last executing test programs: 1m38.969787754s ago: executing program 3 (id=407): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002900)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x7f, 0x9, 0x3, 0x1a, @local, @remote, 0x8000, 0x0, 0x4, 0xedd7}}) unshare(0x64000600) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000440)) r2 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r2, 0x29, 0xd0, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/kernel/osrelease\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000280)={0x2020}, 0x2020) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc, 0x20000000}, 0xc) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, &(0x7f0000000180)='h', 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xcbfbc000) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000002940)={r4, 0x0, 0x4, "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"}) r8 = memfd_create(&(0x7f0000000700)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nRp\x10\x84\x86t\x8a\xba\xfb\xd6I\x1c\x7f\v/!\xf4C3\xc0a%\xda\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xa1\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+n\xa4N\a\xa7\x7fNup\xf8\xebQs\x02.@\xea\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cCZdO\x87K\xd6\x10\x86\xd1\xf4\xa3i\xa8\xb2\xc8\x9cJ3\xd8)\xc3\xc3\xe25j\xab\xd3\xd9\x97rK\x1bY\xa7\xe9+/l\xa2\xf0\x9e\xff\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\xac[\xd2]\x80P\xaf\xe4,\xb9\xb5J\xec(\x92H9+\x11\xc3\xd1\x13\x01\x00\x00\x00\x00\x00\x00\x00K\x1d\x1e\xf0\xb4\xd5\xaaM\xe3WU\xa3d\b\x92\xb78\xf3\xe5\xc1\x01\x8f\x02\xc5 \x93\a\xf0\x10\v\x94\xd8\xb2\xd2v%\xb20T\xa3\n\x876\xd8(\x1c\x8e\x93\xdf\xfe\x1f?\x91\xa2&\n\xc5\x0f\bhe\x9a\xe8=\xb7\xe5\xa2\xddD\x86\xf3\xc2\xf6\x06\xe7\xa9\xf7\xbc\xfaf\x8e\'\x9b\xc7\x86\x02\xad\x99k^3e\x9d\xebs\xea\xb2\x04\xde\xc7\x16|*\x97\xac\xa8W\xcc\xba\x14m\"D\'\xfa\x86x\x15\xc5\xd1a\x0e\\cOz\xee\xc7?\xf9;\x05oR\xfc\xe3=<\xf8;Mw\x0f+\xf8fx\x94\xfd\x11#m-\xbbL\x82r\xfah\xa0\xc3\x1d\x19\xf5\x00'/439, 0x0) mmap(&(0x7f000009d000/0x3000)=nil, 0x3000, 0x3000000, 0x12, r8, 0xff64000) read$FUSE(r6, &(0x7f00000008c0)={0x2020}, 0x2020) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f00000022c0)) r9 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r4, 0x0, 0xf0) fchdir(r10) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x68800, 0x1c) lseek(r11, 0x2ba, 0x1) getdents64(r11, 0x0, 0x4f) 1m37.707875093s ago: executing program 3 (id=419): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') 1m37.628177936s ago: executing program 3 (id=420): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000200)=""/103) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000280)=0x6000, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000300), 0x400000000000003, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000000c0)={0xf0f043, 0x5}) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x240000d0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x40) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x6) syz_open_dev$dri(&(0x7f00000002c0), 0xfffc000000000000, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) (async) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000200)=""/103) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000280)=0x6000, 0x4) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000300), 0x400000000000003, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000000c0)={0xf0f043, 0x5}) (async) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x240000d0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x40) (async) socket(0x15, 0x5, 0x0) (async) getsockopt(r4, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x6) (async) syz_open_dev$dri(&(0x7f00000002c0), 0xfffc000000000000, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) 1m34.780465376s ago: executing program 3 (id=453): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") ioctl(r0, 0xc138fd04, &(0x7f0000000700)="040000000000000000000000380100003801000000f0ff000000000000000000000000000000000000000000000000006d7061746830") r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="79f108000000000000002af9055000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000200"/28], 0x48) 1m34.520724989s ago: executing program 3 (id=454): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x40, 0x37, 0xfc, 0x8000}, {0xb1, 0x3, 0xf7, 0xfffff034}, {0x6, 0x6, 0x2, 0x1057c}]}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', r2, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xa052) 1m34.08110247s ago: executing program 3 (id=457): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) (async) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10022, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 1m34.048025832s ago: executing program 32 (id=457): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) (async) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10022, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 13.409088229s ago: executing program 2 (id=1125): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4040010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd700002dcdf254f00000008000300", @ANYRES32=r6, @ANYBLOB="48007a801400020001ceb5581c2a57e668532c82020000000c000300000000ff7f000000240001"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 13.220077573s ago: executing program 2 (id=1134): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 10.160431856s ago: executing program 2 (id=1163): fanotify_init(0x202, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='devices.list\x00', 0x275a, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(0xffffffffffffffff, 0x8004af7a, &(0x7f0000000100)) r1 = io_uring_setup(0x807, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xa, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.110327389s ago: executing program 2 (id=1164): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x2c, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0xfff2}, {0xafabc05531515610, 0xfff3}, {0x8, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x7f}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x40002) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 9.950326895s ago: executing program 2 (id=1167): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x8080) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000004c0)={0x2c, &(0x7f00000007c0)=[{0x24, '\x00', @st={0x4, [{0x0, @svalue=0x8}, {0x0, @svalue=0x7}, {0x2, @svalue=0xed78}, {0x1, @uvalue=0x2000000cf}]}, 0x1}]}) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='disable=0', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 9.728141728s ago: executing program 2 (id=1168): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f00000000c0)=0xe) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000000)) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r3 = dup2(r1, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x32}]}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8208000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x500, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) 1.2691141s ago: executing program 1 (id=1262): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_trace', 0x1, 0x0) io_setup(0x4, &(0x7f00000001c0)=0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', '\x1f\t'}, 0x17, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000000)="0162fbeafeb0e0c25205", 0xa, 0x2}]) r2 = socket(0x840000000002, 0x3, 0x100) eventfd2(0xfff, 0x801) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000cc0)=0xc8, 0x4) io_setup(0xbd, &(0x7f0000000040)) 1.079400393s ago: executing program 1 (id=1265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42004}, 0x80000) 967.455207ms ago: executing program 1 (id=1268): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@delchain={0x1e0, 0x65, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1b4, 0x2, [@TCA_BPF_ACT={0x1b0, 0x1, [@m_skbmod={0x1ac, 0x18, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x1, 0x1, 0x0, 0xab6d}, 0xa}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="addd8ec7b991"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="c42d89d0476d"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6e2, 0x6, 0x3, 0x7fa80, 0x7}, 0xc}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}]}, {0x115, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 895.493583ms ago: executing program 4 (id=1269): openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 895.27889ms ago: executing program 1 (id=1270): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x3df02000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x714, 0x0, 0xfffffffffffffd25) 893.858071ms ago: executing program 4 (id=1271): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e00)={'vlan0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 788.466785ms ago: executing program 4 (id=1272): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) 788.289606ms ago: executing program 4 (id=1273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1a6b}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) 729.946195ms ago: executing program 4 (id=1274): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001800)={0x24, 0x43, 0x107, 0x70bd2a, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x8, 0x145, 0x0, 0x1, [@typed={0x4, 0x4}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x141}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x2004c000) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x10001, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x242, 0x0) write$dsp(r4, &(0x7f0000000100)='`', 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, 0x0) 570.072649ms ago: executing program 0 (id=1275): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x40, 0x4000) preadv2(r0, &(0x7f0000000a00)=[{&(0x7f0000000080)=""/174, 0xae}], 0x1, 0xffffffff, 0x2, 0x9) 569.876027ms ago: executing program 0 (id=1276): sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000000010a030012000000000000000200000509000100926afde5c8694305017e73797a30000000002d0006007116e315f1d2269ebf05ed42769483d2df8c5f8e71ca4f3f97228d25eb1d25"], 0x50}}, 0x24040000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0xf500, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 489.446898ms ago: executing program 0 (id=1277): syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) unshare(0x22020600) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fchmod(r0, 0x101) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) 484.775193ms ago: executing program 0 (id=1278): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006010000000044000500000000000000000000000000000000cdbe0000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e29, 0xf, @dev={0xfe, 0x80, '\x00', 0x18}, 0xf}, 0x1c) 387.159334ms ago: executing program 0 (id=1279): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r1, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}}, 0x0) 386.084916ms ago: executing program 4 (id=1280): futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x5, &(0x7f00000000c0)={0x10, "8105d6c721100f00000000400000a8267d87000200"}}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="404807000000010100000000fe7980"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000980)) 385.879593ms ago: executing program 0 (id=1281): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101200, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x2) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2, r2}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) 243.771µs ago: executing program 1 (id=1282): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=1283): sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x4048001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000003c0)="0f326635004000000f300f00d636808a0d0001ba4300b80b00eb66b88c5000000f23d02a3ff866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): c0 [ 102.004777][ T8752] ? __pfx_stack_trace_save+0x10/0x10 [ 102.004789][ T8752] ? stack_depot_save_flags+0x27/0x9f0 [ 102.004807][ T8752] ? __lock_acquire+0x5c0/0x1f40 [ 102.004845][ T8752] ? proc_coredump_connector+0x2d3/0x4f0 [ 102.004863][ T8752] ? __pfx_proc_coredump_connector+0x10/0x10 [ 102.004880][ T8752] ? rcu_is_watching+0x13/0xc0 [ 102.004899][ T8752] get_signal+0x1f2a/0x21e0 [ 102.004917][ T8752] ? __pfx_get_signal+0x10/0x10 [ 102.004934][ T8752] arch_do_signal_or_restart+0x91/0x7e0 [ 102.004952][ T8752] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 102.004978][ T8752] irqentry_exit+0x402/0xa10 [ 102.004994][ T8752] asm_exc_page_fault+0x26/0x30 [ 102.005005][ T8752] RIP: 0033:0x7f6e9e99e1a1 [ 102.005015][ T8752] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 102.005025][ T8752] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 102.005035][ T8752] RAX: 0000000000000000 RBX: 00007f6e9ec26180 RCX: 00007f6e9e99e199 [ 102.005042][ T8752] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 102.005049][ T8752] RBP: 00007f6e9ea35888 R08: 0000000000000000 R09: 0000000000000000 [ 102.005055][ T8752] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 102.005062][ T8752] R13: 00007f6e9ec26218 R14: 00007f6e9ec26180 R15: 00007ffd7777e118 [ 102.005077][ T8752] [ 102.013411][ T8752] memory: usage 307200kB, limit 307200kB, failcnt 25589 [ 102.013421][ T8752] memory+swap: usage 432172kB, limit 9007199254740988kB, failcnt 0 [ 102.013428][ T8752] kmem: usage 6960kB, limit 9007199254740988kB, failcnt 0 [ 102.013434][ T8752] Memory cgroup stats for /syz2: [ 102.013506][ T8752] cache 307290112 [ 102.013511][ T8752] rss 139264 [ 102.013514][ T8752] rss_huge 0 [ 102.013518][ T8752] shmem 307286016 [ 102.013522][ T8752] mapped_file 0 [ 102.013525][ T8752] dirty 0 [ 102.013529][ T8752] writeback 0 [ 102.013533][ T8752] workingset_refault_anon 73 [ 102.013537][ T8752] workingset_refault_file 2417 [ 102.013541][ T8752] swap 127971328 [ 102.013545][ T8752] swapcached 166989824 [ 102.013548][ T8752] pgpgin 269077 [ 102.013552][ T8752] pgpgout 194032 [ 102.013556][ T8752] pgfault 88492 [ 102.013559][ T8752] pgmajfault 80 [ 102.013563][ T8752] inactive_anon 76066816 [ 102.013567][ T8752] active_anon 231374848 [ 102.013575][ T8752] inactive_file 0 [ 102.013578][ T8752] active_file 4096 [ 102.013582][ T8752] unevictable 0 [ 102.013586][ T8752] hierarchical_memory_limit 314572800 [ 102.013590][ T8752] hierarchical_memsw_limit 9223372036854771712 [ 102.013595][ T8752] total_cache 307290112 [ 102.013599][ T8752] total_rss 139264 [ 102.013602][ T8752] total_rss_huge 0 [ 102.013606][ T8752] total_shmem 307286016 [ 102.013610][ T8752] total_mapped_file 0 [ 102.013613][ T8752] total_dirty 0 [ 102.013617][ T8752] total_writeback 0 [ 102.013621][ T8752] total_workingset_refault_anon 73 [ 102.013625][ T8752] total_workingset_refault_file 2417 [ 102.013629][ T8752] total_swap 127971328 [ 102.013633][ T8752] total_swapcached 166989824 [ 102.013637][ T8752] total_pgpgin 269077 [ 102.013641][ T8752] total_pgpgout 194032 [ 102.013644][ T8752] total_pgfault 88492 [ 102.013648][ T8752] total_pgmajfault 80 [ 102.013652][ T8752] total_inactive_anon 76066816 [ 102.013656][ T8752] total_active_anon 231374848 [ 102.013660][ T8752] total_inactive_file 0 [ 102.013664][ T8752] total_active_file 4096 [ 102.013668][ T8752] total_unevictable 0 [ 102.013672][ T8752] anon_cost 0 [ 102.013675][ T8752] file_cost 0 [ 102.013679][ T8752] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.659,pid=8743,uid=0 [ 102.014650][ T8752] Memory cgroup out of memory: Killed process 8743 (syz.2.659) total-vm:98816kB, anon-rss:1264kB, file-rss:52100kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 102.374085][ T8762] syz.2.659 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 102.374107][ T8762] CPU: 3 UID: 0 PID: 8762 Comm: syz.2.659 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.374122][ T8762] Tainted: [L]=SOFTLOCKUP [ 102.374126][ T8762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.374133][ T8762] Call Trace: [ 102.374137][ T8762] [ 102.374142][ T8762] dump_stack_lvl+0x100/0x190 [ 102.374162][ T8762] dump_header+0xfb/0x606 [ 102.374176][ T8762] oom_kill_process.cold+0xd/0x380 [ 102.374190][ T8762] out_of_memory+0x340/0x14f0 [ 102.374209][ T8762] ? __pfx_out_of_memory+0x10/0x10 [ 102.374230][ T8762] mem_cgroup_out_of_memory+0xc6/0x130 [ 102.374245][ T8762] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 102.374258][ T8762] ? find_held_lock+0x2b/0x80 [ 102.374278][ T8762] ? do_raw_spin_unlock+0x145/0x1e0 [ 102.374294][ T8762] ? _raw_spin_unlock+0x28/0x50 [ 102.374308][ T8762] try_charge_memcg+0x783/0xf60 [ 102.374325][ T8762] ? __pfx_try_charge_memcg+0x10/0x10 [ 102.374335][ T8762] ? find_held_lock+0x2b/0x80 [ 102.374351][ T8762] ? rcu_read_unlock+0x17/0x60 [ 102.374362][ T8762] ? rcu_read_unlock+0x17/0x60 [ 102.374373][ T8762] ? find_held_lock+0x2b/0x80 [ 102.374390][ T8762] ? rcu_read_unlock+0x17/0x60 [ 102.374404][ T8762] charge_memcg+0x1ae/0x210 [ 102.374416][ T8762] __mem_cgroup_charge+0x2b/0x1c0 [ 102.374429][ T8762] shmem_alloc_and_add_folio+0x451/0xd40 [ 102.374444][ T8762] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 102.374456][ T8762] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 102.374471][ T8762] shmem_get_folio_gfp+0x75b/0x1980 [ 102.374486][ T8762] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 102.374498][ T8762] ? vm_normal_page+0x1d1/0x380 [ 102.374512][ T8762] ? __pfx_vm_normal_page+0x10/0x10 [ 102.374533][ T8762] shmem_write_begin+0x1a4/0x420 [ 102.374546][ T8762] ? __pfx_shmem_write_begin+0x10/0x10 [ 102.374559][ T8762] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 102.374574][ T8762] generic_perform_write+0x292/0xa40 [ 102.374590][ T8762] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 102.374607][ T8762] ? __pfx_generic_perform_write+0x10/0x10 [ 102.374624][ T8762] ? file_update_time_flags+0x38c/0x520 [ 102.374637][ T8762] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 102.374650][ T8762] shmem_file_write_iter+0x10e/0x140 [ 102.374665][ T8762] __kernel_write_iter+0x2ac/0x930 [ 102.374680][ T8762] ? __pfx___kernel_write_iter+0x10/0x10 [ 102.374693][ T8762] ? cgroup1_freezing+0x12c/0x3b0 [ 102.374707][ T8762] ? cgroup1_freezing+0x136/0x3b0 [ 102.374719][ T8762] ? freezing_slow_path+0xb5/0x1a0 [ 102.374732][ T8762] dump_user_range+0x3f9/0xad0 [ 102.374748][ T8762] ? __pfx_dump_user_range+0x10/0x10 [ 102.374766][ T8762] ? __pfx_writenote+0x10/0x10 [ 102.374780][ T8762] ? elf_core_dump+0x1f25/0x3d20 [ 102.374797][ T8762] elf_core_dump+0x2d68/0x3d20 [ 102.374819][ T8762] ? __pfx_elf_core_dump+0x10/0x10 [ 102.374833][ T8762] ? kasan_save_stack+0x3f/0x50 [ 102.374846][ T8762] ? kasan_save_stack+0x30/0x50 [ 102.374860][ T8762] ? kasan_save_track+0x14/0x30 [ 102.374873][ T8762] ? __kasan_kmalloc+0xaa/0xb0 [ 102.374887][ T8762] ? vfs_coredump+0x21f6/0x54a0 [ 102.374899][ T8762] ? get_signal+0x1f2a/0x21e0 [ 102.374911][ T8762] ? arch_do_signal_or_restart+0x91/0x7e0 [ 102.374947][ T8762] ? 