last executing test programs: 12.626252516s ago: executing program 1 (id=505): openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x1, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) pselect6(0x40, &(0x7f0000000080)={0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1981, 0x3}, 0x0, 0x0) 11.750191979s ago: executing program 1 (id=512): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x2000000, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x44040040}, 0x4040014) 11.677769849s ago: executing program 1 (id=513): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x68, 0x0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000300410005010100000000000000030100005f000000005c0001000600060086dd00d8359bdac8a1c92de0b9441a0010000700090000017f002001"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0x5840) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvfrom(r2, 0x0, 0x0, 0x40010021, 0x0, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x2144048, 0x0) 11.505462464s ago: executing program 1 (id=515): r0 = socket(0xa, 0x3, 0x3a) r1 = memfd_create(&(0x7f00000001c0)='/f\x00'/13, 0x4) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000080), 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='trusted.overlay.origin\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8910, &(0x7f00000000c0)={'bond_slave_1\x00', @ifru_addrs=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410019012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080017"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xcb}, 0x2d, 0xfffffffffffffff9) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x6, r5, 0x2}, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x101900, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 11.407835636s ago: executing program 1 (id=516): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) write(r0, &(0x7f00000002c0)='-', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000280)={0x28, r4, 0xff99, 0x8, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x11}, @void, @val={0xc, 0x99, {0xfffffffe, 0x1d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1c4}, 0x4) close(0x3) syz_pidfd_open(r2, 0x0) syz_pidfd_open(r2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060086dd0000100007007f0000017f00000111004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 11.348016601s ago: executing program 1 (id=517): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @random="a63e70d2e92d", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x33, 0x0, 0xc, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) (fail_nth: 5) 1.426625713s ago: executing program 0 (id=630): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) (fail_nth: 4) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x1f, 0x4, 0x50, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xc000, 0x9, r2, 0xee01, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000340)={&(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x1, 0x825100, 0x4, 0x1f, 0x1, 0xfdffffff, 0x0, 0x0, 0x1, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.217818372s ago: executing program 2 (id=632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0xf0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x5c, 0x2c, 0xd3b, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0x2}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x84}, {0x5, 0x7, 0x1}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x410c4}, 0x4880) 1.027765758s ago: executing program 2 (id=635): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e25, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000030000000000000080000000850000003900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 887.314199ms ago: executing program 2 (id=637): mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ocfs2\x00', 0x2364025, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000049c0), 0x1000) (async) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) lchown(0x0, r0, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f00000000c0)=@rnullb, r0, &(0x7f0000000100)) 814.942417ms ago: executing program 2 (id=638): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x5, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000b2939edec06042a3f9000000000029000000080000"], 0x18}, 0x4000004) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x3f}}, './file0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r3, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x10) write$9p(r3, &(0x7f0000000100)="d5", 0x1) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYRES64=0xffffffffffffffff], 0x8) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ba3000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ba3000/0x1000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r7 = io_uring_setup(0x328e, &(0x7f0000000040)={0x0, 0xb70, 0x1f480, 0x0, 0x399, 0x0, r3}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r5) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xc0}) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000bc0)=ANY=[@ANYRES8=r2, @ANYRESOCT=r6, @ANYRESOCT=r1, @ANYRESOCT=r4, @ANYBLOB="378cc424f124686b111ac3f0b899ea10fc1213ef108db61ad353dc366d4a28d77544861022f77622e5f6430476ed46f8d4bfecc69a362de81854c2da2a7ca61e857e6f949b47802da6a3b766dea0", @ANYRES32=r4, @ANYRES32=r5, @ANYRES16, @ANYRES16=r8], 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000808) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x100000000, 0x68e3, 0x2000000005, 0x6], [0x9d8, 0x5, 0x1, 0x6, 0x8002, 0x0, 0x5, 0x2, 0xf86, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc3c, 0x3, 0x8, 0x100000004, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x4, 0x3, 0x8001, 0x8000000080000000, 0x800000007, 0x1, 0x6, 0x5, 0x6aa, 0x102, 0x1, 0x7f, 0x538a, 0x9, 0x3, 0x4, 0x0, 0x4, 0x805, 0x8, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7ffffffb, 0x4, 0x7ffc, 0xc9, 0x7, 0x3, 0x9, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x7, 0x0, 0x6, 0x6, 0xb, 0x100000002, 0x4, 0x4, 0x98, 0x7, 0xa, 0x8, 0x1, 0x16d, 0xa6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x4000, 0x4, 0x7, 0x406, 0x3, 0x6, 0x2, 0x7, 0x3, 0x200040, 0x7fffffff, 0x7, 0xe]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r7, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r9, 0x0) migrate_pages(r9, 0x8000, &(0x7f00000003c0)=0x8, &(0x7f0000000500)) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000100)={0x0, @src_change}) 597.748599ms ago: executing program 2 (id=639): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x60) 507.694091ms ago: executing program 0 (id=641): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) sendmsg$sock(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r2, 0x7cb, &(0x7f0000000080)={0x100, 0x7, 0x882}) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0xfb, 0x48, 0x2, 0x40, "b788bddbdd9f5fba82235ab6e1c119fc", "e9c170443775ad9cb0825febd4ac10b31a50b3cd1780f72438a705fe81ddeb90453cb6ab5bd8f17001eb91dbe364f1a55cf64c"}, 0x48, 0x2) socket$inet(0xa, 0x801, 0x84) (async) listen(r0, 0x8) (async) sendmsg$sock(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_SET_NOTIFY(r2, 0x7cb, &(0x7f0000000080)={0x100, 0x7, 0x882}) (async) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0xfb, 0x48, 0x2, 0x40, "b788bddbdd9f5fba82235ab6e1c119fc", "e9c170443775ad9cb0825febd4ac10b31a50b3cd1780f72438a705fe81ddeb90453cb6ab5bd8f17001eb91dbe364f1a55cf64c"}, 0x48, 0x2) (async) 426.471168ms ago: executing program 2 (id=642): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000004c40)=[{{&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000001c0)="fcef4667434d78cf0973fb59663a86ffd51ba5661be0714943033abc35b9a23a9430ff6034765431c328aa20326037a6983b858400bd649a978a12cbe5b4cac2e5eb3469ac21c3e4c60e8afd24831e802dbe00d110507efcab8406bf6f98f6a1b76323817926028e7b4789859f4dc84656817f6f7088d3a3f8b539c818127738b2e7125c0edb02e19f95ca219f77dd43f467e2b492d638cd37a163493c42e1c54b07d7682a159d5e069d3be043321bb495800f93a1ff", 0xb6}, {&(0x7f00000002c0)="4282be42aba512fe9f4e1c1efa0883f768ef2cdc940b9798a30438d13de1b4b36049168c7eb4132cc4841e54317d9d64bc3495189606edc6c43485d6db77d91aa0d6d2f63deb1f00c4d3e733eef1e0b788cc4f3f149d3351e0d4bafe9ed0bd87ea051a46cff8412be0b87360db77dc8fd23b", 0x72}, {&(0x7f0000000340)="932aa6cf28bc3eaafb27cb5e275c22affd17067b35d9c3645f9a389b5f", 0x1d}, {&(0x7f0000000580)="62ee74a139ea58d634c2358528f233eddc5fee26cc62848a41861df0d613031a8813841adbd9bca47d4de586fff939f1d2292c55083e48c4b1cca4fff733aeeb00e63f5603f75daa0a9cbfc5110561ae0aa8923491a573a0f714ae162a27387f8000bd64a06c90b7406affd1eb6685bbcd6a404e12a796797ccd", 0x7a}, {&(0x7f0000000680)="78fb9403be50942f20e6988d6babf6179b8fd2acff2108cea48acd7727e424141c8ef01dde9104b4a2813474d270578961cf73ed2114d759e81773073e1e81542730a309871f908d9a1ab8086f05a0f5202db2a35f2272df62a27be88d878ad3dccb0c59da040e8aa0fe", 0x6a}], 0x5, &(0x7f0000000900)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfa}}], 0x48}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000b80)="d1a53e3631de8e2cb9ecb17b938de843f6d3858a58ac0ccda5551c44847a0f5011d5417690a6325a71976b65b1da08fcac5f4957b7cadce8", 0x38}, {&(0x7f0000000bc0)="d274c0b018218fd1aa4ac235887f2f38679306a1f5f19ca299b5d69ac02e203764e0e61a929246bbb289578bb44d0124ebbfbd822f6a1c748237e0838a73ccb5a563f13efce9792d017518b7136d15a16604bc607ac29aaec9486d505f70b668e6696cdeb71f937a6fac37cd94ea2783a1236bfae873fd7a80a13f97d2d5b508276eacac94223b00d8f5ccd2b539493c0227abb0a0842f9bedd1a1605b7f20869f882dded27cc8abc3d551c9c451ed73ed3a38de8a205f8e7c749f40fb3441657e27f617a6a3adead40bd8f0a88aea823eb275081b088e2d283b4b255e24fb17913406edc3", 0xe5}, {&(0x7f0000000cc0)="57c5f1422a61d0fceb6c40b9ba4b38a0a09dedc9e257889de69a8b9d6d5c4697e4b641e6574a6723870b5f18864ce4c557d33cf52364df1d5e33f68a2b3778ba9370c9d9b54841a55240baa3be10e02b41b283907c87772e79f4fe0547e137c174796b", 0x63}, {&(0x7f0000000d40)="5a0c0ca95a4ee8068539f2127a79661d15a8d6f7aa300071d748c5f470a5d0df7173cd87d5fd96f78a934c5b12bd88625468d1b4ca02736440fc91eb193b2cd593069c568e9345218ee6f7f0905ba462386b44d0cc357d17ab14bf02ee2f51785eb18a542aae12464e39024c37203cb272014b46234f52915f7e10d19ccfe304bc61f50bc111cfaf13b2", 0x8a}, {&(0x7f0000002500)="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", 0x1000}, {&(0x7f0000003500)="b0db87b35f622f786b909a83f88c663c0d989414a1e26bfe91b32b7fff922482ae3ee6df8fd06d476969908db044c2ab0df6500110d2df1bcea2e14edb1154119168e69687301a01613dca73715964ecd21b2147b4617d5ea854be0b5717d80dfeea0f7da889adc5a239932da6d0890ca0e17ef3fb1daa4eedd0242a31eae5dac8d9e95f17da4c3e2a", 0x89}], 0x6}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000003700)="b7cdba8db70681d2f01078e2ff4e3d2b8a4165c7d62b27ad51b53f986a6f4e09bb5e2c1f9381bfdb1f8a56d65caa4d1c9731631be9a969655d22113f88f953621323689d32c1e89209c69f553a86409e4a0a64121b28b4d48c69886c2ba537ba5500bc8e3ef56a819fe2f09710c5135cbeb303a7f5bc78d4bab73dfd22a04274e319f21852e5b0d1a3f81b857cec86255ed4b5521ae6cc17eecffad4fe45f49528dec99aa601d8bda23c178a1c823e7a1cf7b1130ccfb0424882a992e89d0e", 0xbf}], 0x1}}], 0x3, 0x885) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000a80)="005bd59ea6e8b3e0e917b21f7ed0cd7b84ced4929f916ac305000000000000004f6dcfa6e816645a5c9dba071ed15f985b8352928ef8ebdb06be85dfd44b6103316367a66294fd7fca2b79e815bf4cfdc6ff0ff960aed1e1f393bf8be3a69838e572a8be740246b05ad30c0c2f0bd9015a8bc6ac592e0230c5fbd6746996689cd656b1e562b23ab7018c8bc0200fe5ba03a24c594176033170c9084ad5477dd5d3c8fc19d9bb706fe824dba5a0c82ac91c013a0060b74b21214c153173924c7718cbc4995c4b759eb4ee6c86c12d448dab3360b579b1f32b3c638fadfc08b850b8dd5ec65d809ad6046a01b0dc9b45799170f473", 0xf4, 0x10008095, 0x0, 0x0) 346.715835ms ago: executing program 0 (id=644): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101a02, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x400006, 0x2], 0x7ff}, 0x10) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x458, 0x2c, 0xd3b, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0x2}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x428, 0x2, [@TCA_BASIC_POLICE={0x424, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x0, 0x6, 0x3, 0x5, 0x8, 0x200, 0x7, 0xab, 0x2, 0x8000, 0x6, 0x1800000, 0x9, 0xb54, 0xe6, 0x80000001, 0x2, 0x3, 0xfffffffc, 0x9, 0x10000, 0x8, 0x24b9, 0x15, 0x8, 0x4, 0x539, 0xc4c, 0xfffffd71, 0x3, 0x45, 0xfffffb33, 0x4, 0x80000001, 0x0, 0x200, 0x5, 0x5, 0x0, 0x8, 0x3, 0x6, 0x1, 0xffffffff, 0xfff, 0x9, 0x9, 0xfffffff7, 0x1, 0xfffffff8, 0x9, 0xd0000000, 0x64, 0x9, 0x2, 0x2, 0x10000, 0x7, 0xea, 0xffffffff, 0x3e, 0x9, 0x4, 0x9, 0x7b, 0x3, 0x2, 0xa388, 0xfffffff5, 0x6, 0x9, 0x4, 0x800, 0x8, 0x0, 0x3cc, 0xb, 0xc5, 0x3, 0x10000, 0xe, 0xfffffff7, 0x8, 0x3ff, 0x9, 0x4, 0x5, 0x6, 0xfffffffa, 0x4, 0x2, 0x3, 0x7fffffff, 0x4, 0x80000001, 0x3, 0x2, 0xb, 0x6, 0x3, 0xd, 0x8, 0x4, 0x8, 0x200000, 0xfa40, 0x0, 0xffff943f, 0x6, 0xce, 0x9, 0xd, 0x9, 0xfffff771, 0x40, 0xe908, 0x4, 0x10001, 0x9, 0x8, 0xdc, 0x2, 0x6, 0x8, 0xf, 0x0, 0x0, 0x80, 0x10, 0x6, 0x1, 0x1, 0x80000001, 0x100, 0xff, 0x5, 0x4c2, 0x4, 0x8, 0x81, 0x8, 0x9, 0x8, 0x3ff, 0x9, 0x8, 0x67b8, 0xfffffe00, 0x5, 0x4, 0x6, 0x1, 0x8000, 0xc7b, 0x3, 0x6, 0x7, 0x6, 0x8, 0xffffb1ca, 0x8, 0x8, 0x1, 0x8, 0x2, 0xfff, 0x400, 0x7, 0x84c3, 0x5, 0x2, 0x1, 0x8, 0x0, 0x1, 0xca, 0x3, 0x8000, 0x7, 0x7, 0x61e, 0x7ff, 0x5, 0x3, 0x7bb, 0x774, 0x3, 0x2, 0x8, 0xe, 0x5, 0x0, 0x0, 0x3, 0x5, 0x1ff, 0x1, 0x0, 0x7, 0x8, 0x55de, 0x5, 0x67000000, 0xa, 0xfffffff7, 0x10000, 0x1, 0xf, 0x5, 0x7, 0x3ff, 0x4493e258, 0xc820, 0x3, 0xb, 0x8, 