last executing test programs: 3.359689958s ago: executing program 3 (id=243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x44, 0x32, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e3000000008000100010000000800050000000000080003"], 0x40}}, 0x8084) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010097e5"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 3.221087194s ago: executing program 3 (id=246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r7, {}, {}, {0x0, 0xfff8}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0x10) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000300)={"f4a81069259bca46cf7f97f502b3ce1398310972454dea1111cfda39b62fa310", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r9, 0xc0383e04, &(0x7f0000000e80)={""/32, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000b40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) mlockall(0x7) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0x7, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r10, 0xee01) syz_clone(0x4000080, &(0x7f00000022c0)="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", 0x1000, &(0x7f00000032c0), &(0x7f0000003300), &(0x7f0000003340)="fe89fa501c8cfdd433f6697c7ce4f9b177834e694451cfd0efc490ec77f7c144") close_range(r1, 0xffffffffffffffff, 0x0) 2.62212135s ago: executing program 1 (id=257): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000140)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000100)=@nullb, 0x0, &(0x7f0000000180)='./cgroup\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2.531519159s ago: executing program 1 (id=258): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x619}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) 2.531130815s ago: executing program 1 (id=259): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', 0x0, &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) 2.48181503s ago: executing program 1 (id=260): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r4, r4, 0x2f, 0x0, @void}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0xe4, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0x1, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xb4, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x78, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1b}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xef}]}, {0x34}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x18}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3ff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x66}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x28}]}]}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40001}, 0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000240), &(0x7f00000002c0)=0x4) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) r6 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r6, &(0x7f00000005c0)={&(0x7f0000000180)=@tipc=@name, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f0000000440)=""/87, 0x57}], 0x2, &(0x7f0000000500)=""/122, 0x7a}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)=0x6, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x8, 0x2a}]}, 0x10) sendto$inet(r0, &(0x7f0000000140)="87", 0x1, 0x4000010, 0x0, 0x0) 1.890292551s ago: executing program 3 (id=265): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2d, &(0x7f0000000000)=[@cr4={0x1, 0x9a0}], 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.683709969s ago: executing program 3 (id=268): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xf3, 0x4, @mcast1, 0x9}, 0x1c) r1 = dup2(r0, r0) write$evdev(r1, &(0x7f00000000c0)=[{{}, 0x3, 0x5c0, 0x9}, {{}, 0x1f, 0x727, 0x2}], 0x30) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0xfffd, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa3, 0xb69b, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x4b, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x200, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x9e29, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8091}, 0x4000000) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002090101000000001b00000001000001000100ac14141d080002007f00000106000340000400000408"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x0, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0x7fff, 0x2, 0x9, 0x3, 0x0, 0x7], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x3, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xc000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xf3, 0x40, 0x8, 0x2, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0x200000, 0x4000, 0x14, 0x85, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0xffff2000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x0, 0xf401, 0x3000, [0x9, 0x100000000000204, 0x5b, 0x8]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x409, 0x3040b, 0x1}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x620041, 0x0) setns(0xc9, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001600010324bd7022fcffffff2e"], 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d", 0xe}], 0x1) r9 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ppoll(&(0x7f0000000100)=[{r3, 0x2}, {r8, 0x1100}, {r0, 0x1000}, {r9, 0x12}], 0x4, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)={[0x2e1b]}, 0x8) 1.58479776s ago: executing program 1 (id=271): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x9, 0xcffe, 0xe, "0062ba7d8200000016001b000200f705096604"}) r1 = syz_open_pts(r0, 0x5c1282) dup3(r1, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_setup(0x8, &(0x7f00000000c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1.362369158s ago: executing program 3 (id=273): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$sock_proto_private(r0, 0x89e3, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x2}, {}, {0xfff2, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x5, 0xe}, {0xffeb, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040090}, 0x20028041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x8, 0x8, 0x61, 0x7, 0x4, 0x7, 0xf, 0x0, 0x64, 0x5, 0x0, 0x8000, 0x0, 0x5c, 0xa0, 0xdf5, [0x7, 0x4]}}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 652.033265ms ago: executing program 2 (id=275): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x28}, 0x20, 0x80, 0x7, 0x7ab}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x8, r0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000340)={0x1e8, r2, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x109, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @device_b, @initial, {0x3, 0xce}, @value=@ver_80211n={0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x1, @random=0x5, 0xa070, @val={0x0, 0x3, @random="de53ed"}, @val={0x1, 0x5, [{0x18, 0x1}, {0x36}, {0x5, 0x1}, {0x24, 0x1}, {0x3d}]}, @val={0x3, 0x1, 0xb7}, @val={0x4, 0x6, {0x5, 0xd, 0x1, 0xe}}, @val={0x6, 0x2, 0x1}, @val={0x5, 0x3, {0x5, 0x88, 0xe}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x3, 0xc}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0xce, 0x61}}, @val={0x76, 0x6, {0xff, 0x2, 0x39, 0x200}}, [{0xdd, 0x7f, "2e9c6bd9782ac70c7c93693093c3d695a4a6ba6c3f8a2be3b5e2ab692798f12a72ee90730514bf17fa2c1e8533574f5b3f9c31c7a97ecc4f7cb55b7a3367767729dd6c75416260acd7ee19f05b44b61c3cfc95af9d134842359fbe74ace3452e329c5051df1eb5ad917ab08a6e42d52e41bb7f45f80a2980c5b0cb834461bd"}, {0xdd, 0x6, "53814f4302b7"}, {0xdd, 0x8, "064d1b901feca5a6"}, {0xdd, 0x6, "25260b1c8227"}]}}, @NL80211_ATTR_PROBE_RESP={0xbe, 0x91, "097c6cb2ee460e115b056d5c391de88176e7acb873f7c38eb3100adf9765079c81e9f85ca892931e61c678f63bfdc2ad9044a68be7cd45770f96b22573aa6aab347440868d12c8438ac19e802bffdef95e8d9633cae85d242855c9a30b07c5c8b9c0ac43b03bb55034cee027f2be354870da799345962e4a08dbe3db5385d4049681c4846f3cc0aee71621dcbb178ec30b57fc69b080564c39ad2bbf840ebdf7da5315c751927c6b7559dc01e4de91d87cb8d21d2866c95bc78e"}]}, 0x1e8}}, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 651.721364ms ago: executing program 2 (id=276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) bind$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x41, 0x4}}}, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8a800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r7, &(0x7f0000000540)={0x1, {&(0x7f0000000480)=""/69, 0x4c, 0x0, 0x1, 0x2}}, 0xfffffdfb) write$vhost_msg_v2(r7, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000340)=""/72, 0x48, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r7, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x134e8c}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=[0x7f, 0xfffffffffffffff2, 0x0], 0x0, 0x0, 0x59, 0x1}}, 0x40) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r3, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r9, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r10 = dup3(r1, r9, 0x0) setsockopt$TIPC_GROUP_LEAVE(r10, 0x10f, 0x88) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xffffffffffffffff) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x400000) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x122, 0x0, 0x1}]}) 590.117479ms ago: executing program 1 (id=278): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000180)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) preadv(r4, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000bff000/0x400000)=nil) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x3, 0x0, [{0x40000083, 0x0, 0x1001}, {0x400000b0, 0x0, 0x3}, {0x400000b1, 0x0, 0x7}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 3) 531.812429ms ago: executing program 2 (id=279): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) utimensat(r0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000040)='./file0\x00', 0x311) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60840, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 460.450221ms ago: executing program 3 (id=281): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000080)=0x4) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_emit_ethernet(0xf6, &(0x7f00000002c0)={@random="d60cc34c4663", @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xc0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@dstopts={0x3b, 0x17, '\x00', [@ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x3}, @generic={0x4, 0xa1, "d981ff1105d0078fb62cbf37e3baa4bfea0ce90f60e46d0c59b5e151a13cac0d6cc7fbe5f6a850eca2c3f9ecb29584b4574c18ea2185bb2965f52ed6b875f3604ffe296c1c7461eca3e8f8bca7e7aca0f18a8c1362da74a8965fbd505f1d58e6f6c15f142bd48536c60018ecc5e3a72a4c4ddd33cd35503bd9aca18f641fe3bd7713f7730e84b4d65b54ee1df08d5f73ef65f90eea1cd7f4c219cceab9ba187554"}, @jumbo={0xc2, 0x4, 0xa}, @ra={0x5, 0x2, 0xef9}, @enc_lim={0x4, 0x1, 0x2}]}]}}}}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x660841) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x700, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), 0x0, 0x0, 0x0, 0x801}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1a3081, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35"], 0xcfa4) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x66) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000000)='3', 0x4e) r8 = syz_ublk_setup_io_uring(0x488c, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x1, 0x0, r7}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit$UBLK(r9, r10, r11, &(0x7f0000000200)=@ublk_add_dev_sqe={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000800000)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x8000}}}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_delrule={0x24, 0x18, 0x1, 0x70bd2b, 0x25dfdbff, {0xa, 0x20, 0x0, 0x0, 0xff, 0x3, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x540c0}, 0x20044884) mprotect(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x1) io_uring_enter(r8, 0x1, 0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0xd1684000) syz_emit_ethernet(0x1072, &(0x7f00000015c0)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x17, 0x4, 0x1, 0x29, 0x1064, 0x64, 0x0, 0xc, 0x2, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x32, 0x0, [{0x0, 0xb, "6b62a9b4a7265b2813"}, {0x7, 0x8, "61e9c0287a7e"}, {0x1, 0x5, "b0e325"}, {0x0, 0x2}, {0x1, 0x12, "588d0822c8aed906cba1de9a3a1f160b"}]}, @ssrr={0x89, 0xb, 0xbe, [@multicast2, @broadcast]}, @generic={0xb1f9e7ecdc8b6a0c, 0x7, "a1b4187378"}, @noop]}}, {0x22, 0x1, 0x0, @broadcast, "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"}}}}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$SG_GET_LOW_DMA(r7, 0x227a, &(0x7f00000001c0)) 459.741092ms ago: executing program 2 (id=282): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c000780080004000400000008000100070000000800020009000000080004000500000008000400009e"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x4008000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf2501000800000000000000000006001a004e230000050021000100000008001800ac1414bb06000300070000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 459.560582ms ago: executing program 0 (id=283): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000940)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41, 0x4}}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14, 0x1, 0x24, 0x46400000}}], 0x18}, 0x0) 457.759288ms ago: executing program 0 (id=284): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4801) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000200)}) 370.67348ms ago: executing program 2 (id=285): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r2}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r3}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000000), &(0x7f0000000140)='%pI4 \x00'}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)={0x2c, 0x2d, 0x1, 0x0, 0x25dfdc02, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x104}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @pid}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00', r1}, 0x18) 370.57359ms ago: executing program 0 (id=286): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) 370.429252ms ago: executing program 2 (id=287): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffbf, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [0x100, 0x6, 0x2, 0x9, 0x7f, 0x7], 0x1, 0x0, 0x0, [{}]}, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xb}}, './sys/bus/pci/devices/0000:00:01.0/remove\x00'}) write(r2, &(0x7f00000001c0)='1', 0x1) 315.38025ms ago: executing program 0 (id=288): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000004ec0)={&(0x7f0000002dc0)={0x14, 0x26, 0x303, 0x70bd28, 0x25dfdbfe, {0x1f}}, 0x14}, 0x1, 0x0, 0x0, 0x40000d5}, 0x24000844) 251.566777ms ago: executing program 0 (id=289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000000)="360f7883b81e2626660fc7350ff4650666b95c030010dada32f4656df30f09e3650f01ef66b9720500000f32f8000f0d35", 0x31}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="66baf80cb898d5fb8bef66bafc0ced66baf80cb8ec6ca98aef66bafc0cb022eec4e2f93334d3c4c3b97c7900030f01c266ba4300b86ba80000ef640fea47009a080000001e01b805000000b90d0000000f01c1363e26638200600000", 0x5c}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)=@vmx={0x108, 0x0, 0x2080, {0x0, 0x8000000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=290): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0xc801) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) kernel console output (not intermixed with test programs): [ 37.673650][ T43] audit: type=1400 audit(1789743730.797:119): avc: denied { rlimitinh } for pid=5651 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.673996][ T43] audit: type=1400 audit(1789743730.797:120): avc: denied { siginh } for pid=5651 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:59217' (ED25519) to the list of known hosts. [ 42.760120][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 42.760139][ T43] audit: type=1400 audit(1789743735.887:141): avc: denied { mounton } for pid=5714 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.761810][ T43] audit: type=1400 audit(1789743735.887:142): avc: denied { mount } for pid=5714 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.763965][ T5714] cgroup: Unknown subsys name 'net' [ 42.765203][ T43] audit: type=1400 audit(1789743735.887:143): avc: denied { unmount } for pid=5714 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.899085][ T5714] cgroup: Unknown subsys name 'cpuset' [ 42.901612][ T5714] cgroup: Unknown subsys name 'rlimit' [ 43.084703][ T43] audit: type=1400 audit(1789743736.207:144): avc: denied { setattr } for pid=5714 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.085339][ T43] audit: type=1400 audit(1789743736.207:145): avc: denied { create } for pid=5714 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.085874][ T43] audit: type=1400 audit(1789743736.207:146): avc: denied { write } for pid=5714 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.086610][ T43] audit: type=1400 audit(1789743736.217:147): avc: denied { read } for pid=5714 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.104272][ T43] audit: type=1400 audit(1789743736.227:148): avc: denied { mounton } for pid=5714 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 43.104371][ T43] audit: type=1400 audit(1789743736.227:149): avc: denied { mount } for pid=5714 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 43.128641][ T43] audit: type=1400 