R13: 00007f4160426038 R14: 00007f4160425fa0 R15: 00007fffed031d88 [ 93.779455][ T7926] [ 93.893031][ T7929] kvm: pic: level sensitive irq not supported [ 93.894454][ T7929] kvm: pic: single mode not supported [ 93.898644][ T7929] kvm: pic: single mode not supported [ 93.902922][ T7929] kvm: pic: single mode not supported [ 93.908517][ T7929] kvm: pic: single mode not supported [ 93.910584][ T7929] kvm: pic: level sensitive irq not supported [ 93.914529][ T7929] kvm: pic: single mode not supported [ 93.916817][ T7929] kvm: pic: level sensitive irq not supported [ 93.919026][ T7929] kvm: pic: single mode not supported [ 93.942590][ T7933] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 93.955282][ T7929] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.959204][ T7929] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.027584][ T43] kauditd_printk_skb: 41 callbacks suppressed [ 94.027605][ T43] audit: type=1400 audit(1786105697.525:540): avc: denied { shutdown } for pid=7923 comm="syz.0.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.039746][ T43] audit: type=1400 audit(1786105697.535:541): avc: denied { ioctl } for pid=7923 comm="syz.0.717" path="socket:[18954]" dev="sockfs" ino=18954 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.049370][ T7943] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 94.055521][ T7943] VFS: Can't find a romfs filesystem on dev nullb0. [ 94.055521][ T7943] [ 94.102609][ T43] audit: type=1400 audit(1786105697.595:542): avc: denied { write } for pid=7953 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.139807][ T43] audit: type=1400 audit(1786105697.635:543): avc: denied { write } for pid=7959 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.169324][ T7963] ip_tables: iptables: counters copy to user failed while replacing table [ 94.173137][ T5435] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.219939][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'. [ 94.222761][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'. [ 94.303268][ T43] audit: type=1400 audit(1786105697.795:544): avc: denied { write } for pid=7972 comm="syz.0.733" name="/" dev="9p" ino=77885977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.305967][ T7976] netlink: 72 bytes leftover after parsing attributes in process `syz.1.734'. [ 94.310083][ T43] audit: type=1400 audit(1786105697.795:545): avc: denied { remove_name } for pid=7972 comm="syz.0.733" name="file0" dev="9p" ino=77885981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.310539][ T7974] mac80211_hwsim hwsim8 »»»»»»: renamed from wlan0 (while UP) [ 94.327729][ T43] audit: type=1400 audit(1786105697.795:546): avc: denied { unlink } for pid=7972 comm="syz.0.733" name="file0" dev="9p" ino=77885981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.334880][ T43] audit: type=1400 audit(1786105697.825:547): avc: denied { write } for pid=7972 comm="syz.0.733" name="/" dev="9p" ino=77885977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.342592][ T43] audit: type=1400 audit(1786105697.825:548): avc: denied { link } for pid=7972 comm="syz.0.733" name="file1" dev="9p" ino=77885983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.365220][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 94.368197][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 94.578404][ T43] audit: type=1400 audit(1786105698.075:549): avc: denied { ioctl } for pid=7983 comm="syz.1.738" path="socket:[20810]" dev="sockfs" ino=20810 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 95.057556][ T8020] FAULT_INJECTION: forcing a failure. [ 95.057556][ T8020] name