0xfffffffa, 0x8000, 0x81, 0x2, 0x2, 0x800, 0xfffff77a, 0xfffffff9, 0xfffffffa, 0x9, 0x8, 0x98b, 0x5, 0x4, 0xffffffff, 0x78f, 0x5, 0x85a, 0xe44, 0x3, 0x5, 0x80000001, 0x100, 0x5, 0x1, 0x3, 0x10001, 0x2, 0xb1fd, 0x5, 0x7ff, 0x7, 0x9, 0x42ecef57, 0xffffffbd, 0x9, 0x7, 0x8001, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000000}]}]}}]}, 0x458}, 0x1, 0x0, 0x0, 0x410c4}, 0x4880) 217.859488ms ago: executing program 3 (id=645): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x1, 0x1, 0x0, &(0x7f0000000440)=""/54, 0x0, 0x41000}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 217.617707ms ago: executing program 0 (id=646): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3f, 0x30, 0xfffc, 0x0, 0x0, 0x2, 0x0, @private, @rand_addr=0x64010101}, {0x11, 0x0, 0x0, @local, "537df5ffe5ffffff007ee4104f9c000000000000"}}}}}, 0x0) 135.853449ms ago: executing program 0 (id=647): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xfffd, @loopback}, 0x10, &(0x7f000000c540)=[{&(0x7f0000000280)='\b\x00', 0x2}, {&(0x7f000000b540)="920ca227df65", 0x6}], 0x2, &(0x7f000000b440)=ANY=[@ANYBLOB="1c000000000000000000000008000000860a"], 0x20}, 0x20000890) 135.629265ms ago: executing program 3 (id=648): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_READ_STATUS(r1, 0x80046f45, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f0000000500)=[{&(0x7f0000000680)=""/180, 0xb4}], 0x1, 0x6, 0x7) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x40, {0x2, 0x14}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x2c}]}, 0x24}}, 0x20048855) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0) 76.720028ms ago: executing program 3 (id=649): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000000000000000000000000000000000001"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x18840}, 0x4000841) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xa00, 0x801) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000dc0)={0x1, 0x1, 0x1}) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 76.005362ms ago: executing program 0 (id=650): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'hsr0\x00', 0x1000}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000180)={0x10000, 0x100000001, 0x1, 0x0, 0x2, 0x0, [{0x9, 0x9, 0x1000000000000000}, {0x1, 0x5, 0x7bb8, '\x00', 0x1000}]}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x19, &(0x7f0000000000), 0x8) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xfffffffffffffe43}, &(0x7f0000000000)=0x8) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300012c9dff7f8cd913e90007"], 0x14}], 0x1}, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x0) dup3(r6, r6, 0x80000) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 75.878804ms ago: executing program 3 (id=651): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f0000001200)=0xfffffff8, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) shutdown(r0, 0x1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 6.93893ms ago: executing program 3 (id=652): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000004c40)=[{{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000b80)="d1a53e3631de8e2cb9ecb17b938de843f6d3858a58ac0ccda5551c44847a0f5011d5417690a6325a71976b65b1da08fcac5f4957b7cadce8", 0x38}, {&(0x7f0000000bc0)="d274c0b018218fd1aa4ac235887f2f38679306a1f5f19ca299b5d69ac02e203764e0e61a929246bbb289578bb44d0124ebbfbd822f6a1c748237e0838a73ccb5a563f13efce9792d017518b7136d15a16604bc607ac29aaec9486d505f70b668e6696cdeb71f937a6fac37cd94ea2783a1236bfae873fd7a80a13f97d2d5b508276eacac94223b00d8f5ccd2b539493c0227abb0a0842f9bedd1a1605b7f20869f882dded27cc8abc3d551c9c451ed73ed3a38de8a205f8e7c749f40fb3441657e27f617a6a3adead40bd8f0a88aea823eb275081b088e2d283b4b255e24fb17913406edc3", 0xe5}, {&(0x7f0000000cc0)="57c5f1422a61d0fceb6c40b9ba4b38a0a09dedc9e257889de69a8b9d6d5c4697e4b641e6574a6723870b5f18864ce4c557d33cf52364df1d5e33f68a2b3778ba9370c9d9b54841a55240baa3be10e02b41b283907c87772e79f4fe0547e137c174796b", 0x63}, {&(0x7f0000000d40)="5a0c0ca95a4ee8068539f2127a79661d15a8d6f7aa300071d748c5f470a5d0df7173cd87d5fd96f78a934c5b12bd88625468d1b4ca02736440fc91eb193b2cd593069c568e9345218ee6f7f0905ba462386b44d0cc357d17ab14bf02ee2f51785eb18a542aae12464e39024c37203cb272014b46234f52915f7e10d19ccfe304bc61f50bc111cfaf13b2", 0x8a}, {&(0x7f0000002500)="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", 0x4c7}], 0x5}}], 0x1, 0x885) sendmmsg$inet_sctp(r0, &(0x7f0000006240)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="814c594d0bd78f542ea6a16cec7785d432e2f8a665a1968faa5d7b0517bec0169c184f9ad000641ab638f707ba01bd87f403d521f2c4ea80d483c6e7709d741f7525d98c7a2d029f8e6f13003417a90a9d4b3b9be5510b7e12246be2714983cb18c82b4bc716ea5f50b26463b53aa2dab41dbd7135c862ac612c19892b810ca51cc005af6bbcbc9430e06f59cf75804d62df7ecbacfa0a6c500b541c8ba3d7958fe338b7c9d9eecc39328a7cf84cf20fa0e26fc9b2a305de84adec380f24ddb80c043333895aece33ff72f6bd0abc14bcfb340cfd7891ecf601421b795eb664019bf74add4", 0xe5}, {&(0x7f0000000480)="cf4a1e93489489671fe50f83a397f0db2f33d454d616b2009ba858", 0x1b}, {&(0x7f0000000500)="872daa3013c515f04108fccef6f8f95e34015799685768823dca2ad088b3ff94ac7a5b", 0x23}], 0x3, 0x0, 0x0, 0x20000000}], 0x1, 0x20000000) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa45bba5", 0x6f}, {&(0x7f0000002300)="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", 0x1c7}], 0x2}}], 0x2, 0x2090) 0s ago: executing program 3 (id=653): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x149a82, 0x7) write$cgroup_int(r0, &(0x7f0000000040)=0x1c9, 0x12) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x20004004) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x8001100) 0s ago: executing program 3 (id=654): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[], 0x108}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a1"], 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a1"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x109}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="8316c97ee05bedf006eef2f7a3ce6457165745a9b57cdae91946f2e83e781559f9ab9d85f9475642674fccacd3a42c55607c4caf401bf9244d187287b63f49e8c2c8e86271a3f9b6a6dda8e871262809c9621f25337d6d6086b0798da458a6471198ede6c1c1a3f37ce95b93a555dfd00d5cd8be1e01194ca37400"/136, @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf256d000000"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40040) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000240)=r5) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000240)=r5) r6 = userfaultfd(0x801) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}], 0x10) close(0x3) (async) close(0x3) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700}) socket$inet_sctp(0x2, 0x1, 0x84) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r9, 0xc03064ca, &(0x7f0000000280)={0x0, &(0x7f0000000200), 0xfffffffffffffffd, 0xfffffffffffffe50, 0x6}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000039c0)={0x1, &(0x7f0000003980)=[{0x34, 0x6, 0xe, 0x4}]}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000040)={r11, 0x6, 0x10}, &(0x7f0000000080)=0xc) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) kernel console output (not intermixed with test programs): 0000000000008ae RDI: 0000000000000000 [ 68.241605][ T6200] RBP: 00007fad0dcbf090 R08: 0000000000000000 R09: 000000000000effd [ 68.241611][ T6200] R10: 0000000000000017 R11: 0000000000000246 R12: 0000000000000001 [ 68.241617][ T6200] R13: 00007fad0d026038 R14: 00007fad0d025fa0 R15: 00007ffff2fceb38 [ 68.241631][ T6200] [ 68.472943][ T6216] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 68.479178][ T6216] romfs: unable to set blocksize [ 68.479178][ T6216] [ 68.523160][ T6216] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 68.552755][ T6220] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 68.567097][ T6220] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 68.584617][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 68.584654][ T42] audit: type=1400 audit(1786573994.892:334): avc: denied { write } for pid=6219 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 68.597095][ T42] audit: type=1400 audit(1786573994.902:335): avc: denied { name_connect } for pid=6219 comm="syz.0.136" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 68.604457][ T42] audit: type=1400 audit(1786573994.902:336): avc: denied { accept } for pid=6219 comm="syz.0.136" laddr=fe80::13 lport=55862 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.617274][ T6225] jffs2: notice: (6225) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 68.635523][ T42] audit: type=1400 audit(1786573994.942:337): avc: denied { read write } for pid=6224 comm="syz.3.138" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 68.644847][ T42] audit: type=1400 audit(1786573994.942:338): avc: denied { open } for pid=6224 comm="syz.3.138" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 68.652163][ T42] audit: type=1400 audit(1786573994.952:339): avc: denied { ioctl } for pid=6224 comm="syz.3.138" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x583f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 68.662425][ T42] audit: type=1400 audit(1786573994.952:340): avc: denied { mount } for pid=6227 comm="syz.0.139" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 68.669396][ T42] audit: type=1400 audit(1786573994.962:341): avc: denied { search } for pid=6227 comm="syz.0.139" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 68.676170][ T42] audit: type=1400 audit(1786573994.962:342): avc: denied { write } for pid=6227 comm="syz.0.139" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 68.686281][ T42] audit: type=1400 audit(1786573994.962:343): avc: denied { open } for pid=6227 comm="syz.0.139" path="/45/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 68.704543][ T6224] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 68.895700][ T6242] FAULT_INJECTION: forcing a failure. [ 68.895700][ T6242] name failslab, interval 1, probability 0, space 0, times 0 [ 68.902190][ T6242] CPU: 3 UID: 0 PID: 6242 Comm: syz.0.144 Not tainted syzkaller #0 PREEMPT(full) [ 68.902213][ T6242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.902224][ T6242] Call Trace: [ 68.902231][ T6242] [ 68.902238][ T6242] dump_stack_lvl+0x100/0x190 [ 68.902269][ T6242] should_fail_ex.cold+0x5/0xa [ 68.902294][ T6242] should_failslab+0xc2/0x120 [ 68.902319][ T6242] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 68.902352][ T6242] ? trace_kmem_cache_alloc+0xdd/0x100 [ 68.902375][ T6242] ? __kasan_slab_alloc+0x89/0x90 [ 68.902398][ T6242] ? cond_bools_copy+0x45/0xf0 [ 68.902428][ T6242] kmemdup_noprof+0x29/0x60 [ 68.902449][ T6242] cond_bools_copy+0x45/0xf0 [ 68.902471][ T6242] hashtab_duplicate+0x24a/0x5c0 [ 68.902498][ T6242] ? __pfx_cond_bools_copy+0x10/0x10 [ 68.902524][ T6242] ? __pfx_cond_bools_destroy+0x10/0x10 [ 68.902547][ T6242] cond_policydb_dup+0x155/0x750 [ 68.902570][ T6242] ? security_set_bools+0x115/0x6c0 [ 68.902591][ T6242] ? __asan_memcpy+0x3c/0x60 [ 68.902613][ T6242] security_set_bools+0x13f/0x6c0 [ 68.902638][ T6242] ? sel_commit_bools_write+0x25b/0x420 [ 68.902664][ T6242] sel_commit_bools_write+0x36d/0x420 [ 68.902688][ T6242] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 68.902718][ T6242] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 68.902741][ T6242] vfs_writev+0x5ed/0xdd0 [ 68.902775][ T6242] ? __pfx_vfs_writev+0x10/0x10 [ 68.902803][ T6242] ? rcu_read_lock_any_held+0x6a/0xa0 [ 68.902837][ T6242] ? __fget_files+0x21f/0x3d0 [ 68.902862][ T6242] ? do_writev+0x13e/0x340 [ 68.902887][ T6242] do_writev+0x13e/0x340 [ 68.902913][ T6242] ? __pfx_do_writev+0x10/0x10 [ 68.902946][ T6242] do_syscall_64+0x115/0x870 [ 68.902969][ T6242] ? clear_bhb_loop+0x70/0xc0 [ 68.902992][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.903034][ T6242] RIP: 0033:0x7f1accd9e0d9 [ 68.903050][ T6242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.903066][ T6242] RSP: 002b:00007f1acdcad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 68.903084][ T6242] RAX: ffffffffffffffda RBX: 00007f1acd025fa0 RCX: 00007f1accd9e0d9 [ 68.903095][ T6242] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000003 [ 68.903106][ T6242] RBP: 00007f1acdcad090 R08: 0000000000000000 R09: 0000000000000000 [ 68.903117][ T6242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.903127][ T6242] R13: 00007f1acd026038 R14: 00007f1acd025fa0 R15: 00007ffd3e3cfa58 [ 68.903152][ T6242] [ 69.022397][ T6243] program syz.3.140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.163139][ T6256] openvswitch: netlink: IP tunnel dst address not specified [ 69.209347][ T6259] FAULT_INJECTION: forcing a failure. [ 69.209347][ T6259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.215037][ T6259] CPU: 0 UID: 0 PID: 6259 Comm: syz.2.148 Not tainted syzkaller #0 PREEMPT(full) [ 69.215053][ T6259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.215060][ T6259] Call Trace: [ 69.215063][ T6259] [ 69.215068][ T6259] dump_stack_lvl+0x100/0x190 [ 69.215088][ T6259] should_fail_ex.cold+0x5/0xa [ 69.215104][ T6259] _copy_from_user+0x2e/0xd0 [ 69.215122][ T6259] do_tcp_getsockopt+0x20d1/0x2aa0 [ 69.215136][ T6259] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 69.215148][ T6259] ? find_held_lock+0x2b/0x80 [ 69.215162][ T6259] ? __lock_acquire+0x49f/0x1a40 [ 69.215182][ T6259] ? find_held_lock+0x2b/0x80 [ 69.215192][ T6259] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 69.215206][ T6259] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 69.215221][ T6259] ? avc_has_perm_noaudit+0x145/0x3b0 [ 69.215235][ T6259] ? __lock_acquire+0x49f/0x1a40 [ 69.215250][ T6259] ? __pfx_avc_has_perm+0x10/0x10 [ 69.215266][ T6259] ? find_held_lock+0x2b/0x80 [ 69.215276][ T6259] ? __might_fault+0xc5/0x140 [ 69.215288][ T6259] ? __might_fault+0xc5/0x140 [ 69.215302][ T6259] ? _copy_from_user+0x59/0xd0 [ 69.215320][ T6259] tcp_getsockopt+0xe4/0x110 [ 69.215331][ T6259] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 69.215350][ T6259] do_sock_getsockopt+0x50a/0x6e0 [ 69.215367][ T6259] ? __lock_acquire+0x49f/0x1a40 [ 69.215382][ T6259] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 69.215400][ T6259] ? rcu_read_lock_any_held+0x6a/0xa0 [ 69.215415][ T6259] ? find_held_lock+0x2b/0x80 [ 69.215428][ T6259] ? __fget_files+0x21f/0x3d0 [ 69.215444][ T6259] __sys_getsockopt+0x148/0x260 [ 69.215462][ T6259] ? __x64_sys_getsockopt+0xbd/0x160 [ 69.215476][ T6259] __x64_sys_getsockopt+0xbd/0x160 [ 69.215489][ T6259] ? do_syscall_64+0x90/0x870 [ 69.215505][ T6259] ? lockdep_hardirqs_on+0x78/0x100 [ 69.215519][ T6259] do_syscall_64+0x115/0x870 [ 69.215533][ T6259] ? clear_bhb_loop+0x70/0xc0 [ 69.215547][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.215559][ T6259] RIP: 0033:0x7f9ceb79e0d9 [ 69.215569][ T6259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.215579][ T6259] RSP: 002b:00007f9ce99f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 69.215590][ T6259] RAX: ffffffffffffffda RBX: 00007f9ceba26090 RCX: 00007f9ceb79e0d9 [ 69.215597][ T6259] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 69.215603][ T6259] RBP: 00007f9ce99f6090 R08: 00002000000002c0 R09: 0000000000000000 [ 69.215610][ T6259] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 69.215616][ T6259] R13: 00007f9ceba26128 R14: 00007f9ceba26090 R15: 00007fffaa83a828 [ 69.215629][ T6259] [ 69.578128][ T6271] netlink: 'syz.0.154': attribute type 39 has an invalid length. [ 69.596175][ T6271] hsr_slave_0 (unregistering): left promiscuous mode [ 69.690170][ T6273] netlink: 'syz.3.155': attribute type 10 has an invalid length. [ 70.064309][ T6302] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 70.170098][ T6312] MTD: Couldn't look up './file0': -15 [ 70.294205][ T6323] netlink: 'syz.2.175': attribute type 12 has an invalid length. [ 70.297082][ T6323] netlink: 'syz.2.175': attribute type 29 has an invalid length. [ 70.299551][ T6323] netlink: 148 bytes leftover after parsing attributes in process `syz.2.175'. [ 70.303807][ T6323] netlink: 'syz.2.175': attribute type 3 has an invalid length. [ 70.306364][ T6323] netlink: 'syz.2.175': attribute type 2 has an invalid length. [ 70.308956][ T6323] netlink: 35 bytes leftover after parsing attributes in process `syz.2.175'. [ 70.586843][ T6346] capability: warning: `syz.2.184' uses deprecated v2 capabilities in a way that may be insecure [ 70.688904][ T6350] syzkaller0: entered promiscuous mode [ 70.692174][ T6350] syzkaller0: entered allmulticast mode [ 70.701597][ T6350] tipc: Started in network mode [ 70.703804][ T6350] tipc: Node identity 2ed72624929f, cluster identity 4711 [ 70.709631][ T6350] tipc: Enabled bearer , priority 0 [ 70.728764][ T6349] tipc: Resetting bearer [ 70.747288][ T6349] tipc: Disabling bearer [ 70.951762][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 71.134086][ T6400] netlink: 'syz.0.201': attribute type 1 has an invalid length. [ 71.137435][ T6400] netlink: 224 bytes leftover after parsing attributes in process `syz.0.201'. [ 71.664568][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.824105][ T6117] usbtmc 6-1:16.0: usb_control_msg returned -110 [ 71.837184][ T55] usb 6-1: USB disconnect, device number 3 [ 72.007057][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'. [ 72.011159][ T6430] netlink: 348 bytes leftover after parsing attributes in process `syz.1.211'. [ 72.014925][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'. [ 72.017948][ T6430] netlink: 348 bytes leftover after parsing attributes in process `syz.1.211'. [ 72.021126][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'. [ 72.831496][ T6454] binder_alloc: 6453: binder_alloc_buf size 144115188075855896 failed, no address space [ 72.834596][ T6454] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 73.441209][ T847] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 73.504838][ T6468] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 73.504838][ T6468] program syz.1.228 not setting count and/or reply_len properly [ 73.601675][ T847] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.608351][ T847] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 73.611603][ T847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.615121][ T847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.618552][ T847] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.623334][ T847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.628838][ T847] usb 7-1: config 0 descriptor?? [ 73.698377][ T42] kauditd_printk_skb: 59 callbacks suppressed [ 73.698392][ T42] audit: type=1400 audit(1786574000.002:403): avc: denied { ioctl } for pid=6475 comm="syz.1.230" path="socket:[13368]" dev="sockfs" ino=13368 ioctlcmd=0x6e83 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.701965][ T6481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 73.710421][ T42] audit: type=1400 audit(1786574000.002:404): avc: denied { allowed } for pid=6475 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.878099][ T42] audit: type=1400 audit(1786574000.182:405): avc: denied { write } for pid=6491 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.884681][ T42] audit: type=1400 audit(1786574000.182:406): avc: denied { read } for pid=6491 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.966512][ T42] audit: type=1400 audit(1786574000.272:407): avc: denied { create } for pid=6498 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.976170][ T42] audit: type=1400 audit(1786574000.272:408): avc: denied { read } for pid=6498 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.983332][ T42] audit: type=1400 audit(1786574000.282:409): avc: denied { write } for pid=6491 comm="syz.1.233" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.990755][ T42] audit: type=1400 audit(1786574000.292:410): avc: denied { ioctl } for pid=6491 comm="syz.1.233" path="socket:[12602]" dev="sockfs" ino=12602 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.043174][ T847] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.045496][ T847] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.047717][ T847] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.049956][ T847] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.053121][ T42] audit: type=1400 audit(1786574000.362:411): avc: denied { map } for pid=6504 comm="syz.1.238" path="socket:[12612]" dev="sockfs" ino=12612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 74.053914][ T847] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.066188][ T847] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.066273][ T42] audit: type=1400 audit(1786574000.372:412): avc: denied { ioctl } for pid=6504 comm="syz.1.238" path="socket:[12616]" dev="sockfs" ino=12616 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 74.068492][ T847] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.080449][ T847] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.083937][ T847] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.086119][ T847] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.098649][ T847] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 74.161287][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 74.211171][ T6517] nvme_fabrics: missing parameter 'transport=%s' [ 74.215339][ T6517] nvme_fabrics: missing parameter 'nqn=%s' [ 74.263826][ T6525] gadgetfs: bound to dummy_udc driver [ 74.320468][ T1351] usb 7-1: USB disconnect, device number 3 [ 74.364550][ T6531] netlink: 'syz.1.249': attribute type 4 has an invalid length. [ 74.445479][ T6542] Mount JFS Failure: -5 [ 74.446781][ T6542] jfs_mount failed w/return code = -5 [ 74.537488][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 74.540293][ T6545] netlink: 'syz.0.254': attribute type 15 has an invalid length. [ 74.543301][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'. [ 74.556409][ T6545] netlink: 'syz.0.254': attribute type 15 has an invalid length. [ 74.571921][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 74.575317][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 74.583275][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 74.588732][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 74.631124][ T847] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 74.659157][ T6551] FAULT_INJECTION: forcing a failure. [ 74.659157][ T6551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.663518][ T6551] CPU: 0 UID: 0 PID: 6551 Comm: syz.3.256 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.663536][ T6551] Tainted: [L]=SOFTLOCKUP [ 74.663539][ T6551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.663546][ T6551] Call Trace: [ 74.663550][ T6551] [ 74.663554][ T6551] dump_stack_lvl+0x100/0x190 [ 74.663575][ T6551] should_fail_ex.cold+0x5/0xa [ 74.663604][ T6551] _copy_from_user+0x2e/0xd0 [ 74.663623][ T6551] copy_msghdr_from_user+0x9f/0x4c0 [ 74.663636][ T6551] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 74.663650][ T6551] ? __pfx__kstrtoull+0x10/0x10 [ 74.663663][ T6551] ___sys_sendmsg+0x106/0x1e0 [ 74.663675][ T6551] ? __pfx____sys_sendmsg+0x10/0x10 [ 74.663693][ T6551] ? find_held_lock+0x2b/0x80 [ 74.663713][ T6551] __sys_sendmmsg+0x20c/0x440 [ 74.663729][ T6551] ? __pfx___sys_sendmmsg+0x10/0x10 [ 74.663743][ T6551] ? ksys_write+0x190/0x250 [ 74.663764][ T6551] ? fput+0x79/0x100 [ 74.663777][ T6551] ? ksys_write+0x1ac/0x250 [ 74.663787][ T6551] ? __pfx_ksys_write+0x10/0x10 [ 74.663799][ T6551] __x64_sys_sendmmsg+0x9c/0x100 [ 74.663814][ T6551] ? lockdep_hardirqs_on+0x78/0x100 [ 74.663830][ T6551] do_syscall_64+0x115/0x870 [ 74.663845][ T6551] ? clear_bhb_loop+0x70/0xc0 [ 74.663859][ T6551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.663871][ T6551] RIP: 0033:0x7fad0cd9e0d9 [ 74.663880][ T6551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.663891][ T6551] RSP: 002b:00007fad0dc9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 74.663902][ T6551] RAX: ffffffffffffffda RBX: 00007fad0d026090 RCX: 00007fad0cd9e0d9 [ 74.663909][ T6551] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 74.663915][ T6551] RBP: 00007fad0dc9e090 R08: 0000000000000000 R09: 0000000000000000 [ 74.663922][ T6551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.663928][ T6551] R13: 00007fad0d026128 R14: 00007fad0d026090 R15: 00007ffff2fceb38 [ 74.663941][ T6551] [ 74.802098][ T847] usb 6-1: device descriptor read/64, error -71 [ 74.832996][ T6554] netlink: 'syz.0.257': attribute type 15 has an invalid length. [ 74.838690][ T6554] netlink: 'syz.0.257': attribute type 15 has an invalid length. [ 74.929049][ T6560] binder: Bad value for 'max' [ 74.941666][ T6562] Bluetooth: MGMT ver 1.23 [ 74.988705][ T6564] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 75.022052][ T6567] netlink: 'syz.0.263': attribute type 2 has an invalid length. [ 75.050479][ T6569] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 75.052264][ T847] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 75.084011][ T5725] Bluetooth: hci1: unexpected cc 0x204b length: 2 < 3 [ 75.201169][ T847] usb 6-1: device descriptor read/64, error -71 [ 75.287350][ T6593] FAULT_INJECTION: forcing a failure. [ 75.287350][ T6593] name failslab, interval 1, probability 0, space 0, times 0 [ 75.295553][ T6593] CPU: 3 UID: 0 PID: 6593 Comm: syz.3.273 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.295588][ T6593] Tainted: [L]=SOFTLOCKUP [ 75.295594][ T6593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.295601][ T6593] Call Trace: [ 75.295606][ T6593] [ 75.295610][ T6593] dump_stack_lvl+0x100/0x190 [ 75.295631][ T6593] should_fail_ex.cold+0x5/0xa [ 75.295645][ T6593] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 75.295673][ T6593] should_failslab+0xc2/0x120 [ 75.295698][ T6593] kmem_cache_alloc_noprof+0x91/0x6a0 [ 75.295722][ T6593] ? skb_clone+0x190/0x400 [ 75.295757][ T6593] skb_clone+0x190/0x400 [ 75.295773][ T6593] netlink_deliver_tap+0xaed/0xcc0 [ 75.295787][ T6593] netlink_unicast+0x62b/0x850 [ 75.295802][ T6593] ? __pfx_netlink_unicast+0x10/0x10 [ 75.295817][ T6593] netlink_sendmsg+0x8b0/0xda0 [ 75.295835][ T6593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.295849][ T6593] ? selinux_socket_sendmsg+0x198/0x2f0 [ 75.295870][ T6593] ____sys_sendmsg+0xa4d/0xbe0 [ 75.295887][ T6593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.295900][ T6593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.295925][ T6593] ___sys_sendmsg+0x190/0x1e0 [ 75.295937][ T6593] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.295947][ T6593] ? __lock_acquire+0x49f/0x1a40 [ 75.295962][ T6593] ? get_pid_task+0x106/0x250 [ 75.295988][ T6593] __sys_sendmsg+0x160/0x210 [ 75.296003][ T6593] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.296025][ T6593] do_syscall_64+0x115/0x870 [ 75.296040][ T6593] ? clear_bhb_loop+0x70/0xc0 [ 75.296054][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.296066][ T6593] RIP: 