audit(1789743736.247:150): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 43.167616][ T5721] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 43.878870][ T5714] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.163832][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 48.163854][ T43] audit: type=1400 audit(1789743741.287:158): avc: denied { execmem } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.382471][ T43] audit: type=1400 audit(1789743741.507:159): avc: denied { create } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.383771][ T43] audit: type=1400 audit(1789743741.507:160): avc: denied { read write } for pid=5728 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.384430][ T43] audit: type=1400 audit(1789743741.507:161): avc: denied { open } for pid=5728 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.399110][ T43] audit: type=1400 audit(1789743741.527:162): avc: denied { ioctl } for pid=5728 comm="syz-executor" path="socket:[2705]" dev="sockfs" ino=2705 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.411591][ T5729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.417417][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.418594][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.420817][ T5733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.427505][ T5737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.427957][ T5737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.428815][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.429452][ T5737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.430685][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.431785][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.432260][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.441835][ T5737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.453042][ T5729] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.457865][ T5729] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.457987][ T43] audit: type=1400 audit(1789743741.567:163): avc: denied { read } for pid=5728 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.458030][ T43] audit: type=1400 audit(1789743741.567:164): avc: denied { open } for pid=5728 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.458821][ T5729] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.460548][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.461260][ T43] audit: type=1400 audit(1789743741.587:165): avc: denied { mounton } for pid=5728 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.464886][ T5737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.466324][ T5737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.468328][ T5090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.471159][ T43] audit: type=1400 audit(1789743741.597:166): avc: denied { module_request } for pid=5728 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.475038][ T5739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.513335][ T43] audit: type=1400 audit(1789743741.637:167): avc: denied { sys_module } for pid=5728 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 49.386512][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.387097][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.387192][ T5735] bridge_slave_0: entered allmulticast mode [ 49.388260][ T5735] bridge_slave_0: entered promiscuous mode [ 49.391373][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.391448][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.391548][ T5728] bridge_slave_0: entered allmulticast mode [ 49.392935][ T5728] bridge_slave_0: entered promiscuous mode [ 49.395689][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.395766][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.395979][ T5728] bridge_slave_1: entered allmulticast mode [ 49.397498][ T5728] bridge_slave_1: entered promiscuous mode [ 49.422827][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.422873][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.423018][ T5735] bridge_slave_1: entered allmulticast mode [ 49.423751][ T5735] bridge_slave_1: entered promiscuous mode [ 49.492538][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.498949][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.557723][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.579628][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.579761][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.579882][ T5734] bridge_slave_0: entered allmulticast mode [ 49.581654][ T5734] bridge_slave_0: entered promiscuous mode [ 49.590322][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.604812][ T5728] team0: Port device team_slave_0 added [ 49.607572][ T5728] team0: Port device team_slave_1 added [ 49.607726][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.607797][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.608096][ T5734] bridge_slave_1: entered allmulticast mode [ 49.609469][ T5734] bridge_slave_1: entered promiscuous mode [ 49.636709][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.636772][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.636841][ T5731] bridge_slave_0: entered allmulticast mode [ 49.637672][ T5731] bridge_slave_0: entered promiscuous mode [ 49.672426][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.673422][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.673568][ T5731] bridge_slave_1: entered allmulticast mode [ 49.675565][ T5731] bridge_slave_1: entered promiscuous mode [ 49.678013][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.680454][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.681676][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.681688][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.681710][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.683908][ T5735] team0: Port device team_slave_0 added [ 49.687185][ T5735] team0: Port device team_slave_1 added [ 49.716919][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.716930][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.716943][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.733115][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.743262][ T5734] team0: Port device team_slave_0 added [ 49.756808][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.757420][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.757435][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.757458][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.777953][ T5734] team0: Port device team_slave_1 added [ 49.779899][ T5731] team0: Port device team_slave_0 added [ 49.780432][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.780441][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.780454][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.782158][ T5731] team0: Port device team_slave_1 added [ 49.848360][ T5728] hsr_slave_0: entered promiscuous mode [ 49.848885][ T5728] hsr_slave_1: entered promiscuous mode [ 49.849965][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.849974][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.849986][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.852447][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.852455][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.852468][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.853857][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.853871][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.853892][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.882168][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.882185][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.882208][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.896219][ T5735] hsr_slave_0: entered promiscuous mode [ 49.896659][ T5735] hsr_slave_1: entered promiscuous mode [ 49.896973][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 49.897038][ T5735] Cannot create hsr debugfs directory [ 49.986108][ T5734] hsr_slave_0: entered promiscuous mode [ 49.986564][ T5734] hsr_slave_1: entered promiscuous mode [ 49.986891][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 49.986903][ T5734] Cannot create hsr debugfs directory [ 50.063741][ T5731] hsr_slave_0: entered promiscuous mode [ 50.064363][ T5731] hsr_slave_1: entered promiscuous mode [ 50.064722][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 50.064734][ T5731] Cannot create hsr debugfs directory [ 50.309525][ T5728] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.320287][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.322627][ T5728] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.330734][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.331957][ T5728] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.336745][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.350555][ T5728] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.356776][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.420114][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.423441][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.424179][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.427920][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.428621][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.432038][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.432637][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.438829][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.449017][ T5733] Bluetooth: hci1: command tx timeout [ 50.522634][ T5731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.526952][ T5733] Bluetooth: hci3: command tx timeout [ 50.527142][ T5733] Bluetooth: hci0: command tx timeout [ 50.527218][ T5733] Bluetooth: hci2: command tx timeout [ 50.527614][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.537324][ T5731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.541876][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.542846][ T5731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.548813][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.556099][ T5731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.559476][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.611658][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.642446][ T5734] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.647479][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.648220][ T5734] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.651198][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.653993][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.656433][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.657087][ T5734] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.661969][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.662805][ T5734] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.667042][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.687687][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.687774][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.704640][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.704695][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.714514][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.743783][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.743852][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.753931][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.753978][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.817766][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.862473][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.877672][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.877726][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.881448][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.891178][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.891272][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.932907][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.955225][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.955319][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.971296][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.971344][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.205732][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.252023][ T5728] veth0_vlan: entered promiscuous mode [ 51.261492][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.269912][ T5728] veth1_vlan: entered promiscuous mode [ 51.308149][ T5728] veth0_macvtap: entered promiscuous mode [ 51.315558][ T5728] veth1_macvtap: entered promiscuous mode [ 51.319490][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.337218][ T5735] veth0_vlan: entered promiscuous mode [ 51.345516][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.351492][ T5735] veth1_vlan: entered promiscuous mode [ 51.363762][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.390588][ T5735] veth0_macvtap: entered promiscuous mode [ 51.394059][ T5735] veth1_macvtap: entered promiscuous mode [ 51.405234][ T5731] veth0_vlan: entered promiscuous mode [ 51.408353][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.434447][ T5731] veth1_vlan: entered promiscuous mode [ 51.438780][ T5810] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.448880][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.457379][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.471589][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.511807][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.511821][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.528397][ T5734] veth0_vlan: entered promiscuous mode [ 51.548566][ T5731] veth0_macvtap: entered promiscuous mode [ 51.557101][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.557114][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.558636][ T5731] veth1_macvtap: entered promiscuous mode [ 51.560455][ T5734] veth1_vlan: entered promiscuous mode [ 51.571280][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.571293][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.603749][ T227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.603771][ T227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.604613][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.616929][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.627901][ T5728] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.629873][ T5734] veth0_macvtap: entered promiscuous mode [ 51.648285][ T5734] veth1_macvtap: entered promiscuous mode [ 51.683628][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.704096][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.730372][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.730386][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.756602][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.756621][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.798894][ T5884] loop0: detected capacity change from 0 to 4096 [ 51.852379][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.852393][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.884051][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.884066][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.896738][ T5810] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.897038][ T5810] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.897318][ T5810] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.897444][ T5810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.897467][ T5810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.897487][ T5810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.897507][ T5810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.897528][ T5810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.897548][ T5810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.897568][ T5810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.897589][ T5810] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.897609][ T5810] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.897630][ T5810] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.897651][ T5810] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.921721][ T5885] FAULT_INJECTION: forcing a failure. [ 51.921721][ T5885] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 51.921747][ T5885] CPU: 0 UID: 0 PID: 5885 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 51.921762][ T5885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.921770][ T5885] Call Trace: [ 51.921775][ T5885] [ 51.921780][ T5885] dump_stack_lvl+0x100/0x190 [ 51.921803][ T5885] should_fail_ex.cold+0x5/0xa [ 51.921825][ T5885] strncpy_from_user+0x3b/0x2d0 [ 51.921844][ T5885] do_getname+0x78/0x390 [ 51.921864][ T5885] do_sys_openat2+0xc7/0x1e0 [ 51.921890][ T5885] ? __pfx_do_sys_openat2+0x10/0x10 [ 51.921909][ T5885] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 51.921934][ T5885] __x64_sys_openat+0x12d/0x210 [ 51.921954][ T5885] ? __pfx___x64_sys_openat+0x10/0x10 [ 51.921979][ T5885] do_syscall_64+0x123/0x790 [ 51.921999][ T5885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.922013][ T5885] RIP: 0033:0x7f9241d5e98e [ 51.922023][ T5885] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 51.922036][ T5885] RSP: 002b:00007f9242cd1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 