0xffffffffff600000 [ 102.374975][ T8762] ? lock_acquire+0x1d1/0x380 [ 102.374988][ T8762] ? get_signal+0x1f2a/0x21e0 [ 102.375004][ T8762] ? vfs_coredump+0x281a/0x54a0 [ 102.375017][ T8762] vfs_coredump+0x281a/0x54a0 [ 102.375035][ T8762] ? __pfx_vfs_coredump+0x10/0x10 [ 102.375048][ T8762] ? __lock_acquire+0x5c0/0x1f40 [ 102.375064][ T8762] ? __lock_acquire+0x5c0/0x1f40 [ 102.375078][ T8762] ? lock_acquire+0x1d1/0x380 [ 102.375090][ T8762] ? unwind_next_frame+0xbd/0x2090 [ 102.375108][ T8762] ? lock_acquire+0x1d1/0x380 [ 102.375124][ T8762] ? bpf_ksym_find+0x128/0x1c0 [ 102.375135][ T8762] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 102.375163][ T8762] ? arch_stack_walk+0xa6/0xf0 [ 102.375184][ T8762] ? __sigqueue_free+0xbe/0x2a0 [ 102.375199][ T8762] ? stack_trace_save+0x8e/0xc0 [ 102.375210][ T8762] ? __pfx_stack_trace_save+0x10/0x10 [ 102.375222][ T8762] ? stack_depot_save_flags+0x27/0x9f0 [ 102.375240][ T8762] ? __lock_acquire+0x5c0/0x1f40 [ 102.375277][ T8762] ? proc_coredump_connector+0x2d3/0x4f0 [ 102.375291][ T8762] ? __pfx_proc_coredump_connector+0x10/0x10 [ 102.375308][ T8762] ? rcu_is_watching+0x13/0xc0 [ 102.375326][ T8762] get_signal+0x1f2a/0x21e0 [ 102.375344][ T8762] ? __pfx_get_signal+0x10/0x10 [ 102.375361][ T8762] arch_do_signal_or_restart+0x91/0x7e0 [ 102.375378][ T8762] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 102.375404][ T8762] irqentry_exit+0x402/0xa10 [ 102.375420][ T8762] asm_exc_page_fault+0x26/0x30 [ 102.375431][ T8762] RIP: 0033:0x7f6e9e99e1a1 [ 102.375441][ T8762] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 102.375451][ T8762] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 102.375461][ T8762] RAX: 0000000000000000 RBX: 00007f6e9ec26180 RCX: 00007f6e9e99e199 [ 102.375467][ T8762] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 102.375474][ T8762] RBP: 00007f6e9ea35888 R08: 0000000000000000 R09: 0000000000000000 [ 102.375480][ T8762] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 102.375487][ T8762] R13: 00007f6e9ec26218 R14: 00007f6e9ec26180 R15: 00007ffd7777e118 [ 102.375501][ T8762] [ 102.375536][ T8762] memory: usage 307200kB, limit 307200kB, failcnt 27915 [ 102.375544][ T8762] memory+swap: usage 431808kB, limit 9007199254740988kB, failcnt 0 [ 102.375551][ T8762] kmem: usage 6512kB, limit 9007199254740988kB, failcnt 0 [ 102.375557][ T8762] Memory cgroup stats for /syz2: [ 102.375633][ T8762] cache 307736576 [ 102.375638][ T8762] rss 151552 [ 102.375641][ T8762] rss_huge 0 [ 102.375647][ T8762] shmem 307732480 [ 102.375650][ T8762] mapped_file 4096 [ 102.375654][ T8762] dirty 0 [ 102.375658][ T8762] writeback 0 [ 102.375661][ T8762] workingset_refault_anon 73 [ 102.375666][ T8762] workingset_refault_file 2417 [ 102.375670][ T8762] swap 127574016 [ 102.375673][ T8762] swapcached 186384384 [ 102.375677][ T8762] pgpgin 283304 [ 102.375681][ T8762] pgpgout 208147 [ 102.375685][ T8762] pgfault 89392 [ 102.375688][ T8762] pgmajfault 80 [ 102.375692][ T8762] inactive_anon 115445760 [ 102.375696][ T8762] active_anon 192393216 [ 102.375700][ T8762] inactive_file 0 [ 102.375703][ T8762] active_file 0 [ 102.375707][ T8762] unevictable 0 [ 102.375710][ T8762] hierarchical_memory_limit 314572800 [ 102.375715][ T8762] hierarchical_memsw_limit 9223372036854771712 [ 102.375719][ T8762] total_cache 307736576 [ 102.375723][ T8762] total_rss 151552 [ 102.375727][ T8762] total_rss_huge 0 [ 102.375731][ T8762] total_shmem 307732480 [ 102.375735][ T8762] total_mapped_file 4096 [ 102.375739][ T8762] total_dirty 0 [ 102.375743][ T8762] total_writeback 0 [ 102.375746][ T8762] total_workingset_refault_anon 73 [ 102.375751][ T8762] total_workingset_refault_file 2417 [ 102.375755][ T8762] total_swap 127574016 [ 102.375759][ T8762] total_swapcached 186384384 [ 102.375763][ T8762] total_pgpgin 283304 [ 102.375766][ T8762] total_pgpgout 208147 [ 102.375770][ T8762] total_pgfault 89392 [ 102.375774][ T8762] total_pgmajfault 80 [ 102.375778][ T8762] total_inactive_anon 115445760 [ 102.375782][ T8762] total_active_anon 192393216 [ 102.375786][ T8762] total_inactive_file 0 [ 102.375790][ T8762] total_active_file 0 [ 102.375794][ T8762] total_unevictable 0 [ 102.375798][ T8762] anon_cost 0 [ 102.375801][ T8762] file_cost 0 [ 102.375805][ T8762] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.659,pid=8747,uid=0 [ 102.375855][ T8762] Memory cgroup out of memory: Killed process 8747 (syz.2.659) total-vm:98816kB, anon-rss:1264kB, file-rss:55108kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 102.393113][ T8762] syz.2.659 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 102.393135][ T8762] CPU: 3 UID: 0 PID: 8762 Comm: syz.2.659 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.393151][ T8762] Tainted: [L]=SOFTLOCKUP [ 102.393155][ T8762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.393161][ T8762] Call Trace: [ 102.393166][ T8762] [ 102.393171][ T8762] dump_stack_lvl+0x100/0x190 [ 102.393191][ T8762] dump_header+0xfb/0x606 [ 102.393205][ T8762] oom_kill_process.cold+0xd/0x380 [ 102.393219][ T8762] out_of_memory+0x340/0x14f0 [ 102.393239][ T8762] ? __pfx_out_of_memory+0x10/0x10 [ 102.393259][ T8762] mem_cgroup_out_of_memory+0xc6/0x130 [ 102.393274][ T8762] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 102.393287][ T8762] ? find_held_lock+0x2b/0x80 [ 102.393307][ T8762] ? do_raw_spin_unlock+0x145/0x1e0 [ 102.393323][ T8762] ? _raw_spin_unlock+0x28/0x50 [ 102.393337][ T8762] try_charge_memcg+0x783/0xf60 [ 102.393352][ T8762] ? __pfx_try_charge_memcg+0x10/0x10 [ 102.393362][ T8762] ? find_held_lock+0x2b/0x80 [ 102.393378][ T8762] ? rcu_read_unlock+0x17/0x60 [ 102.393389][ T8762] ? rcu_read_unlock+0x17/0x60 [ 102.393400][ T8762] ? find_held_lock+0x2b/0x80 [ 102.393417][ T8762] ? rcu_read_unlock+0x17/0x60 [ 102.393431][ T8762] charge_memcg+0x1ae/0x210 [ 102.393443][ T8762] __mem_cgroup_charge+0x2b/0x1c0 [ 102.393457][ T8762] shmem_alloc_and_add_folio+0x451/0xd40 [ 102.393472][ T8762] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 102.393485][ T8762] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 102.393499][ T8762] shmem_get_folio_gfp+0x75b/0x1980 [ 102.393514][ T8762] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 102.393530][ T8762] ? vm_normal_page+0x1d1/0x380 [ 102.393544][ T8762] ? __pfx_vm_normal_page+0x10/0x10 [ 102.393564][ T8762] shmem_write_begin+0x1a4/0x420 [ 102.393577][ T8762] ? __pfx_shmem_write_begin+0x10/0x10 [ 102.393589][ T8762] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 102.393605][ T8762] generic_perform_write+0x292/0xa40 [ 102.393621][ T8762] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 102.393638][ T8762] ? __pfx_generic_perform_write+0x10/0x10 [ 102.393655][ T8762] ? file_update_time_flags+0x38c/0x520 [ 102.393669][ T8762] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 102.393682][ T8762] shmem_file_write_iter+0x10e/0x140 [ 102.393697][ T8762] __kernel_write_iter+0x2ac/0x930 [ 102.393712][ T8762] ? __pfx___kernel_write_iter+0x10/0x10 [ 102.393725][ T8762] ? cgroup1_freezing+0x12c/0x3b0 [ 102.393739][ T8762] ? cgroup1_freezing+0x136/0x3b0 [ 102.393751][ T8762] ? freezing_slow_path+0xb5/0x1a0 [ 102.393763][ T8762] dump_user_range+0x3f9/0xad0 [ 102.393780][ T8762] ? __pfx_dump_user_range+0x10/0x10 [ 102.393798][ T8762] ? __pfx_writenote+0x10/0x10 [ 102.393812][ T8762] ? elf_core_dump+0x1f25/0x3d20 [ 102.393829][ T8762] elf_core_dump+0x2d68/0x3d20 [ 102.393851][ T8762] ? __pfx_elf_core_dump+0x10/0x10 [ 102.393865][ T8762] ? kasan_save_stack+0x3f/0x50 [ 102.393878][ T8762] ? kasan_save_stack+0x30/0x50 [ 102.393891][ T8762] ? kasan_save_track+0x14/0x30 [ 102.393905][ T8762] ? __kasan_kmalloc+0xaa/0xb0 [ 102.393919][ T8762] ? vfs_coredump+0x21f6/0x54a0 [ 102.393931][ T8762] ? get_signal+0x1f2a/0x21e0 [ 102.393943][ T8762] ? arch_do_signal_or_restart+0x91/0x7e0 [ 102.393962][ T8762] ? 0xffffffffff600000 [ 102.393988][ T8762] ? lock_acquire+0x1d1/0x380 [ 102.394016][ T8762] ? get_signal+0x1f2a/0x21e0 [ 102.394033][ T8762] ? vfs_coredump+0x281a/0x54a0 [ 102.394046][ T8762] vfs_coredump+0x281a/0x54a0 [ 102.394064][ T8762] ? __pfx_vfs_coredump+0x10/0x10 [ 102.394077][ T8762] ? __lock_acquire+0x5c0/0x1f40 [ 102.394093][ T8762] ? __lock_acquire+0x5c0/0x1f40 [ 102.394108][ T8762] ? lock_acquire+0x1d1/0x380 [ 102.394120][ T8762] ? unwind_next_frame+0xbd/0x2090 [ 102.394138][ T8762] ? lock_acquire+0x1d1/0x380 [ 102.394154][ T8762] ? bpf_ksym_find+0x128/0x1c0 [ 102.394165][ T8762] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 102.394182][ T8762] ? arch_stack_walk+0xa6/0xf0 [ 102.394201][ T8762] ? __sigqueue_free+0xbe/0x2a0 [ 102.394216][ T8762] ? stack_trace_save+0x8e/0xc0 [ 102.394227][ T8762] ? __pfx_stack_trace_save+0x10/0x10 [ 102.394239][ T8762] ? stack_depot_save_flags+0x27/0x9f0 [ 102.394257][ T8762] ? __lock_acquire+0x5c0/0x1f40 [ 102.394295][ T8762] ? proc_coredump_connector+0x2d3/0x4f0 [ 102.394309][ T8762] ? __pfx_proc_coredump_connector+0x10/0x10 [ 102.394326][ T8762] ? rcu_is_watching+0x13/0xc0 [ 102.394344][ T8762] get_signal+0x1f2a/0x21e0 [ 102.394362][ T8762] ? __pfx_get_signal+0x10/0x10 [ 102.394379][ T8762] arch_do_signal_or_restart+0x91/0x7e0 [ 102.394396][ T8762] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 102.394422][ T8762] irqentry_exit+0x402/0xa10 [ 102.394439][ T8762] asm_exc_page_fault+0x26/0x30 [ 102.394450][ T8762] RIP: 0033:0x7f6e9e99e1a1 [ 102.394459][ T8762] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 102.394469][ T8762] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 102.394479][ T8762] RAX: 0000000000000000 RBX: 00007f6e9ec26180 RCX: 00007f6e9e99e199 [ 102.394485][ T8762] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 102.394492][ T8762] RBP: 00007f6e9ea35888 R08: 0000000000000000 R09: 0000000000000000 [ 102.394499][ T8762] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 102.394505][ T8762] R13: 00007f6e9ec26218 R14: 00007f6e9ec26180 R15: 00007ffd7777e118 [ 102.394520][ T8762] [ 102.394556][ T8762] memory: usage 307200kB, limit 307200kB, failcnt 28024 [ 102.394564][ T8762] memory+swap: usage 432120kB, limit 9007199254740988kB, failcnt 0 [ 102.394571][ T8762] kmem: usage 6500kB, limit 9007199254740988kB, failcnt 0 [ 102.394577][ T8762] Memory cgroup stats for /syz2: [ 102.394648][ T8762] cache 307748864 [ 102.394652][ T8762] rss 151552 [ 102.394656][ T8762] rss_huge 0 [ 102.394659][ T8762] shmem 307744768 [ 102.394663][ T8762] mapped_file 4096 [ 102.394667][ T8762] dirty 0 [ 102.394670][ T8762] writeback 0 [ 102.394674][ T8762] workingset_refault_anon 73 [ 102.394678][ T8762] workingset_refault_file 2417 [ 102.394682][ T8762] swap 127918080 [ 102.394686][ T8762] swapcached 187314176 [ 102.394690][ T8762] pgpgin 283788 [ 102.394693][ T8762] pgpgout 208628 [ 102.394697][ T8762] pgfault 89422 [ 102.394701][ T8762] pgmajfault 80 [ 102.394704][ T8762] inactive_anon 114503680 [ 102.394709][ T8762] active_anon 193343488 [ 102.394713][ T8762] inactive_file 0 [ 102.394716][ T8762] active_file 0 [ 102.394720][ T8762] unevictable 0 [ 102.394724][ T8762] hierarchical_memory_limit 314572800 [ 102.394728][ T8762] hierarchical_memsw_limit 9223372036854771712 [ 102.394733][ T8762] total_cache 307748864 [ 102.394737][ T8762] total_rss 151552 [ 102.394740][ T8762] total_rss_huge 0 [ 102.394744][ T8762] total_shmem 307744768 [ 102.394748][ T8762] total_mapped_file 4096 [ 102.394752][ T8762] total_dirty 0 [ 102.394756][ T8762] total_writeback 0 [ 102.394759][ T8762] total_workingset_refault_anon 73 [ 102.394764][ T8762] total_workingset_refault_file 2417 [ 102.394768][ T8762] total_swap 127918080 [ 102.394772][ T8762] total_swapcached 187314176 [ 102.394776][ T8762] total_pgpgin 283788 [ 102.394780][ T8762] total_pgpgout 208628 [ 102.394784][ T8762] total_pgfault 89422 [ 102.394788][ T8762] total_pgmajfault 80 [ 102.394791][ T8762] total_inactive_anon 114503680 [ 102.394795][ T8762] total_active_anon 193343488 [ 102.394800][ T8762] total_inactive_file 0 [ 102.394804][ T8762] total_active_file 0 [ 102.394807][ T8762] total_unevictable 0 [ 102.394811][ T8762] anon_cost 0 [ 102.394815][ T8762] file_cost 0 [ 102.394819][ T8762] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.659,pid=8762,uid=0 [ 102.394869][ T8762] Memory cgroup out of memory: Killed process 8762 (syz.2.659) total-vm:99080kB, anon-rss:1280kB, file-rss:55364kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 102.427608][ T8766] syz.2.659 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 102.427633][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz.2.659 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.427648][ T8766] Tainted: [L]=SOFTLOCKUP [ 102.427652][ T8766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.427658][ T8766] Call Trace: [ 102.427662][ T8766] [ 102.427667][ T8766] dump_stack_lvl+0x100/0x190 [ 102.427687][ T8766] dump_header+0xfb/0x606 [ 102.427700][ T8766] oom_kill_process.cold+0xd/0x380 [ 102.427714][ T8766] out_of_memory+0x340/0x14f0 [ 102.427734][ T8766] ? __pfx_out_of_memory+0x10/0x10 [ 102.427754][ T8766] mem_cgroup_out_of_memory+0xc6/0x130 [ 102.427769][ T8766] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 102.427783][ T8766] ? find_held_lock+0x2b/0x80 [ 102.427802][ T8766] ? do_raw_spin_unlock+0x145/0x1e0 [ 102.427818][ T8766] ? _raw_spin_unlock+0x28/0x50 [ 102.427832][ T8766] try_charge_memcg+0x783/0xf60 [ 102.427847][ T8766] ? __pfx_try_charge_memcg+0x10/0x10 [ 102.427857][ T8766] ? find_held_lock+0x2b/0x80 [ 102.427874][ T8766] ? rcu_read_unlock+0x17/0x60 [ 102.427885][ T8766] ? rcu_read_unlock+0x17/0x60 [ 102.427896][ T8766] ? find_held_lock+0x2b/0x80 [ 102.427912][ T8766] ? rcu_read_unlock+0x17/0x60 [ 102.427926][ T8766] charge_memcg+0x1ae/0x210 [ 102.427938][ T8766] __mem_cgroup_charge+0x2b/0x1c0 [ 102.427951][ T8766] shmem_alloc_and_add_folio+0x451/0xd40 [ 102.427967][ T8766] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 102.427980][ T8766] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 102.427996][ T8766] shmem_get_folio_gfp+0x75b/0x1980 [ 102.428011][ T8766] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 102.428022][ T8766] ? vm_normal_page+0x1d1/0x380 [ 102.428037][ T8766] ? __pfx_vm_normal_page+0x10/0x10 [ 102.428054][ T8766] shmem_write_begin+0x1a4/0x420 [ 102.428066][ T8766] ? __pfx_shmem_write_begin+0x10/0x10 [ 102.428079][ T8766] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 102.428094][ T8766] generic_perform_write+0x292/0xa40 [ 102.428109][ T8766] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 102.428127][ T8766] ? __pfx_generic_perform_write+0x10/0x10 [ 102.428144][ T8766] ? file_update_time_flags+0x38c/0x520 [ 102.428157][ T8766] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 102.428170][ T8766] shmem_file_write_iter+0x10e/0x140 [ 102.428185][ T8766] __kernel_write_iter+0x2ac/0x930 [ 102.428200][ T8766] ? __pfx___kernel_write_iter+0x10/0x10 [ 102.428212][ T8766] ? cgroup1_freezing+0x12c/0x3b0 [ 102.428227][ T8766] ? cgroup1_freezing+0x136/0x3b0 [ 102.428239][ T8766] ? freezing_slow_path+0xb5/0x1a0 [ 102.428251][ T8766] dump_user_range+0x3f9/0xad0 [ 102.428268][ T8766] ? __pfx_dump_user_range+0x10/0x10 [ 102.428287][ T8766] ? __pfx_writenote+0x10/0x10 [ 102.428312][ T8766] ? elf_core_dump+0x1f25/0x3d20 [ 102.428332][ T8766] elf_core_dump+0x2d68/0x3d20 [ 102.428354][ T8766] ? __pfx_elf_core_dump+0x10/0x10 [ 102.428368][ T8766] ? kasan_save_stack+0x3f/0x50 [ 102.428381][ T8766] ? kasan_save_stack+0x30/0x50 [ 102.428394][ T8766] ? kasan_save_track+0x14/0x30 [ 102.428408][ T8766] ? __kasan_kmalloc+0xaa/0xb0 [ 102.428421][ T8766] ? vfs_coredump+0x21f6/0x54a0 [ 102.428433][ T8766] ? get_signal+0x1f2a/0x21e0 [ 102.428444][ T8766] ? arch_do_signal_or_restart+0x91/0x7e0 [ 102.428464][ T8766] ? 