0033:0x7fad0cd9e0d9 [ 75.296075][ T6593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.296085][ T6593] RSP: 002b:00007fad0dcbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.296097][ T6593] RAX: ffffffffffffffda RBX: 00007fad0d025fa0 RCX: 00007fad0cd9e0d9 [ 75.296104][ T6593] RDX: 0000000000048810 RSI: 0000200000000140 RDI: 0000000000000003 [ 75.296110][ T6593] RBP: 00007fad0dcbf090 R08: 0000000000000000 R09: 0000000000000000 [ 75.296116][ T6593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.296122][ T6593] R13: 00007fad0d026038 R14: 00007fad0d025fa0 R15: 00007ffff2fceb38 [ 75.296136][ T6593] [ 75.302111][ T6595] trusted_key: encrypted_key: keyword '§oad' not recognized [ 75.339130][ T6597] syz.3.275 uses obsolete (PF_INET,SOCK_PACKET) [ 75.340771][ T847] usb usb6-port1: attempt power cycle [ 75.393116][ T5725] Bluetooth: hci1: unexpected cc 0x204b length: 2 < 3 [ 75.452083][ T6604] evm: overlay not supported [ 75.676036][ T6613] FAULT_INJECTION: forcing a failure. [ 75.676036][ T6613] name failslab, interval 1, probability 0, space 0, times 0 [ 75.682123][ T6613] CPU: 3 UID: 0 PID: 6613 Comm: syz.0.280 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.682150][ T6613] Tainted: [L]=SOFTLOCKUP [ 75.682156][ T6613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.682167][ T6613] Call Trace: [ 75.682173][ T6613] [ 75.682179][ T6613] dump_stack_lvl+0x100/0x190 [ 75.682209][ T6613] should_fail_ex.cold+0x5/0xa [ 75.682232][ T6613] should_failslab+0xc2/0x120 [ 75.682257][ T6613] __kvmalloc_node_noprof+0x116/0x970 [ 75.682281][ T6613] ? vmemdup_user+0x2a/0xe0 [ 75.682305][ T6613] vmemdup_user+0x2a/0xe0 [ 75.682325][ T6613] path_setxattrat+0x29e/0x3b0 [ 75.682349][ T6613] ? __pfx_path_setxattrat+0x10/0x10 [ 75.682373][ T6613] ? ksys_write+0x190/0x250 [ 75.682390][ T6613] ? ksys_write+0x190/0x250 [ 75.682424][ T6613] ? fput+0x79/0x100 [ 75.682446][ T6613] ? ksys_write+0x1ac/0x250 [ 75.682462][ T6613] ? __pfx_ksys_write+0x10/0x10 [ 75.682481][ T6613] __x64_sys_lsetxattr+0xc9/0x140 [ 75.682502][ T6613] ? do_syscall_64+0x90/0x870 [ 75.682524][ T6613] ? lockdep_hardirqs_on+0x78/0x100 [ 75.682545][ T6613] do_syscall_64+0x115/0x870 [ 75.682566][ T6613] ? clear_bhb_loop+0x70/0xc0 [ 75.682587][ T6613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.682604][ T6613] RIP: 0033:0x7f1accd9e0d9 [ 75.682620][ T6613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.682635][ T6613] RSP: 002b:00007f1acdcad028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 75.682653][ T6613] RAX: ffffffffffffffda RBX: 00007f1acd025fa0 RCX: 00007f1accd9e0d9 [ 75.682664][ T6613] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 00002000000001c0 [ 75.682674][ T6613] RBP: 00007f1acdcad090 R08: 0000000000000001 R09: 0000000000000000 [ 75.682685][ T6613] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 75.682694][ T6613] R13: 00007f1acd026038 R14: 00007f1acd025fa0 R15: 00007ffd3e3cfa58 [ 75.682718][ T6613] [ 75.733262][ T847] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 75.755213][ T6618] FAULT_INJECTION: forcing a failure. [ 75.755213][ T6618] name failslab, interval 1, probability 0, space 0, times 0 [ 75.782564][ T6618] CPU: 1 UID: 0 PID: 6618 Comm: syz.3.282 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.782583][ T6618] Tainted: [L]=SOFTLOCKUP [ 75.782587][ T6618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.782594][ T6618] Call Trace: [ 75.782599][ T6618] [ 75.782603][ T6618] dump_stack_lvl+0x100/0x190 [ 75.782623][ T6618] should_fail_ex.cold+0x5/0xa [ 75.782639][ T6618] should_failslab+0xc2/0x120 [ 75.782656][ T6618] __kmalloc_cache_noprof+0x91/0x6c0 [ 75.782667][ T6618] ? kasan_quarantine_put+0x104/0x240 [ 75.782680][ T6618] ? udmabuf_create+0xc0/0x12a0 [ 75.782715][ T6618] udmabuf_create+0xc0/0x12a0 [ 75.782731][ T6618] ? __lock_acquire+0x49f/0x1a40 [ 75.782751][ T6618] ? __pfx_udmabuf_create+0x10/0x10 [ 75.782766][ T6618] ? find_held_lock+0x2b/0x80 [ 75.782776][ T6618] ? __might_fault+0xc5/0x140 [ 75.782788][ T6618] ? __might_fault+0xc5/0x140 [ 75.782804][ T6618] udmabuf_ioctl+0x18f/0x300 [ 75.782820][ T6618] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 75.782840][ T6618] ? selinux_file_ioctl+0xb6/0x290 [ 75.782860][ T6618] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 75.782879][ T6618] __x64_sys_ioctl+0x18e/0x210 [ 75.782897][ T6618] do_syscall_64+0x115/0x870 [ 75.782913][ T6618] ? clear_bhb_loop+0x70/0xc0 [ 75.782928][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.782943][ T6618] RIP: 0033:0x7fad0cd9e0d9 [ 75.782957][ T6618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.782972][ T6618] RSP: 002b:00007fad0dcbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.783001][ T6618] RAX: ffffffffffffffda RBX: 00007fad0d025fa0 RCX: 00007fad0cd9e0d9 [ 75.783013][ T6618] RDX: 0000200000000000 RSI: 0000000040187542 RDI: 0000000000000003 [ 75.783023][ T6618] RBP: 00007fad0dcbf090 R08: 0000000000000000 R09: 0000000000000000 [ 75.783032][ T6618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.783041][ T6618] R13: 00007fad0d026038 R14: 00007fad0d025fa0 R15: 00007ffff2fceb38 [ 75.783058][ T6618] [ 75.791748][ T847] usb 6-1: device descriptor read/8, error -71 [ 75.819306][ T6620] openvswitch: netlink: Missing key (keys=40, expected=100) [ 75.882526][ T6627] FAULT_INJECTION: forcing a failure. [ 75.882526][ T6627] name failslab, interval 1, probability 0, space 0, times 0 [ 75.888572][ T6627] CPU: 0 UID: 0 PID: 6627 Comm: syz.3.285 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.888599][ T6627] Tainted: [L]=SOFTLOCKUP [ 75.888605][ T6627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.888616][ T6627] Call Trace: [ 75.888623][ T6627] [ 75.888630][ T6627] dump_stack_lvl+0x100/0x190 [ 75.888659][ T6627] should_fail_ex.cold+0x5/0xa [ 75.888683][ T6627] should_failslab+0xc2/0x120 [ 75.888708][ T6627] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 75.888730][ T6627] ? __alloc_skb+0x5b7/0x710 [ 75.888751][ T6627] ? __alloc_skb+0x140/0x710 [ 75.888776][ T6627] __alloc_skb+0x140/0x710 [ 75.888795][ T6627] ? __alloc_skb+0x5b7/0x710 [ 75.888815][ T6627] ? __pfx___alloc_skb+0x10/0x10 [ 75.888843][ T6627] netlink_alloc_large_skb+0x69/0x150 [ 75.888866][ T6627] netlink_sendmsg+0x680/0xda0 [ 75.888888][ T6627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.888910][ T6627] ? selinux_socket_sendmsg+0x198/0x2f0 [ 75.888941][ T6627] ____sys_sendmsg+0xa4d/0xbe0 [ 75.888968][ T6627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.888988][ T6627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.889027][ T6627] ___sys_sendmsg+0x190/0x1e0 [ 75.889047][ T6627] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.889063][ T6627] ? __lock_acquire+0x49f/0x1a40 [ 75.889109][ T6627] ? get_pid_task+0x106/0x250 [ 75.889153][ T6627] __sys_sendmsg+0x160/0x210 [ 75.889178][ T6627] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.889214][ T6627] do_syscall_64+0x115/0x870 [ 75.889238][ T6627] ? clear_bhb_loop+0x70/0xc0 [ 75.889261][ T6627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.889280][ T6627] RIP: 0033:0x7fad0cd9e0d9 [ 75.889296][ T6627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.889313][ T6627] RSP: 002b:00007fad0dcbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.889330][ T6627] RAX: ffffffffffffffda RBX: 00007fad0d025fa0 RCX: 00007fad0cd9e0d9 [ 75.889342][ T6627] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 75.889353][ T6627] RBP: 00007fad0dcbf090 R08: 0000000000000000 R09: 0000000000000000 [ 75.889364][ T6627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.889376][ T6627] R13: 00007fad0d026038 R14: 00007fad0d025fa0 R15: 00007ffff2fceb38 [ 75.889400][ T6627] [ 76.113039][ T847] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 76.131918][ T847] usb 6-1: device descriptor read/8, error -71 [ 76.217553][ T6650] __nla_validate_parse: 8 callbacks suppressed [ 76.217569][ T6650] netlink: 60 bytes leftover after parsing attributes in process `syz.2.291'. [ 76.225812][ T6650] openvswitch: netlink: IP tunnel TTL not specified. [ 76.241972][ T847] usb usb6-port1: unable to enumerate USB device [ 76.286090][ T5725] Bluetooth: hci1: unexpected cc 0x204b length: 2 < 3 [ 76.647066][ T6671] netlink: 'syz.3.303': attribute type 1 has an invalid length. [ 76.667473][ T6671] bond1: entered promiscuous mode [ 76.670180][ T6671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.680791][ T6671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.303'. [ 76.684942][ T6671] bond1: entered allmulticast mode [ 76.704860][ T6671] bond1: (slave bridge1): making interface the new active one [ 76.707694][ T6671] bridge1: entered promiscuous mode [ 76.709453][ T6671] bridge1: entered allmulticast mode [ 76.712970][ T6671] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 76.764610][ T6674] syzkaller0: entered promiscuous mode [ 76.766417][ T6674] syzkaller0: entered allmulticast mode [ 76.997882][ T6684] netlink: 'syz.2.308': attribute type 10 has an invalid length. [ 77.007071][ T6684] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 77.011204][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 77.017649][ T6684] bridge_slave_1: left promiscuous mode [ 77.019462][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.029586][ T6684] bridge_slave_0: left allmulticast mode [ 77.032599][ T6684] bridge_slave_0: left promiscuous mode [ 77.035357][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.051834][ T6684] bond0: (slave bridge0): Releasing backup interface [ 77.062327][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'. [ 77.065341][ T6687] syzkaller0: entered promiscuous mode [ 77.066285][ T6685] openvswitch: netlink: Missing key (keys=40, expected=80) [ 77.068125][ T6687] syzkaller0: entered allmulticast mode [ 77.132212][ T6689] syzkaller0: entered promiscuous mode [ 77.134551][ T6689] syzkaller0: entered allmulticast mode [ 77.400125][ T6708] syzkaller0: entered promiscuous mode [ 77.412079][ T6708] syzkaller0: entered allmulticast mode [ 77.963380][ T6728] netlink: 40 bytes leftover after parsing attributes in process `syz.0.322'. [ 78.003833][ T6733] binder_alloc: 6732: binder_alloc_buf size 12312 failed, no address space [ 78.008043][ T6733] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 78.066285][ T6735] netlink: 'syz.1.325': attribute type 1 has an invalid length. [ 78.095738][ T6735] 8021q: adding VLAN 0 to HW filter on device bond3 [ 78.099964][ T6735] bond2: (slave bond3): making interface the new active one [ 78.102701][ T6735] bond2: (slave bond3): Enslaving as an active interface with an up link [ 78.106470][ T6738] openvswitch: netlink: Flow key attribute not present in set flow. [ 78.110569][ T6738] syzkaller0: entered promiscuous mode [ 78.112999][ T6738] syzkaller0: entered allmulticast mode [ 78.371115][ T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.425683][ T6753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.332'. [ 78.502016][ T34] usb 5-1: device descriptor read/64, error -71 [ 78.670051][ T6768] FAULT_INJECTION: forcing a failure. [ 78.670051][ T6768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.677638][ T6768] CPU: 0 UID: 0 PID: 6768 Comm: syz.1.337 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.677657][ T6768] Tainted: [L]=SOFTLOCKUP [ 78.677662][ T6768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.677669][ T6768] Call Trace: [ 78.677673][ T6768] [ 78.677678][ T6768] dump_stack_lvl+0x100/0x190 [ 78.677698][ T6768] should_fail_ex.cold+0x5/0xa [ 78.677714][ T6768] _copy_from_iter+0x1f4/0x1690 [ 78.677733][ T6768] ? __asan_memset+0x23/0x50 [ 78.677746][ T6768] ? __pfx__copy_from_iter+0x10/0x10 [ 78.677762][ T6768] ? __pfx___alloc_skb+0x10/0x10 [ 78.677782][ T6768] netlink_sendmsg+0x808/0xda0 [ 78.677798][ T6768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.677811][ T6768] ? selinux_socket_sendmsg+0x198/0x2f0 [ 78.677831][ T6768] ____sys_sendmsg+0xa4d/0xbe0 [ 78.677848][ T6768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.677861][ T6768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 78.677887][ T6768] ___sys_sendmsg+0x190/0x1e0 [ 78.677900][ T6768] ? __pfx____sys_sendmsg+0x10/0x10 [ 78.677911][ T6768] ? __lock_acquire+0x49f/0x1a40 [ 78.677926][ T6768] ? get_pid_task+0x106/0x250 [ 78.677952][ T6768] __sys_sendmsg+0x160/0x210 [ 78.677967][ T6768] ? __pfx___sys_sendmsg+0x10/0x10 [ 78.677989][ T6768] do_syscall_64+0x115/0x870 [ 78.678005][ T6768] ? clear_bhb_loop+0x70/0xc0 [ 78.678019][ T6768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.678030][ T6768] RIP: 0033:0x7f61b8f9e0d9 [ 78.678041][ T6768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.678052][ T6768] RSP: 002b:00007f61b9f0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.678063][ T6768] RAX: ffffffffffffffda RBX: 00007f61b9225fa0 RCX: 00007f61b8f9e0d9 [ 78.678070][ T6768] RDX: 0000000020040040 RSI: 00002000000004c0 RDI: 0000000000000003 [ 78.678077][ T6768] RBP: 00007f61b9f0d090 R08: 0000000000000000 R09: 0000000000000000 [ 78.678084][ T6768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.678090][ T6768] R13: 00007f61b9226038 R14: 00007f61b9225fa0 R15: 00007fff270311f8 [ 78.678104][ T6768] [ 78.761212][ T34] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.847437][ T6774] echo interval is out of bounds [ 78.847437][ T6774] [ 78.850556][ T6774] CIFS: VFS: echo interval is out of bounds [ 78.893368][ T34] usb 5-1: device descriptor read/64, error -71 [ 78.916741][ T42] kauditd_printk_skb: 50 callbacks suppressed [ 78.916758][ T42] audit: type=1400 audit(1786574005.222:463): avc: denied { map } for pid=6775 comm="syz.1.341" path="/58/file0" dev="tmpfs" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 79.011915][ T34] usb usb5-port1: attempt power cycle [ 79.041558][ T55] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 79.112241][ T5725] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 79.116525][ T5725] Bluetooth: hci1: Injecting HCI hardware error event [ 79.120783][ T5725] Bluetooth: hci1: hardware error 0x00 [ 79.361152][ T34] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 79.381850][ T34] usb 5-1: device descriptor read/8, error -71 [ 79.481142][ T847] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 79.546632][ T42] audit: type=1400 audit(1786574005.852:464): avc: denied { create } for pid=6789 comm="syz.3.