51.922049][ T5885] RAX: ffffffffffffffda RBX: 00007f9242cd26c0 RCX: 00007f9241d5e98e [ 51.922058][ T5885] RDX: 0000000000204080 RSI: 00007f9242cd1c00 RDI: ffffffffffffff9c [ 51.922066][ T5885] RBP: 00007f9242cd1c00 R08: 0000000000000000 R09: 0000000000000000 [ 51.922074][ T5885] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 51.922082][ T5885] R13: 00007f9242026038 R14: 00007f9242025fa0 R15: 00007ffeb5dbe5e8 [ 51.922098][ T5885] [ 52.101748][ T5898] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 52.115546][ T5898] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5'. [ 52.306536][ T5910] trusted_key: encrypted_key: insufficient parameters specified [ 52.373024][ T5914] ======================================================= [ 52.373024][ T5914] WARNING: The mand mount option has been deprecated and [ 52.373024][ T5914] and is ignored by this kernel. Remove the mand [ 52.373024][ T5914] option from the mount to silence this warning. [ 52.373024][ T5914] ======================================================= [ 52.373547][ T5914] jffs2: notice: (5914) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 52.470658][ T5914] Zero length message leads to an empty skb [ 52.521853][ T5927] Cannot find set identified by id 0 to match [ 52.527186][ T5739] Bluetooth: hci1: command tx timeout [ 52.586828][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.610355][ T5733] Bluetooth: hci0: command tx timeout [ 52.610396][ T5733] Bluetooth: hci3: command tx timeout [ 52.610467][ T5739] Bluetooth: hci2: command tx timeout [ 52.770986][ T9] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 52.773910][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 4096, setting to 1024 [ 52.773939][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 52.775772][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 52.775791][ T9] usb 6-1: Product: syz [ 52.775805][ T9] usb 6-1: Manufacturer: syz [ 52.815863][ T9] iuu_phoenix 6-1:1.0: iuu_phoenix converter detected [ 52.859968][ T9] usb 6-1: iuu_phoenix converter now attached to ttyUSB0 [ 52.877143][ T5935] SELinux: mls: truncated range [ 52.877153][ T5935] SELinux: error reading MLS range of context [ 52.877158][ T5935] SELinux: invalid ocon [ 52.975727][ T5935] SELinux: failed to load policy [ 53.042027][ T5912] Bluetooth: (null): Invalid header checksum [ 53.059668][ T63] Bluetooth: (null): Invalid header checksum [ 53.178372][ T1159] Bluetooth: (null): Invalid header checksum [ 53.297747][ T74] Bluetooth: (null): Invalid header checksum [ 53.319856][ T5950] FAULT_INJECTION: forcing a failure. [ 53.319856][ T5950] name failslab, interval 1, probability 0, space 0, times 1 [ 53.319886][ T5950] CPU: 1 UID: 0 PID: 5950 Comm: syz.3.21 Not tainted syzkaller #0 PREEMPT(full) [ 53.319906][ T5950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.319917][ T5950] Call Trace: [ 53.319923][ T5950] [ 53.319930][ T5950] dump_stack_lvl+0x100/0x190 [ 53.319960][ T5950] should_fail_ex.cold+0x5/0xa [ 53.319986][ T5950] should_failslab+0xc2/0x120 [ 53.320007][ T5950] __kvmalloc_node_noprof+0x113/0x9b0 [ 53.320027][ T5950] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 53.320047][ T5950] ? ceph_msg_new2+0x370/0x4f0 [ 53.320074][ T5950] ceph_msg_new2+0x370/0x4f0 [ 53.320098][ T5950] ceph_monc_init+0x686/0xcd0 [ 53.320128][ T5950] ceph_create_client+0x25e/0x370 [ 53.320148][ T5950] ceph_get_tree+0x1a4/0x1fd0 [ 53.320173][ T5950] ? bpf_lsm_capable+0x9/0x10 [ 53.320219][ T5950] ? security_capable+0x80/0x260 [ 53.320247][ T5950] vfs_get_tree+0x92/0x320 [ 53.320272][ T5950] vfs_cmd_create+0xd7/0x2a0 [ 53.320292][ T5950] __do_sys_fsconfig+0x55a/0xcb0 [ 53.320311][ T5950] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 53.320329][ T5950] ? fput+0x7c/0x100 [ 53.320361][ T5950] do_syscall_64+0x123/0x790 [ 53.320387][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.320404][ T5950] RIP: 0033:0x7f912579e159 [ 53.320419][ T5950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.320435][ T5950] RSP: 002b:00007f91266f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 53.320453][ T5950] RAX: ffffffffffffffda RBX: 00007f9125a25fa0 RCX: 00007f912579e159 [ 53.320465][ T5950] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 53.320475][ T5950] RBP: 00007f91266f1090 R08: 0000000000000000 R09: 0000000000000000 [ 53.320486][ T5950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.320496][ T5950] R13: 00007f9125a26038 R14: 00007f9125a25fa0 R15: 00007ffe529f9fb8 [ 53.320517][ T5950] [ 53.347912][ T43] kauditd_printk_skb: 143 callbacks suppressed [ 53.347928][ T43] audit: type=1400 audit(1789743746.467:311): avc: denied { read } for pid=5952 comm="syz.0.22" name="nullb" dev="configfs" ino=6493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.348024][ T43] audit: type=1400 audit(1789743746.467:312): avc: denied { read open } for pid=5952 comm="syz.0.22" path="/4/my_configfs/nullb" dev="configfs" ino=6493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.361669][ T43] audit: type=1400 audit(1789743746.487:313): avc: denied { write } for pid=5952 comm="syz.0.22" name="nullb" dev="configfs" ino=6493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.365776][ T43] audit: type=1400 audit(1789743746.487:314): avc: denied { write } for pid=5952 comm="syz.0.22" name="nullb" dev="configfs" ino=6493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.365818][ T43] audit: type=1400 audit(1789743746.487:315): avc: denied { remove_name } for pid=5952 comm="syz.0.22" name="nullb1" dev="configfs" ino=8806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.365851][ T43] audit: type=1400 audit(1789743746.487:316): avc: denied { rmdir } for pid=5952 comm="syz.0.22" name="nullb1" dev="configfs" ino=8806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.455441][ T63] Bluetooth: (null): Invalid header checksum [ 53.481460][ T5959] jffs2: notice: (5959) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 3 of xref (0 dead, 3 orphan) found. [ 53.527911][ T1159] Bluetooth: (null): Invalid header checksum [ 53.546709][ T43] audit: type=1804 audit(1789743746.667:317): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.25" name="/newroot/6/file0/mnt/file0" dev="sda1" ino=2038 res=1 errno=0 [ 53.596445][ T43] audit: type=1804 audit(1789743746.727:318): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.25" name="/newroot/6/file0/mnt/file0" dev="sda1" ino=2038 res=1 errno=0 [ 53.636969][ T63] Bluetooth: (null): Invalid header checksum [ 53.656950][ T43] audit: type=1400 audit(1789743746.787:319): avc: denied { create } for pid=5964 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 53.757400][ T63] Bluetooth: (null): Invalid header checksum [ 53.797504][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28'. [ 53.850062][ T43] audit: type=1400 audit(1789743746.977:320): avc: denied { accept } for pid=5969 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 53.866679][ T63] Bluetooth: (null): Invalid header checksum [ 53.902544][ T5944] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 53.902756][ T5975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30'. [ 53.981064][ T74] Bluetooth: (null): Invalid header checksum [ 54.028620][ T5982] netlink: 'syz.3.33': attribute type 7 has an invalid length. [ 54.028640][ T5982] netlink: 'syz.3.33': attribute type 8 has an invalid length. [ 54.070760][ T5982] team0 (unregistering): Port device team_slave_0 removed [ 54.077262][ T5982] team0 (unregistering): Port device team_slave_1 removed [ 54.088050][ T74] Bluetooth: (null): Invalid header checksum [ 54.193901][ T35] usb 6-1: USB disconnect, device number 2 [ 54.202539][ T35] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 54.203195][ T35] iuu_phoenix 6-1:1.0: device disconnected [ 54.617904][ T5737] Bluetooth: hci1: command tx timeout [ 54.686324][ T5739] Bluetooth: hci3: command tx timeout [ 54.686354][ T5739] Bluetooth: hci0: command tx timeout [ 54.686451][ T5737] Bluetooth: hci2: command tx timeout [ 54.999263][ T6007] syz_tun: entered allmulticast mode [ 55.004214][ T6007] FAULT_INJECTION: forcing a failure. [ 55.004214][ T6007] name failslab, interval 1, probability 0, space 0, times 0 [ 55.004243][ T6007] CPU: 1 UID: 0 PID: 6007 Comm: syz.2.42 Not tainted syzkaller #0 PREEMPT(full) [ 55.004263][ T6007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.004274][ T6007] Call Trace: [ 55.004280][ T6007] [ 55.004288][ T6007] dump_stack_lvl+0x100/0x190 [ 55.004319][ T6007] should_fail_ex.cold+0x5/0xa [ 55.004345][ T6007] should_failslab+0xc2/0x120 [ 55.004369][ T6007] kmem_cache_alloc_noprof+0x92/0x6a0 [ 55.004390][ T6007] ? dst_alloc+0x99/0x1a0 [ 55.004415][ T6007] dst_alloc+0x99/0x1a0 [ 55.004436][ T6007] rt_dst_alloc+0x35/0x3a0 [ 55.004462][ T6007] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 55.004490][ T6007] ip_route_output_key_hash+0x118/0x2b0 [ 55.004510][ T6007] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 55.004531][ T6007] ? find_held_lock+0x2b/0x80 [ 55.004560][ T6007] ? __pfx_map_id_range_down+0x10/0x10 [ 55.004588][ T6007] ip_route_output_flow+0x27/0x150 [ 55.004608][ T6007] ipmr_prepare_xmit+0x34f/0x1940 [ 55.004636][ T6007] ? __pfx_ipmr_prepare_xmit+0x10/0x10 [ 55.004664][ T6007] ? rcu_read_lock_any_held+0x40/0x90 [ 55.004694][ T6007] ipmr_queue_fwd_xmit+0x1eb/0xab0 [ 55.004714][ T6007] ? warn_bogus_irq_restore+0x20/0x20 [ 55.004738][ T6007] ? __pfx_ipmr_hash_cmp+0x10/0x10 [ 55.004761][ T6007] ? __pfx_ipmr_queue_fwd_xmit+0x10/0x10 [ 55.004785][ T6007] ? __pfx_mr_mfc_find_any_parent+0x10/0x10 [ 55.004807][ T6007] ? __lock_acquire+0x5c0/0x1f40 [ 55.004833][ T6007] ip_mr_forward+0xb68/0x11b0 [ 55.004859][ T6007] ? __pfx_ip_mr_forward+0x10/0x10 [ 55.004885][ T6007] ipmr_mfc_add+0x1dbb/0x2dc0 [ 55.004909][ T6007] ? cred_has_capability.isra.0+0x186/0x300 [ 55.004939][ T6007] ? __pfx_ipmr_mfc_add+0x10/0x10 [ 55.004974][ T6007] ? ip_mroute_setsockopt+0xd11/0x12b0 [ 55.004997][ T6007] ip_mroute_setsockopt+0xd11/0x12b0 [ 55.005027][ T6007] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 55.005055][ T6007] ? avc_has_perm_noaudit+0x145/0x3b0 [ 55.005089][ T6007] ? __pfx_avc_has_perm+0x10/0x10 [ 55.005120][ T6007] do_ip_setsockopt+0x382/0x3310 [ 55.005153][ T6007] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 55.005180][ T6007] ? __pfx_sock_has_perm+0x10/0x10 [ 55.005207][ T6007] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 55.005231][ T6007] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 55.005261][ T6007] ip_setsockopt+0x5a/0xf0 [ 55.005291][ T6007] raw_setsockopt+0x60/0x1b0 [ 55.005318][ T6007] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 55.005346][ T6007] do_sock_setsockopt+0xf3/0x1d0 [ 55.005376][ T6007] __sys_setsockopt+0x195/0x220 [ 55.005402][ T6007] __x64_sys_setsockopt+0xbd/0x160 [ 55.005423][ T6007] ? do_syscall_64+0xae/0x790 [ 55.005448][ T6007] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.005474][ T6007] do_syscall_64+0x123/0x790 [ 55.005502][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.005522][ T6007] RIP: 0033:0x7f9b5659e159 [ 55.005538][ T6007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.005555][ T6007] RSP: 002b:00007f9b57549028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 55.005573][ T6007] RAX: ffffffffffffffda RBX: 00007f9b56825fa0 RCX: 00007f9b5659e159 [ 55.005585][ T6007] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000009 [ 55.005596][ T6007] RBP: 00007f9b57549090 R08: 000000000000003c R09: 0000000000000000 [ 55.005607][ T6007] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 55.005617][ T6007] R13: 00007f9b56826038 R14: 00007f9b56825fa0 R15: 00007ffc615881b8 [ 55.005643][ T6007] [ 55.117473][ T5840] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.146465][ T6011] pimreg: entered allmulticast mode [ 55.287249][ T5840] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 55.288127][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 55.288191][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 55.288204][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 55.288215][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 55.290008][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.290019][ T5840] usb 5-1: Product: syz [ 55.290026][ T5840] usb 5-1: Manufacturer: syz [ 55.290033][ T5840] usb 5-1: SerialNumber: syz [ 55.292935][ T5840] usb 5-1: config 0 descriptor?? [ 55.299940][ T6025] syz.2.48 uses obsolete (PF_INET,SOCK_PACKET) [ 55.373551][ T6029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 55.503398][ T5840] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 55.542548][ T6044] FAULT_INJECTION: forcing a failure. [ 55.542548][ T6044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.542568][ T6044] CPU: 1 UID: 0 PID: 6044 Comm: syz.3.55 Not tainted syzkaller #0 PREEMPT(full) [ 55.542580][ T6044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.542587][ T6044] Call Trace: [ 55.542591][ T6044] [ 55.542595][ T6044] dump_stack_lvl+0x100/0x190 [ 55.542615][ T6044] should_fail_ex.cold+0x5/0xa [ 55.542631][ T6044] _copy_from_user+0x2e/0xd0 [ 55.542643][ T6044] wext_handle_ioctl+0xc9/0x1b0 [ 55.542660][ T6044] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 55.542682][ T6044] ? do_vfs_ioctl+0x226/0x13e0 [ 55.542694][ T6044] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 55.542703][ T6044] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 55.542718][ T6044] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 55.542733][ T6044] sock_ioctl+0x2d4/0x6b0 [ 55.542744][ T6044] ? __pfx_sock_ioctl+0x10/0x10 [ 55.542757][ T6044] ? selinux_file_ioctl+0x13b/0x290 [ 55.542768][ T6044] ? selinux_file_ioctl+0xb6/0x290 [ 55.542781][ T6044] ? __pfx_sock_ioctl+0x10/0x10 [ 55.542791][ T6044] __x64_sys_ioctl+0x18e/0x210 [ 55.542803][ T6044] do_syscall_64+0x123/0x790 [ 55.542821][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.542833][ T6044] RIP: 0033:0x7f912579e159 [ 55.542842][ T6044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.542852][ T6044] RSP: 002b:00007f91266f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.542863][ T6044] RAX: ffffffffffffffda RBX: 00007f9125a25fa0 RCX: 00007f912579e159 [ 55.542870][ T6044] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000005 [ 55.542877][ T6044] RBP: 00007f91266f1090 R08: 0000000000000000 R09: 0000000000000000 [ 55.542883][ T6044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.542889][ T6044] R13: 00007f9125a26038 R14: 00007f9125a25fa0 R15: 00007ffe529f9fb8 [ 55.542902][ T6044] [ 55.583787][ T6040] netlink: 40 bytes leftover after parsing attributes in process `syz.1.53'. [ 55.618678][ T6040] netlink: 'syz.1.53': attribute type 11 has an invalid length. [ 55.708692][ T30] usb 5-1: USB disconnect, device number 2 [ 55.770403][ T6055] capability: warning: `syz.3.58' uses deprecated v2 capabilities in a way that may be insecure [ 56.425464][ T6067] openvswitch: netlink: Tunnel attr 2048 out of range max 16 [ 56.431835][ T6067] FAULT_INJECTION: forcing a failure. [ 56.431835][ T6067] name failslab, interval 1, probability 0, space 0, times 0 [ 56.431863][ T6067] CPU: 0 UID: 0 PID: 6067 Comm: syz.0.63 Not tainted syzkaller #0 PREEMPT(full) [ 56.431884][ T6067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.431895][ T6067] Call Trace: [ 56.431901][ T6067] [ 56.431908][ T6067] dump_stack_lvl+0x100/0x190 [ 56.431940][ T6067] should_fail_ex.cold+0x5/0xa [ 56.431966][ T6067] should_failslab+0xc2/0x120 [ 56.431989][ T6067] __kmalloc_noprof+0xfc/0x840 [ 56.432008][ T6067] ? lsm_blob_alloc+0x68/0x90 [ 56.432037][ T6067] lsm_blob_alloc+0x68/0x90 [ 56.432063][ T6067] security_key_alloc+0x34/0x310 [ 56.432083][ T6067] key_alloc+0x876/0x1310 [ 56.432108][ T6067] ? __kmalloc_noprof+0x350/0x840 [ 56.432127][ T6067] ? __pfx_key_alloc+0x10/0x10 [ 56.432149][ T6067] ? hook_cred_prepare+0x177/0x370 [ 56.432172][ T6067] keyring_alloc+0x44/0xc0 [ 56.432195][ T6067] lookup_user_key+0x9b8/0x1300 [ 56.432217][ T6067] ? __pfx_lookup_user_key+0x10/0x10 [ 56.432235][ T6067] ? lock_acquire+0x1d1/0x380 [ 56.432254][ T6067] ? __might_fault+0xc5/0x140 [ 56.432281][ T6067] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 56.432305][ T6067] ? strncpy_from_user+0x19d/0x2d0 [ 56.432329][ T6067] __do_sys_add_key+0x2a6/0x460 [ 56.432354][ T6067] ? __pfx___do_sys_add_key+0x10/0x10 [ 56.432387][ T6067] do_syscall_64+0x123/0x790 [ 56.432414][ T6067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.432432][ T6067] RIP: 0033:0x7f9241d9e159 [ 56.432446][ T6067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.432462][ T6067] RSP: 002b:00007f9242cd2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 56.432480][ T6067] RAX: ffffffffffffffda RBX: 00007f9242025fa0 RCX: 00007f9241d9e159 [ 56.432492][ T6067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 56.432502][ T6067] RBP: 00007f9241e3506b R08: ffffffffffffffff R09: 0000000000000000 [ 56.432513][ T6067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.432523][ T6067] R13: 00007f9242026038 R14: 00007f9242025fa0 R15: 00007ffeb5dbe5e8 [ 56.432546][ T6067] [ 56.452774][ T6069] warning: `syz.1.