failslab, interval 1, probability 0, space 0, times 0 [ 95.061720][ T8020] CPU: 2 UID: 0 PID: 8020 Comm: syz.2.752 Not tainted syzkaller #0 PREEMPT(full) [ 95.061735][ T8020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.061742][ T8020] Call Trace: [ 95.061747][ T8020] [ 95.061752][ T8020] dump_stack_lvl+0x100/0x190 [ 95.061771][ T8020] should_fail_ex.cold+0x5/0xa [ 95.061786][ T8020] should_failslab+0xc2/0x120 [ 95.061801][ T8020] __kmalloc_noprof+0xfc/0x820 [ 95.061813][ T8020] ? rcu_is_watching+0x12/0xc0 [ 95.061832][ T8020] ? tomoyo_realpath_from_path+0xb6/0x690 [ 95.061847][ T8020] tomoyo_realpath_from_path+0xb6/0x690 [ 95.061860][ T8020] tomoyo_path_number_perm+0x23c/0x580 [ 95.061875][ T8020] ? tomoyo_path_number_perm+0x22e/0x580 [ 95.061891][ T8020] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 95.061918][ T8020] ? find_held_lock+0x2b/0x80 [ 95.061930][ T8020] ? __fget_files+0x215/0x3d0 [ 95.061942][ T8020] ? hook_file_ioctl_common+0x140/0x440 [ 95.061953][ T8020] ? __fget_files+0x215/0x3d0 [ 95.061966][ T8020] ? __fget_files+0x21f/0x3d0 [ 95.061979][ T8020] security_file_ioctl+0xd3/0x230 [ 95.062012][ T8020] __x64_sys_ioctl+0xb7/0x210 [ 95.062030][ T8020] do_syscall_64+0x115/0x870 [ 95.062044][ T8020] ? clear_bhb_loop+0x70/0xc0 [ 95.062057][ T8020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.062068][ T8020] RIP: 0033:0x7f4aa479e0d9 [ 95.062078][ T8020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.062093][ T8020] RSP: 002b:00007f4aa558c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.062105][ T8020] RAX: ffffffffffffffda RBX: 00007f4aa4a25fa0 RCX: 00007f4aa479e0d9 [ 95.062111][ T8020] RDX: 0000200000000180 RSI: 00000000c01864cd RDI: 0000000000000003 [ 95.062118][ T8020] RBP: 00007f4aa558c090 R08: 0000000000000000 R09: 0000000000000000 [ 95.062124][ T8020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.062130][ T8020] R13: 00007f4aa4a26038 R14: 00007f4aa4a25fa0 R15: 00007ffc6b57de88 [ 95.062144][ T8020] [ 95.062149][ T8020] ERROR: Out of memory at tomoyo_realpath_from_path. [ 95.104205][ T8028] FAULT_INJECTION: forcing a failure. [ 95.104205][ T8028] name failslab, interval 1, probability 0, space 0, times 0 [ 95.141274][ T8028] CPU: 0 UID: 0 PID: 8028 Comm: syz.0.756 Not tainted syzkaller #0 PREEMPT(full) [ 95.141290][ T8028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.141297][ T8028] Call Trace: [ 95.141312][ T8028] [ 95.141317][ T8028] dump_stack_lvl+0x100/0x190 [ 95.141335][ T8028] should_fail_ex.cold+0x5/0xa [ 95.141350][ T8028] should_failslab+0xc2/0x120 [ 95.141365][ T8028] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 95.141379][ T8028] ? __alloc_skb+0x5b7/0x710 [ 95.141415][ T8028] ? __alloc_skb+0x140/0x710 [ 95.141430][ T8028] __alloc_skb+0x140/0x710 [ 95.141441][ T8028] ? __alloc_skb+0x5b7/0x710 [ 95.141453][ T8028] ? __pfx___alloc_skb+0x10/0x10 [ 95.141469][ T8028] netlink_alloc_large_skb+0x69/0x150 [ 95.141482][ T8028] netlink_sendmsg+0x680/0xda0 [ 95.141495][ T8028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.141507][ T8028] ? selinux_socket_sendmsg+0x198/0x2f0 [ 95.141526][ T8028] ____sys_sendmsg+0xa4d/0xbe0 [ 95.141541][ T8028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.141553][ T8028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.141575][ T8028] ___sys_sendmsg+0x190/0x1e0 [ 95.141587][ T8028] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.141596][ T8028] ? __lock_acquire+0x49f/0x1a40 [ 95.141610][ T8028] ? get_pid_task+0x106/0x250 [ 95.141634][ T8028] __sys_sendmsg+0x160/0x210 [ 95.141648][ T8028] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.141668][ T8028] do_syscall_64+0x115/0x870 [ 95.141682][ T8028] ? clear_bhb_loop+0x70/0xc0 [ 95.141695][ T8028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.141706][ T8028] RIP: 0033:0x7f6792b9e0d9 [ 95.141716][ T8028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.141726][ T8028] RSP: 002b:00007f6793b4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.141737][ T8028] RAX: ffffffffffffffda RBX: 00007f6792e25fa0 RCX: 00007f6792b9e0d9 [ 95.141744][ T8028] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 95.141750][ T8028] RBP: 00007f6793b4b090 R08: 0000000000000000 R09: 0000000000000000 [ 95.141757][ T8028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.141763][ T8028] R13: 00007f6792e26038 R14: 00007f6792e25fa0 R15: 00007ffd1b2672d8 [ 95.141775][ T8028] [ 95.265692][ T8041] syzkaller1: entered promiscuous mode [ 95.273602][ T8041] syzkaller1: entered allmulticast mode [ 95.595596][ T8056] FAULT_INJECTION: forcing a failure. [ 95.595596][ T8056] name failslab, interval 1, probability 0, space 0, times 0 [ 95.600351][ T8056] CPU: 0 UID: 0 PID: 8056 Comm: syz.3.765 Not tainted syzkaller #0 PREEMPT(full) [ 95.600366][ T8056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.600381][ T8056] Call Trace: [ 95.600397][ T8056] [ 95.600403][ T8056] dump_stack_lvl+0x100/0x190 [ 95.600486][ T8056] should_fail_ex.cold+0x5/0xa [ 95.600512][ T8056] should_failslab+0xc2/0x120 [ 95.600544][ T8056] __kmalloc_cache_noprof+0x91/0x6c0 [ 95.600556][ T8056] ? sctp_add_bind_addr+0xae/0x3e0 [ 95.600595][ T8056] sctp_add_bind_addr+0xae/0x3e0 [ 95.600611][ T8056] sctp_copy_local_addr_list+0x349/0x550 [ 95.600629][ T8056] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 95.600647][ T8056] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 95.600665][ T8056] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 95.600690][ T8056] sctp_bind_addr_copy+0xe0/0x530 [ 95.600707][ T8056] sctp_connect_new_asoc+0x1c9/0x770 [ 95.600720][ T8056] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 95.600732][ T8056] ? selinux_sctp_bind_connect+0xe0/0x230 [ 95.600774][ T8056] sctp_sendmsg+0x1743/0x22e0 [ 95.600789][ T8056] ? __pfx_sctp_sendmsg+0x10/0x10 [ 95.600799][ T8056] ? sock_has_perm+0x25a/0x2f0 [ 95.600828][ T8056] ? __pfx_sock_has_perm+0x10/0x10 [ 95.600851][ T8056] ? __pfx_sctp_sendmsg+0x10/0x10 [ 95.600863][ T8056] inet_sendmsg+0x11c/0x140 [ 95.600891][ T8056] ____sys_sendmsg+0x9c9/0xbe0 [ 95.600912][ T8056] ? __pfx_inet_sendmsg+0x10/0x10 [ 95.600928][ T8056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.600947][ T8056] ? __pfx__kstrtoull+0x10/0x10 [ 95.600968][ T8056] ___sys_sendmsg+0x190/0x1e0 [ 95.600979][ T8056] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.600996][ T8056] ? find_held_lock+0x2b/0x80 [ 95.601017][ T8056] __sys_sendmmsg+0x20c/0x440 [ 95.601033][ T8056] ? __pfx___sys_sendmmsg+0x10/0x10 [ 95.601047][ T8056] ? ksys_write+0x190/0x250 [ 95.601070][ T8056] ? fput+0x79/0x100 [ 95.601083][ T8056] ? ksys_write+0x1ac/0x250 [ 95.601092][ T8056] ? __pfx_ksys_write+0x10/0x10 [ 95.601104][ T8056] __x64_sys_sendmmsg+0x9c/0x100 [ 95.601118][ T8056] ? lockdep_hardirqs_on+0x78/0x100 [ 95.601139][ T8056] do_syscall_64+0x115/0x870 [ 95.601153][ T8056] ? clear_bhb_loop+0x70/0xc0 [ 95.601167][ T8056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.601178][ T8056] RIP: 0033:0x7f416019e0d9 [ 95.601189][ T8056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.601200][ T8056] RSP: 002b:00007f4161078028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 95.601221][ T8056] RAX: ffffffffffffffda RBX: 00007f4160425fa0 RCX: 00007f416019e0d9 [ 95.601234][ T8056] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 95.601241][ T8056] RBP: 00007f4161078090 R08: 0000000000000000 R09: 0000000000000000 [ 95.601248][ T8056] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 95.601254][ T8056] R13: 00007f4160426038 R14: 00007f4160425fa0 R15: 00007fffed031d88 [ 95.601268][ T8056] [ 95.840770][ T8074] binder: 8073:8074 ioctl c0306201 0 returned -14 [ 101.042569][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 101.042601][ T43] audit: type=1400 audit(1786105704.535:569): avc: denied { write } for pid=8097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.099617][ T43] audit: type=1400 audit(1786105704.595:570): avc: denied { write } for pid=8100 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.264122][ T43] audit: type=1400 audit(1786105704.755:571): avc: denied { write } for pid=8103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.317855][ T43] audit: type=1400 audit(1786105704.815:572): avc: denied { write } for pid=8106 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.432920][ T43] audit: type=1400 audit(1786105704.925:573): avc: denied { write } for pid=8109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.483629][ T43] audit: type=1400 audit(1786105704.975:574): avc: denied { write } for pid=8112 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.571658][ T43] audit: type=1400 audit(1786105705.065:575): avc: denied { write } for pid=8115 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.612201][ T43] audit: type=1400 audit(1786105705.105:576): avc: denied { write } for pid=8118 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.482642][ T8126] netlink: 'syz.2.778': attribute type 2 has an invalid length. [ 106.488328][ T8129] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 106.494800][ T43] audit: type=1400 audit(1786105709.985:577): avc: denied { ioctl } for pid=8125 comm="syz.0.776" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 106.507809][ T43] audit: type=1400 audit(1786105710.005:578): avc: denied { ioctl } for pid=8125 comm="syz.0.776" path="socket:[19138]" dev="sockfs" ino=19138 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.521138][ T43] audit: type=1400 audit(1786105710.015:579): avc: denied { ioctl } for pid=8125 comm="syz.0.776" path="socket:[19137]" dev="sockfs" ino=19137 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.529991][ T43] audit: type=1400 audit(1786105710.015:580): avc: denied { ioctl } for pid=8125 comm="syz.0.776" path="socket:[19138]" dev="sockfs" ino=19138 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.540408][ T43] audit: type=1400 audit(1786105710.015:581): avc: denied { write } for pid=8125 comm="syz.0.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.548305][ T43] audit: type=1400 audit(1786105710.015:582): avc: denied { read write } for pid=5725 comm="syz-executor" name="loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.556846][ T43] audit: type=1400 audit(1786105710.015:583): avc: denied { open } for pid=5725 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.564850][ T43] audit: type=1400 audit(1786105710.015:584): avc: denied { ioctl } for pid=5725 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.567380][ T5083] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.580132][ T43] audit: type=1400 audit(1786105710.025:585): avc: denied { create } for pid=8130 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.580253][ T5083] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.588403][ T43] audit: type=1400 audit(1786105710.025:586): avc: denied { read write } for pid=8130 