0xffffffffff600000 [ 102.428494][ T8766] ? lock_acquire+0x1d1/0x380 [ 102.428507][ T8766] ? get_signal+0x1f2a/0x21e0 [ 102.428523][ T8766] ? vfs_coredump+0x281a/0x54a0 [ 102.428536][ T8766] vfs_coredump+0x281a/0x54a0 [ 102.428554][ T8766] ? __pfx_vfs_coredump+0x10/0x10 [ 102.428567][ T8766] ? __lock_acquire+0x5c0/0x1f40 [ 102.428583][ T8766] ? __lock_acquire+0x5c0/0x1f40 [ 102.428598][ T8766] ? lock_acquire+0x1d1/0x380 [ 102.428609][ T8766] ? unwind_next_frame+0xbd/0x2090 [ 102.428628][ T8766] ? lock_acquire+0x1d1/0x380 [ 102.428644][ T8766] ? bpf_ksym_find+0x128/0x1c0 [ 102.428655][ T8766] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 102.428671][ T8766] ? arch_stack_walk+0xa6/0xf0 [ 102.428703][ T8766] ? __sigqueue_free+0xbe/0x2a0 [ 102.428718][ T8766] ? stack_trace_save+0x8e/0xc0 [ 102.428730][ T8766] ? __pfx_stack_trace_save+0x10/0x10 [ 102.428741][ T8766] ? stack_depot_save_flags+0x27/0x9f0 [ 102.428759][ T8766] ? __lock_acquire+0x5c0/0x1f40 [ 102.428796][ T8766] ? proc_coredump_connector+0x2d3/0x4f0 [ 102.428810][ T8766] ? __pfx_proc_coredump_connector+0x10/0x10 [ 102.428827][ T8766] ? rcu_is_watching+0x13/0xc0 [ 102.428846][ T8766] get_signal+0x1f2a/0x21e0 [ 102.428864][ T8766] ? __pfx_get_signal+0x10/0x10 [ 102.428880][ T8766] arch_do_signal_or_restart+0x91/0x7e0 [ 102.428898][ T8766] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 102.428924][ T8766] irqentry_exit+0x402/0xa10 [ 102.428940][ T8766] asm_exc_page_fault+0x26/0x30 [ 102.428951][ T8766] RIP: 0033:0x7f6e9e99e1a1 [ 102.428961][ T8766] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 102.428971][ T8766] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 102.428981][ T8766] RAX: 0000000000000000 RBX: 00007f6e9ec26180 RCX: 00007f6e9e99e199 [ 102.428988][ T8766] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 102.428994][ T8766] RBP: 00007f6e9ea35888 R08: 0000000000000000 R09: 0000000000000000 [ 102.429000][ T8766] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 102.429006][ T8766] R13: 00007f6e9ec26218 R14: 00007f6e9ec26180 R15: 00007ffd7777e118 [ 102.429021][ T8766] [ 102.432972][ T8766] memory: usage 306200kB, limit 307200kB, failcnt 28255 [ 102.432984][ T8766] memory+swap: usage 430724kB, limit 9007199254740988kB, failcnt 0 [ 102.432990][ T8766] kmem: usage 6500kB, limit 9007199254740988kB, failcnt 0 [ 102.432996][ T8766] Memory cgroup stats for /syz2: [ 102.433071][ T8766] cache 306565120 [ 102.433076][ T8766] rss 159744 [ 102.433079][ T8766] rss_huge 0 [ 102.433083][ T8766] shmem 306565120 [ 102.433087][ T8766] mapped_file 0 [ 102.433090][ T8766] dirty 0 [ 102.433094][ T8766] writeback 0 [ 102.433097][ T8766] workingset_refault_anon 73 [ 102.433101][ T8766] workingset_refault_file 2417 [ 102.433105][ T8766] swap 127504384 [ 102.433109][ T8766] swapcached 187957248 [ 102.433113][ T8766] pgpgin 284376 [ 102.433116][ T8766] pgpgout 209503 [ 102.433120][ T8766] pgfault 89460 [ 102.433123][ T8766] pgmajfault 81 [ 102.433127][ T8766] inactive_anon 97165312 [ 102.433131][ T8766] active_anon 209170432 [ 102.433135][ T8766] inactive_file 0 [ 102.433138][ T8766] active_file 0 [ 102.433142][ T8766] unevictable 0 [ 102.433145][ T8766] hierarchical_memory_limit 314572800 [ 102.433150][ T8766] hierarchical_memsw_limit 9223372036854771712 [ 102.433154][ T8766] total_cache 306565120 [ 102.433158][ T8766] total_rss 159744 [ 102.433162][ T8766] total_rss_huge 0 [ 102.433165][ T8766] total_shmem 306565120 [ 102.433169][ T8766] total_mapped_file 0 [ 102.433173][ T8766] total_dirty 0 [ 102.433176][ T8766] total_writeback 0 [ 102.433180][ T8766] total_workingset_refault_anon 73 [ 102.433184][ T8766] total_workingset_refault_file 2417 [ 102.433189][ T8766] total_swap 127504384 [ 102.433192][ T8766] total_swapcached 187957248 [ 102.433196][ T8766] total_pgpgin 284376 [ 102.433200][ T8766] total_pgpgout 209503 [ 102.433204][ T8766] total_pgfault 89460 [ 102.433207][ T8766] total_pgmajfault 81 [ 102.433211][ T8766] total_inactive_anon 97165312 [ 102.433215][ T8766] total_active_anon 209170432 [ 102.433219][ T8766] total_inactive_file 0 [ 102.433223][ T8766] total_active_file 0 [ 102.433227][ T8766] total_unevictable 0 [ 102.433230][ T8766] anon_cost 0 [ 102.433234][ T8766] file_cost 0 [ 102.433238][ T8766] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.659,pid=8758,uid=0 [ 102.433288][ T8766] Memory cgroup out of memory: Killed process 8758 (syz.2.659) total-vm:99080kB, anon-rss:1280kB, file-rss:53060kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 103.934475][ T8871] bridge0: port 3(ipvlan0) entered blocking state [ 103.934633][ T8871] bridge0: port 3(ipvlan0) entered disabled state [ 103.934730][ T8871] ipvlan0: entered allmulticast mode [ 103.934744][ T8871] bridge0: entered allmulticast mode [ 103.938657][ T8871] ipvlan0: left allmulticast mode [ 103.938674][ T8871] bridge0: left allmulticast mode [ 104.039679][ T8891] netlink: 72 bytes leftover after parsing attributes in process `syz.4.688'. [ 104.042655][ T43] audit: type=1400 audit(1791505523.749:768): avc: denied { setopt } for pid=8890 comm="syz.4.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.096689][ T8898] xt_cgroup: invalid path, errno=-2 [ 104.130909][ T43] audit: type=1400 audit(1791505523.839:769): avc: denied { execute } for pid=8899 comm="syz.1.692" dev="hugetlbfs" ino=23497 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 104.131391][ T43] audit: type=1400 audit(1791505523.839:770): avc: denied { execute_no_trans } for pid=8899 comm="syz.1.692" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=23497 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 105.029926][ T43] audit: type=1400 audit(1791505524.739:771): avc: denied { audit_read } for pid=8924 comm="syz.1.699" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.046275][ T8926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.699'. [ 105.046354][ T43] audit: type=1400 audit(1791505524.749:772): avc: denied { ioctl } for pid=8924 comm="syz.1.699" path="socket:[22515]" dev="sockfs" ino=22515 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.251993][ T8956] [U] [ 105.252023][ T8956] [U] [ 105.252045][ T8956] [U] [ 105.252066][ T8956] [U] [ 105.252090][ T8956] [U] [ 105.252112][ T8956] [U] [ 105.252134][ T8956] [U] [ 105.252156][ T8956] [U] [ 105.252179][ T8956] [U] [ 105.252201][ T8956] [U] [ 105.252223][ T8956] [U] [ 105.252244][ T8956] [U] [ 105.252278][ T8956] [U] [ 105.252299][ T8956] [U] [ 105.252321][ T8956] [U] [ 105.252342][ T8956] [U] [ 105.252365][ T8956] [U] [ 105.252387][ T8956] [U] [ 105.252426][ T8956] [U] [ 105.252449][ T8956] [U] [ 105.253980][ T8956] [U] [ 105.253999][ T8956] [U] [ 105.254014][ T8956] [U] [ 105.254029][ T8956] [U] [ 105.254046][ T8956] [U] [ 105.254061][ T8956] [U] [ 105.254076][ T8956] [U] [ 105.254091][ T8956] [U] [ 105.254112][ T8956] [U] [ 105.254142][ T8956] [U] [ 105.254159][ T8956] [U] [ 105.254174][ T8956] [U] [ 105.254214][ T8956] [U] [ 105.254230][ T8956] [U] [ 105.254246][ T8956] [U] [ 105.254261][ T8956] [U] [ 105.254283][ T8956] [U] [ 105.254298][ T8956] [U] [ 105.254314][ T8956] [U] [ 105.254329][ T8956] [U] [ 105.254345][ T8956] [U] [ 105.254360][ T8956] [U] [ 105.254375][ T8956] [U] [ 105.254390][ T8956] [U] [ 105.254411][ T8956] [U] [ 105.254426][ T8956] [U] [ 105.254441][ T8956] [U] [ 105.254457][ T8956] [U] [ 105.254473][ T8956] [U] [ 105.254488][ T8956] [U] [ 105.254503][ T8956] [U] [ 105.254518][ T8956] [U] [ 105.254539][ T8956] [U] [ 105.254554][ T8956] [U] [ 105.254569][ T8956] [U] [ 105.254587][ T8956] [U] [ 105.254604][ T8956] [U] [ 105.254619][ T8956] [U] [ 105.254634][ T8956] [U] [ 105.254649][ T8956] [U] [ 105.254670][ T8956] [U] [ 105.254696][ T8956] [U] [ 105.254718][ T8956] [U] [ 105.254739][ T8956] [U] [ 105.254763][ T8956] [U] [ 105.254785][ T8956] [U] [ 105.254807][ T8956] [U] [ 105.254828][ T8956] [U] [ 105.254859][ T8956] [U] [ 105.254881][ T8956] [U] [ 105.254902][ T8956] [U] [ 105.254942][ T8956] [U] [ 105.254968][ T8956] [U] [ 105.254990][ T8956] [U] [ 105.255011][ T8956] [U] [ 105.255033][ T8956] [U] [ 105.255064][ T8956] [U] [ 105.255086][ T8956] [U] [ 105.255108][ T8956] [U] [ 105.255129][ T8956] [U] [ 105.255153][ T8956] [U] [ 105.255174][ T8956] [U] [ 105.255196][ T8956] [U] [ 105.255218][ T8956] [U] [ 105.255248][ T8956] [U] [ 105.255270][ T8956] [U] [ 105.255292][ T8956] [U] [ 105.255313][ T8956] [U] [ 105.255337][ T8956] [U] [ 105.255358][ T8956] [U] [ 105.255379][ T8956] [U] [ 105.255401][ T8956] [U] [ 105.255430][ T8956] [U] [ 105.255451][ T8956] [U] [ 105.255473][ T8956] [U] [ 105.255495][ T8956] [U] [ 105.255518][ T8956] [U] [ 105.255540][ T8956] [U] [ 105.255562][ T8956] [U] [ 105.255583][ T8956] [U] [ 105.255614][ T8956] [U] [ 105.255635][ T8956] [U] [ 105.255657][ T8956] [U] [ 105.255678][ T8956] [U] [ 105.255707][ T8956] [U] [ 105.255728][ T8956] [U] [ 105.255750][ T8956] [U] [ 105.255771][ T8956] [U] [ 105.255801][ T8956] [U] [ 105.255823][ T8956] [U] [ 105.255845][ T8956] [U] [ 105.255866][ T8956] [U] [ 105.255890][ T8956] [U] [ 105.255911][ T8956] [U] [ 105.255933][ T8956] [U] [ 105.255955][ T8956] [U] [ 105.255984][ T8956] [U] [ 105.256006][ T8956] [U] [ 105.256027][ T8956] [U] [ 105.256049][ T8956] [U] [ 105.256073][ T8956] [U] [ 105.256094][ T8956] [U] [ 105.256116][ T8956] [U] [ 105.256153][ T8956] [U] [ 105.256218][ T8956] [U] [ 105.256241][ T8956] [U] [ 105.256263][ T8956] [U] [ 105.276748][ T8954] [U] [ 105.296851][ T8958] syzkaller1: entered promiscuous mode [ 105.296863][ T8958] syzkaller1: entered allmulticast mode [ 105.572342][ T8970] /dev/nullb0: Can't open blockdev [ 107.627582][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 109.684420][ T8767] syz.2.659 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 109.684443][ T8767] CPU: 3 UID: 0 PID: 8767 Comm: syz.2.659 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.684458][ T8767] Tainted: [L]=SOFTLOCKUP [ 109.684462][ T8767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.684469][ T8767] Call Trace: [ 109.684473][ T8767] [ 109.684477][ T8767] dump_stack_lvl+0x100/0x190 [ 109.684508][ T8767] dump_header+0xfb/0x606 [ 109.684521][ T8767] oom_kill_process.cold+0xd/0x380 [ 109.684535][ T8767] out_of_memory+0x340/0x14f0 [ 109.684558][ T8767] ? __pfx_out_of_memory+0x10/0x10 [ 109.684578][ T8767] mem_cgroup_out_of_memory+0xc6/0x130 [ 109.684594][ T8767] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 109.684607][ T8767] ? find_held_lock+0x2b/0x80 [ 109.684629][ T8767] ? do_raw_spin_unlock+0x145/0x1e0 [ 109.684645][ T8767] ? _raw_spin_unlock+0x28/0x50 [ 109.684663][ T8767] try_charge_memcg+0x783/0xf60 [ 109.684681][ T8767] ? __pfx_try_charge_memcg+0x10/0x10 [ 109.684692][ T8767] ? find_held_lock+0x2b/0x80 [ 109.684727][ T8767] ? rcu_read_unlock+0x17/0x60 [ 109.684738][ T8767] ? rcu_read_unlock+0x17/0x60 [ 109.684749][ T8767] ? find_held_lock+0x2b/0x80 [ 109.684765][ T8767] ? rcu_read_unlock+0x17/0x60 [ 109.684780][ T8767] charge_memcg+0x1ae/0x210 [ 109.684792][ T8767] __mem_cgroup_charge+0x2b/0x1c0 [ 109.684805][ T8767] shmem_alloc_and_add_folio+0x451/0xd40 [ 109.684820][ T8767] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 109.684833][ T8767] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 109.684847][ T8767] shmem_get_folio_gfp+0x75b/0x1980 [ 109.684862][ T8767] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 109.684874][ T8767] ? vm_normal_page+0x1d1/0x380 [ 109.684888][ T8767] ? __pfx_vm_normal_page+0x10/0x10 [ 109.684905][ T8767] shmem_write_begin+0x1a4/0x420 [ 109.684918][ T8767] ? __pfx_shmem_write_begin+0x10/0x10 [ 109.684931][ T8767] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 109.684946][ T8767] generic_perform_write+0x292/0xa40 [ 109.684962][ T8767] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 109.684979][ T8767] ? __pfx_generic_perform_write+0x10/0x10 [ 109.684997][ T8767] ? file_update_time_flags+0x38c/0x520 [ 109.685010][ T8767] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 109.685023][ T8767] shmem_file_write_iter+0x10e/0x140 [ 109.685037][ T8767] __kernel_write_iter+0x2ac/0x930 [ 109.685053][ T8767] ? __pfx___kernel_write_iter+0x10/0x10 [ 109.685065][ T8767] ? cgroup1_freezing+0x12c/0x3b0 [ 109.685080][ T8767] ? cgroup1_freezing+0x136/0x3b0 [ 109.685091][ T8767] ? freezing_slow_path+0xb5/0x1a0 [ 109.685104][ T8767] dump_user_range+0x3f9/0xad0 [ 109.685120][ T8767] ? __pfx_dump_user_range+0x10/0x10 [ 109.685139][ T8767] ? __pfx_writenote+0x10/0x10 [ 109.685152][ T8767] ? elf_core_dump+0x1f25/0x3d20 [ 109.685169][ T8767] elf_core_dump+0x2d68/0x3d20 [ 109.685191][ T8767] ? __pfx_elf_core_dump+0x10/0x10 [ 109.685205][ T8767] ? kasan_save_stack+0x3f/0x50 [ 109.685219][ T8767] ? kasan_save_stack+0x30/0x50 [ 109.685233][ T8767] ? kasan_save_track+0x14/0x30 [ 109.685246][ T8767] ? __kasan_kmalloc+0xaa/0xb0 [ 109.685260][ T8767] ? vfs_coredump+0x21f6/0x54a0 [ 109.685272][ T8767] ? get_signal+0x1f2a/0x21e0 [ 109.685283][ T8767] ? arch_do_signal_or_restart+0x91/0x7e0 [ 109.685303][ T8767] ? 