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 56.463885][ T6071] FAULT_INJECTION: forcing a failure. [ 56.463885][ T6071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.463915][ T6071] CPU: 3 UID: 0 PID: 6071 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) [ 56.463937][ T6071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.463948][ T6071] Call Trace: [ 56.463955][ T6071] [ 56.463963][ T6071] dump_stack_lvl+0x100/0x190 [ 56.463995][ T6071] should_fail_ex.cold+0x5/0xa [ 56.464025][ T6071] _copy_from_user+0x2e/0xd0 [ 56.464046][ T6071] do_devconfig_ioctl+0x11e/0x6d0 [ 56.464069][ T6071] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 56.464102][ T6071] ? kasan_quarantine_put+0x104/0x240 [ 56.464126][ T6071] ? find_held_lock+0x2b/0x80 [ 56.464154][ T6071] comedi_unlocked_ioctl+0x860/0x3310 [ 56.464180][ T6071] ? tomoyo_path_number_perm+0x188/0x580 [ 56.464204][ T6071] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 56.464232][ T6071] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 56.464251][ T6071] ? do_vfs_ioctl+0x226/0x13e0 [ 56.464267][ T6071] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 56.464282][ T6071] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 56.464308][ T6071] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 56.464332][ T6071] ? __fget_files+0x34/0x3d0 [ 56.464362][ T6071] ? selinux_file_ioctl+0x13b/0x290 [ 56.464381][ T6071] ? selinux_file_ioctl+0xb6/0x290 [ 56.464399][ T6071] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 56.464420][ T6071] __x64_sys_ioctl+0x18e/0x210 [ 56.464441][ T6071] do_syscall_64+0x123/0x790 [ 56.464466][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.464482][ T6071] RIP: 0033:0x7f9b5659e159 [ 56.464495][ T6071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.464509][ T6071] RSP: 002b:00007f9b57549028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.464525][ T6071] RAX: ffffffffffffffda RBX: 00007f9b56825fa0 RCX: 00007f9b5659e159 [ 56.464536][ T6071] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003 [ 56.464546][ T6071] RBP: 00007f9b57549090 R08: 0000000000000000 R09: 0000000000000000 [ 56.464556][ T6071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.464565][ T6071] R13: 00007f9b56826038 R14: 00007f9b56825fa0 R15: 00007ffc615881b8 [ 56.464587][ T6071] [ 56.679141][ T6085] PM: Enabling pm_trace changes system date and time during resume. [ 56.679141][ T6085] PM: Correct system time has to be restored manually after resume. [ 56.687573][ T5737] Bluetooth: hci1: command tx timeout [ 56.776608][ T5733] Bluetooth: hci0: command tx timeout [ 56.776645][ T5733] Bluetooth: hci3: command tx timeout [ 56.776691][ T5737] Bluetooth: hci2: command tx timeout [ 56.897160][ T6090] FAULT_INJECTION: forcing a failure. [ 56.897160][ T6090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.897182][ T6090] CPU: 1 UID: 0 PID: 6090 Comm: syz.3.71 Not tainted syzkaller #0 PREEMPT(full) [ 56.897194][ T6090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.897201][ T6090] Call Trace: [ 56.897205][ T6090] [ 56.897210][ T6090] dump_stack_lvl+0x100/0x190 [ 56.897230][ T6090] should_fail_ex.cold+0x5/0xa [ 56.897246][ T6090] _copy_from_user+0x2e/0xd0 [ 56.897259][ T6090] __do_sys_add_key+0x278/0x460 [ 56.897276][ T6090] ? __pfx___do_sys_add_key+0x10/0x10 [ 56.897298][ T6090] ? ksys_write+0x1ac/0x250 [ 56.897314][ T6090] do_syscall_64+0x123/0x790 [ 56.897331][ T6090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.897343][ T6090] RIP: 0033:0x7f912579e159 [ 56.897352][ T6090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.897363][ T6090] RSP: 002b:00007f91266f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 56.897374][ T6090] RAX: ffffffffffffffda RBX: 00007f9125a25fa0 RCX: 00007f912579e159 [ 56.897381][ T6090] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 56.897387][ T6090] RBP: 00007f91266f1090 R08: ffffffffffffffff R09: 0000000000000000 [ 56.897393][ T6090] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000001 [ 56.897400][ T6090] R13: 00007f9125a26038 R14: 00007f9125a25fa0 R15: 00007ffe529f9fb8 [ 56.897413][ T6090] [ 57.110268][ T6097] netlink: 'syz.3.74': attribute type 142 has an invalid length. [ 57.526982][ T6124] ptp ptp0: only physical clock in use now [ 57.553614][ T6124] ptp ptp0: new virtual clock ptp2 [ 57.553640][ T6124] ptp ptp0: guarantee physical clock free running [ 58.528682][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'. [ 58.528719][ T6178] netlink: 'syz.0.97': attribute type 10 has an invalid length. [ 58.528734][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.97'. [ 58.536610][ T6178] geneve2: entered promiscuous mode [ 58.536630][ T6178] geneve2: entered allmulticast mode [ 58.576174][ T6180] FAULT_INJECTION: forcing a failure. [ 58.576174][ T6180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.576195][ T6180] CPU: 2 UID: 0 PID: 6180 Comm: syz.3.98 Not tainted syzkaller #0 PREEMPT(full) [ 58.576212][ T6180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.576219][ T6180] Call Trace: [ 58.576223][ T6180] [ 58.576227][ T6180] dump_stack_lvl+0x100/0x190 [ 58.576259][ T6180] should_fail_ex.cold+0x5/0xa [ 58.576279][ T6180] _copy_to_user+0x32/0xd0 [ 58.576295][ T6180] simple_read_from_buffer+0xcb/0x170 [ 58.576311][ T6180] proc_fail_nth_read+0x1af/0x230 [ 58.576326][ T6180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 58.576366][ T6180] ? rw_verify_area+0xce/0x6d0 [ 58.576383][ T6180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 58.576396][ T6180] vfs_read+0x1e4/0xb40 [ 58.576407][ T6180] ? lock_acquire+0x1d1/0x380 [ 58.576423][ T6180] ? __fget_files+0x34/0x3d0 [ 58.576445][ T6180] ? __pfx_vfs_read+0x10/0x10 [ 58.576460][ T6180] ? find_held_lock+0x2b/0x80 [ 58.576484][ T6180] ? __fget_files+0x215/0x3d0 [ 58.576506][ T6180] ? __fget_files+0x21f/0x3d0 [ 58.576533][ T6180] ksys_read+0x12a/0x250 [ 58.576551][ T6180] ? __pfx_ksys_read+0x10/0x10 [ 58.576574][ T6180] do_syscall_64+0x123/0x790 [ 58.576611][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.576630][ T6180] RIP: 0033:0x7f912575e98e [ 58.576643][ T6180] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 58.576656][ T6180] RSP: 002b:00007f91266f0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.576667][ T6180] RAX: ffffffffffffffda RBX: 00007f91266f16c0 RCX: 00007f912575e98e [ 58.576674][ T6180] RDX: 000000000000000f RSI: 00007f91266f10a0 RDI: 0000000000000003 [ 58.576681][ T6180] RBP: 00007f91266f1090 R08: 0000000000000000 R09: 0000000000000000 [ 58.576687][ T6180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.576693][ T6180] R13: 00007f9125a26038 R14: 00007f9125a25fa0 R15: 00007ffe529f9fb8 [ 58.576706][ T6180] [ 58.631785][ T43] kauditd_printk_skb: 47 callbacks suppressed [ 58.631801][ T43] audit: type=1400 audit(1789743751.757:368): avc: denied { create } for pid=6183 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.637467][ T43] audit: type=1400 audit(1789743751.767:369): avc: denied { bind } for pid=6183 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.644628][ T43] audit: type=1400 audit(1789743751.767:370): avc: denied { getopt } for pid=6183 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.646278][ T6178] netlink: 'syz.0.97': attribute type 1 has an invalid length. [ 58.650880][ T43] audit: type=1400 audit(1789743751.777:371): avc: denied { append } for pid=6184 comm="syz.3.100" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 58.651411][ T43] audit: type=1400 audit(1789743751.777:372): avc: denied { ioctl } for pid=6184 comm="syz.3.100" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 58.652541][ T43] audit: type=1400 audit(1789743751.777:373): avc: denied { write } for pid=6184 comm="syz.3.100" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 58.669662][ T43] audit: type=1400 audit(1789743751.797:374): avc: denied { read write } for pid=5731 comm="syz-executor" name="loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.670053][ T43] audit: type=1400 audit(1789743751.797:375): avc: denied { open } for pid=5731 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.670488][ T43] audit: type=1400 audit(1789743751.797:376): avc: denied { ioctl } for pid=5731 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=657 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.723349][ T6191] FAULT_INJECTION: forcing a failure. [ 58.723349][ T6191] name failslab, interval 1, probability 0, space 0, times 0 [ 58.723378][ T6191] CPU: 0 UID: 0 PID: 6191 Comm: syz.1.101 Not tainted syzkaller #0 PREEMPT(full) [ 58.723397][ T6191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.723408][ T6191] Call Trace: [ 58.723415][ T6191] [ 58.723421][ T6191] dump_stack_lvl+0x100/0x190 [ 58.723453][ T6191] should_fail_ex.cold+0x5/0xa [ 58.723478][ T6191] should_failslab+0xc2/0x120 [ 58.723501][ T6191] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 58.723523][ T6191] ? __alloc_skb+0x5b7/0x710 [ 58.723554][ T6191] ? __alloc_skb+0x140/0x710 [ 58.723575][ T6191] __alloc_skb+0x140/0x710 [ 58.723594][ T6191] ? __alloc_skb+0x5b7/0x710 [ 58.723612][ T6191] ? __pfx___alloc_skb+0x10/0x10 [ 58.723640][ T6191] netlink_alloc_large_skb+0x69/0x150 [ 58.723661][ T6191] netlink_sendmsg+0x680/0xda0 [ 58.723684][ T6191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.723706][ T6191] ? selinux_socket_sendmsg+0x198/0x2f0 [ 58.723726][ T6191] ____sys_sendmsg+0xa4d/0xbe0 [ 58.723749][ T6191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.723771][ T6191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 58.723802][ T6191] ? lock_acquire+0x1d1/0x380 [ 58.723819][ T6191] ? get_pid_task+0x2a/0x250 [ 58.723846][ T6191] ___sys_sendmsg+0x190/0x1e0 [ 58.723875][ T6191] ? __pfx____sys_sendmsg+0x10/0x10 [ 58.723904][ T6191] ? get_pid_task+0x106/0x250 [ 58.723936][ T6191] ? find_held_lock+0x2b/0x80 [ 58.723975][ T6191] __sys_sendmsg+0x160/0x210 [ 58.723996][ T6191] ? __pfx___sys_sendmsg+0x10/0x10 [ 58.724029][ T6191] do_syscall_64+0x123/0x790 [ 58.724057][ T6191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.724076][ T6191] RIP: 0033:0x7f314779e159 [ 58.724093][ T6191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.724109][ T6191] RSP: 002b:00007f314862a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.724128][ T6191] RAX: ffffffffffffffda RBX: 00007f3147a25fa0 RCX: 00007f314779e159 [ 58.724139][ T6191] RDX: 0000000000000800 RSI: 0000200000000140 RDI: 0000000000000004 [ 58.724149][ T6191] RBP: 00007f314862a090 R08: 0000000000000000 R09: 0000000000000000 [ 58.724161][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.724171][ T6191] R13: 00007f3147a26038 R14: 00007f3147a25fa0 R15: 00007ffddddc4708 [ 58.724194][ T6191] [ 58.754554][ T43] audit: type=1400 audit(1789743751.877:377): avc: denied { create } for pid=6192 comm="syz.2.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.887664][ T6203] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 59.048484][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 59.242428][ T6219] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 59.242446][ T6219] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 59.243407][ T6219] vhci_hcd vhci_hcd.0: Device attached [ 59.260084][ T6219] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 59.260111][ T6219] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 59.260191][ T6219] vhci_hcd vhci_hcd.0: Device attached [ 59.268622][ T6219] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 59.268651][ T6219] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 59.269358][ T6219] vhci_hcd vhci_hcd.0: Device attached [ 59.277053][ T6219] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 59.277076][ T6219] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 59.277177][ T6219] vhci_hcd vhci_hcd.0: Device attached [ 59.282410][ T6219] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 59.282437][ T6219] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 59.282533][ T6219] vhci_hcd vhci_hcd.0: Device attached [ 59.286371][ T6223] vhci_hcd: connection closed [ 59.286573][ T6225] vhci_hcd: connection closed [ 59.286774][ T6220] vhci_hcd: connection closed [ 59.288260][ T6229] vhci_hcd: connection closed [ 59.291097][ T13] vhci_hcd vhci_hcd.2: stop threads [ 59.291410][ T13] vhci_hcd vhci_hcd.2: release socket [ 59.291436][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 59.291674][ T13] vhci_hcd vhci_hcd.2: stop threads [ 59.291686][ T13] vhci_hcd vhci_hcd.2: release socket [ 59.291701][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 59.292339][ T13] vhci_hcd vhci_hcd.2: stop threads [ 59.292352][ T13] vhci_hcd vhci_hcd.2: release socket [ 59.292433][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 59.292672][ T13] vhci_hcd vhci_hcd.2: stop threads [ 59.292684][ T13] vhci_hcd vhci_hcd.2: release socket [ 59.292699][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 59.298356][ T6231] vhci_hcd: connection closed [ 59.299944][ T13] vhci_hcd vhci_hcd.2: stop threads [ 59.299964][ T13] vhci_hcd vhci_hcd.2: release socket [ 59.299984][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 59.418404][ T6236] FAULT_INJECTION: forcing a failure. [ 59.418404][ T6236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.418424][ T6236] CPU: 2 UID: 0 PID: 6236 Comm: syz.0.110 Not tainted syzkaller #0 PREEMPT(full) [ 59.418437][ T6236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.418443][ T6236] Call Trace: [ 59.418447][ T6236] [ 59.418451][ T6236] dump_stack_lvl+0x100/0x190 [ 59.418471][ T6236] should_fail_ex.cold+0x5/0xa [ 59.418487][ T6236] _copy_from_user+0x2e/0xd0 [ 59.418500][ T6236] bpf_test_init.isra.0+0xaf/0x100 [ 59.418519][ T6236] bpf_prog_test_run_skb+0x48e/0x3530 [ 59.418532][ T6236] ? lock_acquire+0x1d1/0x380 [ 59.418544][ T6236] ? __fget_files+0x34/0x3d0 [ 59.418557][ T6236] ? find_held_lock+0x2b/0x80 [ 59.418573][ T6236] ? __fget_files+0x191/0x3d0 [ 59.418590][ T6236] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 59.418603][ T6236] ? fput+0x7c/0x100 [ 59.418618][ T6236] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 59.418630][ T6236] __sys_bpf+0x2265/0x4a30 [ 59.418645][ T6236] ? __pfx___sys_bpf+0x10/0x10 [ 59.418655][ T6236] ? find_held_lock+0x2b/0x80 [ 59.418670][ T6236] ? get_pid_task+0xfc/0x250 [ 59.418684][ T6236] ? get_pid_task+0xfc/0x250 [ 59.418723][ T6236] ? find_held_lock+0x2b/0x80 [ 59.418741][ T6236] ? rcu_read_lock_any_held+0x6a/0x90 [ 59.418757][ T6236] ? find_held_lock+0x2b/0x80 [ 59.418774][ T6236] ? ksys_write+0x190/0x250 [ 59.418785][ T6236] ? ksys_write+0x190/0x250 [ 59.418796][ T6236] ? lock_acquire+0x1d1/0x380 [ 59.418816][ T6236] ? fput+0x7c/0x100 [ 59.418829][ T6236] ? ksys_write+0x1ac/0x250 [ 59.418842][ T6236] ? __x64_sys_bpf+0xce/0x140 [ 59.418852][ T6236] __x64_sys_bpf+0xce/0x140 [ 59.418864][ T6236] ? do_syscall_64+0xae/0x790 [ 59.418880][ T6236] do_syscall_64+0x123/0x790 [ 59.418897][ T6236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.418909][ T6236] RIP: 0033:0x7f9241d9e159 [ 59.418918][ T6236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.418929][ T6236] RSP: 002b:00007f9242cd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.418940][ T6236] RAX: ffffffffffffffda RBX: 00007f9242025fa0 RCX: 00007f9241d9e159 [ 59.418947][ T6236] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 59.418953][ T6236] RBP: 00007f9242cd2090 R08: 0000000000000000 R09: 0000000000000000 [ 59.418959][ T6236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.418965][ T6236] R13: 00007f9242026038 R14: 00007f9242025fa0 R15: 00007ffeb5dbe5e8 [ 59.418979][ T6236] [ 59.523743][ T6239] fuse: Unknown parameter '*-÷ .±F!