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.554312][ T42] audit: type=1400 audit(1786574005.852:465): avc: denied { create } for pid=6789 comm="syz.3.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.562394][ T42] audit: type=1400 audit(1786574005.852:466): avc: denied { getopt } for pid=6789 comm="syz.3.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.569956][ T42] audit: type=1400 audit(1786574005.852:467): avc: denied { getopt } for pid=6789 comm="syz.3.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.621130][ T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 79.641773][ T34] usb 5-1: device descriptor read/8, error -71 [ 79.641909][ T847] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 79.649713][ T847] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 79.653186][ T847] usb 6-1: config 0 has no interface number 0 [ 79.656868][ T847] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 79.661870][ T847] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 79.666320][ T847] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 79.673788][ T847] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 79.677344][ T847] usb 6-1: Product: syz [ 79.679168][ T847] usb 6-1: SerialNumber: syz [ 79.685476][ T847] usb 6-1: config 0 descriptor?? [ 79.692785][ T847] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 79.700341][ T847] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input7 [ 79.710807][ T42] audit: type=1400 audit(1786574006.012:468): avc: denied { read } for pid=5116 comm="acpid" name="event4" dev="devtmpfs" ino=2884 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.721083][ T42] audit: type=1400 audit(1786574006.022:469): avc: denied { open } for pid=5116 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2884 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.728790][ T42] audit: type=1400 audit(1786574006.022:470): avc: denied { ioctl } for pid=5116 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2884 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.754359][ T34] usb usb5-port1: unable to enumerate USB device [ 79.906975][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 79.910942][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 79.913942][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 79.916777][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 79.919346][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 79.922075][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 79.924741][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 79.928835][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 79.932364][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 79.935437][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 79.937816][ T847] usb 6-1: USB disconnect, device number 8 [ 79.939747][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 79.950787][ T847] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 80.032216][ T42] audit: type=1400 audit(1786574006.332:471): avc: denied { setopt } for pid=6803 comm="syz.2.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.232883][ T42] audit: type=1400 audit(1786574006.542:472): avc: denied { ioctl } for pid=6803 comm="syz.2.351" path="socket:[12953]" dev="sockfs" ino=12953 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.281175][ T5510] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 80.441222][ T5510] usb 8-1: Using ep0 maxpacket: 32 [ 80.446106][ T5510] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 80.450100][ T5510] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 80.454481][ T5510] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 80.458525][ T5510] usb 8-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 80.462749][ T5510] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 80.470067][ T5510] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.473569][ T5510] usb 8-1: Product: è­ï­˜Çºá£¿îŠ¦å˜ ã¤’ç£›â™†ç¾ªã¼•ì¾Šì…—ëˆ±î”‡ì¹³ë© å™¡èŠ¯ä©»ì¨³á—‘ë¿˜ê¸ç¢©â´œê‹»íš‰æ—ì‹¥à¼ä„•啕䛌ἦ蒑윋玄㇊äƒá«’磽딓풣è«î°ã¯î²·ä—”緟鄯䣪度୼॰⚃í‘â¨ç“›é¥„ᤌ壴褎䀼䱕摿プ쾌瑽ꥣㅃ칵꤯쳓焃ᡚ妬路䠭녃㭘喟雫籸㹤梀鱊酟ﴕ≠ધ黽冟צּ┼铺깶뒦貽櫖뻥킈ä£éˆ [ 80.485636][ T5510] usb 8-1: Manufacturer: ⠫饚܄뮬⮃呄 [ 80.488054][ T5510] usb 8-1: SerialNumber: 햾ꎣ⠶ꉖ羉䥟ᜩè·è‰á¨·â‘’퉈➩㼢隊䱺솚䮥íˆî¬¹ã¹–ã£ïŸä™«è¢á¡£á²»íä Žî’뵸㠌䟟꒓㠗莽Ꮇ尛㋗çï®î¶¨î¿¨â²…æ“⋆á—芚羲㬤ẉ埤 [ 80.663184][ T6818] netlink: 60 bytes leftover after parsing attributes in process `syz.1.356'. [ 80.716949][ T5510] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 80.720748][ T5510] usb 8-1: MIDIStreaming interface descriptor not found [ 80.773437][ T5510] usb 8-1: USB disconnect, device number 4 [ 80.783424][ T6824] gadgetfs: bound to dummy_udc driver [ 80.835159][ T5722] udevd[5722]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.185806][ T5725] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 81.242715][ T5510] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 81.381859][ T5510] usb 8-1: device descriptor read/64, error -71 [ 81.651095][ T5510] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 81.781343][ T5510] usb 8-1: device descriptor read/64, error -71 [ 81.893332][ T5510] usb usb8-port1: attempt power cycle [ 81.904452][ T10] cfg80211: failed to load regulatory.db [ 81.937714][ T6878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.367'. [ 81.964806][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 82.052297][ T6883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28776 sclass=netlink_route_socket pid=6883 comm=syz.0.369 [ 82.070281][ T6883] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.369'. [ 82.189694][ T6886] xt_CT: No such helper "snmp_trap" [ 82.231208][ T5510] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 82.251524][ T5510] usb 8-1: device descriptor read/8, error -71 [ 82.491169][ T5510] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 82.511785][ T5510] usb 8-1: device descriptor read/8, error -71 [ 82.621652][ T5510] usb usb8-port1: unable to enumerate USB device [ 83.381771][ T6912] mount: server 127.0.0.1 not responding, timed out [ 83.752296][ T6932] syz.3.388 (6932): attempted to duplicate a private mapping with mremap. This is not supported. [ 83.896246][ T6936] base or size exceeds the MTRR width [ 84.058611][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 84.058628][ T42] audit: type=1400 audit(1786574010.362:494): avc: denied { mount } for pid=6941 comm="syz.3.393" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 84.118950][ T6948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=6948 comm=syz.0.394 [ 84.626940][ T6958] syzkaller0: entered promiscuous mode [ 84.628704][ T6958] syzkaller0: entered allmulticast mode [ 84.806828][ T42] audit: type=1400 audit(1786574011.112:495): avc: denied { append } for pid=6969 comm="syz.1.402" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.815168][ T6972] Cannot find add_set index 0 as target [ 84.864761][ T42] audit: type=1400 audit(1786574011.172:496): avc: denied { execute } for pid=6973 comm="syz.1.405" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 84.938171][ T42] audit: type=1400 audit(1786574011.242:497): avc: denied { mount } for pid=6982 comm="syz.2.409" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 84.945372][ T42] audit: type=1400 audit(1786574011.242:498): avc: denied { mount } for pid=6982 comm="syz.2.409" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 84.952552][ T42] audit: type=1400 audit(1786574011.262:499): avc: denied { bind } for pid=6982 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 84.959456][ T42] audit: type=1400 audit(1786574011.272:500): avc: denied { bind } for pid=6982 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.041211][ T1351] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 85.073294][ T6989] FAULT_INJECTION: forcing a failure. [ 85.073294][ T6989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.079565][ T6989] CPU: 0 UID: 0 PID: 6989 Comm: syz.1.411 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.079595][ T6989] Tainted: [L]=SOFTLOCKUP [ 85.079603][ T6989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.079614][ T6989] Call Trace: [ 85.079622][ T6989] [ 85.079632][ T6989] dump_stack_lvl+0x100/0x190 [ 85.079663][ T6989] should_fail_ex.cold+0x5/0xa [ 85.079691][ T6989] _copy_to_user+0x32/0xd0 [ 85.079720][ T6989] simple_read_from_buffer+0xcb/0x170 [ 85.079745][ T6989] proc_fail_nth_read+0x1af/0x230 [ 85.079775][ T6989] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 85.079803][ T6989] ? rw_verify_area+0xce/0x6d0 [ 85.079827][ T6989] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 85.079855][ T6989] vfs_read+0x1e4/0xb40 [ 85.079884][ T6989] ? __pfx_vfs_read+0x10/0x10 [ 85.079910][ T6989] ? __fget_files+0x215/0x3d0 [ 85.079934][ T6989] ? __fget_files+0x21f/0x3d0 [ 85.079960][ T6989] ksys_read+0x12a/0x250 [ 85.079975][ T6989] ? __pfx_ksys_read+0x10/0x10 [ 85.079999][ T6989] do_syscall_64+0x115/0x870 [ 85.080022][ T6989] ? clear_bhb_loop+0x70/0xc0 [ 85.080044][ T6989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.080062][ T6989] RIP: 0033:0x7f61b8f5e90e [ 85.080078][ T6989] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 85.080094][ T6989] RSP: 002b:00007f61b9f0cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 85.080111][ T6989] RAX: ffffffffffffffda RBX: 00007f61b9f0d6c0 RCX: 00007f61b8f5e90e [ 85.080123][ T6989] RDX: 000000000000000f RSI: 00007f61b9f0d0a0 RDI: 0000000000000005 [ 85.080133][ T6989] RBP: 00007f61b9f0d090 R08: 0000000000000000 R09: 0000000000000000 [ 85.080145][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.080155][ T6989] R13: 00007f61b9226038 R14: 00007f61b9225fa0 R15: 00007fff270311f8 [ 85.080179][ T6989] [ 85.212471][ T6993] FAULT_INJECTION: forcing a failure. [ 85.212471][ T6993] name failslab, interval 1, probability 0, space 0, times 0 [ 85.217412][ T6993] CPU: 3 UID: 0 PID: 6993 Comm: syz.0.413 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.217431][ T6993] Tainted: [L]=SOFTLOCKUP [ 85.217435][ T6993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.217442][ T6993] Call Trace: [ 85.217447][ T6993] [ 85.217452][ T6993] dump_stack_lvl+0x100/0x190 [ 85.217474][ T6993] should_fail_ex.cold+0x5/0xa [ 85.217488][ T6993] ? lockdep_hardirqs_on+0x78/0x100 [ 85.217505][ T6993] should_failslab+0xc2/0x120 [ 85.217523][ T6993] __kmalloc_cache_noprof+0x91/0x6c0 [ 85.217536][ T6993] ? tipc_udp_enable+0x1b7/0x1010 [ 85.217555][ T6993] tipc_udp_enable+0x1b7/0x1010 [ 85.217572][ T6993] ? netlink_rcv_skb+0x159/0x420 [ 85.217584][ T6993] ? genl_rcv+0x28/0x40 [ 85.217595][ T6993] ? netlink_unicast+0x585/0x850 [ 85.217605][ T6993] ? netlink_sendmsg+0x8b0/0xda0 [ 85.217618][ T6993] ? __pfx_tipc_udp_enable+0x10/0x10 [ 85.217651][ T6993] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 85.217662][ T6993] ? tipc_enable_bearer+0x772/0xe60 [ 85.217680][ T6993] tipc_enable_bearer+0x857/0xe60 [ 85.217698][ T6993] ? __pfx_tipc_enable_bearer+0x10/0x10 [ 85.217714][ T6993] ? lock_acquire+0x1b9/0x370 [ 85.217734][ T6993] ? __nla_parse+0x40/0x60 [ 85.217748][ T6993] __tipc_nl_bearer_enable+0x332/0x420 [ 85.217765][ T6993] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 85.217781][ T6993] ? __pfx___mutex_lock+0x10/0x10 [ 85.217807][ T6993] tipc_nl_bearer_enable+0x21/0x40 [ 85.217824][ T6993] genl_family_rcv_msg_doit+0x214/0x300 [ 85.217840][ T6993] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 85.217859][ T6993] ? bpf_lsm_capable+0x9/0x10 [ 85.217872][ T6993] ? security_capable+0x80/0x260 [ 85.217890][ T6993] ? ns_capable+0xd2/0xf0 [ 85.217906][ T6993] genl_rcv_msg+0x560/0x800 [ 85.217922][ T6993] ? __pfx_genl_rcv_msg+0x10/0x10 [ 85.217936][ T6993] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 85.217958][ T6993] netlink_rcv_skb+0x159/0x420 [ 85.217970][ T6993] ? __pfx_genl_rcv_msg+0x10/0x10 [ 85.217984][ T6993] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 85.218002][ T6993] ? netlink_deliver_tap+0x1ae/0xcc0 [ 85.218015][ T6993] genl_rcv+0x28/0x40 [ 85.218027][ T6993] netlink_unicast+0x585/0x850 [ 85.218041][ T6993] ? __pfx_netlink_unicast+0x10/0x10 [ 85.218057][ T6993] netlink_sendmsg+0x8b0/0xda0 [ 85.218072][ T6993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.218085][ T6993] ? selinux_socket_sendmsg+0x198/0x2f0 [ 85.218105][ T6993] ____sys_sendmsg+0xa4d/0xbe0 [ 85.218123][ T6993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.218136][ T6993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.218161][ T6993] ___sys_sendmsg+0x190/0x1e0 [ 85.218173][ T6993] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.218183][ T6993] ? __lock_acquire+0x49f/0x1a40 [ 85.218197][ T6993] ? get_pid_task+0x106/0x250 [ 85.218224][ T6993] __sys_sendmsg+0x160/0x210 [ 85.218239][ T6993] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.218262][ T6993] do_syscall_64+0x115/0x870 [ 85.218277][ T6993] ? clear_bhb_loop+0x70/0xc0 [ 85.218292][ T6993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.218304][ T6993] RIP: 0033:0x7f1accd9e0d9 [ 85.218314][ T6993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.218330][ T6993] RSP: 002b:00007f1acdcad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.218342][ T6993] RAX: ffffffffffffffda RBX: 00007f1acd025fa0 RCX: 00007f1accd9e0d9 [ 85.218349][ T6993] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 85.218355][ T6993] RBP: 00007f1acdcad090 R08: 0000000000000000 R09: 0000000000000000 [ 85.218362][ T6993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.218368][ T6993] R13: 00007f1acd026038 R14: 00007f1acd025fa0 R15: 00007ffd3e3cfa58 [ 85.218382][ T6993] [ 85.218398][ T6993] tipc: Enabling of bearer rejected, failed to enable media [ 85.236335][ T42] audit: type=1400 audit(1786574011.542:501): avc: denied { create } for pid=6994 comm="syz.1.