0xffffffffff600000 [ 109.685329][ T8767] ? lock_acquire+0x1d1/0x380 [ 109.685342][ T8767] ? get_signal+0x1f2a/0x21e0 [ 109.685358][ T8767] ? vfs_coredump+0x281a/0x54a0 [ 109.685370][ T8767] vfs_coredump+0x281a/0x54a0 [ 109.685389][ T8767] ? __pfx_vfs_coredump+0x10/0x10 [ 109.685402][ T8767] ? __lock_acquire+0x5c0/0x1f40 [ 109.685418][ T8767] ? __lock_acquire+0x5c0/0x1f40 [ 109.685432][ T8767] ? lock_acquire+0x1d1/0x380 [ 109.685444][ T8767] ? unwind_next_frame+0xbd/0x2090 [ 109.685463][ T8767] ? lock_acquire+0x1d1/0x380 [ 109.685479][ T8767] ? bpf_ksym_find+0x128/0x1c0 [ 109.685490][ T8767] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 109.685506][ T8767] ? arch_stack_walk+0xa6/0xf0 [ 109.685527][ T8767] ? __sigqueue_free+0xbe/0x2a0 [ 109.685542][ T8767] ? stack_trace_save+0x8e/0xc0 [ 109.685553][ T8767] ? __pfx_stack_trace_save+0x10/0x10 [ 109.685565][ T8767] ? stack_depot_save_flags+0x27/0x9f0 [ 109.685582][ T8767] ? __lock_acquire+0x5c0/0x1f40 [ 109.685620][ T8767] ? proc_coredump_connector+0x2d3/0x4f0 [ 109.685638][ T8767] ? __pfx_proc_coredump_connector+0x10/0x10 [ 109.685655][ T8767] ? rcu_is_watching+0x13/0xc0 [ 109.685673][ T8767] get_signal+0x1f2a/0x21e0 [ 109.685691][ T8767] ? __pfx_get_signal+0x10/0x10 [ 109.685710][ T8767] arch_do_signal_or_restart+0x91/0x7e0 [ 109.685728][ T8767] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 109.685753][ T8767] irqentry_exit+0x402/0xa10 [ 109.685770][ T8767] asm_exc_page_fault+0x26/0x30 [ 109.685781][ T8767] RIP: 0033:0x7f6e9e99e1a1 [ 109.685791][ T8767] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 109.685801][ T8767] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 109.685810][ T8767] RAX: 0000000000000000 RBX: 00007f6e9ec26180 RCX: 00007f6e9e99e199 [ 109.685817][ T8767] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 109.685824][ T8767] RBP: 00007f6e9ea35888 R08: 0000000000000000 R09: 0000000000000000 [ 109.685830][ T8767] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 109.685836][ T8767] R13: 00007f6e9ec26218 R14: 00007f6e9ec26180 R15: 00007ffd7777e118 [ 109.685851][ T8767] [ 109.685879][ T8767] memory: usage 307200kB, limit 307200kB, failcnt 33360 [ 109.685887][ T8767] memory+swap: usage 432164kB, limit 9007199254740988kB, failcnt 0 [ 109.685894][ T8767] kmem: usage 5604kB, limit 9007199254740988kB, failcnt 0 [ 109.685900][ T8767] Memory cgroup stats for /syz2: [ 109.685976][ T8767] cache 308695040 [ 109.685981][ T8767] rss 131072 [ 109.685985][ T8767] rss_huge 0 [ 109.685988][ T8767] shmem 308690944 [ 109.685992][ T8767] mapped_file 0 [ 109.685996][ T8767] dirty 0 [ 109.685999][ T8767] writeback 0 [ 109.686003][ T8767] workingset_refault_anon 103 [ 109.686007][ T8767] workingset_refault_file 4034 [ 109.686011][ T8767] swap 127963136 [ 109.686015][ T8767] swapcached 214544384 [ 109.686019][ T8767] pgpgin 322588 [ 109.686023][ T8767] pgpgout 247204 [ 109.686026][ T8767] pgfault 91661 [ 109.686030][ T8767] pgmajfault 120 [ 109.686034][ T8767] inactive_anon 244617216 [ 109.686038][ T8767] active_anon 64212992 [ 109.686042][ T8767] inactive_file 0 [ 109.686045][ T8767] active_file 0 [ 109.686049][ T8767] unevictable 0 [ 109.686053][ T8767] hierarchical_memory_limit 314572800 [ 109.686057][ T8767] hierarchical_memsw_limit 9223372036854771712 [ 109.686062][ T8767] total_cache 308695040 [ 109.686065][ T8767] total_rss 131072 [ 109.686069][ T8767] total_rss_huge 0 [ 109.686073][ T8767] total_shmem 308690944 [ 109.686077][ T8767] total_mapped_file 0 [ 109.686081][ T8767] total_dirty 0 [ 109.686084][ T8767] total_writeback 0 [ 109.686088][ T8767] total_workingset_refault_anon 103 [ 109.686092][ T8767] total_workingset_refault_file 4034 [ 109.686097][ T8767] total_swap 127963136 [ 109.686101][ T8767] total_swapcached 214544384 [ 109.686104][ T8767] total_pgpgin 322588 [ 109.686108][ T8767] total_pgpgout 247204 [ 109.686112][ T8767] total_pgfault 91661 [ 109.686116][ T8767] total_pgmajfault 120 [ 109.686120][ T8767] total_inactive_anon 244617216 [ 109.686124][ T8767] total_active_anon 64212992 [ 109.686128][ T8767] total_inactive_file 0 [ 109.686132][ T8767] total_active_file 0 [ 109.686135][ T8767] total_unevictable 0 [ 109.686139][ T8767] anon_cost 0 [ 109.686143][ T8767] file_cost 0 [ 109.686147][ T8767] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.659,pid=8753,uid=0 [ 109.686212][ T8767] Memory cgroup out of memory: Killed process 8753 (syz.2.659) total-vm:99080kB, anon-rss:1300kB, file-rss:57416kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 109.716454][ T8752] syz.2.659 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 109.716486][ T8752] CPU: 1 UID: 0 PID: 8752 Comm: syz.2.659 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.716510][ T8752] Tainted: [L]=SOFTLOCKUP [ 109.716516][ T8752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.716525][ T8752] Call Trace: [ 109.716533][ T8752] [ 109.716540][ T8752] dump_stack_lvl+0x100/0x190 [ 109.716571][ T8752] dump_header+0xfb/0x606 [ 109.716592][ T8752] oom_kill_process.cold+0xd/0x380 [ 109.716613][ T8752] out_of_memory+0x340/0x14f0 [ 109.716644][ T8752] ? __pfx_out_of_memory+0x10/0x10 [ 109.716675][ T8752] mem_cgroup_out_of_memory+0xc6/0x130 [ 109.716699][ T8752] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 109.716723][ T8752] ? find_held_lock+0x2b/0x80 [ 109.716753][ T8752] ? do_raw_spin_unlock+0x145/0x1e0 [ 109.716777][ T8752] ? _raw_spin_unlock+0x28/0x50 [ 109.716799][ T8752] try_charge_memcg+0x783/0xf60 [ 109.716824][ T8752] ? __pfx_try_charge_memcg+0x10/0x10 [ 109.716840][ T8752] ? find_held_lock+0x2b/0x80 [ 109.716865][ T8752] ? rcu_read_unlock+0x17/0x60 [ 109.716881][ T8752] ? rcu_read_unlock+0x17/0x60 [ 109.716899][ T8752] ? find_held_lock+0x2b/0x80 [ 109.716923][ T8752] ? rcu_read_unlock+0x17/0x60 [ 109.716947][ T8752] charge_memcg+0x1ae/0x210 [ 109.716967][ T8752] __mem_cgroup_charge+0x2b/0x1c0 [ 109.716995][ T8752] shmem_alloc_and_add_folio+0x451/0xd40 [ 109.717019][ T8752] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 109.717039][ T8752] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 109.717059][ T8752] ? __lock_acquire+0x5c0/0x1f40 [ 109.717081][ T8752] shmem_get_folio_gfp+0x75b/0x1980 [ 109.717105][ T8752] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 109.717120][ T8752] ? inode_set_ctime_current+0x9c/0x850 [ 109.717166][ T8752] ? find_held_lock+0x2b/0x80 [ 109.717194][ T8752] ? timestamp_truncate+0x22e/0x2f0 [ 109.717224][ T8752] shmem_write_begin+0x1a4/0x420 [ 109.717246][ T8752] ? __pfx_shmem_write_begin+0x10/0x10 [ 109.717263][ T8752] ? inode_set_ctime_current+0x283/0x850 [ 109.717290][ T8752] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 109.717311][ T8752] ? inode_maybe_inc_iversion+0x169/0x220 [ 109.717338][ T8752] generic_perform_write+0x292/0xa40 [ 109.717360][ T8752] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 109.717388][ T8752] ? __pfx_generic_perform_write+0x10/0x10 [ 109.717413][ T8752] ? mnt_put_write_access_file+0x4e/0x100 [ 109.717438][ T8752] ? file_update_time_flags+0x38c/0x520 [ 109.717458][ T8752] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 109.717479][ T8752] shmem_file_write_iter+0x10e/0x140 [ 109.717501][ T8752] __kernel_write_iter+0x2ac/0x930 [ 109.717524][ T8752] ? __pfx___kernel_write_iter+0x10/0x10 [ 109.717544][ T8752] ? cgroup1_freezing+0x12c/0x3b0 [ 109.717567][ T8752] ? cgroup1_freezing+0x136/0x3b0 [ 109.717585][ T8752] ? freezing_slow_path+0xb5/0x1a0 [ 109.717606][ T8752] dump_user_range+0x3f9/0xad0 [ 109.717633][ T8752] ? __pfx_dump_user_range+0x10/0x10 [ 109.717662][ T8752] ? __pfx_writenote+0x10/0x10 [ 109.717683][ T8752] ? elf_core_dump+0x1f25/0x3d20 [ 109.717709][ T8752] elf_core_dump+0x2d68/0x3d20 [ 109.717745][ T8752] ? __pfx_elf_core_dump+0x10/0x10 [ 109.717767][ T8752] ? kasan_save_stack+0x3f/0x50 [ 109.717786][ T8752] ? kasan_save_stack+0x30/0x50 [ 109.717808][ T8752] ? kasan_save_track+0x14/0x30 [ 109.717829][ T8752] ? __kasan_kmalloc+0xaa/0xb0 [ 109.717849][ T8752] ? vfs_coredump+0x21f6/0x54a0 [ 109.717868][ T8752] ? get_signal+0x1f2a/0x21e0 [ 109.717886][ T8752] ? arch_do_signal_or_restart+0x91/0x7e0 [ 109.717917][ T8752] ? 0xffffffffff600000 [ 109.717961][ T8752] ? lock_acquire+0x1d1/0x380 [ 109.717986][ T8752] ? get_signal+0x1f2a/0x21e0 [ 109.718011][ T8752] ? vfs_coredump+0x281a/0x54a0 [ 109.718031][ T8752] vfs_coredump+0x281a/0x54a0 [ 109.718060][ T8752] ? __pfx_vfs_coredump+0x10/0x10 [ 109.718081][ T8752] ? __lock_acquire+0x5c0/0x1f40 [ 109.718106][ T8752] ? __lock_acquire+0x5c0/0x1f40 [ 109.718129][ T8752] ? lock_acquire+0x1d1/0x380 [ 109.718149][ T8752] ? unwind_next_frame+0xbd/0x2090 [ 109.718177][ T8752] ? lock_acquire+0x1d1/0x380 [ 109.718202][ T8752] ? bpf_ksym_find+0x128/0x1c0 [ 109.718221][ T8752] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 109.718247][ T8752] ? arch_stack_walk+0xa6/0xf0 [ 109.718278][ T8752] ? __sigqueue_free+0xbe/0x2a0 [ 109.718300][ T8752] ? stack_trace_save+0x8e/0xc0 [ 109.718319][ T8752] ? __pfx_stack_trace_save+0x10/0x10 [ 109.718336][ T8752] ? stack_depot_save_flags+0x27/0x9f0 [ 109.718363][ T8752] ? __lock_acquire+0x5c0/0x1f40 [ 109.718425][ T8752] ? proc_coredump_connector+0x2d3/0x4f0 [ 109.718448][ T8752] ? __pfx_proc_coredump_connector+0x10/0x10 [ 109.718474][ T8752] ? rcu_is_watching+0x13/0xc0 [ 109.718504][ T8752] get_signal+0x1f2a/0x21e0 [ 109.718534][ T8752] ? __pfx_get_signal+0x10/0x10 [ 109.718561][ T8752] arch_do_signal_or_restart+0x91/0x7e0 [ 109.718588][ T8752] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 109.718629][ T8752] irqentry_exit+0x402/0xa10 [ 109.718655][ T8752] asm_exc_page_fault+0x26/0x30 [ 109.718670][ T8752] RIP: 0033:0x7f6e9e99e1a1 [ 109.718687][ T8752] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 109.718702][ T8752] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 109.718717][ T8752] RAX: 0000000000000000 RBX: 00007f6e9ec26180 RCX: 00007f6e9e99e199 [ 109.718727][ T8752] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 109.718739][ T8752] RBP: 00007f6e9ea35888 R08: 0000000000000000 R09: 0000000000000000 [ 109.718748][ T8752] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 109.718759][ T8752] R13: 00007f6e9ec26218 R14: 00007f6e9ec26180 R15: 00007ffd7777e118 [ 109.718782][ T8752] [ 109.724113][ T8752] memory: usage 307200kB, limit 307200kB, failcnt 33617 [ 109.724127][ T8752] memory+swap: usage 432164kB, limit 9007199254740988kB, failcnt 0 [ 109.724139][ T8752] kmem: usage 5596kB, limit 9007199254740988kB, failcnt 0 [ 109.724148][ T8752] Memory cgroup stats for /syz2: [ 109.724242][ T8752] cache 308695040 [ 109.724250][ T8752] rss 131072 [ 109.724255][ T8752] rss_huge 0 [ 109.724263][ T8752] shmem 308690944 [ 109.724268][ T8752] mapped_file 0 [ 109.724273][ T8752] dirty 0 [ 109.724278][ T8752] writeback 0 [ 109.724284][ T8752] workingset_refault_anon 103 [ 109.724291][ T8752] workingset_refault_file 4034 [ 109.724298][ T8752] swap 127963136 [ 109.724303][ T8752] swapcached 214544384 [ 109.724309][ T8752] pgpgin 322588 [ 109.724314][ T8752] pgpgout 247204 [ 109.724321][ T8752] pgfault 91661 [ 109.724327][ T8752] pgmajfault 120 [ 109.724332][ T8752] inactive_anon 244617216 [ 109.724338][ T8752] active_anon 64212992 [ 109.724343][ T8752] inactive_file 0 [ 109.724351][ T8752] active_file 0 [ 109.724356][ T8752] unevictable 0 [ 109.724362][ T8752] hierarchical_memory_limit 314572800 [ 109.724368][ T8752] hierarchical_memsw_limit 9223372036854771712 [ 109.724376][ T8752] total_cache 308695040 [ 109.724382][ T8752] total_rss 131072 [ 109.724387][ T8752] total_rss_huge 0 [ 109.724392][ T8752] total_shmem 308690944 [ 109.724398][ T8752] total_mapped_file 0 [ 109.724404][ T8752] total_dirty 0 [ 109.724411][ T8752] total_writeback 0 [ 109.724417][ T8752] total_workingset_refault_anon 103 [ 109.724423][ T8752] total_workingset_refault_file 4034 [ 109.724429][ T8752] total_swap 127963136 [ 109.724434][ T8752] total_swapcached 214544384 [ 109.724442][ T8752] total_pgpgin 322588 [ 109.724448][ T8752] total_pgpgout 247204 [ 109.724453][ T8752] total_pgfault 91661 [ 109.724458][ T8752] total_pgmajfault 120 [ 109.724464][ T8752] total_inactive_anon 244617216 [ 109.724470][ T8752] total_active_anon 64212992 [ 109.724478][ T8752] total_inactive_file 0 [ 109.724484][ T8752] total_active_file 0 [ 109.724490][ T8752] total_unevictable 0 [ 109.724495][ T8752] anon_cost 0 [ 109.724500][ T8752] file_cost 0 [ 109.724508][ T8752] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.659,pid=8789,uid=0 [ 109.724613][ T8752] Memory cgroup out of memory: Killed process 8789 (syz.2.659) total-vm:99080kB, anon-rss:1300kB, file-rss:57412kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 109.742069][ T8767] syz.2.659 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 109.742092][ T8767] CPU: 2 UID: 0 PID: 8767 Comm: syz.2.659 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.742107][ T8767] Tainted: [L]=SOFTLOCKUP [ 109.742111][ T8767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.742118][ T8767] Call Trace: [ 109.742122][ T8767] [ 109.742128][ T8767] dump_stack_lvl+0x100/0x190 [ 109.742149][ T8767] dump_header+0xfb/0x606 [ 109.742163][ T8767] oom_kill_process.cold+0xd/0x380 [ 109.742177][ T8767] out_of_memory+0x340/0x14f0 [ 109.742197][ T8767] ? __pfx_out_of_memory+0x10/0x10 [ 109.742217][ T8767] mem_cgroup_out_of_memory+0xc6/0x130 [ 109.742232][ T8767] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 109.742246][ T8767] ? find_held_lock+0x2b/0x80 [ 109.742266][ T8767] ? do_raw_spin_unlock+0x145/0x1e0 [ 109.742282][ T8767] ? _raw_spin_unlock+0x28/0x50 [ 109.742296][ T8767] try_charge_memcg+0x783/0xf60 [ 109.742311][ T8767] ? __pfx_try_charge_memcg+0x10/0x10 [ 109.742321][ T8767] ? find_held_lock+0x2b/0x80 [ 109.742337][ T8767] ? rcu_read_unlock+0x17/0x60 [ 109.742348][ T8767] ? rcu_read_unlock+0x17/0x60 [ 109.742359][ T8767] ? find_held_lock+0x2b/0x80 [ 109.742376][ T8767] ? rcu_read_unlock+0x17/0x60 [ 109.742390][ T8767] charge_memcg+0x1ae/0x210 [ 109.742402][ T8767] __mem_cgroup_charge+0x2b/0x1c0 [ 109.742415][ T8767] shmem_alloc_and_add_folio+0x451/0xd40 [ 109.742432][ T8767] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 109.742444][ T8767] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 109.742459][ T8767] shmem_get_folio_gfp+0x75b/0x1980 [ 109.742474][ T8767] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 109.742486][ T8767] ? vm_normal_page+0x1d1/0x380 [ 109.742500][ T8767] ? __pfx_vm_normal_page+0x10/0x10 [ 109.742517][ T8767] shmem_write_begin+0x1a4/0x420 [ 109.742530][ T8767] ? __pfx_shmem_write_begin+0x10/0x10 [ 109.742543][ T8767] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 109.742558][ T8767] generic_perform_write+0x292/0xa40 [ 109.742574][ T8767] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 109.742591][ T8767] ? __pfx_generic_perform_write+0x10/0x10 [ 109.742608][ T8767] ? file_update_time_flags+0x38c/0x520 [ 109.742622][ T8767] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 109.742635][ T8767] shmem_file_write_iter+0x10e/0x140 [ 109.742650][ T8767] __kernel_write_iter+0x2ac/0x930 [ 109.742664][ T8767] ? __pfx___kernel_write_iter+0x10/0x10 [ 109.742677][ T8767] ? cgroup1_freezing+0x12c/0x3b0 [ 109.742692][ T8767] ? cgroup1_freezing+0x136/0x3b0 [ 109.742706][ T8767] ? freezing_slow_path+0xb5/0x1a0 [ 109.742723][ T8767] dump_user_range+0x3f9/0xad0 [ 109.742748][ T8767] ? __pfx_dump_user_range+0x10/0x10 [ 109.742775][ T8767] ? __pfx_writenote+0x10/0x10 [ 109.742794][ T8767] ? elf_core_dump+0x1f25/0x3d20 [ 109.742820][ T8767] elf_core_dump+0x2d68/0x3d20 [ 109.742853][ T8767] ? __pfx_elf_core_dump+0x10/0x10 [ 109.742877][ T8767] ? kasan_save_stack+0x3f/0x50 [ 109.742925][ T8767] ? kasan_save_stack+0x30/0x50 [ 109.742945][ T8767] ? kasan_save_track+0x14/0x30 [ 109.742971][ T8767] ? __kasan_kmalloc+0xaa/0xb0 [ 109.742991][ T8767] ? vfs_coredump+0x21f6/0x54a0 [ 109.743007][ T8767] ? get_signal+0x1f2a/0x21e0 [ 109.743023][ T8767] ? arch_do_signal_or_restart+0x91/0x7e0 [ 109.743050][ T8767] ? 0xffffffffff600000 [ 109.743095][ T8767] ? lock_acquire+0x1d1/0x380 [ 109.743114][ T8767] ? get_signal+0x1f2a/0x21e0 [ 109.743143][ T8767] ? vfs_coredump+0x281a/0x54a0 [ 109.743163][ T8767] vfs_coredump+0x281a/0x54a0 [ 109.743195][ T8767] ? __pfx_vfs_coredump+0x10/0x10 [ 109.743216][ T8767] ? __lock_acquire+0x5c0/0x1f40 [ 109.743243][ T8767] ? __lock_acquire+0x5c0/0x1f40 [ 109.743267][ T8767] ? lock_acquire+0x1d1/0x380 [ 109.743286][ T8767] ? unwind_next_frame+0xbd/0x2090 [ 109.743317][ T8767] ? lock_acquire+0x1d1/0x380 [ 109.743345][ T8767] ? bpf_ksym_find+0x128/0x1c0 [ 109.743363][ T8767] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 109.743391][ T8767] ? arch_stack_walk+0xa6/0xf0 [ 109.743424][ T8767] ? __sigqueue_free+0xbe/0x2a0 [ 109.743449][ T8767] ? stack_trace_save+0x8e/0xc0 [ 109.743466][ T8767] ? __pfx_stack_trace_save+0x10/0x10 [ 109.743486][ T8767] ? stack_depot_save_flags+0x27/0x9f0 [ 109.743515][ T8767] ? __lock_acquire+0x5c0/0x1f40 [ 109.743583][ T8767] ? proc_coredump_connector+0x2d3/0x4f0 [ 109.743606][ T8767] ? __pfx_proc_coredump_connector+0x10/0x10 [ 109.743634][ T8767] ? rcu_is_watching+0x13/0xc0 [ 109.743665][ T8767] get_signal+0x1f2a/0x21e0 [ 109.743695][ T8767] ? __pfx_get_signal+0x10/0x10 [ 109.743721][ T8767] arch_do_signal_or_restart+0x91/0x7e0 [ 109.743748][ T8767] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 109.743777][ T8767] irqentry_exit+0x402/0xa10 [ 109.743794][ T8767] asm_exc_page_fault+0x26/0x30 [ 109.743805][ T8767] RIP: 0033:0x7f6e9e99e1a1 [ 109.743815][ T8767] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 109.743826][ T8767] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 109.743836][ T8767] RAX: 0000000000000000 RBX: 00007f6e9ec26180 RCX: 00007f6e9e99e199 [ 109.743843][ T8767] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 109.743850][ T8767] RBP: 00007f6e9ea35888 R08: 0000000000000000 R09: 0000000000000000 [ 109.743856][ T8767] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 109.743862][ T8767] R13: 00007f6e9ec26218 R14: 00007f6e9ec26180 R15: 00007ffd7777e118 [ 109.743877][ T8767] [ 109.743907][ T8767] memory: usage 307200kB, limit 307200kB, failcnt 33718 [ 109.743915][ T8767] memory+swap: usage 432164kB, limit 9007199254740988kB, failcnt 0 [ 109.743922][ T8767] kmem: usage 5596kB, limit 9007199254740988kB, failcnt 0 [ 109.743928][ T8767] Memory cgroup stats for /syz2: [ 109.743999][ T8767] cache 308695040 [ 109.744005][ T8767] rss 131072 [ 109.744010][ T8767] rss_huge 0 [ 109.744016][ T8767] shmem 308690944 [ 109.744021][ T8767] mapped_file 0 [ 109.744026][ T8767] dirty 0 [ 109.744031][ T8767] writeback 0 [ 109.744037][ T8767] workingset_refault_anon 103 [ 109.744044][ T8767] workingset_refault_file 4034 [ 109.744049][ T8767] swap 127963136 [ 109.744055][ T8767] swapcached 214544384 [ 109.744061][ T8767] pgpgin 322588 [ 109.744067][ T8767] pgpgout 247204 [ 109.744072][ T8767] pgfault 91661 [ 109.744078][ T8767] pgmajfault 120 [ 109.744084][ T8767] inactive_anon 244617216 [ 109.744090][ T8767] active_anon 64212992 [ 109.744095][ T8767] inactive_file 0 [ 109.744101][ T8767] active_file 0 [ 109.744107][ T8767] unevictable 0 [ 109.744112][ T8767] hierarchical_memory_limit 314572800 [ 109.744119][ T8767] hierarchical_memsw_limit 9223372036854771712 [ 109.744125][ T8767] total_cache 308695040 [ 109.744132][ T8767] total_rss 131072 [ 109.744137][ T8767] total_rss_huge 0 [ 109.744143][ T8767] total_shmem 308690944 [ 109.744147][ T8767] total_mapped_file 0 [ 109.744150][ T8767] total_dirty 0 [ 109.744154][ T8767] total_writeback 0 [ 109.744158][ T8767] total_workingset_refault_anon 103 [ 109.744162][ T8767] total_workingset_refault_file 4034 [ 109.744167][ T8767] total_swap 127963136 [ 109.744171][ T8767] total_swapcached 214544384 [ 109.744175][ T8767] total_pgpgin 322588 [ 109.744179][ T8767] total_pgpgout 247204 [ 109.747616][ T8767] total_pgfault 91661 [ 109.747625][ T8767] total_pgmajfault 120 [ 109.747631][ T8767] total_inactive_anon 244617216 [ 109.747637][ T8767] total_active_anon 64212992 [ 109.747643][ T8767] total_inactive_file 0 [ 109.747649][ T8767] total_active_file 0 [ 109.747655][ T8767] total_unevictable 0 [ 109.747661][ T8767] anon_cost 0 [ 109.747666][ T8767] file_cost 0 [ 109.747673][ T8767] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.659,pid=8767,uid=0 [ 109.747765][ T8767] Memory cgroup out of memory: Killed process 8767 (syz.2.659) total-vm:99080kB, anon-rss:1300kB, file-rss:57412kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 112.645769][ T1168] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 120.158700][ T8983] netlink: 'syz.4.715': attribute type 267 has an invalid length. [ 120.164936][ T43] audit: type=1400 audit(1791505539.869:773): avc: denied { create } for pid=8979 comm="syz.1.713" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.165670][ T43] audit: type=1400 audit(1791505539.869:774): avc: denied { write } for pid=8979 comm="syz.1.713" name="file0" dev="tmpfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.165887][ T43] audit: type=1400 audit(1791505539.869:775): avc: denied { open } for pid=8979 comm="syz.1.713" path="/215/file0" dev="tmpfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.167648][ T43] audit: type=1400 audit(1791505539.869:776): avc: denied { ioctl } for pid=8979 comm="syz.1.713" path="/215/file0" dev="tmpfs" ino=1238 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.229529][ T43] audit: type=1400 audit(1791505539.939:777): avc: denied { write } for pid=8979 comm="syz.1.713" name="core" dev="configfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.233447][ T43] audit: type=1400 audit(1791505539.939:778): avc: denied { write } for pid=8979 comm="syz.1.713" name="rd_mcp_0" dev="configfs" ino=25223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.241889][ T8981] For dev_enable ops, only valid value is "1" [ 120.242418][ T43] audit: type=1400 audit(1791505539.949:779): avc: denied { write } for pid=8979 comm="syz.1.713" name="functions" dev="configfs" ino=17740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.243565][ T43] audit: type=1400 audit(1791505539.949:780): avc: denied { write } for pid=8979 comm="syz.1.713" name="configs" dev="configfs" ino=17741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.266737][ T43] audit: type=1400 audit(1791505539.969:781): avc: denied { unlink } for pid=5726 comm="syz-executor" name="file0" dev="tmpfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.388620][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.719'. [ 120.457278][ T2327] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 120.607677][ T2327] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 120.608508][ T2327] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 120.608530][ T2327] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 120.608544][ T2327] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.608556][ T2327] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 120.608568][ T2327] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 120.609367][ T2327] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 120.609392][ T2327] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 120.609404][ T2327] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.609416][ T2327] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 120.609428][ T2327] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 120.610194][ T2327] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 120.610213][ T2327] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 120.610225][ T2327] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.610237][ T2327] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 120.610249][ T2327] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 120.612668][ T2327] usb 7-1: string descriptor 0 read error: -22 [ 120.612742][ T2327] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.617365][ T2327] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 120.831306][ T8982] unsupported nlmsg_type 40 [ 121.700389][ T9014] netlink: 180 bytes leftover after parsing attributes in process `syz.4.721'. [ 122.070124][ T9030] CIFS: Attempting to mount //127.0.0.1/share [ 122.325823][ T9039] netlink: 236 bytes leftover after parsing attributes in process `syz.4.726'. [ 122.433878][ T9043] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.496908][ T9043] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.554895][ T9043] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.622350][ T9043] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.717406][ T5778] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.717432][ T5778] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.717449][ T5778] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.727362][ T5778] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.796085][ T43] audit: type=1400 audit(2000000000.849:782): avc: denied { setopt } for pid=9048 comm="syz.4.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 122.900827][ T9030] CIFS: VFS: Error connecting to socket. Aborting operation. [ 122.900852][ T9030] CIFS: VFS: cifs_mount failed w/return code = -4 [ 122.902038][ T9035] CIFS: Attempting to mount //127.0.0.1/share [ 122.902407][ T9035] CIFS: VFS: Error connecting to socket. Aborting operation. [ 122.902425][ T9035] CIFS: VFS: cifs_mount failed w/return code = -4 [ 122.913102][ T35] usb 7-1: USB disconnect, device number 5 [ 122.956241][ T5739] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 123.470869][ T9090] blktrace: Concurrent blktraces are not allowed on loop8 [ 123.536528][ T9096] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 123.536557][ T9096] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 123.544695][ T9096] vhci_hcd vhci_hcd.0: Device attached [ 123.546250][ T9099] vhci_hcd: cannot find a urb of seqnum 4294967287 max seqnum 0 [ 123.552288][ T5778] vhci_hcd vhci_hcd.0: stop threads [ 123.552299][ T5778] vhci_hcd vhci_hcd.0: release socket [ 123.552316][ T5778] vhci_hcd vhci_hcd.0: disconnect device [ 123.559404][ T9095] ALSA: mixer_oss: invalid OSS volume 'yE0+c%f<5쒻t' [ 123.633998][ T9116] jffs2: notice: (9116) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 123.639051][ T9116] netlink: 'syz.4.743': attribute type 1 has an invalid length. [ 123.647892][ T9116] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.667458][ T9116] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.667622][ T9116] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 123.668049][ T9116] bond2: (slave vti0): Error -95 calling set_mac_address [ 123.684632][ T9121] syz.1.742: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 123.685240][ T9121] BIDI support in bsg has been removed. [ 123.703550][ T9123] overlayfs: failed to clone upperpath [ 123.786792][ T9131] blktrace: Concurrent blktraces are not allowed on loop8 [ 123.834236][ T9136] veth0_macvtap: left promiscuous mode [ 124.096501][ T5442] veth0_macvtap: entered promiscuous mode [ 124.110825][ T9165] netlink: 72 bytes leftover after parsing attributes in process `syz.0.750'. [ 124.116255][ T9168] netlink: 72 bytes leftover after parsing attributes in process `syz.0.750'. [ 124.160766][ T9174] batman_adv: batadv0: Adding interface: dummy0 [ 124.160781][ T9174] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.160807][ T9174] batman_adv: batadv0: Interface activated: dummy0 [ 124.176023][ T9178] FAULT_INJECTION: forcing a failure. [ 124.176023][ T9178] name failslab, interval 1, probability 0, space 0, times 0 [ 124.176057][ T9178] CPU: 2 UID: 0 PID: 9178 Comm: syz.0.752 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.176085][ T9178] Tainted: [L]=SOFTLOCKUP [ 124.176093][ T9178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.176105][ T9178] Call Trace: [ 124.176112][ T9178] [ 124.176121][ T9178] dump_stack_lvl+0x100/0x190 [ 124.176153][ T9178] should_fail_ex.cold+0x5/0xa [ 124.176182][ T9178] should_failslab+0xc2/0x120 [ 124.176208][ T9178] __kmalloc_noprof+0xfc/0x840 [ 124.176234][ T9178] ? __memcg_list_lru_alloc+0x418/0x680 [ 124.176256][ T9178] __memcg_list_lru_alloc+0x418/0x680 [ 124.176276][ T9178] ? xa_load+0x149/0x2c0 [ 124.176309][ T9178] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 124.176334][ T9178] ? rcu_read_unlock+0x17/0x60 [ 124.176357][ T9178] memcg_list_lru_alloc+0xd3/0x100 [ 124.176381][ T9178] __memcg_slab_post_alloc_hook+0x280/0x10c0 [ 124.176413][ T9178] ? kasan_save_track+0x14/0x30 [ 124.176441][ T9178] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 124.176468][ T9178] ? __d_alloc+0x35/0xa50 [ 124.176491][ T9178] __d_alloc+0x35/0xa50 [ 124.176520][ T9178] d_make_root+0x3e/0x90 [ 124.176539][ T9178] kernfs_get_tree+0x659/0xbb0 [ 124.176571][ T9178] ? __pfx_kernfs_get_tree+0x10/0x10 [ 124.176600][ T9178] ? bpf_lsm_capable+0x9/0x10 [ 124.176619][ T9178] ? security_capable+0x80/0x260 [ 124.176640][ T9178] vfs_get_tree+0x92/0x320 [ 124.176661][ T9178] path_mount+0x7d0/0x24c0 [ 124.176686][ T9178] ? __pfx_path_mount+0x10/0x10 [ 124.176704][ T9178] ? lockdep_hardirqs_on+0x7d/0x110 [ 124.176729][ T9178] ? putname+0xb1/0x110 [ 124.176755][ T9178] ? kmem_cache_free+0x127/0x6c0 [ 124.176787][ T9178] ? __x64_sys_mount+0x293/0x310 [ 124.176806][ T9178] __x64_sys_mount+0x293/0x310 [ 124.176826][ T9178] ? __pfx___x64_sys_mount+0x10/0x10 [ 124.176854][ T9178] do_syscall_64+0x123/0x790 [ 124.176882][ T9178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.176901][ T9178] RIP: 0033:0x7f7e14f9e199 [ 124.176918][ T9178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.176935][ T9178] RSP: 002b:00007f7e15f4c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.176956][ T9178] RAX: ffffffffffffffda RBX: 00007f7e15225fa0 RCX: 00007f7e14f9e199 [ 124.176969][ T9178] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 124.176980][ T9178] RBP: 00007f7e15035888 R08: 0000000000000000 R09: 0000000000000000 [ 124.176992][ T9178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.177002][ T9178] R13: 00007f7e15226038 R14: 00007f7e15225fa0 R15: 00007fff663fb4e8 [ 124.177029][ T9178] [ 124.205056][ T9174] batadv0: mtu less than device minimum [ 124.206200][ T9174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 124.206697][ T9174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 124.207851][ T9174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 124.208330][ T9174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 124.208811][ T9174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 124.209322][ T9174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 124.209857][ T9174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 124.210336][ T9174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 124.210847][ T9174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 124.290084][ T9197] input: syz0 as /devices/virtual/input/input16 [ 132.588272][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.588320][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.578162][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 134.578175][ T43] audit: type=1400 audit(2000000012.639:800): avc: denied { write } for pid=9211 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.630910][ T43] audit: type=1400 audit(2000000012.689:801): avc: denied { write } for pid=9214 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.386437][ T43] audit: type=1400 audit(2000000013.439:802): avc: denied { write } for pid=9217 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.445860][ T43] audit: type=1400 audit(2000000013.499:803): avc: denied { write } for pid=9220 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.723464][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 137.723486][ T9228] netlink: 48 bytes leftover after parsing attributes in process `syz.0.757'. [ 137.726421][ T9228] geneve2: entered promiscuous mode [ 137.726432][ T9228] geneve2: entered allmulticast mode [ 137.734289][ T9231] No source specified [ 137.756878][ T9225] netlink: 36 bytes leftover after parsing attributes in process `syz.1.758'. [ 137.865322][ T9259] CIFS: Witness protocol support is experimental [ 137.865345][ T9259] CIFS mount error: No usable UNC path provided in device string! [ 137.865345][ T9259] [ 137.865354][ T9259] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 137.871189][ T9268] CIFS mount error: No usable UNC path provided in device string! [ 137.871189][ T9268] [ 137.871200][ T9268] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 138.060631][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.767'. [ 138.060818][ T43] audit: type=1400 audit(2000000016.119:804): avc: denied { bind } for pid=9283 comm="syz.0.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 138.062576][ T9284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.767'. [ 138.085385][ T43] audit: type=1400 audit(2000000016.139:805): avc: denied { write } for pid=9290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.128690][ T43] audit: type=1400 audit(2000000016.189:806): avc: denied { write } for pid=9295 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.230020][ T43] audit: type=1400 audit(2000000016.289:807): avc: denied { write } for pid=9307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.268184][ T43] audit: type=1400 audit(2000000016.329:808): avc: denied { write } for pid=9315 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.354128][ T43] audit: type=1400 audit(2000000016.409:809): avc: denied { write } for pid=9321 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.791950][ T9358] netlink: 'syz.1.773': attribute type 21 has an invalid length. [ 138.791965][ T9358] netlink: 156 bytes leftover after parsing attributes in process `syz.1.773'. [ 138.798119][ T9360] fuse: Unknown parameter 'gcoup_id' [ 138.828806][ T9357] XFS (loop1): SB validate failed with error -5. [ 139.243505][ T9405] netlink: 24 bytes leftover after parsing attributes in process `syz.4.779'. [ 139.321500][ T9416] overlayfs: failed to clone upperpath [ 139.412109][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.781'. [ 139.513776][ T9440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9440 comm=syz.4.788 [ 139.720572][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'. [ 139.729847][ T9452] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 139.761254][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 139.761266][ T43] audit: type=1400 audit(2000000017.819:817): avc: denied { setopt } for pid=9457 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 139.779931][ T43] audit: type=1400 audit(2000000017.839:818): avc: denied { open } for pid=9459 comm="syz.1.792" path="/dev/ttyq7" dev="devtmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 139.944870][ T9468] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 139.945210][ T9468] tmpfs: Bad value for 'uid' [ 139.945218][ T9468] tmpfs: Bad value for 'uid' [ 139.995913][ T43] audit: type=1400 audit(2000000018.049:819): avc: denied { setopt } for pid=9469 comm="syz.0.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 140.037925][ T35] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 140.198046][ T35] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 140.198862][ T35] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.198885][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.206538][ T35] as10x_usb: device has been detected [ 140.206849][ T35] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 140.217436][ T35] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 140.219917][ T35] as10x_usb: error during firmware upload part1 [ 140.220142][ T35] Registered device Abilis Systems DVB-Titan [ 140.912205][ T9496] overlayfs: failed to clone upperpath [ 140.979666][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.804'. [ 140.981639][ T9507] netlink: 'syz.4.805': attribute type 1 has an invalid length. [ 140.994370][ T43] audit: type=1400 audit(2000000019.049:820): avc: denied { getopt } for pid=9506 comm="syz.4.