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 106.601468][ T5083] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.607386][ T5083] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.612646][ T5083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.813221][ T8130] xfrm0 speed is unknown, defaulting to 1000 [ 106.855987][ T29] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 106.885883][ T149] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 106.969435][ T8130] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.971725][ T8130] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.973971][ T8130] bridge_slave_0: entered allmulticast mode [ 106.976737][ T8130] bridge_slave_0: entered promiscuous mode [ 106.980800][ T8130] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.983032][ T8130] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.985226][ T8130] bridge_slave_1: entered allmulticast mode [ 106.988308][ T8130] bridge_slave_1: entered promiscuous mode [ 107.005165][ T8130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.008427][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 107.012500][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 107.013380][ T8130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.017799][ T29] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 107.021806][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.024389][ T29] usb 8-1: Product: syz [ 107.026073][ T149] usb 7-1: device descriptor read/64, error -71 [ 107.026134][ T29] usb 8-1: Manufacturer: syz [ 107.030296][ T29] usb 8-1: SerialNumber: syz [ 107.031265][ T8130] team0: Port device team_slave_0 added [ 107.033861][ T29] usb 8-1: config 0 descriptor?? [ 107.034938][ T8130] team0: Port device team_slave_1 added [ 107.038146][ T29] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 107.041180][ T29] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 107.049863][ T8130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.051931][ T8130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.059979][ T8130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.064342][ T8130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.066872][ T8130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.074745][ T8130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.098407][ T8130] hsr_slave_0: entered promiscuous mode [ 107.100772][ T8130] hsr_slave_1: entered promiscuous mode [ 107.102907][ T8130] debugfs: 'hsr0' already exists in 'hsr' [ 107.104790][ T8130] Cannot create hsr debugfs directory [ 107.188290][ T8130] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.276517][ T149] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 107.284394][ T8130] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.378658][ T8130] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.405934][ T149] usb 7-1: device descriptor read/64, error -71 [ 107.443120][ T8130] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.517052][ T149] usb usb7-port1: attempt power cycle [ 107.546503][ T8130] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.556275][ T8130] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.559792][ T8130] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.565501][ T8130] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.568510][ T8164] FAULT_INJECTION: forcing a failure. [ 107.568510][ T8164] name failslab, interval 1, probability 0, space 0, times 0 [ 107.568554][ T8130] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.574616][ T8164] CPU: 3 UID: 0 PID: 8164 Comm: syz.0.785 Not tainted syzkaller #0 PREEMPT(full) [ 107.574630][ T8164] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.574642][ T8164] Call Trace: [ 107.574647][ T8164] [ 107.574651][ T8164] dump_stack_lvl+0x100/0x190 [ 107.574674][ T8164] should_fail_ex.cold+0x5/0xa [ 107.574691][ T8164] should_failslab+0xc2/0x120 [ 107.574707][ T8164] __kmalloc_noprof+0xfc/0x820 [ 107.574720][ T8164] ? kasan_save_track+0x14/0x30 [ 107.574733][ T8164] ? alloc_trace_uprobe+0x86/0x370 [ 107.574751][ T8164] alloc_trace_uprobe+0x86/0x370 [ 107.574766][ T8164] __trace_uprobe_create+0x673/0x22f0 [ 107.574786][ T8164] ? __pfx___trace_uprobe_create+0x10/0x10 [ 107.574802][ T8164] ? __kmalloc_noprof+0x343/0x820 [ 107.574814][ T8164] ? argv_split+0x173/0x420 [ 107.574835][ T8164] ? argv_split+0x359/0x420 [ 107.574854][ T8164] ? __pfx___trace_uprobe_create+0x10/0x10 [ 107.574875][ T8164] trace_probe_create+0xef/0x100 [ 107.574894][ T8164] ? __pfx_trace_probe_create+0x10/0x10 [ 107.574920][ T8164] dyn_event_create+0x46/0x70 [ 107.574944][ T8164] create_or_delete_trace_uprobe+0x5a/0xb0 [ 107.574964][ T8164] trace_parse_run_command+0x1ab/0x3b0 [ 107.574984][ T8164] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 107.575010][ T8164] vfs_write+0x2aa/0x1050 [ 107.575037][ T8164] ? __pfx_probes_write+0x10/0x10 [ 107.575059][ T8164] ? __pfx_vfs_write+0x10/0x10 [ 107.575082][ T8164] ? __fget_files+0x215/0x3d0 [ 107.575107][ T8164] ? __fget_files+0x21f/0x3d0 [ 107.575130][ T8164] ksys_write+0x12a/0x250 [ 107.575140][ T8164] ? __pfx_ksys_write+0x10/0x10 [ 107.575153][ T8164] do_syscall_64+0x115/0x870 [ 107.575167][ T8164] ? clear_bhb_loop+0x70/0xc0 [ 107.575181][ T8164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.575192][ T8164] RIP: 0033:0x7f6792b9e0d9 [ 107.575203][ T8164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.575214][ T8164] RSP: 002b:00007f6793b4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 107.575225][ T8164] RAX: ffffffffffffffda RBX: 00007f6792e25fa0 RCX: 00007f6792b9e0d9 [ 107.575231][ T8164] RDX: 000000000000000f RSI: 0000200000000180 RDI: 0000000000000004 [ 107.575237][ T8164] RBP: 00007f6793b4b090 R08: 0000000000000000 R09: 0000000000000000 [ 107.575244][ T8164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.575250][ T8164] R13: 00007f6792e26038 R14: 00007f6792e25fa0 R15: 00007ffd1b2672d8 [ 107.575264][ T8164] [ 107.575364][ T8164] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN NOPTI [ 107.642979][ T29] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 107.644313][ T8164] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 107.661552][ T8164] CPU: 3 UID: 0 PID: 8164 Comm: syz.0.785 Not tainted syzkaller #0 PREEMPT(full) [ 107.664791][ T8164] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.667873][ T8164] RIP: 0010:path_put+0x22/0x70 [ 107.669428][ T8164] Code: 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 fb e8 63 50 78 ff 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 29 48 8b 7b 08 e8 4f 97 04 00 48 89 da 48 b8 00 00 [ 107.675518][ T8164] RSP: 0018:ffffc90003f0fa68 EFLAGS: 00010203 [ 107.677591][ T8164] RAX: dffffc0000000000 RBX: 000000000000003c RCX: 0000000000000000 [ 107.680200][ T8164] RDX: 0000000000000008 RSI: ffffffff8292147d RDI: 0000000000000044 [ 107.682789][ T8164] RBP: ffffc90003f0fbf8 R08: 0000000000000001 R09: 0000000000000000 [ 107.685437][ T8164] R10: ffffffff9b73bc40 R11: 0000000000000000 R12: ffff888038cc2548 [ 107.688145][ T8164] R13: ffff88805b1b28c0 R14: ffff88805779dc80 R15: fffffffffffffff4 [ 107.690706][ T8164] FS: 00007f6793b4b6c0(0000) GS:ffff8880d60ec000(0000) knlGS:0000000000000000 [ 107.693509][ T8164] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.695855][ T8164] CR2: 00007f6792a70000 CR3: 000000005ea46000 CR4: 0000000000352ef0 [ 107.698475][ T8164] Call Trace: [ 107.699642][ T8164] [ 107.700771][ T8164] __trace_uprobe_create+0x96d/0x22f0 [ 107.702593][ T8164] ? __pfx___trace_uprobe_create+0x10/0x10 [ 107.704497][ T8164] ? __kmalloc_noprof+0x343/0x820 [ 107.706192][ T8164] ? argv_split+0x173/0x420 [ 107.707698][ T8164] ? argv_split+0x359/0x420 [ 107.709240][ T8164] ? __pfx___trace_uprobe_create+0x10/0x10 [ 107.711187][ T8164] trace_probe_create+0xef/0x100 [ 107.712705][ T8164] ? __pfx_trace_probe_create+0x10/0x10 [ 107.714493][ T8164] dyn_event_create+0x46/0x70 [ 107.716271][ T8164] create_or_delete_trace_uprobe+0x5a/0xb0 [ 107.718186][ T8164] trace_parse_run_command+0x1ab/0x3b0 [ 107.719882][ T8164] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 107.721871][ T8164] vfs_write+0x2aa/0x1050 [ 107.723325][ T8164] ? __pfx_probes_write+0x10/0x10 [ 107.724856][ T8164] ? __pfx_vfs_write+0x10/0x10 [ 107.726342][ T8164] ? __fget_files+0x215/0x3d0 [ 107.727916][ T8164] ? __fget_files+0x21f/0x3d0 [ 107.729408][ T8164] ksys_write+0x12a/0x250 [ 107.730731][ T8164] ? __pfx_ksys_write+0x10/0x10 [ 107.732386][ T8164] do_syscall_64+0x115/0x870 [ 107.733808][ T8164] ? clear_bhb_loop+0x70/0xc0 [ 107.735330][ T8164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.737283][ T8164] RIP: 0033:0x7f6792b9e0d9 [ 107.738701][ T8164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.744750][ T8164] RSP: 002b:00007f6793b4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 107.747547][ T8164] RAX: ffffffffffffffda RBX: 00007f6792e25fa0 RCX: 00007f6792b9e0d9 [ 107.750126][ T8164] RDX: 000000000000000f RSI: 0000200000000180 RDI: 0000000000000004 [ 107.752754][ T8164] RBP: 00007f6793b4b090 R08: 0000000000000000 R09: 0000000000000000 [ 107.755357][ T8164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.758062][ T8164] R13: 00007f6792e26038 R14: 00007f6792e25fa0 R15: 00007ffd1b2672d8 [ 107.760715][ T8164] [ 107.761725][ T8164] Modules linked in: [ 107.764098][ T8164] ---[ end trace 0000000000000000 ]--- [ 107.766413][ T8164] RIP: 0010:path_put+0x22/0x70 [ 107.767836][ T8130] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.768062][ T8164] Code: 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 fb e8 63 50 78 ff 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 29 48 8b 7b 08 e8 4f 97 04 00 48 89 da 48 b8 00 00 [ 107.770952][ T8130] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.777080][ T8164] RSP: 0018:ffffc90003f0fa68 EFLAGS: 00010203 [ 107.780841][ T8164] RAX: dffffc0000000000 RBX: 000000000000003c RCX: 0000000000000000 [ 107.782237][ T8130] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.783383][ T8164] RDX: 0000000000000008 RSI: ffffffff8292147d RDI: 0000000000000044 [ 107.788482][ T8164] RBP: ffffc90003f0fbf8 R08: 0000000000000001 R09: 0000000000000000 [ 107.791049][ T8164] R10: ffffffff9b73bc40 R11: 0000000000000000 R12: ffff888038cc2548 [ 107.793517][ T8164] R13: ffff88805b1b28c0 R14: ffff88805779dc80 R15: fffffffffffffff4 [ 107.795138][ T8130] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.796071][ T8164] FS: 00007f6793b4b6c0(0000) GS:ffff8880d60ec000(0000) knlGS:0000000000000000 [ 107.798317][ T8130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.801170][ T8164] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.801181][ T8164] CR2: 00007f6792a70000 CR3: 000000005ea46000 CR4: 0000000000352ef0 [ 107.803527][ T8130] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.805676][ T8164] Kernel panic - not syncing: Fatal exception [ 107.808709][ T8164] Kernel Offset: disabled