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 85.252954][ T1351] usb 8-1: unable to get BOS descriptor or descriptor too short [ 85.254428][ T42] audit: type=1400 audit(1786574011.542:502): avc: denied { setopt } for pid=6994 comm="syz.1.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 85.256393][ T1351] usb 8-1: New USB device found, idVendor=0bda, idProduct=0184, bcdDevice=6f.98 [ 85.258667][ T42] audit: type=1400 audit(1786574011.542:503): avc: denied { ioctl } for pid=6994 comm="syz.1.414" path="/dev/ptp0" dev="devtmpfs" ino=728 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.262583][ T1351] usb 8-1: config 4 has an invalid interface number: 13 but max is 0 [ 85.339303][ T6999] FAULT_INJECTION: forcing a failure. [ 85.339303][ T6999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.340473][ T1351] usb 8-1: config 4 has no interface number 0 [ 85.344034][ T6999] CPU: 2 UID: 0 PID: 6999 Comm: syz.0.416 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.344061][ T6999] Tainted: [L]=SOFTLOCKUP [ 85.344066][ T6999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.344074][ T6999] Call Trace: [ 85.344080][ T6999] [ 85.344085][ T6999] dump_stack_lvl+0x100/0x190 [ 85.344112][ T6999] should_fail_ex.cold+0x5/0xa [ 85.344131][ T6999] _copy_to_user+0x32/0xd0 [ 85.344150][ T6999] drm_ioctl+0x608/0xc60 [ 85.344181][ T6999] ? __pfx_drm_mode_setplane+0x10/0x10 [ 85.344201][ T6999] ? __pfx_drm_ioctl+0x10/0x10 [ 85.344219][ T6999] ? selinux_file_ioctl+0x13b/0x290 [ 85.344238][ T6999] ? selinux_file_ioctl+0xb6/0x290 [ 85.344256][ T6999] ? __pfx_drm_ioctl+0x10/0x10 [ 85.344269][ T6999] __x64_sys_ioctl+0x18e/0x210 [ 85.344292][ T6999] do_syscall_64+0x115/0x870 [ 85.344331][ T6999] ? clear_bhb_loop+0x70/0xc0 [ 85.344352][ T6999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.344367][ T6999] RIP: 0033:0x7f1accd9e0d9 [ 85.344378][ T6999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.344393][ T6999] RSP: 002b:00007f1acdcad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.344405][ T6999] RAX: ffffffffffffffda RBX: 00007f1acd025fa0 RCX: 00007f1accd9e0d9 [ 85.344412][ T6999] RDX: 0000200000001200 RSI: 00000000c03064b7 RDI: 0000000000000003 [ 85.344419][ T6999] RBP: 00007f1acdcad090 R08: 0000000000000000 R09: 0000000000000000 [ 85.344426][ T6999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.344432][ T6999] R13: 00007f1acd026038 R14: 00007f1acd025fa0 R15: 00007ffd3e3cfa58 [ 85.344446][ T6999] [ 85.483567][ T1351] usb 8-1: config 4 interface 13 has no altsetting 0 [ 85.487984][ T1351] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.490925][ T1351] usb 8-1: Product: syz [ 85.492453][ T1351] usb 8-1: Manufacturer: syz [ 85.494143][ T1351] usb 8-1: SerialNumber: syz [ 85.578111][ T7007] FAULT_INJECTION: forcing a failure. [ 85.578111][ T7007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.585321][ T7007] CPU: 2 UID: 0 PID: 7007 Comm: syz.1.420 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.585351][ T7007] Tainted: [L]=SOFTLOCKUP [ 85.585357][ T7007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.585368][ T7007] Call Trace: [ 85.585380][ T7007] [ 85.585387][ T7007] dump_stack_lvl+0x100/0x190 [ 85.585521][ T7007] should_fail_ex.cold+0x5/0xa [ 85.585575][ T7007] __kvm_read_guest_page+0x186/0x250 [ 85.585609][ T7007] kvm_fetch_guest_virt+0x128/0x1a0 [ 85.585633][ T7007] __do_insn_fetch_bytes+0x5e2/0x7b0 [ 85.585661][ T7007] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 85.585691][ T7007] ? irqentry_exit+0x24d/0xa00 [ 85.585752][ T7007] x86_decode_insn+0x3ca/0x6da0 [ 85.585780][ T7007] ? vmx_cache_reg+0x4f8/0x700 [ 85.585810][ T7007] ? __pfx_x86_decode_insn+0x10/0x10 [ 85.585829][ T7007] ? handle_task_switch+0x6a0/0xa20 [ 85.585848][ T7007] ? init_decode_cache+0xd/0x2b0 [ 85.585865][ T7007] ? init_emulate_ctxt+0x43c/0x700 [ 85.585883][ T7007] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 85.585901][ T7007] ? kvm_mmu_do_page_fault+0x3c3/0x6c0 [ 85.585924][ T7007] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 85.585951][ T7007] x86_emulate_instruction+0x1052/0x1df0 [ 85.585986][ T7007] kvm_mmu_page_fault+0xb9b/0x1ab0 [ 85.586012][ T7007] ? emulator_read_write+0x47e/0x610 [ 85.586036][ T7007] ? rcu_qs+0x2a/0xe0 [ 85.586080][ T7007] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 85.586105][ T7007] ? __lock_acquire+0x49f/0x1a40 [ 85.586128][ T7007] ? irqentry_exit+0x24d/0xa00 [ 85.586150][ T7007] ? lockdep_hardirqs_on+0x78/0x100 [ 85.586180][ T7007] handle_ept_violation+0x3a3/0x860 [ 85.586206][ T7007] ? __pfx_handle_ept_violation+0x10/0x10 [ 85.586232][ T7007] vmx_handle_exit+0x4d6/0x1ef0 [ 85.586263][ T7007] vcpu_run+0x35ab/0x5de0 [ 85.586298][ T7007] ? __pfx_vcpu_run+0x10/0x10 [ 85.586323][ T7007] ? vmx_set_rflags+0x1fe/0x490 [ 85.586346][ T7007] ? x86_emulate_instruction+0x26c/0x1df0 [ 85.586381][ T7007] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 85.586407][ T7007] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 85.586439][ T7007] kvm_vcpu_ioctl+0x730/0x1700 [ 85.586462][ T7007] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 85.586482][ T7007] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.586507][ T7007] ? do_vfs_ioctl+0x226/0x13e0 [ 85.586551][ T7007] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 85.586576][ T7007] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 85.586649][ T7007] ? __fget_files+0x215/0x3d0 [ 85.586667][ T7007] ? hook_file_ioctl_common+0x140/0x440 [ 85.586701][ T7007] ? selinux_file_ioctl+0x13b/0x290 [ 85.586731][ T7007] ? selinux_file_ioctl+0xb6/0x290 [ 85.586758][ T7007] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 85.586778][ T7007] __x64_sys_ioctl+0x18e/0x210 [ 85.586805][ T7007] do_syscall_64+0x115/0x870 [ 85.586827][ T7007] ? clear_bhb_loop+0x70/0xc0 [ 85.586849][ T7007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.586866][ T7007] RIP: 0033:0x7f61b8f9e0d9 [ 85.586882][ T7007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.586897][ T7007] RSP: 002b:00007f61b9f0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.586926][ T7007] RAX: ffffffffffffffda RBX: 00007f61b9225fa0 RCX: 00007f61b8f9e0d9 [ 85.586936][ T7007] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 85.586946][ T7007] RBP: 00007f61b9f0d090 R08: 0000000000000000 R09: 0000000000000000 [ 85.586955][ T7007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.586965][ T7007] R13: 00007f61b9226038 R14: 00007f61b9225fa0 R15: 00007fff270311f8 [ 85.586990][ T7007] [ 85.746141][ T1351] ums-realtek 8-1:4.13: USB Mass Storage device detected [ 85.864264][ T1351] usb 8-1: USB disconnect, device number 9 [ 86.283228][ T7028] netlink: 76 bytes leftover after parsing attributes in process `syz.3.426'. [ 86.286508][ T7028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.426'. [ 86.293261][ T7028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.426'. [ 86.306111][ T7028] can0: slcan on ttyS3. [ 86.395068][ T5830] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 86.532399][ T5830] usb 6-1: device descriptor read/64, error -71 [ 86.661376][ T10] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 86.697268][ T7043] FAULT_INJECTION: forcing a failure. [ 86.697268][ T7043] name failslab, interval 1, probability 0, space 0, times 0 [ 86.703168][ T7043] CPU: 1 UID: 0 PID: 7043 Comm: syz.2.430 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.703196][ T7043] Tainted: [L]=SOFTLOCKUP [ 86.703202][ T7043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.703211][ T7043] Call Trace: [ 86.703218][ T7043] [ 86.703225][ T7043] dump_stack_lvl+0x100/0x190 [ 86.703256][ T7043] should_fail_ex.cold+0x5/0xa [ 86.703280][ T7043] should_failslab+0xc2/0x120 [ 86.703306][ T7043] __kmalloc_cache_noprof+0x91/0x6c0 [ 86.703325][ T7043] ? vhost_iotlb_add_range_ctx+0x69d/0xb70 [ 86.703375][ T7043] ? vhost_iotlb_add_range_ctx+0x7b5/0xb70 [ 86.703402][ T7043] vhost_iotlb_add_range_ctx+0x7b5/0xb70 [ 86.703432][ T7043] vhost_dev_ioctl+0x942/0xe70 [ 86.703457][ T7043] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 86.703487][ T7043] vhost_net_ioctl+0x75f/0x1910 [ 86.703505][ T7043] ? do_vfs_ioctl+0x226/0x13e0 [ 86.703532][ T7043] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 86.703558][ T7043] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 86.703575][ T7043] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 86.703611][ T7043] ? __fget_files+0x215/0x3d0 [ 86.703628][ T7043] ? hook_file_ioctl_common+0x140/0x440 [ 86.703655][ T7043] ? selinux_file_ioctl+0xb6/0x290 [ 86.703680][ T7043] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 86.703698][ T7043] __x64_sys_ioctl+0x18e/0x210 [ 86.703724][ T7043] do_syscall_64+0x115/0x870 [ 86.703752][ T7043] ? clear_bhb_loop+0x70/0xc0 [ 86.703772][ T7043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.703789][ T7043] RIP: 0033:0x7f9ceb79e0d9 [ 86.703803][ T7043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.703820][ T7043] RSP: 002b:00007f9cec59a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.703837][ T7043] RAX: ffffffffffffffda RBX: 00007f9ceba25fa0 RCX: 00007f9ceb79e0d9 [ 86.703848][ T7043] RDX: 0000200000000000 RSI: 000000004008af03 RDI: 0000000000000003 [ 86.703858][ T7043] RBP: 00007f9cec59a090 R08: 0000000000000000 R09: 0000000000000000 [ 86.703868][ T7043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 86.703878][ T7043] R13: 00007f9ceba26038 R14: 00007f9ceba25fa0 R15: 00007fffaa83a828 [ 86.703901][ T7043] [ 86.771091][ T5830] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 86.812683][ T10] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 86.816803][ T10] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 86.819828][ T10] usb 5-1: config 0 has no interface number 0 [ 86.822902][ T10] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 86.827318][ T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 86.831561][ T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 86.837103][ T10] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 86.840358][ T10] usb 5-1: Product: syz [ 86.843074][ T10] usb 5-1: SerialNumber: syz [ 86.848982][ T10] usb 5-1: config 0 descriptor?? [ 86.851668][ T7046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.431'. [ 86.855561][ T10] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 86.858208][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input9 [ 86.931263][ T5830] usb 6-1: device descriptor read/64, error -71 [ 87.007138][ T7050] FAULT_INJECTION: forcing a failure. [ 87.007138][ T7050] name failslab, interval 1, probability 0, space 0, times 0 [ 87.011397][ T7050] CPU: 2 UID: 0 PID: 7050 Comm: syz.2.433 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.011415][ T7050] Tainted: [L]=SOFTLOCKUP [ 87.011419][ T7050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.011426][ T7050] Call Trace: [ 87.011431][ T7050] [ 87.011435][ T7050] dump_stack_lvl+0x100/0x190 [ 87.011456][ T7050] should_fail_ex.cold+0x5/0xa [ 87.011472][ T7050] should_failslab+0xc2/0x120 [ 87.011489][ T7050] __kmalloc_noprof+0xfc/0x820 [ 87.011540][ T7050] ? __lock_acquire+0x49f/0x1a40 [ 87.011558][ T7050] ? tomoyo_encode2+0xfb/0x3c0 [ 87.011573][ T7050] tomoyo_encode2+0xfb/0x3c0 [ 87.011585][ T7050] tomoyo_encode+0x29/0x50 [ 87.011595][ T7050] tomoyo_mount_acl+0x14c/0x8b0 [ 87.011613][ T7050] ? is_bpf_text_address+0x8a/0x1a0 [ 87.011631][ T7050] ? bpf_ksym_find+0x128/0x1c0 [ 87.011649][ T7050] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 87.011664][ T7050] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 87.011681][ T7050] ? kernel_text_address+0x8d/0x100 [ 87.011696][ T7050] ? unwind_get_return_address+0x59/0xa0 [ 87.011723][ T7050] ? tomoyo_domain+0xb2/0x150 [ 87.011735][ T7050] ? tomoyo_profile+0x47/0x60 [ 87.011748][ T7050] tomoyo_mount_permission+0x214/0x460 [ 87.011768][ T7050] ? tomoyo_mount_permission+0x1f6/0x460 [ 87.011786][ T7050] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 87.011812][ T7050] security_sb_mount+0xdd/0x270 [ 87.011850][ T7050] path_mount+0x158/0x23d0 [ 87.011869][ T7050] ? __pfx_path_mount+0x10/0x10 [ 87.011883][ T7050] ? lockdep_hardirqs_on+0x78/0x100 [ 87.011901][ T7050] ? putname+0xb1/0x110 [ 87.011913][ T7050] ? kmem_cache_free+0x127/0x6b0 [ 87.011930][ T7050] ? __x64_sys_mount+0x293/0x310 [ 87.011944][ T7050] __x64_sys_mount+0x293/0x310 [ 87.011960][ T7050] ? __pfx___x64_sys_mount+0x10/0x10 [ 87.011979][ T7050] do_syscall_64+0x115/0x870 [ 87.011995][ T7050] ? clear_bhb_loop+0x70/0xc0 [ 87.012009][ T7050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.012021][ T7050] RIP: 0033:0x7f9ceb79e0d9 [ 87.012032][ T7050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.012044][ T7050] RSP: 002b:00007f9cec59a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.012057][ T7050] RAX: ffffffffffffffda RBX: 00007f9ceba25fa0 RCX: 00007f9ceb79e0d9 [ 87.012064][ T7050] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 87.012072][ T7050] RBP: 00007f9cec59a090 R08: 0000200000000140 R09: 0000000000000000 [ 87.012079][ T7050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.012085][ T7050] R13: 00007f9ceba26038 R14: 00007f9ceba25fa0 R15: 00007fffaa83a828 [ 87.012099][ T7050] [ 87.054575][ C0] cm109_urb_ctl_callback: 1 callbacks suppressed [ 87.054594][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.133198][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.134015][ T5830] usb usb6-port1: attempt power cycle [ 87.135965][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.140093][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.142518][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.144974][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.147725][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.150771][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.153077][ T10] usb 5-1: USB disconnect, device number 6 [ 87.153135][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 87.157285][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 87.164276][ T10] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 87.256558][ T7057] netlink: 'syz.3.436': attribute type 4 has an invalid length. [ 87.492513][ T5830] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 87.511520][ T5830] usb 6-1: device descriptor read/8, error -71 [ 87.569531][ T7066] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.440'. [ 87.761190][ T5830] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 87.782529][ T5830] usb 6-1: device descriptor read/8, error -71 [ 87.799789][ T7075] ufs: You didn't specify the type of your ufs filesystem [ 87.799789][ T7075] [ 87.799789][ T7075] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 87.799789][ T7075] [ 87.799789][ T7075] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 87.813134][ T7075] ufs: ufstype=old is supported read-only [ 87.817272][ T7075] ufs: ufs_fill_super(): bad magic number [ 87.869315][ T7077] bridge_slave_0: left allmulticast mode [ 87.871833][ T7077] bridge_slave_0: left promiscuous mode [ 87.874357][ T7077] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.882350][ T7077] bridge_slave_1: left promiscuous mode [ 87.887263][ T7077] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.898867][ T7077] bond0: (slave bond_slave_0): Releasing backup interface [ 87.903340][ T5830] usb usb6-port1: unable to enumerate USB device [ 87.908641][ T7077] bond0: (slave bond_slave_1): Releasing backup interface [ 87.913995][ T7077] team_slave_0: left allmulticast mode [ 87.918642][ T7077] team0: Port device team_slave_0 removed [ 87.921317][ T7077] team_slave_1: left allmulticast mode [ 87.927500][ T7077] team0: Port device team_slave_1 removed [ 87.930843][ T7077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.938880][ T7077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.945366][ T7077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.948436][ T7077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.954027][ T7077] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 88.515394][ T7069] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.520161][ T7069] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 88.529570][ T7069] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 88.619614][ T7086] capability: warning: `syz.3.446' uses 32-bit capabilities (legacy support in use) [ 88.845699][ T7098] vcan0: tx address claim with dest, not broadcast [ 89.120414][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 89.120431][ T42] audit: type=1400 audit(1786574015.422:532): avc: denied { name_bind } for pid=7112 comm="syz.3.456" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 89.173105][ T42] audit: type=1400 audit(1786574015.482:533): avc: denied { read } for pid=7112 comm="syz.3.456" lport=38327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.832782][ T5725] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.051470][ T7132] netlink: 100 bytes leftover after parsing attributes in process `syz.3.465'. [ 90.056966][ T7132] openvswitch: netlink: IP tunnel dst address not specified [ 90.080960][ T42] audit: type=1400 audit(1786574016.382:534): avc: denied { connect } for pid=7131 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.387376][ T42] audit: type=1400 audit(1786574016.692:535): avc: denied { map } for pid=7150 comm="syz.3.472" path="socket:[15327]" dev="sockfs" ino=15327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.482475][ T7155] hfs: can't find a HFS filesystem on dev sr0 [ 90.512483][ T7155] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 90.577746][ T7163] syzkaller0: entered promiscuous mode [ 90.580190][ T7163] syzkaller0: entered allmulticast mode [ 90.683098][ T7167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.696201][ T7167] tc action pedit offset must be on 32 bit boundaries [ 90.926989][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xfae3 instead [ 90.931586][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x7a18 instead [ 90.936043][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x2700 instead [ 90.940552][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x611a instead [ 90.946587][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xac51 instead [ 90.953084][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x6436 instead [ 90.957986][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xe021 instead [ 90.963247][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x3a79 instead [ 90.966867][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x9871 instead [ 90.970677][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x26e4 instead [ 90.975546][ T7181] jffs2: Further such events for this erase block will not be printed [ 90.980014][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0xd630 instead [ 90.985288][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x76d2 instead [ 90.990035][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x8087 instead [ 90.995226][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0x0500 instead [ 90.999316][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0x70cb instead [ 91.003888][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x392f instead [ 91.008830][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xaae6 instead [ 91.014913][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x7110 instead [ 91.019540][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x87fc instead [ 91.024520][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x22d9 instead [ 91.028936][ T7181] jffs2: Further such events for this erase block will not be printed [ 91.033257][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0xf050 instead [ 91.037799][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x9edd instead [ 91.043904][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x4204 instead [ 91.048172][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xdc6b instead [ 91.052695][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0xa121 instead [ 91.056447][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0xfd03 instead [ 91.060851][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x8219 instead [ 91.065614][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x0da2 instead [ 91.069547][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x684a instead [ 91.074515][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x9042 instead [ 91.078894][ T7181] jffs2: Further such events for this erase block will not be printed [ 91.082734][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0xb7f3 instead [ 91.087141][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x3b9b instead [ 91.091693][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x4825 instead [ 91.095978][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0x29c4 instead [ 91.100412][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x91d9 instead [ 91.105813][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x763a instead [ 91.110191][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x6aca instead [ 91.114926][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0x76f2 instead [ 91.119190][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0xed56 instead [ 91.123526][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0xbf60 instead [ 91.127864][ T7181] jffs2: Further such events for this erase block will not be printed [ 91.132067][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x9cbd instead [ 91.135585][ T7199] openvswitch: netlink: Flow key attr not present in new flow. [ 91.136488][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x3e45 instead [ 91.139664][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 91.143649][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x3371 instead [ 91.146739][ T42] audit: type=1400 audit(1786574017.452:536): avc: denied { watch watch_reads } for pid=7200 comm="syz.3.495" path="/130/file1" dev="tmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.150402][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x0ec7 instead [ 91.150427][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x3b74 instead [ 91.150445][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x6289 instead [ 91.152727][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 91.177168][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xa3e7 instead [ 91.181276][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0xc771 instead [ 91.185485][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0xfe3c instead [ 91.189654][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x9d07 instead [ 91.193781][ T7181] jffs2: Further such events for this erase block will not be printed [ 91.197332][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x0964 instead [ 91.201406][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0xb3ee instead [ 91.204786][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0xdd60 instead [ 91.208627][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x824f instead [ 91.211929][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x6ee3 instead [ 91.215110][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0xefbd instead [ 91.219553][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x7e3d instead [ 91.224116][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x2f21 instead [ 91.227937][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0xdfb2 instead [ 91.231630][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0xd927 instead [ 91.235235][ T7181] jffs2: Further such events for this erase block will not be printed [ 91.238018][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x96ef instead [ 91.241431][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x3fac instead [ 91.245585][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x66ba instead [ 91.248744][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0xaecc instead [ 91.252452][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x02d6 instead [ 91.256487][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x06ce instead [ 91.260492][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xcbdc instead [ 91.265544][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0xdccc instead [ 91.271082][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x3ed7 instead [ 91.275465][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x386c instead [ 91.279651][ T7181] jffs2: Further such events for this erase block will not be printed [ 91.283741][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x9a13 instead [ 91.287986][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x2f1f instead [ 91.302068][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x6bc6 instead [ 91.306402][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0xbef1 instead [ 91.310520][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x3749 instead [ 91.314736][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0xeb12 instead [ 91.318903][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x9e99 instead [ 91.323043][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x1cba instead [ 91.327170][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0xdbf3 instead [ 91.331482][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x32a7 instead [ 91.335690][ T7181] jffs2: Further such events for this erase block will not be printed [ 91.339347][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0xaca5 instead [ 91.344081][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0xf993 instead [ 91.348601][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x9d8f instead [ 91.352938][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x4c1d instead [ 91.357250][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0xe4ec instead [ 91.361727][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x82d4 instead [ 91.366143][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x946e instead [ 91.371245][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0xe1bd instead [ 91.375537][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x3d2f instead [ 91.379775][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x1151 instead [ 91.384119][ T7181] jffs2: Further such events for this erase block will not be printed [ 91.387805][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x73a4 instead [ 91.392358][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0xa724 instead [ 91.396794][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x8896 instead [ 91.401114][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x77df instead [ 91.406980][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x7114 instead [ 91.412202][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0xdd7d instead [ 91.416517][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x9e68 instead [ 91.421237][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0x92d8 instead [ 91.425244][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0x4cb6 instead [ 91.429340][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0x779c instead [ 91.433508][ T7181] jffs2: Further such events for this erase block will not be printed [ 91.436920][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x7c88 instead [ 91.440360][ T42] audit: type=1400 audit(1786574017.742:537): avc: denied { create } for pid=7211 comm="syz.0.