–~å‚ [ 59.523743][ T6239] ø¢×ñEæ¨@ÁB@…y cLß{}‰;\åܽ «»ö' [ 59.591252][ T6246] FAULT_INJECTION: forcing a failure. [ 59.591252][ T6246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.591284][ T6246] CPU: 2 UID: 0 PID: 6246 Comm: syz.1.112 Not tainted syzkaller #0 PREEMPT(full) [ 59.591305][ T6246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.591318][ T6246] Call Trace: [ 59.591325][ T6246] [ 59.591331][ T6246] dump_stack_lvl+0x100/0x190 [ 59.591366][ T6246] should_fail_ex.cold+0x5/0xa [ 59.591394][ T6246] _copy_from_iter+0x1f4/0x1690 [ 59.591420][ T6246] ? __asan_memset+0x23/0x50 [ 59.591441][ T6246] ? __pfx__copy_from_iter+0x10/0x10 [ 59.591462][ T6246] ? __pfx___alloc_skb+0x10/0x10 [ 59.591484][ T6246] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 59.591506][ T6246] ? sock_has_perm+0x25a/0x2f0 [ 59.591535][ T6246] ? __pfx_sock_has_perm+0x10/0x10 [ 59.591569][ T6246] netlink_sendmsg+0x808/0xda0 [ 59.591596][ T6246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.591621][ T6246] ? selinux_socket_sendmsg+0x198/0x2f0 [ 59.591645][ T6246] ____sys_sendmsg+0xa4d/0xbe0 [ 59.591672][ T6246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.591696][ T6246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 59.591729][ T6246] ? lock_acquire+0x1d1/0x380 [ 59.591750][ T6246] ? get_pid_task+0x2a/0x250 [ 59.591779][ T6246] ___sys_sendmsg+0x190/0x1e0 [ 59.591810][ T6246] ? __pfx____sys_sendmsg+0x10/0x10 [ 59.591847][ T6246] ? get_pid_task+0x106/0x250 [ 59.591881][ T6246] ? find_held_lock+0x2b/0x80 [ 59.591923][ T6246] __sys_sendmsg+0x160/0x210 [ 59.591947][ T6246] ? __pfx___sys_sendmsg+0x10/0x10 [ 59.591983][ T6246] do_syscall_64+0x123/0x790 [ 59.592013][ T6246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.592035][ T6246] RIP: 0033:0x7f314779e159 [ 59.592050][ T6246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.592068][ T6246] RSP: 002b:00007f3148609028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.592086][ T6246] RAX: ffffffffffffffda RBX: 00007f3147a26090 RCX: 00007f314779e159 [ 59.592098][ T6246] RDX: 0000000020000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 59.592110][ T6246] RBP: 00007f3148609090 R08: 0000000000000000 R09: 0000000000000000 [ 59.592121][ T6246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.592132][ T6246] R13: 00007f3147a26128 R14: 00007f3147a26090 R15: 00007ffddddc4708 [ 59.592157][ T6246] [ 59.832294][ T6253] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 59.832336][ T6253] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 59.833028][ T6253] vhci_hcd vhci_hcd.0: Device attached [ 59.835770][ T6253] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 59.835796][ T6253] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 59.835849][ T6253] vhci_hcd vhci_hcd.0: Device attached [ 59.837619][ T6256] vhci_hcd: connection closed [ 59.838174][ T13] vhci_hcd vhci_hcd.0: stop threads [ 59.838197][ T13] vhci_hcd vhci_hcd.0: release socket [ 59.838214][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 59.838352][ T6254] vhci_hcd: connection closed [ 59.839248][ T13] vhci_hcd vhci_hcd.0: stop threads [ 59.839264][ T13] vhci_hcd vhci_hcd.0: release socket [ 59.839282][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 59.866888][ T6259] Cannot find set identified by id 0 to match [ 60.013608][ T6270] comedi comedi0: aio_iiro_16: a I/O base address must be specified [ 60.564595][ T6279] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 61.803437][ T6206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.819728][ T6194] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.906928][ T6284] mmap: syz.2.121 (6284) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.948813][ T6294] FAULT_INJECTION: forcing a failure. [ 61.948813][ T6294] name failslab, interval 1, probability 0, space 0, times 0 [ 61.948834][ T6294] CPU: 1 UID: 0 PID: 6294 Comm: syz.3.124 Not tainted syzkaller #0 PREEMPT(full) [ 61.948847][ T6294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.948854][ T6294] Call Trace: [ 61.948858][ T6294] [ 61.948863][ T6294] dump_stack_lvl+0x100/0x190 [ 61.948884][ T6294] should_fail_ex.cold+0x5/0xa [ 61.948901][ T6294] should_failslab+0xc2/0x120 [ 61.948997][ T6294] kmem_cache_alloc_noprof+0x92/0x6a0 [ 61.949011][ T6294] ? alloc_empty_file+0x5b/0x1c0 [ 61.949029][ T6294] alloc_empty_file+0x5b/0x1c0 [ 61.949046][ T6294] path_openat+0xdb/0x2440 [ 61.949063][ T6294] ? __pfx_path_openat+0x10/0x10 [ 61.949081][ T6294] do_file_open+0x20e/0x430 [ 61.949097][ T6294] ? __pfx_do_file_open+0x10/0x10 [ 61.949121][ T6294] ? _raw_spin_unlock+0x28/0x50 [ 61.949136][ T6294] ? alloc_fd+0x471/0x7a0 [ 61.949155][ T6294] do_sys_openat2+0x10f/0x1e0 [ 61.949172][ T6294] ? __pfx_do_sys_openat2+0x10/0x10 [ 61.949191][ T6294] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 61.949210][ T6294] ? __fget_files+0x21f/0x3d0 [ 61.949226][ T6294] __x64_sys_openat+0x12d/0x210 [ 61.949243][ T6294] ? __pfx___x64_sys_openat+0x10/0x10 [ 61.949259][ T6294] ? ksys_write+0x1ac/0x250 [ 61.949275][ T6294] do_syscall_64+0x123/0x790 [ 61.949322][ T6294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.949336][ T6294] RIP: 0033:0x7f912579e159 [ 61.949347][ T6294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.949361][ T6294] RSP: 002b:00007f91266d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 61.949374][ T6294] RAX: ffffffffffffffda RBX: 00007f9125a26090 RCX: 00007f912579e159 [ 61.949384][ T6294] RDX: 0000000000080700 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 61.949391][ T6294] RBP: 00007f91266d0090 R08: 0000000000000000 R09: 0000000000000000 [ 61.949398][ T6294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.949404][ T6294] R13: 00007f9125a26128 R14: 00007f9125a26090 R15: 00007ffe529f9fb8 [ 61.949419][ T6294] [ 62.021109][ T6298] overlayfs: failed to resolve 'upper': -2 [ 62.038450][ T6298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.125'. [ 62.041168][ T6298] overlayfs: failed to resolve 'upper': -2 [ 62.169345][ T6304] jffs2: notice: (6304) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 2 orphan) and 6 of xref (0 dead, 6 orphan) found. [ 62.173684][ T5739] Bluetooth: hci3: adv larger than maximum supported [ 62.173704][ T5739] Bluetooth: hci3: Malformed LE Event: 0x0d [ 62.179859][ T6307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.127'. [ 62.260216][ T6309] jffs2: notice: (6309) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 3 orphan) and 9 of xref (0 dead, 9 orphan) found. [ 62.916051][ T6325] Bluetooth: MGMT ver 1.23 [ 62.989451][ T6331] jffs2: notice: (6331) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 4 orphan) and 12 of xref (0 dead, 12 orphan) found. [ 63.071827][ T6335] evm: overlay not supported [ 63.079839][ T6335] overlayfs: failed to verify origin (36/file1, ino=236, err=-116) [ 63.080077][ T6335] overlayfs: failed to verify origin (36/file1, ino=236, err=-116) [ 63.081811][ T6337] overlay: filesystem on ./file0 not supported as upperdir [ 63.083535][ T6338] overlayfs: failed to verify origin (36/file1, ino=237, err=-116) [ 63.083757][ T6338] overlayfs: failed to verify origin (36/file1, ino=237, err=-116) [ 63.086083][ T6335] overlayfs: failed to verify origin (36/file1, ino=237, err=-116) [ 63.086210][ T6335] overlayfs: failed to verify origin (36/file1, ino=237, err=-116) [ 63.275339][ T6348] netlink: 132 bytes leftover after parsing attributes in process `syz.0.141'. [ 63.278206][ T6348] netlink: 156 bytes leftover after parsing attributes in process `syz.0.141'. [ 63.449912][ T6354] bond1: Removing last ns target with arp_interval on [ 63.464747][ T6365] bond2: Removing last ns target with arp_interval on [ 63.540177][ T6376] netlink: 68 bytes leftover after parsing attributes in process `syz.1.148'. [ 63.681484][ T43] kauditd_printk_skb: 38 callbacks suppressed [ 63.681504][ T43] audit: type=1400 audit(1789743756.807:416): avc: denied { allowed } for pid=6383 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 63.681541][ T43] audit: type=1400 audit(1789743756.807:417): avc: denied { map_read map_write } for pid=6383 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.730025][ T43] audit: type=1400 audit(1789743756.857:418): avc: denied { watch watch_reads } for pid=6383 comm="syz.1.152" path="/29" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 63.742787][ T6387] Cannot find del_set index 2 as target [ 63.779661][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 63.779751][ T6395] netlink: 48 bytes leftover after parsing attributes in process `syz.0.155'. [ 63.798122][ T6395] geneve2: entered promiscuous mode [ 63.798148][ T6395] geneve2: entered allmulticast mode [ 63.880695][ T6404] jffs2: notice: (6404) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 5 orphan) and 15 of xref (0 dead, 15 orphan) found. [ 63.896496][ T43] audit: type=1804 audit(1789743757.027:419): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.159" name="/newroot/47/file0/mnt/file0" dev="sda1" ino=2038 res=1 errno=0 [ 63.897434][ T43] audit: type=1804 audit(1789743757.027:420): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.159" name="/newroot/47/file0/mnt/file0" dev="sda1" ino=2038 res=1 errno=0 [ 63.985661][ T43] audit: type=1400 audit(1789743757.107:421): avc: denied { mount } for pid=6409 comm="syz.0.161" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 63.988059][ T43] audit: type=1400 audit(1789743757.117:422): avc: denied { search } for pid=6409 comm="syz.0.161" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 63.988932][ T43] audit: type=1400 audit(1789743757.117:423): avc: denied { read } for pid=6409 comm="syz.0.161" name="reply_cache_stats" dev="nfsd" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 63.989741][ T43] audit: type=1400 audit(1789743757.117:424): avc: denied { open } for pid=6409 comm="syz.0.161" path="/48/nfsd/reply_cache_stats" dev="nfsd" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 64.007394][ T43] audit: type=1400 audit(1789743757.137:425): avc: denied { unmount } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 64.036221][ T5840] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 64.044885][ T6413] FAULT_INJECTION: forcing a failure. [ 64.044885][ T6413] name failslab, interval 1, probability 0, space 0, times 0 [ 64.044921][ T6413] CPU: 1 UID: 0 PID: 6413 Comm: syz.1.162 Not tainted syzkaller #0 PREEMPT(full) [ 64.044944][ T6413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.044956][ T6413] Call Trace: [ 64.044964][ T6413] [ 64.044974][ T6413] dump_stack_lvl+0x100/0x190 [ 64.045012][ T6413] should_fail_ex.cold+0x5/0xa [ 64.045041][ T6413] should_failslab+0xc2/0x120 [ 64.045069][ T6413] __kmalloc_cache_noprof+0x91/0x6d0 [ 64.045101][ T6413] ? ima_queue_key+0x55/0x4e0 [ 64.045128][ T6413] ima_queue_key+0x55/0x4e0 [ 64.045152][ T6413] ima_post_key_create_or_update+0xa4/0x130 [ 64.045176][ T6413] security_key_post_create_or_update+0x1ed/0x200 [ 64.045202][ T6413] __key_create_or_update+0x799/0xe30 [ 64.045233][ T6413] ? __pfx___key_create_or_update+0x10/0x10 [ 64.045262][ T6413] ? lookup_user_key+0x3f3/0x1300 [ 64.045296][ T6413] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 64.045325][ T6413] key_create_or_update+0x42/0x60 [ 64.045354][ T6413] __do_sys_add_key+0x2e8/0x460 [ 64.045386][ T6413] ? __pfx___do_sys_add_key+0x10/0x10 [ 64.045427][ T6413] do_syscall_64+0x123/0x790 [ 64.045460][ T6413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.045484][ T6413] RIP: 0033:0x7f314779e159 [ 64.045502][ T6413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.045521][ T6413] RSP: 002b:00007f314862a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 64.045542][ T6413] RAX: ffffffffffffffda RBX: 00007f3147a25fa0 RCX: 00007f314779e159 [ 64.045556][ T6413] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 64.045568][ T6413] RBP: 00007f314783506b R08: ffffffffffffffff R09: 0000000000000000 [ 64.045581][ T6413] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 64.045593][ T6413] R13: 00007f3147a26038 R14: 00007f3147a25fa0 R15: 00007ffddddc4708 [ 64.045621][ T6413] [ 64.191168][ T5840] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 64.196414][ T5840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.196439][ T5840] usb 8-1: Product: syz [ 64.196452][ T5840] usb 8-1: Manufacturer: syz [ 64.196465][ T5840] usb 8-1: SerialNumber: syz [ 64.385576][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 64.385614][ T6427] netlink: 48 bytes leftover after parsing attributes in process `syz.0.167'. [ 64.575582][ T6437] netlink: 14 bytes leftover after parsing attributes in process `syz.1.171'. [ 64.674790][ T5840] rtl8150 8-1:1.0: couldn't reset the device [ 64.675031][ T5840] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 64.693491][ T5840] usb 8-1: USB disconnect, device number 2 [ 64.701638][ T6436] FAULT_INJECTION: forcing a failure. [ 64.701638][ T6436] name failslab, interval 1, probability 0, space 0, times 0 [ 64.701658][ T6436] CPU: 1 UID: 0 PID: 6436 Comm: syz.0.170 Not tainted syzkaller #0 PREEMPT(full) [ 64.701671][ T6436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.701678][ T6436] Call Trace: [ 64.701682][ T6436] [ 64.701686][ T6436] dump_stack_lvl+0x100/0x190 [ 64.701708][ T6436] should_fail_ex.cold+0x5/0xa [ 64.701724][ T6436] should_failslab+0xc2/0x120 [ 64.701746][ T6436] __kmalloc_noprof+0xfc/0x840 [ 64.701758][ T6436] ? tls_sw_sendmsg+0x11ee/0x2e00 [ 64.701775][ T6436] tls_sw_sendmsg+0x11ee/0x2e00 [ 64.701795][ T6436] ? sock_has_perm+0x25a/0x2f0 [ 64.701813][ T6436] ? __pfx_sock_has_perm+0x10/0x10 [ 64.701830][ T6436] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 64.701846][ T6436] ? __might_fault+0xc5/0x140 [ 64.701866][ T6436] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 64.701879][ T6436] inet6_sendmsg+0x11c/0x140 [ 64.701890][ T6436] __sys_sendto+0x36d/0x4e0 [ 64.701904][ T6436] ? __pfx___sys_sendto+0x10/0x10 [ 64.701919][ T6436] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 64.701940][ T6436] __x64_sys_sendto+0xe0/0x1c0 [ 64.701952][ T6436] ? do_syscall_64+0xae/0x790 [ 64.701968][ T6436] ? lockdep_hardirqs_on+0x7d/0x110 [ 64.701983][ T6436] do_syscall_64+0x123/0x790 [ 64.702000][ T6436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.702012][ T6436] RIP: 0033:0x7f9241d5e98e [ 64.702021][ T6436] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 64.702031][ T6436] RSP: 002b:00007f9242cd0e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 64.702042][ T6436] RAX: ffffffffffffffda RBX: 00007f9242cd26c0 RCX: 00007f9241d5e98e [ 64.702049][ T6436] RDX: 0000000000000020 RSI: 00007f9242cd1000 RDI: 0000000000000003 [ 64.702055][ T6436] RBP: 0000000000000000 R08: 00007f9242cd0f04 R09: 000000000000000c [ 64.702062][ T6436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 64.702068][ T6436] R13: 00007f9242cd0f58 R14: 00007f9242cd1000 R15: 0000000000000000 [ 64.702081][ T6436] [ 64.703345][ T6443] netlink: 'syz.2.173': attribute type 10 has an invalid length. [ 64.703358][ T6443] netlink: 40 bytes leftover after parsing attributes in process `syz.2.173'. [ 64.703510][ T6443] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 64.703848][ T6443] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 64.844220][ T6450] FAULT_INJECTION: forcing a failure. [ 64.844220][ T6450] name failslab, interval 1, probability 0, space 0, times 0 [ 64.844251][ T6450] CPU: 2 UID: 0 PID: 6450 Comm: syz.0.176 Not tainted syzkaller #0 PREEMPT(full) [ 64.844270][ T6450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.844279][ T6450] Call Trace: [ 64.844285][ T6450] [ 64.844291][ T6450] dump_stack_lvl+0x100/0x190 [ 64.844324][ T6450] should_fail_ex.cold+0x5/0xa [ 64.844350][ T6450] should_failslab+0xc2/0x120 [ 64.844373][ T6450] __kmalloc_cache_noprof+0x91/0x6d0 [ 64.844403][ T6450] ? register_netdevice+0x50c/0x25a0 [ 64.844432][ T6450] register_netdevice+0x50c/0x25a0 [ 64.844462][ T6450] ? __pfx_register_netdevice+0x10/0x10 [ 64.844487][ T6450] ? alloc_netdev_mqs+0x120a/0x15c0 [ 64.844514][ T6450] ip6_mroute_setsockopt+0x69e/0x35b0 [ 64.844543][ T6450] ? find_held_lock+0x2b/0x80 [ 64.844575][ T6450] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 64.844599][ T6450] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 64.844631][ T6450] ? __lock_acquire+0x5c0/0x1f40 [ 64.844652][ T6450] ? trace_sched_exit_tp+0x120/0x160 [ 64.844679][ T6450] ? __lock_acquire+0x5c0/0x1f40 [ 64.844704][ T6450] ? __might_fault+0xc5/0x140 [ 64.844764][ T6450] ? do_ipv6_setsockopt+0x543/0x44a0 [ 64.844785][ T6450] do_ipv6_setsockopt+0x543/0x44a0 [ 64.844812][ T6450] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 64.844834][ T6450] ? avc_has_perm_noaudit+0x56/0x3b0 [ 64.844862][ T6450] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 64.844885][ T6450] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 64.844913][ T6450] ? avc_has_perm_noaudit+0x145/0x3b0 [ 64.844943][ T6450] ? avc_has_perm+0x135/0x1e0 [ 64.844967][ T6450] ? __pfx_avc_has_perm+0x10/0x10 [ 64.844995][ T6450] ? futex_wait+0x11e/0x370 [ 64.845015][ T6450] ? sock_has_perm+0x25a/0x2f0 [ 64.845039][ T6450] ? __pfx_sock_has_perm+0x10/0x10 [ 64.845060][ T6450] ? ipv6_setsockopt+0xcb/0x170 [ 64.845073][ T6450] ipv6_setsockopt+0xcb/0x170 [ 64.845088][ T6450] rawv6_setsockopt+0xee/0x5a0 [ 64.845100][ T6450] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 64.845112][ T6450] ? selinux_socket_setsockopt+0x6a/0x80 [ 64.845122][ T6450] ? sock_common_setsockopt+0x2e/0xf0 [ 64.845139][ T6450] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 64.845162][ T6450] do_sock_setsockopt+0xf3/0x1d0 [ 64.845180][ T6450] __sys_setsockopt+0x195/0x220 [ 64.845197][ T6450] __x64_sys_setsockopt+0xbd/0x160 [ 64.845210][ T6450] ? do_syscall_64+0xae/0x790 [ 64.845227][ T6450] ? lockdep_hardirqs_on+0x7d/0x110 [ 64.845243][ T6450] do_syscall_64+0x123/0x790 [ 64.845262][ T6450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.845274][ T6450] RIP: 0033:0x7f9241d9e159 [ 64.845284][ T6450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.845295][ T6450] RSP: 002b:00007f9242cd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 64.845306][ T6450] RAX: ffffffffffffffda RBX: 00007f9242025fa0 RCX: 00007f9241d9e159 [ 64.845315][ T6450] RDX: 00000000000000ca RSI: 0000000000000029 RDI: 0000000000000005 [ 64.845322][ T6450] RBP: 00007f9241e3506b R08: 000000000000000c R09: 0000000000000000 [ 64.845330][ T6450] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.845338][ T6450] R13: 00007f9242026038 R14: 00007f9242025fa0 R15: 00007ffeb5dbe5e8 [ 64.845353][ T6450] [ 64.928033][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 64.928067][ T6456] netlink: 48 bytes leftover after parsing attributes in process `syz.0.178'. [ 64.986542][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 65.159305][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 65.164727][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.164755][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 