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.103857][ T9514] 9p: Bad value for 'wfdno' [ 141.169518][ T9520] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 141.352897][ T9535] cgroup: fork rejected by pids controller in /syz4 [ 141.394315][ T9679] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(65560.196608.262144), cmd(2) [ 141.440871][ T9718] CIFS: Attempting to mount //127.0.0.1/share [ 141.441185][ T9718] CIFS: VFS: Error connecting to socket. Aborting operation. [ 141.441203][ T9718] CIFS: VFS: cifs_mount failed w/return code = -101 [ 141.443545][ T9720] netlink: 'syz.4.819': attribute type 29 has an invalid length. [ 141.443885][ T9720] netlink: 'syz.4.819': attribute type 29 has an invalid length. [ 141.444120][ T9720] netlink: 'syz.4.819': attribute type 30 has an invalid length. [ 141.822894][ T9490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.823212][ T9490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.025046][ T42] usb 6-1: USB disconnect, device number 9 [ 142.037803][ T42] Unregistered device Abilis Systems DVB-Titan [ 142.038893][ T42] as10x_usb: device has been disconnected [ 142.056669][ T9751] net_ratelimit: 10 callbacks suppressed [ 142.056686][ T9751] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 142.306197][ T9753] netlink: 'syz.2.826': attribute type 1 has an invalid length. [ 142.319945][ T9753] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.329768][ T9753] bond3: (slave syz_tun): Enslaving as a backup interface with a down link [ 142.356671][ T9756] gfs2: error -5 reading superblock [ 142.574281][ T9781] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 142.585437][ T9783] netlink: 'syz.0.836': attribute type 1 has an invalid length. [ 142.593961][ T9786] tmpfs: Bad value for 'mpol' [ 142.599461][ T9783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.602616][ T43] audit: type=1400 audit(2000000020.659:821): avc: denied { create } for pid=9782 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 142.602941][ T43] audit: type=1400 audit(2000000020.659:822): avc: denied { write } for pid=9782 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 142.604003][ T43] audit: type=1400 audit(2000000020.659:823): avc: denied { accept } for pid=9784 comm="syz.4.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 142.604028][ T43] audit: type=1400 audit(2000000020.659:824): avc: denied { accept } for pid=9784 comm="syz.4.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 142.668719][ T9794] can0: slcan on ttyS3. [ 142.739439][ T9791] can0 (unregistered): slcan off ttyS3. [ 142.742634][ T9802] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 142.761174][ T43] audit: type=1400 audit(2000000020.819:825): avc: denied { write } for pid=9800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.809874][ T9808] veth1_to_team: entered promiscuous mode [ 142.822682][ T43] audit: type=1400 audit(2000000020.879:826): avc: denied { write } for pid=9809 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.043319][ T9822] bond4: entered promiscuous mode [ 143.043527][ T9822] 8021q: adding VLAN 0 to HW filter on device bond4 [ 143.055373][ T9822] 8021q: adding VLAN 0 to HW filter on device bond4 [ 143.055525][ T9822] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 143.055942][ T9822] bond4: (slave gre1): Error -95 calling set_mac_address [ 143.072069][ T9825] syzkaller1: entered promiscuous mode [ 143.072089][ T9825] syzkaller1: entered allmulticast mode [ 143.191857][ T9834] netlink: 'syz.0.849': attribute type 2 has an invalid length. [ 143.239683][ T9837] __nla_validate_parse: 3 callbacks suppressed [ 143.239700][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.850'. [ 143.569982][ T7358] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 143.613949][ T9861] netlink: 'syz.4.857': attribute type 4 has an invalid length. [ 143.616870][ T9861] netlink: 'syz.4.857': attribute type 4 has an invalid length. [ 143.632061][ T9867] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 143.721788][ T9874] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.760027][ T9876] netlink: 44 bytes leftover after parsing attributes in process `syz.4.862'. [ 143.813679][ T9878] bond4: entered promiscuous mode [ 143.813734][ T9878] bond4: entered allmulticast mode [ 143.814123][ T9878] 8021q: adding VLAN 0 to HW filter on device bond4 [ 143.933365][ T9886] size and base must be multiples of 4 kiB [ 143.933379][ T9886] CPU: 0 UID: 0 PID: 9886 Comm: syz.0.866 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.933394][ T9886] Tainted: [L]=SOFTLOCKUP [ 143.933398][ T9886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.933404][ T9886] Call Trace: [ 143.933408][ T9886] [ 143.933413][ T9886] dump_stack_lvl+0x100/0x190 [ 143.933441][ T9886] mtrr_add.cold+0x74/0x87 [ 143.933460][ T9886] mtrr_ioctl+0x25a/0xcf0 [ 143.933488][ T9886] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 143.933520][ T9886] ? __pfx_mtrr_ioctl+0x10/0x10 [ 143.933540][ T9886] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 143.933567][ T9886] ? __fget_files+0x34/0x3d0 [ 143.933604][ T9886] ? __pfx_mtrr_ioctl+0x10/0x10 [ 143.933622][ T9886] proc_reg_unlocked_ioctl+0x229/0x320 [ 143.933643][ T9886] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 143.933663][ T9886] __x64_sys_ioctl+0x18e/0x210 [ 143.933690][ T9886] do_syscall_64+0x123/0x790 [ 143.933717][ T9886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.933736][ T9886] RIP: 0033:0x7f7e14f9e199 [ 143.933752][ T9886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.933784][ T9886] RSP: 002b:00007f7e15f4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.933805][ T9886] RAX: ffffffffffffffda RBX: 00007f7e15225fa0 RCX: 00007f7e14f9e199 [ 143.933819][ T9886] RDX: 0000200000000380 RSI: 0000000040104d01 RDI: 0000000000000008 [ 143.933829][ T9886] RBP: 00007f7e15035888 R08: 0000000000000000 R09: 0000000000000000 [ 143.933840][ T9886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.933848][ T9886] R13: 00007f7e15226038 R14: 00007f7e15225fa0 R15: 00007fff663fb4e8 [ 143.933875][ T9886] [ 143.939574][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 143.939725][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 143.939734][ T9886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.866'. [ 144.182102][ T9893] x_tables: duplicate underflow at hook 2 [ 144.250611][ T9898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.869'. [ 144.251098][ T9898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.869'. [ 144.251434][ T9898] netlink: 500 bytes leftover after parsing attributes in process `syz.1.869'. [ 144.624527][ T9919] netlink: 40 bytes leftover after parsing attributes in process `syz.0.877'. [ 144.624543][ T9919] nbd: couldn't find a device at index 10000000 [ 144.705172][ T9923] openvswitch: netlink: Key type 2048 is out of range max 32 [ 145.019563][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 145.019577][ T43] audit: type=1400 audit(2000000023.079:841): avc: denied { write } for pid=9941 comm="syz.0.884" name="msr" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 145.057747][ T9949] smpboot: CPU 1 is now offline [ 145.114718][ T9954] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 145.187124][ T9959] kvm [9958]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x1200000000eb5 [ 145.192491][ T9959] netlink: 356 bytes leftover after parsing attributes in process `syz.1.888'. [ 145.212384][ T43] audit: type=1400 audit(2000000023.269:842): avc: denied { write } for pid=9960 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.261356][ T43] audit: type=1400 audit(2000000023.319:843): avc: denied { write } for pid=9964 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.365820][ T43] audit: type=1400 audit(2000000023.419:844): avc: denied { write } for pid=9967 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.407834][ T43] audit: type=1400 audit(2000000023.469:845): avc: denied { write } for pid=9977 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.434398][ T9973] hsr_slave_1 (unregistering): left promiscuous mode [ 145.637258][ T30] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 145.692464][ T43] audit: type=1400 audit(2000000023.749:846): avc: denied { write } for pid=9983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.734688][ T43] audit: type=1400 audit(2000000023.789:847): avc: denied { write } for pid=9986 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.801627][ T30] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 145.802600][ T30] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 145.802638][ T30] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 145.803700][ T30] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 145.803735][ T30] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 145.805539][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.805554][ T30] usb 6-1: Product: syz [ 145.805563][ T30] usb 6-1: Manufacturer: syz [ 145.805572][ T30] usb 6-1: SerialNumber: syz [ 145.815483][ T43] audit: type=1400 audit(2000000023.869:848): avc: denied { write } for pid=9988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.834403][ T30] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 145.852199][ T30] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 145.868654][ T30] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 145.884225][ T9993] netlink: 'syz.2.891': attribute type 2 has an invalid length. [ 145.886071][ T9993] netlink: 'syz.2.891': attribute type 2 has an invalid length. [ 145.913127][ T43] audit: type=1400 audit(2000000023.969:849): avc: denied { write } for pid=9992 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.996291][ T43] audit: type=1400 audit(2000000024.049:850): avc: denied { write } for pid=10000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.037801][ T35] usb 6-1: USB disconnect, device number 10 [ 146.049428][ T35] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 146.053280][ T35] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 146.053636][ T35] ti_usb_3410_5052 6-1:2.0: device disconnected [ 146.657290][ T30] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 146.817898][ T30] usb 5-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.40 [ 146.818762][ T30] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.818780][ T30] usb 5-1: config 1 interface 0 has no altsetting 0 [ 146.820308][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.820321][ T30] usb 5-1: Product: syz [ 146.820369][ T30] usb 5-1: Manufacturer: 䀁 [ 146.820378][ T30] usb 5-1: SerialNumber: syz [ 147.232836][ T30] usbhid 5-1:1.0: can't add hid device: -71 [ 147.232880][ T30] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 147.234831][ T30] usb 5-1: USB disconnect, device number 15 [ 148.925852][T10029] overlayfs: failed to resolve './file0': -2 [ 148.974273][T10047] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 148.980490][T10049] netlink: 'syz.2.905': attribute type 2 has an invalid length. [ 148.983607][T10057] netlink: 'syz.2.905': attribute type 2 has an invalid length. [ 149.031790][T10067] __nla_validate_parse: 4 callbacks suppressed [ 149.031802][T10067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.907'. [ 149.032548][T10066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10066 comm=syz.2.907 [ 149.097415][T10074] netlink: 'syz.2.909': attribute type 1 has an invalid length. [ 149.178415][T10082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.912'. [ 149.310915][T10097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60096 sclass=netlink_route_socket pid=10097 comm=syz.2.918 [ 149.577239][ T35] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 149.750319][ T35] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.751332][ T35] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 149.755054][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.755067][ T35] usb 7-1: Product: ы [ 149.755074][ T35] usb 7-1: SerialNumber: syz [ 149.812494][T10113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.924'. [ 149.821136][T10113] 8021q: adding VLAN 0 to HW filter on device bond5 [ 149.831384][T10113] 8021q: adding VLAN 0 to HW filter on device bond5 [ 149.831632][T10113] bond5: (slave sit0): The slave device specified does not support setting the MAC address [ 149.832251][T10113] bond5: (slave sit0): Error -95 calling set_mac_address [ 149.864529][T10116] netlink: 'syz.1.925': attribute type 5 has an invalid length. [ 149.864549][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'. [ 149.868269][T10116] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 149.960815][ T35] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 149.960837][ T35] cdc_ncm 7-1:1.0: bind() failure [ 149.964857][ T35] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 149.964878][ T35] cdc_ncm 7-1:1.1: bind() failure [ 149.966888][ T35] usb 7-1: USB disconnect, device number 6 [ 150.335114][T10139] netlink: 140 bytes leftover after parsing attributes in process `syz.4.933'. [ 150.379106][T10148] netlink: 'syz.4.934': attribute type 1 has an invalid length. [ 150.394245][T10148] 8021q: adding VLAN 0 to HW filter on device bond6 [ 150.402892][T10147] bond6: (slave geneve2): making interface the new active one [ 150.404064][T10147] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 150.504548][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 150.504563][ T43] audit: type=1400 audit(2000000028.559:855): avc: denied { mount } for pid=10155 comm="syz.2.936" name="/" dev="ecryptfs" ino=1216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ecryptfs_t tclass=filesystem permissive=1 [ 150.542149][ T43] audit: type=1400 audit(2000000028.599:856): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ecryptfs_t tclass=filesystem permissive=1 [ 150.572104][T10164] netlink: 36 bytes leftover after parsing attributes in process `syz.2.939'. [ 150.574701][T10164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.939'. [ 150.574905][T10164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10164 comm=syz.2.939 [ 150.583012][ T43] audit: type=1400 audit(2000000028.639:857): avc: denied { setattr } for pid=10158 comm="syz.0.937" name="/" dev="9p" ino=71827643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.771685][T10183] FAULT_INJECTION: forcing a failure. [ 150.771685][T10183] name failslab, interval 1, probability 0, space 0, times 0 [ 150.771706][T10183] CPU: 2 UID: 0 PID: 10183 Comm: syz.2.945 Tainted: G S L syzkaller #0 PREEMPT(full) [ 150.771724][T10183] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 150.771728][T10183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.771735][T10183] Call Trace: [ 150.771739][T10183] [ 150.771744][T10183] dump_stack_lvl+0x100/0x190 [ 150.771775][T10183] should_fail_ex.cold+0x5/0xa [ 150.771794][T10183] should_failslab+0xc2/0x120 [ 150.771816][T10183] __kmalloc_cache_noprof+0x91/0x6d0 [ 150.771828][T10183] ? raw_ioctl_init+0x1c0/0x850 [ 150.771848][T10183] raw_ioctl_init+0x1c0/0x850 [ 150.771863][T10183] ? __pfx_raw_ioctl_init+0x10/0x10 [ 150.771876][T10183] ? tomoyo_path_number_perm+0x188/0x580 [ 150.771902][T10183] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 150.771916][T10183] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 150.771934][T10183] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 150.771953][T10183] raw_ioctl+0x138a/0x2b80 [ 150.771969][T10183] ? __pfx_raw_ioctl+0x10/0x10 [ 150.771983][T10183] ? selinux_file_ioctl+0x13b/0x290 [ 150.771996][T10183] ? selinux_file_ioctl+0xb6/0x290 [ 150.772012][T10183] ? __pfx_raw_ioctl+0x10/0x10 [ 150.772026][T10183] __x64_sys_ioctl+0x18e/0x210 [ 150.772042][T10183] do_syscall_64+0x123/0x790 [ 150.772061][T10183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.772073][T10183] RIP: 0033:0x7f6e9e99de2b [ 150.772082][T10183] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 150.772092][T10183] RSP: 002b:00007f6e9f877f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.772104][T10183] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f6e9e99de2b [ 150.772111][T10183] RDX: 00007f6e9f878fd0 RSI: 0000000041015500 RDI: 0000000000000006 [ 150.772118][T10183] RBP: 00007f6e9f878fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 150.772124][T10183] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6e9f877fa0 [ 150.772131][T10183] R13: 00002000000000c0 R14: 0000000000000000 R15: 0000000000000000 [ 150.772146][T10183] [ 150.795212][T10170] Process accounting resumed [ 150.795294][ T30] logitech-hidpp-device 0005:046D:B012.0007: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 150.802066][T10183] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 150.854658][T10188] fido_id[10188]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 151.031515][T10207] overlayfs: failed to clone lowerpath [ 151.063498][T10209] CIFS: Attempting to mount //127.0.0.1/share [ 151.103675][ T43] audit: type=1400 audit(2000000029.159:858): avc: denied { connect } for pid=10214 comm="syz.4.