65.164791][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 65.171727][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.171749][ T10] usb 6-1: Product: syz [ 65.171760][ T10] usb 6-1: Manufacturer: syz [ 65.171771][ T10] usb 6-1: SerialNumber: syz [ 65.189022][ T10] uvcvideo 6-1:1.0: Found UVC 0.00 device syz (046d:0821) [ 65.189050][ T10] uvcvideo 6-1:1.0: No valid video chain found. [ 65.238342][ T6473] FAULT_INJECTION: forcing a failure. [ 65.238342][ T6473] name failslab, interval 1, probability 0, space 0, times 0 [ 65.238365][ T6473] CPU: 0 UID: 0 PID: 6473 Comm: syz.0.185 Not tainted syzkaller #0 PREEMPT(full) [ 65.238379][ T6473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.238386][ T6473] Call Trace: [ 65.238391][ T6473] [ 65.238396][ T6473] dump_stack_lvl+0x100/0x190 [ 65.238418][ T6473] should_fail_ex.cold+0x5/0xa [ 65.238437][ T6473] should_failslab+0xc2/0x120 [ 65.238454][ T6473] __kmalloc_cache_noprof+0x91/0x6d0 [ 65.238472][ T6473] ? sctp_has_association+0xdd/0x270 [ 65.238491][ T6473] ? sctp_association_new+0xbb/0x2990 [ 65.238508][ T6473] sctp_association_new+0xbb/0x2990 [ 65.238524][ T6473] ? sctp_v4_scope+0x183/0x1a0 [ 65.238542][ T6473] sctp_connect_new_asoc+0x1a8/0x770 [ 65.238558][ T6473] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 65.238574][ T6473] ? selinux_sctp_bind_connect+0xe0/0x230 [ 65.238591][ T6473] sctp_sendmsg+0x1743/0x22e0 [ 65.238611][ T6473] ? __pfx_sctp_sendmsg+0x10/0x10 [ 65.238631][ T6473] ? sock_has_perm+0x25a/0x2f0 [ 65.238650][ T6473] ? __pfx_sock_has_perm+0x10/0x10 [ 65.238680][ T6473] ? __pfx_sctp_sendmsg+0x10/0x10 [ 65.238696][ T6473] inet_sendmsg+0x11c/0x140 [ 65.238717][ T6473] ____sys_sendmsg+0x9c9/0xbe0 [ 65.238735][ T6473] ? __pfx_inet_sendmsg+0x10/0x10 [ 65.238755][ T6473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.238778][ T6473] ? lock_acquire+0x1d1/0x380 [ 65.238791][ T6473] ? get_pid_task+0x2a/0x250 [ 65.238810][ T6473] ___sys_sendmsg+0x190/0x1e0 [ 65.238831][ T6473] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.238850][ T6473] ? get_pid_task+0x106/0x250 [ 65.238874][ T6473] ? find_held_lock+0x2b/0x80 [ 65.238902][ T6473] __sys_sendmsg+0x160/0x210 [ 65.238918][ T6473] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.238943][ T6473] do_syscall_64+0x123/0x790 [ 65.238963][ T6473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.238976][ T6473] RIP: 0033:0x7f9241d9e159 [ 65.238986][ T6473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.238998][ T6473] RSP: 002b:00007f9242cd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.239010][ T6473] RAX: ffffffffffffffda RBX: 00007f9242025fa0 RCX: 00007f9241d9e159 [ 65.239018][ T6473] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 65.239025][ T6473] RBP: 00007f9242cd2090 R08: 0000000000000000 R09: 0000000000000000 [ 65.239032][ T6473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.239039][ T6473] R13: 00007f9242026038 R14: 00007f9242025fa0 R15: 00007ffeb5dbe5e8 [ 65.239085][ T6473] [ 65.370118][ T6479] FAULT_INJECTION: forcing a failure. [ 65.370118][ T6479] name failslab, interval 1, probability 0, space 0, times 0 [ 65.370149][ T6479] CPU: 1 UID: 0 PID: 6479 Comm: syz.0.187 Not tainted syzkaller #0 PREEMPT(full) [ 65.370171][ T6479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.370182][ T6479] Call Trace: [ 65.370189][ T6479] [ 65.370197][ T6479] dump_stack_lvl+0x100/0x190 [ 65.370241][ T6479] should_fail_ex.cold+0x5/0xa [ 65.370271][ T6479] should_failslab+0xc2/0x120 [ 65.370295][ T6479] __kmalloc_cache_noprof+0x91/0x6d0 [ 65.370321][ T6479] ? register_netdevice+0x50c/0x25a0 [ 65.370351][ T6479] register_netdevice+0x50c/0x25a0 [ 65.370379][ T6479] ? __pfx_register_netdevice+0x10/0x10 [ 65.370397][ T6479] ? alloc_netdev_mqs+0x120a/0x15c0 [ 65.370415][ T6479] ip6_mroute_setsockopt+0x69e/0x35b0 [ 65.370432][ T6479] ? lock_acquire+0x1d1/0x380 [ 65.370444][ T6479] ? finish_task_switch.isra.0+0x149/0x10d0 [ 65.370458][ T6479] ? find_held_lock+0x2b/0x80 [ 65.370476][ T6479] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 65.370492][ T6479] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 65.370511][ T6479] ? __lock_acquire+0x5c0/0x1f40 [ 65.370529][ T6479] ? trace_sched_exit_tp+0x120/0x160 [ 65.370556][ T6479] ? __lock_acquire+0x5c0/0x1f40 [ 65.370587][ T6479] ? __might_fault+0xc5/0x140 [ 65.370625][ T6479] ? do_ipv6_setsockopt+0x543/0x44a0 [ 65.370647][ T6479] do_ipv6_setsockopt+0x543/0x44a0 [ 65.370676][ T6479] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 65.370695][ T6479] ? avc_has_perm_noaudit+0x56/0x3b0 [ 65.370725][ T6479] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 65.370751][ T6479] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 65.370783][ T6479] ? avc_has_perm_noaudit+0x145/0x3b0 [ 65.370811][ T6479] ? avc_has_perm+0x135/0x1e0 [ 65.370837][ T6479] ? __pfx_avc_has_perm+0x10/0x10 [ 65.370863][ T6479] ? futex_wait+0x11e/0x370 [ 65.370877][ T6479] ? sock_has_perm+0x25a/0x2f0 [ 65.370897][ T6479] ? __pfx_sock_has_perm+0x10/0x10 [ 65.370917][ T6479] ? ipv6_setsockopt+0xcb/0x170 [ 65.370930][ T6479] ipv6_setsockopt+0xcb/0x170 [ 65.370945][ T6479] rawv6_setsockopt+0xee/0x5a0 [ 65.370957][ T6479] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 65.370969][ T6479] ? selinux_socket_setsockopt+0x6a/0x80 [ 65.370980][ T6479] ? sock_common_setsockopt+0x2e/0xf0 [ 65.370996][ T6479] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 65.371014][ T6479] do_sock_setsockopt+0xf3/0x1d0 [ 65.371031][ T6479] __sys_setsockopt+0x195/0x220 [ 65.371071][ T6479] __x64_sys_setsockopt+0xbd/0x160 [ 65.371086][ T6479] ? do_syscall_64+0xae/0x790 [ 65.371104][ T6479] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.371121][ T6479] do_syscall_64+0x123/0x790 [ 65.371139][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.371153][ T6479] RIP: 0033:0x7f9241d9e159 [ 65.371163][ T6479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.371174][ T6479] RSP: 002b:00007f9242cd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 65.371185][ T6479] RAX: ffffffffffffffda RBX: 00007f9242025fa0 RCX: 00007f9241d9e159 [ 65.371193][ T6479] RDX: 00000000000000ca RSI: 0000000000000029 RDI: 0000000000000005 [ 65.371199][ T6479] RBP: 00007f9241e3506b R08: 000000000000000c R09: 0000000000000000 [ 65.371206][ T6479] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.371213][ T6479] R13: 00007f9242026038 R14: 00007f9242025fa0 R15: 00007ffeb5dbe5e8 [ 65.371245][ T6479] [ 65.409495][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 65.628430][ T10] usb 6-1: USB disconnect, device number 3 [ 65.686087][ T42] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 65.836192][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 65.837391][ T42] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 65.838759][ T42] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 65.838793][ T42] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.838811][ T42] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.838831][ T42] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.838849][ T42] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.838882][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.041276][ T6495] FAULT_INJECTION: forcing a failure. [ 66.041276][ T6495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.041299][ T6495] CPU: 0 UID: 0 PID: 6495 Comm: syz.2.193 Not tainted syzkaller #0 PREEMPT(full) [ 66.041316][ T6495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.041326][ T6495] Call Trace: [ 66.041340][ T6495] [ 66.041348][ T6495] dump_stack_lvl+0x100/0x190 [ 66.041391][ T6495] should_fail_ex.cold+0x5/0xa [ 66.041421][ T6495] _copy_to_user+0x32/0xd0 [ 66.041452][ T6495] simple_read_from_buffer+0xcb/0x170 [ 66.041482][ T6495] proc_fail_nth_read+0x1af/0x230 [ 66.041509][ T6495] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.041535][ T6495] ? rw_verify_area+0xce/0x6d0 [ 66.041566][ T6495] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.041590][ T6495] vfs_read+0x1e4/0xb40 [ 66.041611][ T6495] ? lock_acquire+0x1d1/0x380 [ 66.041632][ T6495] ? __fget_files+0x34/0x3d0 [ 66.041657][ T6495] ? __pfx_vfs_read+0x10/0x10 [ 66.041675][ T6495] ? find_held_lock+0x2b/0x80 [ 66.041704][ T6495] ? __fget_files+0x215/0x3d0 [ 66.041734][ T6495] ? __fget_files+0x21f/0x3d0 [ 66.041766][ T6495] ksys_read+0x12a/0x250 [ 66.041786][ T6495] ? __pfx_ksys_read+0x10/0x10 [ 66.041829][ T6495] do_syscall_64+0x123/0x790 [ 66.041866][ T6495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.041887][ T6495] RIP: 0033:0x7f9b5655e98e [ 66.041904][ T6495] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 66.041923][ T6495] RSP: 002b:00007f9b57548fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.041950][ T6495] RAX: ffffffffffffffda RBX: 00007f9b575496c0 RCX: 00007f9b5655e98e [ 66.041964][ T6495] RDX: 000000000000000f RSI: 00007f9b575490a0 RDI: 0000000000000004 [ 66.041977][ T6495] RBP: 00007f9b57549090 R08: 0000000000000000 R09: 0000000000000000 [ 66.041988][ T6495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.042001][ T6495] R13: 00007f9b56826038 R14: 00007f9b56825fa0 R15: 00007ffc615881b8 [ 66.042026][ T6495] [ 66.093130][ T6498] binder: 6497:6498 ioctl c018620c 200000000240 returned -22 [ 66.096308][ T6498] binder: 6497:6498 ioctl ae80 0 returned -22 [ 66.297357][ T6501] netlink: set zone limit has 4 unknown bytes [ 66.341395][ T6506] pim6reg: entered allmulticast mode [ 66.476289][ T61] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 66.623636][ T6514] usbtmc 5-1:16.0: simple usb_control_msg failed -32 [ 66.627006][ T61] usb 6-1: Using ep0 maxpacket: 8 [ 66.627641][ T1523] usb 5-1: USB disconnect, device number 3 [ 66.629555][ T61] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 66.631024][ T61] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 66.631083][ T61] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 66.631096][ T61] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 66.631107][ T61] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 66.631118][ T61] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.631137][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.691555][ T6516] FAULT_INJECTION: forcing a failure. [ 66.691555][ T6516] name failslab, interval 1, probability 0, space 0, times 0 [ 66.691585][ T6516] CPU: 3 UID: 0 PID: 6516 Comm: syz.3.201 Not tainted syzkaller #0 PREEMPT(full) [ 66.691606][ T6516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.691617][ T6516] Call Trace: [ 66.691623][ T6516] [ 66.691631][ T6516] dump_stack_lvl+0x100/0x190 [ 66.691673][ T6516] should_fail_ex.cold+0x5/0xa [ 66.691700][ T6516] should_failslab+0xc2/0x120 [ 66.691725][ T6516] __kmalloc_noprof+0xfc/0x840 [ 66.691743][ T6516] ? __pfx_dynamic_dname+0x10/0x10 [ 66.691763][ T6516] ? tomoyo_encode2+0xfb/0x3c0 [ 66.691787][ T6516] tomoyo_encode2+0xfb/0x3c0 [ 66.691814][ T6516] tomoyo_encode+0x29/0x50 [ 66.691835][ T6516] tomoyo_realpath_from_path+0x18c/0x690 [ 66.691864][ T6516] tomoyo_path_number_perm+0x23c/0x580 [ 66.691883][ T6516] ? tomoyo_path_number_perm+0x22e/0x580 [ 66.691905][ T6516] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 66.691934][ T6516] ? __lock_acquire+0x5c0/0x1f40 [ 66.691968][ T6516] ? __fget_files+0x34/0x3d0 [ 66.691992][ T6516] ? find_held_lock+0x2b/0x80 [ 66.692018][ T6516] ? hook_file_ioctl_common+0x140/0x440 [ 66.692050][ T6516] ? __fget_files+0x21f/0x3d0 [ 66.692079][ T6516] security_file_ioctl+0xd3/0x230 [ 66.692102][ T6516] __x64_sys_ioctl+0xb7/0x210 [ 66.692124][ T6516] do_syscall_64+0x123/0x790 [ 66.692154][ T6516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.692174][ T6516] RIP: 0033:0x7f912579e159 [ 66.692191][ T6516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.692209][ T6516] RSP: 002b:00007f91266f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.692230][ T6516] RAX: ffffffffffffffda RBX: 00007f9125a25fa0 RCX: 00007f912579e159 [ 66.692242][ T6516] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 66.692253][ T6516] RBP: 00007f91266f1090 R08: 0000000000000000 R09: 0000000000000000 [ 66.692263][ T6516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.692276][ T6516] R13: 00007f9125a26038 R14: 00007f9125a25fa0 R15: 00007ffe529f9fb8 [ 66.692301][ T6516] [ 66.692318][ T6516] ERROR: Out of memory at tomoyo_realpath_from_path. [ 66.740654][ T6519] netlink: 'syz.2.202': attribute type 10 has an invalid length. [ 66.744210][ T6519] geneve2: entered promiscuous mode [ 66.744225][ T6519] geneve2: entered allmulticast mode [ 67.112984][ T6530] MPI: mpi too large (16392 bits) [ 67.404752][ T6548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.420251][ T6548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.432076][ T6548] usbtmc 6-1:16.0: simple usb_control_msg failed -32 [ 67.434107][ T61] usb 6-1: USB disconnect, device number 4 [ 67.498365][ T6558] pim6reg: entered allmulticast mode [ 67.531787][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.654577][ T6565] bond1: (slave bond1): Device is not bonding slave [ 67.654591][ T6565] bond1: option active_slave: invalid value (bond1) [ 67.656536][ T6565] bond1 (unregistering): Released all slaves [ 67.694328][ T6567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6567 comm=syz.3.217 [ 67.711710][ T6570] FAULT_INJECTION: forcing a failure. [ 67.711710][ T6570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.711741][ T6570] CPU: 2 UID: 0 PID: 6570 Comm: syz.2.219 Not tainted syzkaller #0 PREEMPT(full) [ 67.711760][ T6570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.711772][ T6570] Call Trace: [ 67.711778][ T6570] [ 67.711786][ T6570] dump_stack_lvl+0x100/0x190 [ 67.711819][ T6570] should_fail_ex.cold+0x5/0xa [ 67.711846][ T6570] _copy_to_user+0x32/0xd0 [ 67.711868][ T6570] simple_read_from_buffer+0xcb/0x170 [ 67.711893][ T6570] proc_fail_nth_read+0x1af/0x230 [ 67.711920][ T6570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.711945][ T6570] ? rw_verify_area+0xce/0x6d0 [ 67.711972][ T6570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.711995][ T6570] vfs_read+0x1e4/0xb40 [ 67.712014][ T6570] ? lock_acquire+0x1d1/0x380 [ 67.712034][ T6570] ? __fget_files+0x34/0x3d0 [ 67.712056][ T6570] ? __pfx_vfs_read+0x10/0x10 [ 67.712083][ T6570] ? find_held_lock+0x2b/0x80 [ 67.712109][ T6570] ? __fget_files+0x215/0x3d0 [ 67.712136][ T6570] ? __fget_files+0x21f/0x3d0 [ 67.712165][ T6570] ksys_read+0x12a/0x250 [ 67.712184][ T6570] ? __pfx_ksys_read+0x10/0x10 [ 67.712209][ T6570] do_syscall_64+0x123/0x790 [ 67.712238][ T6570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.712258][ T6570] RIP: 0033:0x7f9b5655e98e [ 67.712273][ T6570] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 67.712291][ T6570] RSP: 002b:00007f9b57548fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 67.712312][ T6570] RAX: ffffffffffffffda RBX: 00007f9b575496c0 RCX: 00007f9b5655e98e [ 67.712323][ T6570] RDX: 000000000000000f RSI: 00007f9b575490a0 RDI: 0000000000000005 [ 67.712334][ T6570] RBP: 00007f9b57549090 R08: 0000000000000000 R09: 0000000000000000 [ 67.712346][ T6570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.712356][ T6570] R13: 00007f9b56826038 R14: 00007f9b56825fa0 R15: 00007ffc615881b8 [ 67.712380][ T6570] [ 67.715169][ T6571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 67.715184][ T6571] IPv6: NLM_F_CREATE should be set when creating new route [ 67.927773][ T6581] FAULT_INJECTION: forcing a failure. [ 67.927773][ T6581] name failslab, interval 1, probability 0, space 0, times 0 [ 67.927804][ T6581] CPU: 3 UID: 0 PID: 6581 Comm: syz.2.222 Not tainted syzkaller #0 PREEMPT(full) [ 67.927825][ T6581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.927837][ T6581] Call Trace: [ 67.927844][ T6581] [ 67.927852][ T6581] dump_stack_lvl+0x100/0x190 [ 67.927884][ T6581] should_fail_ex.cold+0x5/0xa [ 67.927910][ T6581] should_failslab+0xc2/0x120 [ 67.927936][ T6581] __kmalloc_cache_noprof+0x91/0x6d0 [ 67.927963][ T6581] ? rcu_is_watching+0x13/0xc0 [ 67.927988][ T6581] ? vhost_task_create+0xee/0x370 [ 67.928019][ T6581] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 67.928046][ T6581] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 67.928076][ T6581] vhost_task_create+0xee/0x370 [ 67.928105][ T6581] ? __pfx_vhost_task_create+0x10/0x10 [ 67.928142][ T6581] ? __pfx_vhost_task_fn+0x10/0x10 [ 67.928171][ T6581] ? register_lock_class+0x3f/0x7b0 [ 67.928191][ T6581] ? rcu_is_watching+0x13/0xc0 [ 67.928222][ T6581] ? trace_contention_end+0x126/0x160 [ 67.928249][ T6581] kvm_mmu_post_init_vm+0x1b3/0x360 [ 67.928272][ T6581] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 67.928296][ T6581] ? __pfx___mutex_lock+0x10/0x10 [ 67.928323][ T6581] ? kasan_quarantine_put+0x104/0x240 [ 67.928347][ T6581] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 67.928369][ T6581] ? lock_acquire+0x1d1/0x380 [ 67.928388][ T6581] ? do_raw_write_lock+0x11e/0x260 [ 67.928412][ T6581] ? find_held_lock+0x2b/0x80 [ 67.928437][ T6581] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 67.928461][ T6581] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 67.928492][ T6581] kvm_vcpu_ioctl+0x730/0x1700 [ 67.928520][ T6581] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 67.928546][ T6581] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.928570][ T6581] ? do_vfs_ioctl+0x226/0x13e0 [ 67.928590][ T6581] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 67.928606][ T6581] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 67.928631][ T6581] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 67.928656][ T6581] ? __fget_files+0x34/0x3d0 [ 67.928691][ T6581] ? selinux_file_ioctl+0x13b/0x290 [ 67.928709][ T6581] ? selinux_file_ioctl+0xb6/0x290 [ 67.928731][ T6581] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 67.928757][ T6581] __x64_sys_ioctl+0x18e/0x210 [ 67.928779][ T6581] do_syscall_64+0x123/0x790 [ 67.928808][ T6581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.928828][ T6581] RIP: 0033:0x7f9b5659e159 [ 67.928844][ T6581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.928861][ T6581] RSP: 002b:00007f9b57549028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.928881][ T6581] RAX: ffffffffffffffda RBX: 00007f9b56825fa0 RCX: 00007f9b5659e159 [ 67.928893][ T6581] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 67.928904][ T6581] RBP: 00007f9b57549090 R08: 0000000000000000 R09: 0000000000000000 [ 67.928915][ T6581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.928925][ T6581] R13: 00007f9b56826038 R14: 00007f9b56825fa0 R15: 00007ffc615881b8 [ 67.928952][ T6581] [ 68.197710][ T6592] kvm [6591]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 68.198700][ T6592] kvm [6591]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 68.791352][ T6623] ip_tables: iptables: counters copy to user failed while replacing table [ 68.797687][ T6626] __nla_validate_parse: 8 callbacks suppressed [ 68.797704][ T6626] netlink: 48 bytes leftover after parsing attributes in process `syz.3.240'. [ 68.860274][ T6628] FAULT_INJECTION: forcing a failure. [ 68.860274][ T6628] name failslab, interval 1, probability 0, space 0, times 0 [ 68.860304][ T6628] CPU: 0 UID: 0 PID: 6628 Comm: syz.3.241 Not tainted syzkaller #0 PREEMPT(full) [ 68.860325][ T6628] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.860336][ T6628] Call Trace: [ 68.860342][ T6628] [ 68.860349][ T6628] dump_stack_lvl+0x100/0x190 [ 68.860380][ T6628] should_fail_ex.cold+0x5/0xa [ 68.860405][ T6628] should_failslab+0xc2/0x120 [ 68.860430][ T6628] __kmalloc_noprof+0xfc/0x840 [ 68.860450][ T6628] ? sk_prot_alloc+0x10b/0x2a0 [ 68.860491][ T6628] sk_prot_alloc+0x10b/0x2a0 [ 68.860519][ T6628] sk_alloc+0x36/0xe80 [ 68.860540][ T6628] __netlink_create+0x5e/0x2c0 [ 68.860565][ T6628] ? __wake_up+0x3f/0x60 [ 68.860594][ T6628] netlink_create+0x29b/0x610 [ 68.860617][ T6628] __sock_create+0x339/0x860 [ 68.860648][ T6628] __sys_socket+0x14d/0x260 [ 68.860681][ T6628] ? fput+0x7c/0x100 [ 68.860712][ T6628] ? __pfx___sys_socket+0x10/0x10 [ 68.860728][ T6628] ? ksys_write+0x1ac/0x250 [ 68.860746][ T6628] ? __pfx_ksys_write+0x10/0x10 [ 68.860769][ T6628] __x64_sys_socket+0x72/0xb0 [ 68.860785][ T6628] ? lockdep_hardirqs_on+0x7d/0x110 [ 68.860810][ T6628] do_syscall_64+0x123/0x790 [ 68.860838][ T6628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.860857][ T6628] RIP: 0033:0x7f912579e159 [ 68.860872][ T6628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.860889][ T6628] RSP: 002b:00007f91266f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 68.860909][ T6628] RAX: ffffffffffffffda RBX: 00007f9125a25fa0 RCX: 00007f912579e159 [ 68.860920][ T6628] RDX: 0000000000000014 RSI: 0000000000000003 RDI: 0000000000000010 [ 68.860931][ T6628] RBP: 00007f91266f1090 R08: 0000000000000000 R09: 0000000000000000 [ 68.860942][ T6628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.860953][ T6628] R13: 00007f9125a26038 R14: 00007f9125a25fa0 R15: 00007ffe529f9fb8 [ 68.860979][ T6628] [ 68.972897][ T6636] netlink: 'syz.3.243': attribute type 4 has an invalid length. [ 68.972924][ T6636] netlink: 'syz.3.243': attribute type 8 has an invalid length. [ 68.972936][ T6636] netlink: 212 bytes leftover after parsing attributes in process `syz.3.243'. [ 69.036098][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 69.167859][ T43] kauditd_printk_skb: 33 callbacks suppressed [ 69.167872][ T43] audit: type=1400 audit(1789743762.297:459): avc: denied { name_bind } for pid=6647 comm="syz.0.249" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 69.168053][ T43] audit: type=1400 audit(1789743762.297:460): avc: denied { node_bind } for pid=6647 comm="syz.0.249" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 69.168520][ T43] audit: type=1400 audit(1789743762.297:461): avc: denied { connect } for pid=6647 comm="syz.0.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.196100][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 69.196628][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.197897][ T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 69.197918][ T10] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 69.197936][ T10] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 56 [ 69.200064][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.200082][ T10] usb 7-1: Product: syz [ 69.200093][ T10] usb 7-1: Manufacturer: syz [ 69.200105][ T10] usb 7-1: SerialNumber: syz [ 69.276235][ T61] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 69.313470][ T43] audit: type=1400 audit(1789743762.437:462): avc: denied { bind } for pid=6651 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.317861][ T43] audit: type=1400 audit(1789743762.447:463): avc: denied { write } for pid=6651 comm="syz.0.251" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.423995][ T10] cdc_ncm 7-1:1.0: bind() failure [ 69.426530][ T61] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 69.427399][ T61] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.427435][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.433594][ T10] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 69.433616][ T10] cdc_ncm 7-1:1.1: bind() failure [ 69.444857][ T61] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 69.444985][ T61] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 69.445017][ T61] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 69.446714][ T6650] FAULT_INJECTION: forcing a failure. [ 69.446714][ T6650] name failslab, interval 1, probability 0, space 0, times 0 [ 69.446737][ T6650] CPU: 3 UID: 0 PID: 6650 Comm: syz.1.250 Not tainted syzkaller #0 PREEMPT(full) [ 69.446750][ T6650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.446757][ T6650] Call Trace: [ 69.446761][ T6650] [ 69.446769][ T6650] dump_stack_lvl+0x100/0x190 [ 69.446792][ T6650] should_fail_ex.cold+0x5/0xa [ 69.446809][ T6650] should_failslab+0xc2/0x120 [ 69.446824][ T6650] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 69.446839][ T6650] ? __alloc_skb+0x140/0x710 [ 69.446855][ T6650] __alloc_skb+0x140/0x710 [ 69.446867][ T6650] ? __alloc_skb+0x5b7/0x710 [ 69.446880][ T6650] ? __pfx___alloc_skb+0x10/0x10 [ 69.446897][ T6650] _sctp_make_chunk+0x51/0x270 [ 69.446915][ T6650] sctp_make_control+0x2f/0x2d0 [ 69.446932][ T6650] sctp_make_heartbeat+0xad/0x2f0 [ 69.446950][ T6650] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 69.446970][ T6650] ? sctp_sm_lookup_event+0x10e/0x520 [ 69.446987][ T6650] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 69.447005][ T6650] ? __pfx_sctp_pname+0x10/0x10 [ 69.447021][ T6650] sctp_sf_do_prm_requestheartbeat+0x27/0x220 [ 69.447069][ T6650] ? __pfx_sctp_pname+0x10/0x10 [ 69.447084][ T6650] sctp_do_sm+0x17a/0x5c30 [ 69.447108][ T6650] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 69.447124][ T6650] ? __pfx_sctp_do_sm+0x10/0x10 [ 69.447153][ T6650] ? __lock_sock+0x1f8/0x270 [ 69.447167][ T6650] sctp_primitive_REQUESTHEARTBEAT+0x9f/0xd0 [ 69.447184][ T6650] sctp_apply_peer_addr_params+0x110/0x3690 [ 69.447196][ T10] usb 7-1: USB disconnect, device number 2 [ 69.447205][ T6650] sctp_setsockopt+0x28d6/0xb370 [ 69.447222][ T6650] ? __pfx_sctp_setsockopt+0x10/0x10 [ 69.447235][ T6650] ? __fget_files+0x215/0x3d0 [ 69.447251][ T6650] ? selinux_socket_setsockopt+0x6a/0x80 [ 69.447262][ T6650] ? sock_common_setsockopt+0x2e/0xf0 [ 69.447277][ T6650] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 69.447294][ T6650] do_sock_setsockopt+0xf3/0x1d0 [ 69.447311][ T6650] __sys_setsockopt+0x195/0x220 [ 69.447327][ T6650] __x64_sys_setsockopt+0xbd/0x160 [ 69.447339][ T6650] ? do_syscall_64+0xae/0x790 [ 69.447355][ T6650] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.447370][ T6650] do_syscall_64+0x123/0x790 [ 69.447387][ T6650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.447399][ T6650] RIP: 0033:0x7f314779e159 [ 69.447409][ T6650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.447420][ T6650] RSP: 002b:00007f314862a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 69.447432][ T6650] RAX: ffffffffffffffda RBX: 00007f3147a25fa0 RCX: 00007f314779e159 [ 69.447439][ T6650] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 69.447445][ T6650] RBP: 00007f314862a090 R08: 000000000000009c R09: 0000000000000000 [ 69.447452][ T6650] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 69.447458][ T6650] R13: 00007f3147a26038 R14: 00007f3147a25fa0 R15: 00007ffddddc4708 [ 69.447472][ T6650] [ 69.448733][ T61] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 69.448769][ T61] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 69.450128][ T5748] udevd[5748]: setting mode of /dev/bus/usb/007/002 to 020664 failed: No such file or directory [ 69.450180][ T5748] udevd[5748]: setting owner of /dev/bus/usb/007/002 to uid=0, gid=0 failed: No such file or directory [ 69.453669][ T61] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 69.468034][ T61] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 69.468079][ T61] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 69.475780][ T61] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 69.520949][ T43] audit: type=1400 audit(1789743762.647:464): avc: denied { unlink } for pid=6658 comm="syz.0.254" name="#3" dev="tmpfs" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 69.521194][ T6659] overlayfs: failed to resolve './file1': -2 [ 69.629499][ T6661] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 69.642004][ T43] audit: type=1400 audit(1789743762.767:465): avc: denied { mount } for pid=6641 comm="syz.3.246" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 69.685021][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.258'. [ 69.685044][ T6670] netlink: 'syz.1.258': attribute type 10 has an invalid length. [ 69.685052][ T6670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.258'. [ 69.774046][ T61] usb 8-1: USB disconnect, device number 3 [ 69.781613][ T61] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 69.797391][ T61] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 69.799424][ T61] keyspan 8-1:1.0: device disconnected [ 69.804029][ T43] audit: type=1400 audit(1789743762.927:466): avc: denied { read } for pid=6673 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.997760][ T43] audit: type=1400 audit(1789743763.127:467): avc: denied { ioctl } for pid=6676 comm="syz.2.261" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13007 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.020893][ T43] audit: type=1400 audit(1789743763.147:468): avc: denied { wake_alarm } for pid=6676 comm="syz.2.261" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.512690][ T6696] FAULT_INJECTION: forcing a failure. [ 70.512690][ T6696] name failslab, interval 1, probability 0, space 0, times 0 [ 70.512735][ T6696] CPU: 3 UID: 0 PID: 6696 Comm: syz.0.269 Not tainted syzkaller #0 PREEMPT(full) [ 70.512758][ T6696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.512772][ T6696] Call Trace: [ 70.512790][ T6696] [ 70.512798][ T6696] dump_stack_lvl+0x100/0x190 [ 70.512843][ T6696] should_fail_ex.cold+0x5/0xa [ 70.512873][ T6696] should_failslab+0xc2/0x120 [ 70.512908][ T6696] __kmalloc_cache_noprof+0x91/0x6d0 [ 70.512939][ T6696] ? do_raw_spin_lock+0x128/0x260 [ 70.512965][ T6696] ? get_mountpoint+0x174/0x4f0 [ 70.512992][ T6696] get_mountpoint+0x174/0x4f0 [ 70.513014][ T6696] do_lock_mount.part.0+0x336/0xb10 [ 70.513049][ T6696] path_mount+0x8f5/0x24c0 [ 70.513084][ T6696] ? __pfx_path_mount+0x10/0x10 [ 70.513113][ T6696] ? lockdep_hardirqs_on+0x7d/0x110 [ 70.513172][ T6696] ? __x64_sys_mount+0x293/0x310 [ 70.513206][ T6696] __x64_sys_mount+0x293/0x310 [ 70.513235][ T6696] ? __pfx___x64_sys_mount+0x10/0x10 [ 70.513274][ T6696] do_syscall_64+0x123/0x790 [ 70.513306][ T6696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.513327][ T6696] RIP: 0033:0x7f9241d9e159 [ 70.513346][ T6696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.513366][ T6696] RSP: 002b:00007f9242cd2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.513394][ T6696] RAX: ffffffffffffffda RBX: 00007f9242025fa0 RCX: 00007f9241d9e159 [ 70.513408][ T6696] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 70.513421][ T6696] RBP: 00007f9241e3506b R08: 0000000000000000 R09: 0000000000000000 [ 70.513433][ T6696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.513444][ T6696] R13: 00007f9242026038 R14: 00007f9242025fa0 R15: 00007ffeb5dbe5e8 [ 70.513470][ T6696] [ 70.898742][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 70.898768][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'. [ 70.920185][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 70.920208][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'. [ 70.927346][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.927383][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.927409][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.928558][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.410497][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.696753][ T6730] jffs2: notice: (6730) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (0 unchecked, 6 orphan) and 18 of xref (0 dead, 18 orphan) found. [ 71.820907][ T6738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 71.820920][ T6738] IPv6: NLM_F_CREATE should be set when creating new route [ 71.820938][ T6738] IPv6: NLM_F_CREATE should be set when creating new route [ 71.823462][ T6744] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 71.871287][ T6750] FAULT_INJECTION: forcing a failure. [ 71.871287][ T6750] name failslab, interval 1, probability 0, space 0, times 0 [ 71.871308][ T6750] CPU: 3 UID: 0 PID: 6750 Comm: syz.1.278 Not tainted syzkaller #0 PREEMPT(full) [ 71.871334][ T6750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.871341][ T6750] Call Trace: [ 71.871346][ T6750] [ 71.871351][ T6750] dump_stack_lvl+0x100/0x190 [ 71.871382][ T6750] should_fail_ex.cold+0x5/0xa [ 71.871399][ T6750] should_failslab+0xc2/0x120 [ 71.871417][ T6750] __kmalloc_cache_noprof+0x91/0x6d0 [ 71.871434][ T6750] ? rcu_is_watching+0x13/0xc0 [ 71.871463][ T6750] ? vhost_task_create+0xee/0x370 [ 71.871488][ T6750] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 71.871504][ T6750] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 71.871522][ T6750] vhost_task_create+0xee/0x370 [ 71.871540][ T6750] ? __pfx_vhost_task_create+0x10/0x10 [ 71.871562][ T6750] ? __pfx_vhost_task_fn+0x10/0x10 [ 71.871580][ T6750] ? register_lock_class+0x3f/0x7b0 [ 71.871592][ T6750] ? rcu_is_watching+0x13/0xc0 [ 71.871607][ T6750] ? trace_contention_end+0x126/0x160 [ 71.871628][ T6750] kvm_mmu_post_init_vm+0x1b3/0x360 [ 71.871644][ T6750] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 71.871659][ T6750] ? __pfx___mutex_lock+0x10/0x10 [ 71.871679][ T6750] ? kasan_quarantine_put+0x104/0x240 [ 71.871693][ T6750] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 71.871710][ T6750] ? lock_acquire+0x1d1/0x380 [ 71.871726][ T6750] ? do_raw_write_lock+0x11e/0x260 [ 71.871745][ T6750] ? find_held_lock+0x2b/0x80 [ 71.871766][ T6750] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 71.871782][ T6750] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 71.871800][ T6750] kvm_vcpu_ioctl+0x730/0x1700 [ 71.871820][ T6750] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 71.871837][ T6750] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.871851][ T6750] ? do_vfs_ioctl+0x226/0x13e0 [ 71.871863][ T6750] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 71.871873][ T6750] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 71.871889][ T6750] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 71.871904][ T6750] ? __fget_files+0x34/0x3d0 [ 71.871924][ T6750] ? selinux_file_ioctl+0x13b/0x290 [ 71.871937][ T6750] ? selinux_file_ioctl+0xb6/0x290 [ 71.871956][ T6750] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 71.871978][ T6750] __x64_sys_ioctl+0x18e/0x210 [ 71.871994][ T6750] do_syscall_64+0x123/0x790 [ 71.872020][ T6750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.872038][ T6750] RIP: 0033:0x7f314779e159 [ 71.872051][ T6750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.872067][ T6750] RSP: 002b:00007f31485e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.872084][ T6750] RAX: ffffffffffffffda RBX: 00007f3147a26180 RCX: 00007f314779e159 [ 71.872095][ T6750] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 71.872106][ T6750] RBP: 00007f31485e7090 R08: 0000000000000000 R09: 0000000000000000 [ 71.872116][ T6750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.872125][ T6750] R13: 00007f3147a26218 R14: 00007f3147a26180 R15: 00007ffddddc4708 [ 71.872149][ T6750] [ 71.923160][ T6753] Console: switching to colour dummy device 80x25 [ 72.132482][ T6753] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 72.143380][ T6753] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 72.143534][ T6753] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 72.143598][ T6753] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 72.143692][ T6753] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 72.144457][ T6753] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 72.166861][ T6753] pci 0000:00:01.0: Adding to iommu group 1 [ 72.170339][ T6753] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 72.170353][ T6753] pci 0000:00:01.0: vgaarb: bridge control possible [ 72.170361][ T6753] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 72.174529][ T6753] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 72.180473][ T6753] pci 0000:00:03.0: BAR 0 [io 0xc0a0-0xc0bf] [ 72.180532][ T6753] pci 0000:00:03.0: BAR 1 [mem 0xfeaf5000-0xfeaf5fff] [ 72.180748][ T6753] pci 0000:00:03.0: BAR 4 [mem 0x380800004000-0x380800007fff 64bit pref] [ 72.190244][ T6753] pci 0000:00:03.0: Adding to iommu group 3 [ 72.203109][ T6753] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 72.207389][ T6753] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 72.211264][ T6753] pci 0000:00:03.0: BAR 4 [mem 0x380800004000-0x380800007fff 64bit pref]: assigned [ 72.213838][ T6753] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 72.215236][ T6753] pci 0000:00:03.0: BAR 1 [mem 0x80801000-0x80801fff]: assigned [ 72.218106][ T6753] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 72.245089][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 72.245150][ T6762] netlink: 'syz.0.290': attribute type 10 has an invalid length. [ 72.245171][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.290'. [ 72.267915][ T6753] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 72.268736][ T6753] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 72.269740][ T6753] [drm] features: -virgl +edid -resource_blob -host_visible [ 72.269751][ T6753] [drm] features: -context_init -blob_alignment [ 72.293344][ T6753] ------------[ cut here ]------------ [ 72.293355][ T6753] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 72.293361][ T6753] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa9/0x430, CPU#0: syz.2.287/6753 [ 72.299575][ T6764] fuse: Bad value for 'fd' [ 72.303951][ T6753] Modules linked in: [ 72.305321][ T6753] CPU: 0 UID: 0 PID: 6753 Comm: syz.2.287 Not tainted syzkaller #0 PREEMPT(full) [ 72.308517][ T6753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.311852][ T6753] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 72.313906][ T6753] Code: 48 8b 43 60 48 8d 58 a0 48 3d 90 81 f9 8e 74 1f 48 8b 7b 58 48 89 ee e8 32 ee 6f 09 85 c0 75 e0 48 8d 3d a7 dd ec 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 b2 ef 6f 09 48 85 c0 0f [ 72.320505][ T6753] RSP: 0018:ffffc90007dc6f18 EFLAGS: 00010246 [ 72.322486][ T6753] RAX: 0000000000000000 RBX: ffff888026133a40 RCX: fffff52000fb8dbe [ 72.325030][ T6753] RDX: 0000000000000000 RSI: ffffffff8c9199a0 RDI: ffffffff9149b680 [ 72.327754][ T6753] RBP: ffffffff8c9199a0 R08: 0000000000000000 R09: fffffbfff228a5cb [ 72.330641][ T6753] R10: ffffc90007dc6f18 R11: 0000000000000001 R12: 0000000000000000 [ 72.333275][ T6753] R13: ffffc90007dc6f88 R14: 00000000000000d8 R15: ffff88803fad4fce [ 72.336981][ T6753] FS: 00007f9b575496c0(0000) GS:ffff8880d5b58000(0000) knlGS:0000000000000000 [ 72.340762][ T6753] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.343111][ T6753] CR2: 00007f9242027dac CR3: 000000005dd2b000 CR4: 0000000000352ef0 [ 72.345718][ T6753] Call Trace: [ 72.346356][ T13] syzkaller0: tun_net_xmit 76 [ 72.346454][ T13] syzkaller0: tun_net_xmit 48 [ 72.347043][ T6764] syzkaller0: create flow: hash 2457364870 index 1 [ 72.352701][ T6753] [ 72.353722][ T6753] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 72.355538][ T6753] ? __pfx__printk+0x10/0x10 [ 72.357286][ T6753] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 72.359476][ T6753] ? lockdep_init_map_type+0x5c/0x250 [ 72.361405][ T6753] virtio_gpu_init.cold+0x40d/0x1293 [ 72.363184][ T6753] ? vga_remove_vgacon.cold+0x1d/0x99 [ 72.365260][ T6753] ? __pfx_virtio_gpu_init+0x10/0x10 [ 72.367411][ T6753] ? is_console_locked+0x9/0x20 [ 72.369325][ T6753] ? con_is_bound+0x141/0x190 [ 72.371168][ T6753] ? vga_remove_vgacon+0x21/0x30 [ 72.372978][ T6753] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 72.375652][ T6753] virtio_gpu_probe+0x21c/0x360 [ 72.376279][ T3359] syzkaller0: tun_net_xmit 76 [ 72.379650][ T6753] virtio_dev_probe+0x6a2/0xbe0 [ 72.381801][ T6753] ? __pfx_virtio_dev_probe+0x10/0x10 [ 72.383715][ T6753] ? kernfs_create_link+0x1bd/0x240 [ 72.385425][ T6753] ? kernfs_put+0x3f/0x60 [ 72.386942][ T6753] ? sysfs_do_create_link_sd+0xbb/0x140 [ 72.388780][ T6753] ? sysfs_create_link+0x68/0xc0 [ 72.390494][ T6753] ? __pfx_virtio_dev_probe+0x10/0x10 [ 72.392373][ T6753] really_probe+0x241/0xa60 [ 72.393888][ T6753] __driver_probe_device+0x210/0x460 [ 72.395769][ T6753] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.398073][ T6753] driver_probe_device+0x4a/0x140 [ 72.399795][ T6753] __device_attach_driver+0x1df/0x320 [ 72.401574][ T6753] ? __pfx___device_attach_driver+0x10/0x10 [ 72.403541][ T6753] bus_for_each_drv+0x159/0x1e0 [ 72.405236][ T6753] ? __pfx_bus_for_each_drv+0x10/0x10 [ 72.407513][ T6753] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.410092][ T6753] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 72.412256][ T6753] __device_attach+0x1e4/0x4d0 [ 72.413875][ T6753] ? __pfx___device_attach+0x10/0x10 [ 72.415724][ T6753] ? do_raw_spin_unlock+0x145/0x1e0 [ 72.417526][ T6753] device_initial_probe+0xaf/0xd0 [ 72.419181][ T6753] bus_probe_device+0x64/0x160 [ 72.420986][ T6753] device_add+0x121d/0x1970 [ 72.422953][ T6753] ? __pfx_device_add+0x10/0x10 [ 72.424986][ T6753] ? __pfx___might_resched+0x10/0x10 [ 72.427366][ T6753] ? __init_waitqueue_head+0xca/0x150 [ 72.429170][ T6753] ? ioread8+0x8f/0xd0 [ 72.430517][ T6753] register_virtio_device+0x4f0/0x5d0 [ 72.432270][ T6753] ? __pfx_register_virtio_device+0x10/0x10 [ 72.434251][ T6753] ? __pfx_pcibios_set_master+0x10/0x10 [ 72.436096][ T6753] ? __raw_spin_lock_init+0x3a/0x110 [ 72.437805][ T6753] ? __pfx_virtio_pci_probe+0x10/0x10 [ 72.439528][ T6753] virtio_pci_probe+0x255/0x410 [ 72.441529][ T6753] local_pci_probe+0xdd/0x1b0 [ 72.443117][ T6753] pci_call_probe+0x176/0x800 [ 72.444633][ T6753] ? pci_match_device+0x147/0x7d0 [ 72.446711][ T6753] ? __pfx_pci_call_probe+0x10/0x10 [ 72.448465][ T6753] ? __pfx_pci_match_device+0x10/0x10 [ 72.450269][ T6753] ? pci_find_host_bridge+0x3c/0x80 [ 72.452199][ T6753] ? up_write+0x2dc/0x5b0 [ 72.453605][ T6753] pci_device_probe+0x25b/0x400 [ 72.455317][ T6753] ? __pfx_pci_device_probe+0x10/0x10 [ 72.457271][ T6753] ? kernfs_create_link+0x1bd/0x240 [ 72.459006][ T6753] ? sysfs_create_link+0x68/0xc0 [ 72.460737][ T6753] ? __pfx_pci_device_probe+0x10/0x10 [ 72.462462][ T6753] really_probe+0x241/0xa60 [ 72.463924][ T6753] __driver_probe_device+0x210/0x460 [ 72.465607][ T6753] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.467639][ T6753] driver_probe_device+0x4a/0x140 [ 72.469286][ T6753] __device_attach_driver+0x1df/0x320 [ 72.471164][ T6753] ? __pfx___device_attach_driver+0x10/0x10 [ 72.473177][ T6753] bus_for_each_drv+0x159/0x1e0 [ 72.474877][ T6753] ? __pfx_bus_for_each_drv+0x10/0x10 [ 72.476859][ T6753] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.478588][ T6753] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 72.480567][ T6753] __device_attach+0x1e4/0x4d0 [ 72.482117][ T6753] ? __pfx___device_attach+0x10/0x10 [ 72.483852][ T6753] ? do_raw_spin_unlock+0x145/0x1e0 [ 72.485524][ T6753] device_initial_probe+0xaf/0xd0 [ 72.487600][ T6753] pci_bus_add_device+0xc5/0x100 [ 72.489358][ T6753] pci_bus_add_devices+0x9a/0x1f0 [ 72.491008][ T6753] pci_rescan_bus+0x2a/0x40 [ 72.492599][ T6753] rescan_store+0xfb/0x130 [ 72.494068][ T6753] ? __pfx_rescan_store+0x10/0x10 [ 72.495720][ T6753] ? sysfs_file_kobj+0xe4/0x290 [ 72.497440][ T6753] ? __pfx_rescan_store+0x10/0x10 [ 72.499230][ T6753] bus_attr_store+0x74/0xb0 [ 72.500744][ T6753] ? __pfx_bus_attr_store+0x10/0x10 [ 72.502404][ T6753] sysfs_kf_write+0xf2/0x150 [ 72.503955][ T6753] kernfs_fop_write_iter+0x3e0/0x5f0 [ 72.505647][ T6753] ? __pfx_sysfs_kf_write+0x10/0x10 [ 72.507606][ T6753] vfs_write+0x6af/0x1050 [ 72.509136][ T6753] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 72.511053][ T6753] ? __pfx_vfs_write+0x10/0x10 [ 72.512640][ T6753] ? find_held_lock+0x2b/0x80 [ 72.514241][ T6753] ksys_write+0x12a/0x250 [ 72.515666][ T6753] ? __pfx_ksys_write+0x10/0x10 [ 72.517392][ T6753] do_syscall_64+0x123/0x790 [ 72.519096][ T6753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.520950][ T6753] RIP: 0033:0x7f9b5659e159 [ 72.522396][ T6753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.529987][ T6753] RSP: 002b:00007f9b57549028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.532886][ T6753] RAX: ffffffffffffffda RBX: 00007f9b56825fa0 RCX: 00007f9b5659e159 [ 72.535454][ T6753] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000005 [ 72.538122][ T6753] RBP: 00007f9b5663506b R08: 0000000000000000 R09: 0000000000000000 [ 72.540760][ T6753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.543956][ T6753] R13: 00007f9b56826038 R14: 00007f9b56825fa0 R15: 00007ffc615881b8 [ 72.547262][ T6753] [ 72.548285][ T6753] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 72.550603][ T6753] CPU: 0 UID: 0 PID: 6753 Comm: syz.2.287 Not tainted syzkaller #0 PREEMPT(full) [ 72.553581][ T6753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.556890][ T6753] Call Trace: [ 72.557998][ T6753] [ 72.558991][ T6753] dump_stack_lvl+0x100/0x190 [ 72.560598][ T6753] vpanic+0x553/0x970 [ 72.561967][ T6753] ? __pfx_vpanic+0x10/0x10 [ 72.563559][ T6753] panic+0xd1/0xe0 [ 72.564797][ T6753] ? __pfx_panic+0x10/0x10 [ 72.566349][ T6753] check_panic_on_warn.cold+0x19/0x34 [ 72.568136][ T6753] ? __kmem_cache_create_args+0xa9/0x430 [ 72.569902][ T6753] __warn.cold+0x191/0x318 [ 72.571387][ T6753] __report_bug+0x30f/0x440 [ 72.572996][ T6753] ? __kmem_cache_create_args+0xa9/0x430 [ 72.574901][ T6753] ? __pfx___report_bug+0x10/0x10 [ 72.576793][ T6753] ? __mutex_lock+0x26c/0x1bd0 [ 72.578690][ T6753] ? __kmem_cache_create_args+0x44/0x430 [ 72.580932][ T6753] report_bug_entry+0xe2/0x290 [ 72.582800][ T6753] ? __kmem_cache_create_args+0xac/0x430 [ 72.584852][ T6753] handle_bug+0x1cd/0x2a0 [ 72.586291][ T6753] exc_invalid_op+0x17/0x50 [ 72.587819][ T6753] asm_exc_invalid_op+0x1a/0x20 [ 72.589449][ T6753] RIP: 0010:__kmem_cache_create_args+0xac/0x430 [ 72.591502][ T6753] Code: 48 8b 43 60 48 8d 58 a0 48 3d 90 81 f9 8e 74 1f 48 8b 7b 58 48 89 ee e8 32 ee 6f 09 85 c0 75 e0 48 8d 3d a7 dd ec 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 b2 ef 6f 09 48 85 c0 0f [ 72.597699][ T6753] RSP: 0018:ffffc90007dc6f18 EFLAGS: 00010246 [ 72.599694][ T6753] RAX: 0000000000000000 RBX: ffff888026133a40 RCX: fffff52000fb8dbe [ 72.602171][ T6753] RDX: 0000000000000000 RSI: ffffffff8c9199a0 RDI: ffffffff9149b680 [ 72.604697][ T6753] RBP: ffffffff8c9199a0 R08: 0000000000000000 R09: fffffbfff228a5cb [ 72.607366][ T6753] R10: ffffc90007dc6f18 R11: 0000000000000001 R12: 0000000000000000 [ 72.609890][ T6753] R13: ffffc90007dc6f88 R14: 00000000000000d8 R15: ffff88803fad4fce [ 72.612433][ T6753] ? __kmem_cache_create_args+0x9e/0x430 [ 72.614298][ T6753] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 72.616082][ T6753] ? __pfx__printk+0x10/0x10 [ 72.617629][ T6753] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 72.619526][ T6753] ? lockdep_init_map_type+0x5c/0x250 [ 72.621266][ T6753] virtio_gpu_init.cold+0x40d/0x1293 [ 72.622950][ T6753] ? vga_remove_vgacon.cold+0x1d/0x99 [ 72.624746][ T6753] ? __pfx_virtio_gpu_init+0x10/0x10 [ 72.626462][ T6753] ? is_console_locked+0x9/0x20 [ 72.628066][ T6753] ? con_is_bound+0x141/0x190 [ 72.629567][ T6753] ? vga_remove_vgacon+0x21/0x30 [ 72.631189][ T6753] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 72.633438][ T6753] virtio_gpu_probe+0x21c/0x360 [ 72.635159][ T6753] virtio_dev_probe+0x6a2/0xbe0 [ 72.637186][ T6753] ? __pfx_virtio_dev_probe+0x10/0x10 [ 72.639594][ T6753] ? kernfs_create_link+0x1bd/0x240 [ 72.641958][ T6753] ? kernfs_put+0x3f/0x60 [ 72.643851][ T6753] ? sysfs_do_create_link_sd+0xbb/0x140 [ 72.646099][ T6753] ? sysfs_create_link+0x68/0xc0 [ 72.648146][ T6753] ? __pfx_virtio_dev_probe+0x10/0x10 [ 72.650318][ T6753] really_probe+0x241/0xa60 [ 72.652176][ T6753] __driver_probe_device+0x210/0x460 [ 72.654325][ T6753] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.656361][ T6753] driver_probe_device+0x4a/0x140 [ 72.658344][ T6753] __device_attach_driver+0x1df/0x320 [ 72.660744][ T6753] ? __pfx___device_attach_driver+0x10/0x10 [ 72.663145][ T6753] bus_for_each_drv+0x159/0x1e0 [ 72.665194][ T6753] ? __pfx_bus_for_each_drv+0x10/0x10 [ 72.667501][ T6753] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.669614][ T6753] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 72.671979][ T6753] __device_attach+0x1e4/0x4d0 [ 72.673679][ T6753] ? __pfx___device_attach+0x10/0x10 [ 72.676006][ T6753] ? do_raw_spin_unlock+0x145/0x1e0 [ 72.678108][ T6753] device_initial_probe+0xaf/0xd0 [ 72.680153][ T6753] bus_probe_device+0x64/0x160 [ 72.682066][ T6753] device_add+0x121d/0x1970 [ 72.683924][ T6753] ? __pfx_device_add+0x10/0x10 [ 72.685923][ T6753] ? __pfx___might_resched+0x10/0x10 [ 72.688062][ T6753] ? __init_waitqueue_head+0xca/0x150 [ 72.690252][ T6753] ? ioread8+0x8f/0xd0 [ 72.691647][ T6753] register_virtio_device+0x4f0/0x5d0 [ 72.693465][ T6753] ? __pfx_register_virtio_device+0x10/0x10 [ 72.695900][ T6753] ? __pfx_pcibios_set_master+0x10/0x10 [ 72.698143][ T6753] ? __raw_spin_lock_init+0x3a/0x110 [ 72.700308][ T6753] ? __pfx_virtio_pci_probe+0x10/0x10 [ 72.702539][ T6753] virtio_pci_probe+0x255/0x410 [ 72.704505][ T6753] local_pci_probe+0xdd/0x1b0 [ 72.706432][ T6753] pci_call_probe+0x176/0x800 [ 72.708379][ T6753] ? pci_match_device+0x147/0x7d0 [ 72.710431][ T6753] ? __pfx_pci_call_probe+0x10/0x10 [ 72.712537][ T6753] ? __pfx_pci_match_device+0x10/0x10 [ 72.714664][ T6753] ? pci_find_host_bridge+0x3c/0x80 [ 72.716766][ T6753] ? up_write+0x2dc/0x5b0 [ 72.718509][ T6753] pci_device_probe+0x25b/0x400 [ 72.720512][ T6753] ? __pfx_pci_device_probe+0x10/0x10 [ 72.722646][ T6753] ? kernfs_create_link+0x1bd/0x240 [ 72.724801][ T6753] ? sysfs_create_link+0x68/0xc0 [ 72.726839][ T6753] ? __pfx_pci_device_probe+0x10/0x10 [ 72.729049][ T6753] really_probe+0x241/0xa60 [ 72.730914][ T6753] __driver_probe_device+0x210/0x460 [ 72.732919][ T6753] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 72.735316][ T6753] driver_probe_device+0x4a/0x140 [ 72.737348][ T6753] __device_attach_driver+0x1df/0x320 [ 72.739540][ T6753] ? __pfx___device_attach_driver+0x10/0x10 [ 72.741917][ T6753] bus_for_each_drv+0x159/0x1e0 [ 72.743891][ T6753] ? __pfx_bus_for_each_drv+0x10/0x10 [ 72.746091][ T6753] ? lockdep_hardirqs_on+0x7d/0x110 [ 72.748343][ T6753] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 72.750928][ T6753] __device_attach+0x1e4/0x4d0 [ 72.753154][ T6753] ? __pfx___device_attach+0x10/0x10 [ 72.755633][ T6753] ? do_raw_spin_unlock+0x145/0x1e0 [ 72.757975][ T6753] device_initial_probe+0xaf/0xd0 [ 72.760073][ T6753] pci_bus_add_device+0xc5/0x100 [ 72.762159][ T6753] pci_bus_add_devices+0x9a/0x1f0 [ 72.764222][ T6753] pci_rescan_bus+0x2a/0x40 [ 72.766072][ T6753] rescan_store+0xfb/0x130 [ 72.767909][ T6753] ? __pfx_rescan_store+0x10/0x10 [ 72.769994][ T6753] ? sysfs_file_kobj+0xe4/0x290 [ 72.771986][ T6753] ? __pfx_rescan_store+0x10/0x10 [ 72.774067][ T6753] bus_attr_store+0x74/0xb0 [ 72.775952][ T6753] ? __pfx_bus_attr_store+0x10/0x10 [ 72.778057][ T6753] sysfs_kf_write+0xf2/0x150 [ 72.779963][ T6753] kernfs_fop_write_iter+0x3e0/0x5f0 [ 72.782179][ T6753] ? __pfx_sysfs_kf_write+0x10/0x10 [ 72.784322][ T6753] vfs_write+0x6af/0x1050 [ 72.786074][ T6753] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 72.788581][ T6753] ? __pfx_vfs_write+0x10/0x10 [ 72.790618][ T6753] ? find_held_lock+0x2b/0x80 [ 72.792888][ T6753] ksys_write+0x12a/0x250 [ 72.794673][ T6753] ? __pfx_ksys_write+0x10/0x10 [ 72.796615][ T6753] do_syscall_64+0x123/0x790 [ 72.798501][ T6753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.800722][ T6753] RIP: 0033:0x7f9b5659e159 [ 72.802108][ T6753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.809705][ T6753] RSP: 002b:00007f9b57549028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.813016][ T6753] RAX: ffffffffffffffda RBX: 00007f9b56825fa0 RCX: 00007f9b5659e159 [ 72.815843][ T6753] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000005 [ 72.819005][ T6753] RBP: 00007f9b5663506b R08: 0000000000000000 R09: 0000000000000000 [ 72.822179][ T6753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.825356][ T6753] R13: 00007f9b56826038 R14: 00007f9b56825fa0 R15: 00007ffc615881b8 [ 72.828551][ T6753] [ 72.830589][ T6753] Kernel Offset: disabled [ 72.832531][ T6753] Rebooting in 86400 seconds..