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.125922][ T43] audit: type=1326 audit(2000000029.179:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.4.958" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59f19e199 code=0x7ffc0000 [ 151.125971][ T43] audit: type=1400 audit(2000000029.179:859): avc: denied { map } for pid=10218 comm="syz.1.959" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 151.126000][ T43] audit: type=1326 audit(2000000029.179:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.4.958" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59f19e199 code=0x7ffc0000 [ 151.126033][ T43] audit: type=1400 audit(2000000029.179:862): avc: denied { execute } for pid=10218 comm="syz.1.959" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 151.126327][ T43] audit: type=1326 audit(2000000029.179:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.4.958" exe="/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fa59f19e199 code=0x7ffc0000 [ 151.126682][ T43] audit: type=1326 audit(2000000029.179:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.4.958" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59f19e199 code=0x7ffc0000 [ 151.613660][T10246] IPVS: set_ctl: invalid protocol: 126 100.1.1.1:20004 [ 151.615325][T10246] 8021q: VLANs not supported on ip6_vti0 [ 151.894211][T10209] CIFS: VFS: Error connecting to socket. Aborting operation. [ 151.894250][T10209] CIFS: VFS: cifs_mount failed w/return code = -4 [ 151.955279][T10274] fuse: fd is not a fuse device [ 151.982968][T10276] device-mapper: ioctl: Invalid ioctl structure: name snap0, dev f802 [ 151.983083][T10277] device-mapper: ioctl: Invalid ioctl structure: name snap0, dev f802 c}M ' /]^&+%f%!^%${] /dev/ptmx)[ 152.163201][ T5739] Bluetooth: hci3: unexpected event for opcode 0x080d [ 152.269589][T10308] netlink: 40 bytes leftover after parsing attributes in process `syz.2.985'. [ 152.297514][T10311] overlay: ./file0 is not a directory [ 152.520520][T10320] random: crng reseeded on system resumption [ 152.524605][T10320] Restarting kernel threads ... [ 152.527251][T10320] Done restarting kernel threads. [ 152.774352][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.991'. [ 152.790982][T10330] team1: entered promiscuous mode [ 152.791021][T10330] team1: entered allmulticast mode [ 152.791378][T10330] 8021q: adding VLAN 0 to HW filter on device team1 [ 152.828366][T10332] input: syz0 as /devices/virtual/input/input17 [ 152.980275][T10337] fuse: blksize only supported for fuseblk [ 153.206862][T10346] autofs: Bad value for 'fd' [ 153.305735][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 153.306237][T10359] hsr_slave_0: left promiscuous mode [ 153.307054][T10359] hsr_slave_1: left promiscuous mode [ 153.665440][T10396] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 4294967295 (only 8 groups) [ 153.710643][T10401] null_blk: my_zoned_dev: using native zone append [ 153.742263][T10401] null_blk: disk my_zoned_dev created [ 153.752984][T10407] tc_dump_action: action bad kind [ 153.941695][T10426] xt_CONNSECMARK: invalid mode: 0 [ 153.973715][ T5739] Bluetooth: hci0: unexpected event for opcode 0xce6e [ 154.027454][ T35] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 154.177966][ T35] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 154.178945][ T35] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 154.178984][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.179874][ T35] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 154.179891][ T35] usb 6-1: Manufacturer: syz [ 154.182283][ T35] usb 6-1: config 0 descriptor?? [ 154.237464][ T35] rc_core: IR keymap rc-hauppauge not found [ 154.237479][ T35] Registered IR keymap rc-empty [ 154.243636][ T35] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 154.245296][ T35] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input18 [ 154.454507][T10438] fuse: fd is not a fuse device [ 154.455031][T10439] fuse: fd is not a fuse device [ 154.461027][T10409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.461981][T10409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.474259][ T35] usb 6-1: USB disconnect, device number 11 [ 154.504184][T10441] fuse: fd is not a fuse device [ 154.611940][T10447] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1034'. [ 154.614886][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1034'. [ 154.692131][T10452] jffs2: notice: (10452) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 155.086574][T10469] fuse: blksize only supported for fuseblk [ 155.232917][T10481] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1046'. [ 155.417309][ T35] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 155.578865][ T35] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.579743][ T35] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.579759][ T35] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 155.579777][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.584395][T10477] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.586974][ T35] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.799816][ T35] usb 6-1: USB disconnect, device number 12 [ 156.175312][T10490] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.212226][ T5739] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 156.212293][ T5739] Bluetooth: hci3: Injecting HCI hardware error event [ 156.213927][ T5739] Bluetooth: hci3: hardware error 0x00 [ 156.247001][T10511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1050'. [ 156.249476][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1050'. [ 156.294950][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 156.294963][ T43] audit: type=1400 audit(2000000034.349:881): avc: denied { node_bind } for pid=10510 comm="syz.2.1051" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 156.318570][T10510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.323393][ T2327] hid-generic 0005:054C:0006.0008: item fetching failed at offset 0/1 [ 156.323692][ T2327] hid-generic 0005:054C:0006.0008: probe with driver hid-generic failed with error -22 [ 156.330261][T10516] fuse: blksize only supported for fuseblk [ 156.859772][T10533] netlink: 'syz.2.1058': attribute type 1 has an invalid length. [ 156.875542][T10533] bond4: entered promiscuous mode [ 156.876005][T10533] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.894059][T10534] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.894305][T10534] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 156.894319][T10534] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 156.910770][T10534] bond4: (slave xfrm1): making interface the new active one [ 156.910784][T10534] xfrm1: entered promiscuous mode [ 156.911902][T10534] bond4: (slave xfrm1): Enslaving as an active interface with an up link [ 156.969830][T10542] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 157.150558][T10555] fuse: Unknown parameter 'dd5u_08V8-tR7' [ 157.179312][T10561] fuse: fd is not a fuse device [ 157.269384][T10568] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 157.295350][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1068'. [ 157.350881][T10578] fuse: fd is not a fuse device [ 157.353679][T10579] ip_tables: iptables: counters copy to user failed while replacing table [ 157.361719][ T5741] Bluetooth: hci0: unexpected cc 0x1407 length: 11 > 9 [ 157.361741][ T5741] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 157.458562][ T43] audit: type=1400 audit(2000000035.509:882): avc: denied { mounton } for pid=10585 comm="syz.1.1076" path="/264/file0" dev="tmpfs" ino=1503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 157.496927][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1080'. [ 157.513106][ T43] audit: type=1400 audit(2000000035.569:883): avc: denied { write } for pid=10585 comm="syz.1.1076" name="file0" dev="tmpfs" ino=1503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 157.513637][T10601] netlink: 'syz.1.1076': attribute type 2 has an invalid length. [ 157.513649][T10601] netlink: 'syz.1.1076': attribute type 1 has an invalid length. [ 157.514251][T10601] netlink: 'syz.1.1076': attribute type 21 has an invalid length. [ 157.658096][T10608] fuse: blksize only supported for fuseblk [ 157.709319][T10613] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 157.709319][T10613] The task syz.1.1085 (10613) triggered the difference, watch for misbehavior. [ 158.175279][T10637] bridge0: port 3(ipvlan2) entered blocking state [ 158.175357][T10637] bridge0: port 3(ipvlan2) entered disabled state [ 158.175409][T10637] ipvlan2: entered allmulticast mode [ 158.175417][T10637] bridge0: entered allmulticast mode [ 158.176896][T10637] ipvlan2: left allmulticast mode [ 158.176909][T10637] bridge0: left allmulticast mode [ 158.278619][ T5739] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 158.545604][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1103'. [ 158.821435][ T43] audit: type=1400 audit(2000000036.879:884): avc: denied { load_policy } for pid=10684 comm="syz.2.1111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 158.851154][T10685] SELinux: failed to load policy [ 158.869029][ T5739] Bluetooth: hci0: unexpected event for opcode 0x0404 [ 158.872956][ T43] audit: type=1400 audit(2000000036.929:885): avc: denied { getattr } for pid=10674 comm="syz.0.1108" name="/" dev="failfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 158.912557][T10694] support for cryptoloop has been removed. Use dm-crypt instead. [ 158.914209][ T43] audit: type=1400 audit(2000000036.969:886): avc: denied { execute } for pid=10693 comm="syz.1.1112" path="/sys/power/mem_sleep" dev="sysfs" ino=867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 159.006874][T10701] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1116'. [ 159.287287][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 159.447371][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 159.448185][ T9] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 159.449307][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.449324][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 159.449357][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.449389][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.461624][ T9] hub 6-1:1.0: bad descriptor, ignoring hub [ 159.461644][ T9] hub 6-1:1.0: probe with driver hub failed with error -5 [ 159.461995][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 159.462005][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 159.467487][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 159.467503][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 159.668099][ T43] audit: type=1400 audit(2000000037.729:887): avc: denied { read write } for pid=10706 comm="syz.1.1119" name="cdc-wdm0" dev="devtmpfs" ino=3237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 159.668368][ T43] audit: type=1400 audit(2000000037.729:888): avc: denied { open } for pid=10706 comm="syz.1.1119" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 160.079311][ T6023] usb 6-1: USB disconnect, device number 13 [ 160.124890][T10712] tipc: Enabling of bearer rejected, failed to enable media [ 160.131776][T10712] tipc: Enabling of bearer rejected, already enabled [ 160.807285][ T9] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 160.958146][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.959143][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.959169][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.959205][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.169965][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 161.170004][ T9] usbtmc 5-1:16.0: can't read capabilities [ 161.373745][ T9] usb 5-1: USB disconnect, device number 17 [ 161.913290][T10718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7046 sclass=netlink_route_socket pid=10718 comm=syz.0.1122 [ 162.096646][T10728] ip_tables: iptables: counters copy to user failed while replacing table [ 162.173909][T10734] input: syz0 as /devices/virtual/input/input19 [ 162.873195][T10758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1140'. [ 163.439161][T10766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1143'. [ 163.633562][T10768] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=785 sclass=netlink_tcpdiag_socket pid=10768 comm=syz.4.1144 [ 163.642267][T10771] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.643398][T10771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.698580][T10773] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 164.319953][T10802] kvm: pic: non byte write [ 165.184594][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'. [ 165.190358][ T43] audit: type=1400 audit(2000000043.249:889): avc: denied { bind } for pid=10812 comm="syz.1.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 165.229460][ T42] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 165.246229][T10813] 8021q: adding VLAN 0 to HW filter on device eth0 [ 165.251467][T10813] 8021q: adding VLAN 0 to HW filter on device eth1 [ 165.255670][T10813] 8021q: adding VLAN 0 to HW filter on device eth2 [ 165.257449][T10813] 8021q: adding VLAN 0 to HW filter on device eth3 [ 165.263969][T10813] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.265927][T10813] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.285251][T10813] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.288231][T10813] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.292431][T10813] 8021q: adding VLAN 0 to HW filter on device bond5 [ 165.308069][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.309015][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.309035][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.309053][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.352390][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1164'. [ 165.390386][ T42] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 165.392074][ T42] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 165.392093][ T42] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 165.392112][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.394296][T10811] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 165.401821][ T42] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 165.526083][ T43] audit: type=1400 audit(2000000043.579:890): avc: denied { connect } for pid=10826 comm="syz.1.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 165.600358][ T6023] usb 5-1: USB disconnect, device number 18 [ 165.787416][ T42] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 165.950406][ T42] usb 6-1: Using ep0 maxpacket: 16 [ 165.952153][ T42] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 165.952924][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 165.954394][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.954407][ T42] usb 6-1: Product: syz [ 165.954414][ T42] usb 6-1: Manufacturer: syz [ 165.954421][ T42] usb 6-1: SerialNumber: syz [ 165.955967][ T42] usb 6-1: config 0 descriptor?? [ 165.960098][ T42] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 165.960122][ T42] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 166.359156][ T43] audit: type=1400 audit(2000000044.419:891): avc: denied { ioctl } for pid=10826 comm="syz.1.1166" path="socket:[34945]" dev="sockfs" ino=34945 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 166.397370][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 166.559922][ T42] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 166.568226][ T10] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 166.569184][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.569464][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.581509][ T10] as10x_usb: device has been detected [ 166.582436][ T10] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 166.590775][ T10] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 166.620832][ T10] as10x_usb: error during firmware upload part1 [ 166.621294][ T10] Registered device Abilis Systems DVB-Titan [ 166.780442][ T10] usb 5-1: USB disconnect, device number 19 [ 166.804685][ T10] Unregistered device Abilis Systems DVB-Titan [ 166.806091][ T10] as10x_usb: device has been disconnected [ 166.978676][ T42] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 166.978703][ T42] em28xx 6-1:0.0: board has no eeprom [ 167.335075][T10835] ipt_REJECT: TCP_RESET invalid for non-tcp [ 167.545657][ T43] audit: type=1400 audit(2000000045.599:892): avc: denied { mount } for pid=10842 comm="syz.0.1174" name="/" dev="9p" ino=71827643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 167.569272][ T43] audit: type=1400 audit(2000000045.629:893): avc: denied { unmount } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 168.042552][T10827] em28xx 6-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 168.067227][ T30] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 168.097483][ T42] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 168.097509][ T42] em28xx 6-1:0.0: dvb set to bulk mode. [ 168.098443][ T5834] em28xx 6-1:0.0: Binding DVB extension [ 168.107488][ T42] usb 6-1: USB disconnect, device number 14 [ 168.108621][ T42] em28xx 6-1:0.0: Disconnecting em28xx [ 168.144503][ T5834] em28xx 6-1:0.0: Registering input extension [ 168.144753][ T42] em28xx 6-1:0.0: Closing input extension [ 168.166322][ T42] em28xx: Freeing device [ 168.227276][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 168.228159][ T30] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0 [ 168.230783][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.230797][ T30] usb 5-1: Product: syz [ 168.230806][ T30] usb 5-1: Manufacturer: syz [ 168.230815][ T30] usb 5-1: SerialNumber: syz [ 168.434507][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1183'. [ 168.599570][ T43] audit: type=1800 audit(2000000046.659:894): pid=10872 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1185" name="bus" dev="tmpfs" ino=1637 res=0 errno=0 [ 168.661968][ T30] ems_usb 5-1:91.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 168.662158][ T30] ems_usb 5-1:91.0: probe with driver ems_usb failed with error -22 [ 168.667225][ T30] usb 5-1: USB disconnect, device number 20 [ 169.566978][T10924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1205'. [ 169.607004][ T43] audit: type=1326 audit(2000000047.659:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10931 comm="syz.4.1208" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59f19e199 code=0x7ffc0000 [ 169.607062][ T43] audit: type=1326 audit(2000000047.659:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10931 comm="syz.4.1208" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59f19e199 code=0x7ffc0000 [ 169.622725][ T43] audit: type=1326 audit(2000000047.679:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10931 comm="syz.4.1208" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa59f19e199 code=0x7ffc0000 [ 169.622884][ T43] audit: type=1326 audit(2000000047.679:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10931 comm="syz.4.1208" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59f19e199 code=0x7ffc0000 [ 169.671299][T10942] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 170.132413][T10965] dummy0 speed is unknown, defaulting to 1000 [ 170.447291][ T42] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 170.597262][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 170.598027][ T42] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 170.599135][ T42] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 170.601004][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.601017][ T42] usb 6-1: Product: syz [ 170.601024][ T42] usb 6-1: Manufacturer: syz [ 170.601031][ T42] usb 6-1: SerialNumber: syz [ 170.820938][ T42] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 170.872653][ T42] usb 6-1: USB disconnect, device number 15 [ 170.910216][ T9485] udevd[9485]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.988823][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1225'. [ 171.145711][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 171.145727][ T43] audit: type=1326 audit(2000000049.199:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.4.1230" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59f19e199 code=0x7ffc0000 [ 171.145805][ T43] audit: type=1326 audit(2000000049.199:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.4.1230" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59f19e199 code=0x7ffc0000 [ 171.147798][ T43] audit: type=1326 audit(2000000049.209:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.4.1230" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa59f19e199 code=0x7ffc0000 [ 171.147934][ T43] audit: type=1326 audit(2000000049.209:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.4.1230" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59f19e199 code=0x7ffc0000 [ 171.148081][ T43] audit: type=1326 audit(2000000049.209:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.4.1230" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59f19e199 code=0x7ffc0000 [ 171.151211][ T43] audit: type=1326 audit(2000000049.209:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.4.1230" exe="/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fa59f19e199 code=0x7ffc0000 [ 171.151315][ T43] audit: type=1326 audit(2000000049.209:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.4.1230" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59f19e199 code=0x7ffc0000 [ 171.151458][ T43] audit: type=1326 audit(2000000049.209:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.4.1230" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59f19e199 code=0x7ffc0000 [ 171.151576][ T43] audit: type=1326 audit(2000000049.209:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.4.1230" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa59f19e199 code=0x7ffc0000 [ 171.151736][ T43] audit: type=1326 audit(2000000049.209:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11002 comm="syz.4.1230" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59f19e199 code=0x7ffc0000 [ 171.787245][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 171.947453][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 171.948382][ T9] usb 5-1: New USB device found, idVendor=0499, idProduct=2003, bcdDevice= 0.40 [ 171.950027][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 171.956069][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.956083][ T9] usb 5-1: Product: syz [ 171.956091][ T9] usb 5-1: SerialNumber: syz [ 172.176705][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.178803][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 172.183693][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.183872][ T9] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 172.190491][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.224561][ T9] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 172.231734][ T9] usb 5-1: USB disconnect, device number 21 [ 172.240103][ T9240] udevd[9240]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.926461][T11042] ip_tables: iptables: counters copy to user failed while replacing table [ 173.251669][T11051] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 173.432902][T11061] netlink: 964 bytes leftover after parsing attributes in process `syz.4.1254'. [ 173.432923][T11061] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 173.473322][T11063] syz_tun: entered allmulticast mode [ 173.972807][T11075] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1260'. [ 174.181130][T11063] syz_tun: left allmulticast mode [ 174.477732][T11090] fuse: fd is not a fuse device [ 174.495100][ T7358] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 175.072858][T11122] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 175.459869][T11128] binder: 11127:11128 ioctl 4018620d 0 returned -22 [ 175.461093][T11128] binder: 11127:11128 ioctl c0306201 200000000040 returned -22 [ 175.461326][T11128] binder: 11127:11128 ioctl c0306201 200000000640 returned -22 [ 175.571335][T11130] ------------[ cut here ]------------ [ 175.571349][T11130] enable_ept && !allow_smaller_maxphyaddr [ 175.571356][T11130] WARNING: arch/x86/kvm/vmx/vmx.c:5398 at handle_exception_nmi+0xa73/0x1af0, CPU#3: syz.1.1283/11130 [ 175.583358][T11130] Modules linked in: [ 175.585322][T11130] CPU: 3 UID: 0 PID: 11130 Comm: syz.1.1283 Tainted: G S L syzkaller #0 PREEMPT(full) [ 175.590293][T11130] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 175.593011][T11130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.597608][T11130] RIP: 0010:handle_exception_nmi+0xa73/0x1af0 [ 175.600446][T11130] Code: 08 84 d2 0f 85 39 10 00 00 44 0f b6 2d b9 85 a4 10 31 ff 44 89 ee e8 5c 82 6b 00 45 84 ed 0f 85 bf 0d 00 00 e8 3e 88 6b 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 a0 82 6b 00 45 85 e4 0f 85 b8 0a 00 00 [ 175.608232][T11130] RSP: 0018:ffffc900062c7918 EFLAGS: 00010287 [ 175.610311][T11130] RAX: 00000000000211f9 RBX: ffff888028b3a880 RCX: ffffc90007192000 [ 175.612948][T11130] RDX: 0000000000080000 RSI: ffffffff81a0c212 RDI: ffff88802871a580 [ 175.615560][T11130] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000 [ 175.618257][T11130] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 175.621466][T11130] R13: 0000000000000000 R14: ffff8880357ab000 R15: ffff888028b3a950 [ 175.624871][T11130] FS: 00007fe00f9f66c0(0000) GS:ffff8880d4c47000(0000) knlGS:0000000000000000 [ 175.628991][T11130] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.631933][T11130] CR2: 000000000f6632eb CR3: 00000000259fe000 CR4: 0000000000352ef0 [ 175.635441][T11130] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000036 [ 175.639255][T11130] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 175.642777][T11130] Call Trace: [ 175.644294][T11130] [ 175.645633][T11130] ? __pfx_handle_exception_nmi+0x10/0x10 [ 175.648245][T11130] vmx_handle_exit+0x4c8/0x1d30 [ 175.650452][T11130] vcpu_run+0x3725/0x61a0 [ 175.652399][T11130] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 175.655194][T11130] ? __pfx_vcpu_run+0x10/0x10 [ 175.657369][T11130] ? lock_acquire+0x1d1/0x380 [ 175.659498][T11130] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 175.662037][T11130] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 175.664443][T11130] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 175.667003][T11130] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 175.669867][T11130] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 175.672072][T11130] ? lock_acquire+0x1d1/0x380 [ 175.673651][T11130] ? do_raw_write_lock+0x11e/0x260 [ 175.675380][T11130] ? find_held_lock+0x2b/0x80 [ 175.677004][T11130] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 175.678919][T11130] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 175.680616][T11130] kvm_vcpu_ioctl+0x730/0x1700 [ 175.682221][T11130] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 175.683966][T11130] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 175.685957][T11130] ? do_vfs_ioctl+0x226/0x13e0 [ 175.687654][T11130] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 175.689328][T11130] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 175.691875][T11130] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 175.694145][T11130] ? __fget_files+0x34/0x3d0 [ 175.695724][T11130] ? selinux_file_ioctl+0x13b/0x290 [ 175.697695][T11130] ? selinux_file_ioctl+0xb6/0x290 [ 175.699387][T11130] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 175.701096][T11130] __x64_sys_ioctl+0x18e/0x210 [ 175.702694][T11130] do_syscall_64+0x123/0x790 [ 175.704245][T11130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.706180][T11130] RIP: 0033:0x7fe01179e199 [ 175.707742][T11130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.714013][T11130] RSP: 002b:00007fe00f9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.716790][T11130] RAX: ffffffffffffffda RBX: 00007fe011a25fa0 RCX: 00007fe01179e199 [ 175.719449][T11130] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 175.722060][T11130] RBP: 00007fe011835888 R08: 0000000000000000 R09: 0000000000000000 [ 175.724685][T11130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.727555][T11130] R13: 00007fe011a26038 R14: 00007fe011a25fa0 R15: 00007ffcefa48a68 [ 175.730148][T11130] [ 175.731217][T11130] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 175.733607][T11130] CPU: 3 UID: 0 PID: 11130 Comm: syz.1.1283 Tainted: G S L syzkaller #0 PREEMPT(full) [ 175.737231][T11130] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 175.739231][T11130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.742550][T11130] Call Trace: [ 175.743706][T11130] [ 175.744716][T11130] dump_stack_lvl+0x100/0x190 [ 175.746374][T11130] vpanic+0x553/0x970 [ 175.747740][T11130] ? __pfx_vpanic+0x10/0x10 [ 175.749240][T11130] panic+0xd1/0xe0 [ 175.750701][T11130] ? __pfx_panic+0x10/0x10 [ 175.752550][T11130] check_panic_on_warn.cold+0x19/0x34 [ 175.754322][T11130] ? handle_exception_nmi+0xa73/0x1af0 [ 175.756179][T11130] __warn.cold+0x191/0x318 [ 175.757689][T11130] __report_bug+0x30f/0x440 [ 175.759231][T11130] ? handle_exception_nmi+0xa73/0x1af0 [ 175.761038][T11130] ? __pfx___report_bug+0x10/0x10 [ 175.762761][T11130] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 175.764879][T11130] ? trace_event_buffer_commit+0x20a/0xa80 [ 175.766850][T11130] ? handle_exception_nmi+0xa73/0x1af0 [ 175.768662][T11130] report_bug+0xb3/0x220 [ 175.770549][T11130] ? handle_exception_nmi+0xa73/0x1af0 [ 175.773042][T11130] handle_bug+0x16a/0x2a0 [ 175.775016][T11130] exc_invalid_op+0x17/0x50 [ 175.777095][T11130] asm_exc_invalid_op+0x1a/0x20 [ 175.779310][T11130] RIP: 0010:handle_exception_nmi+0xa73/0x1af0 [ 175.782004][T11130] Code: 08 84 d2 0f 85 39 10 00 00 44 0f b6 2d b9 85 a4 10 31 ff 44 89 ee e8 5c 82 6b 00 45 84 ed 0f 85 bf 0d 00 00 e8 3e 88 6b 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 a0 82 6b 00 45 85 e4 0f 85 b8 0a 00 00 [ 175.790524][T11130] RSP: 0018:ffffc900062c7918 EFLAGS: 00010287 [ 175.793301][T11130] RAX: 00000000000211f9 RBX: ffff888028b3a880 RCX: ffffc90007192000 [ 175.796847][T11130] RDX: 0000000000080000 RSI: ffffffff81a0c212 RDI: ffff88802871a580 [ 175.800331][T11130] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000 [ 175.803842][T11130] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 175.807363][T11130] R13: 0000000000000000 R14: ffff8880357ab000 R15: ffff888028b3a950 [ 175.810896][T11130] ? handle_exception_nmi+0xa72/0x1af0 [ 175.813262][T11130] ? handle_exception_nmi+0xa72/0x1af0 [ 175.815105][T11130] ? __pfx_handle_exception_nmi+0x10/0x10 [ 175.816992][T11130] vmx_handle_exit+0x4c8/0x1d30 [ 175.818643][T11130] vcpu_run+0x3725/0x61a0 [ 175.820085][T11130] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 175.822223][T11130] ? __pfx_vcpu_run+0x10/0x10 [ 175.823830][T11130] ? lock_acquire+0x1d1/0x380 [ 175.825405][T11130] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 175.827321][T11130] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 175.829118][T11130] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 175.830999][T11130] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 175.833170][T11130] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 175.835950][T11130] ? lock_acquire+0x1d1/0x380 [ 175.837860][T11130] ? do_raw_write_lock+0x11e/0x260 [ 175.839588][T11130] ? find_held_lock+0x2b/0x80 [ 175.841185][T11130] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 175.842912][T11130] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 175.844571][T11130] kvm_vcpu_ioctl+0x730/0x1700 [ 175.846191][T11130] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 175.847953][T11130] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 175.849921][T11130] ? do_vfs_ioctl+0x226/0x13e0 [ 175.851540][T11130] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 175.853256][T11130] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 175.855423][T11130] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 175.857677][T11130] ? __fget_files+0x34/0x3d0 [ 175.859250][T11130] ? selinux_file_ioctl+0x13b/0x290 [ 175.860955][T11130] ? selinux_file_ioctl+0xb6/0x290 [ 175.862850][T11130] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 175.864609][T11130] __x64_sys_ioctl+0x18e/0x210 [ 175.866224][T11130] do_syscall_64+0x123/0x790 [ 175.867796][T11130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.869735][T11130] RIP: 0033:0x7fe01179e199 [ 175.871236][T11130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.877497][T11130] RSP: 002b:00007fe00f9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.880248][T11130] RAX: ffffffffffffffda RBX: 00007fe011a25fa0 RCX: 00007fe01179e199 [ 175.883159][T11130] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 175.885810][T11130] RBP: 00007fe011835888 R08: 0000000000000000 R09: 0000000000000000 [ 175.888428][T11130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.891043][T11130] R13: 00007fe011a26038 R14: 00007fe011a25fa0 R15: 00007ffcefa48a68 [ 175.893655][T11130] [ 175.894709][T11130] Kernel Offset: disabled [ 175.896128][T11130] Rebooting in 86400 seconds..