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 91.440962][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x1239 instead [ 91.440978][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0xce76 instead [ 91.453218][ T42] audit: type=1400 audit(1786574017.752:538): avc: denied { mount } for pid=7213 comm="syz.3.501" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 91.456192][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0x6669 instead [ 91.468442][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0x4ad5 instead [ 91.472689][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0xd4d9 instead [ 91.476764][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xed85 instead [ 91.480776][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x3718 instead [ 91.485047][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x0b22 instead [ 91.489123][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0xe1eb instead [ 91.492478][ T7181] jffs2: Further such events for this erase block will not be printed [ 91.495380][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x0e10 instead [ 91.498653][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0xb4cb instead [ 91.502860][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0xa6de instead [ 91.506384][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x2a2d instead [ 91.509591][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x8e62 instead [ 91.512906][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0x0460 instead [ 91.516154][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x1962 instead [ 91.519340][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x153c instead [ 91.522868][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x3306 instead [ 91.526905][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x5ab8 instead [ 91.530419][ T7181] jffs2: Further such events for this erase block will not be printed [ 91.533577][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x77bf instead [ 91.536912][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0e22 instead [ 91.540558][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0x587f instead [ 91.543947][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x9e70 instead [ 91.547278][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0x7a80 instead [ 91.551295][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x191f instead [ 91.555119][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xcd7b instead [ 91.559092][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x91a1 instead [ 91.563200][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0xc0ee instead [ 91.567170][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x5deb instead [ 91.570437][ T7181] jffs2: Further such events for this erase block will not be printed [ 91.573274][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0xcef0 instead [ 91.577695][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0xbabc instead [ 91.580903][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0xbd04 instead [ 91.584120][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0xab8d instead [ 91.587222][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xf670 instead [ 91.590492][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0xc3be instead [ 91.593540][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xa74e instead [ 91.596683][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0xfa91 instead [ 91.599964][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0xd578 instead [ 91.603231][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x5532 instead [ 91.606316][ T7181] jffs2: Further such events for this erase block will not be printed [ 91.609114][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0xda4e instead [ 91.612410][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x53ee instead [ 91.615679][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0xd680 instead [ 91.618948][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x5651 instead [ 91.622330][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0xbcf7 instead [ 91.625546][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x19f3 instead [ 91.628811][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x81d0 instead [ 91.632110][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x706a instead [ 91.635304][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0xabbe instead [ 91.639164][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x6b3a instead [ 91.642572][ T7181] jffs2: Further such events for this erase block will not be printed [ 91.645412][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0xd4a1 instead [ 91.648575][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x1290 instead [ 91.651870][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x240a instead [ 91.655061][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0xf0e2 instead [ 91.658192][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x7136 instead [ 91.661500][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x9964 instead [ 91.664663][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xd0fd instead [ 91.668446][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0xd7d1 instead [ 91.672463][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x8335 instead [ 91.675699][ T7181] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0xa2a7 instead [ 91.679247][ T7181] jffs2: Further such events for this erase block will not be printed [ 91.682343][ T7181] jffs2: notice: (7181) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.901475][ T5725] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.009032][ T7229] FAULT_INJECTION: forcing a failure. [ 92.009032][ T7229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.014531][ T7229] CPU: 0 UID: 0 PID: 7229 Comm: syz.0.506 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.014559][ T7229] Tainted: [L]=SOFTLOCKUP [ 92.014565][ T7229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.014575][ T7229] Call Trace: [ 92.014582][ T7229] [ 92.014589][ T7229] dump_stack_lvl+0x100/0x190 [ 92.014691][ T7229] should_fail_ex.cold+0x5/0xa [ 92.014724][ T7229] _copy_from_user+0x2e/0xd0 [ 92.014792][ T7229] core_sys_select+0x2d0/0xbb0 [ 92.014834][ T7229] ? __pfx_core_sys_select+0x10/0x10 [ 92.014851][ T7229] ? find_held_lock+0x2b/0x80 [ 92.014877][ T7229] ? get_pid_task+0xfc/0x250 [ 92.014919][ T7229] ? __pfx_set_user_sigmask+0x10/0x10 [ 92.014942][ T7229] ? __mutex_unlock_slowpath+0x35d/0x930 [ 92.014976][ T7229] do_pselect.constprop.0+0x238/0x270 [ 92.014998][ T7229] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 92.015021][ T7229] ? ksys_write+0x1ac/0x250 [ 92.015042][ T7229] __x64_sys_pselect6+0x149/0x1c0 [ 92.015063][ T7229] do_syscall_64+0x115/0x870 [ 92.015086][ T7229] ? clear_bhb_loop+0x70/0xc0 [ 92.015108][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.015127][ T7229] RIP: 0033:0x7f1accd9e0d9 [ 92.015142][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.015160][ T7229] RSP: 002b:00007f1acdcad028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 92.015178][ T7229] RAX: ffffffffffffffda RBX: 00007f1acd025fa0 RCX: 00007f1accd9e0d9 [ 92.015190][ T7229] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000040 [ 92.015201][ T7229] RBP: 00007f1acdcad090 R08: 0000000000000000 R09: 0000000000000000 [ 92.015210][ T7229] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 92.015221][ T7229] R13: 00007f1acd026038 R14: 00007f1acd025fa0 R15: 00007ffd3e3cfa58 [ 92.015249][ T7229] [ 92.696238][ T7242] netlink: 'syz.1.512': attribute type 2 has an invalid length. [ 92.749160][ T42] audit: type=1400 audit(1786574019.052:539): avc: denied { read } for pid=7243 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.872913][ T42] audit: type=1400 audit(1786574019.182:540): avc: denied { unmount } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 92.940523][ T42] audit: type=1400 audit(1786574019.242:541): avc: denied { ioctl } for pid=7250 comm="syz.1.515" path="socket:[17453]" dev="sockfs" ino=17453 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.940791][ T7251] openvswitch: netlink: Message has 4 unknown bytes. [ 92.953437][ T7251] openvswitch: netlink: Actions may not be safe on all matching packets [ 92.959883][ T7251] trusted_key: encrypted_key: key trusted:syz not found [ 92.960126][ T7251] syz_tun: entered allmulticast mode [ 93.683073][ T7267] xt_hashlimit: size too large, truncated to 1048576 [ 93.819256][ T7271] netlink: 'syz.3.523': attribute type 83 has an invalid length. [ 93.909878][ T7277] FAULT_INJECTION: forcing a failure. [ 93.909878][ T7277] name failslab, interval 1, probability 0, space 0, times 0 [ 93.914454][ T7277] CPU: 0 UID: 0 PID: 7277 Comm: syz.2.526 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.914472][ T7277] Tainted: [L]=SOFTLOCKUP [ 93.914476][ T7277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.914483][ T7277] Call Trace: [ 93.914488][ T7277] [ 93.914492][ T7277] dump_stack_lvl+0x100/0x190 [ 93.914514][ T7277] should_fail_ex.cold+0x5/0xa [ 93.914530][ T7277] should_failslab+0xc2/0x120 [ 93.914548][ T7277] __kmalloc_cache_noprof+0x91/0x6c0 [ 93.914561][ T7277] ? rtnl_newlink+0x126/0x2380 [ 93.914594][ T7277] ? __pfx_rtnl_newlink+0x10/0x10 [ 93.914610][ T7277] rtnl_newlink+0x126/0x2380 [ 93.914625][ T7277] ? find_held_lock+0x2b/0x80 [ 93.914641][ T7277] ? __pfx_rtnl_newlink+0x10/0x10 [ 93.914655][ T7277] ? find_held_lock+0x2b/0x80 [ 93.914665][ T7277] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 93.914688][ T7277] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 93.914703][ T7277] ? avc_has_perm_noaudit+0x145/0x3b0 [ 93.914720][ T7277] ? __lock_acquire+0x49f/0x1a40 [ 93.914741][ T7277] ? find_held_lock+0x2b/0x80 [ 93.914751][ T7277] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 93.914766][ T7277] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 93.914783][ T7277] ? __pfx_rtnl_newlink+0x10/0x10 [ 93.914799][ T7277] rtnetlink_rcv_msg+0x95e/0xe90 [ 93.914816][ T7277] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 93.914834][ T7277] ? __lock_acquire+0x49f/0x1a40 [ 93.914851][ T7277] netlink_rcv_skb+0x159/0x420 [ 93.914864][ T7277] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 93.914881][ T7277] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.914898][ T7277] ? netlink_deliver_tap+0x1ae/0xcc0 [ 93.914912][ T7277] netlink_unicast+0x585/0x850 [ 93.914925][ T7277] ? __pfx_netlink_unicast+0x10/0x10 [ 93.914941][ T7277] netlink_sendmsg+0x8b0/0xda0 [ 93.914955][ T7277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.914968][ T7277] ? selinux_socket_sendmsg+0x198/0x2f0 [ 93.914988][ T7277] ____sys_sendmsg+0xa4d/0xbe0 [ 93.915005][ T7277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.915018][ T7277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.915042][ T7277] ___sys_sendmsg+0x190/0x1e0 [ 93.915054][ T7277] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.915064][ T7277] ? __lock_acquire+0x49f/0x1a40 [ 93.915078][ T7277] ? get_pid_task+0x106/0x250 [ 93.915104][ T7277] __sys_sendmsg+0x160/0x210 [ 93.915118][ T7277] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.915140][ T7277] do_syscall_64+0x115/0x870 [ 93.915156][ T7277] ? clear_bhb_loop+0x70/0xc0 [ 93.915169][ T7277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.915181][ T7277] RIP: 0033:0x7f9ceb79e0d9 [ 93.915191][ T7277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.915202][ T7277] RSP: 002b:00007f9cec59a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.915213][ T7277] RAX: ffffffffffffffda RBX: 00007f9ceba25fa0 RCX: 00007f9ceb79e0d9 [ 93.915224][ T7277] RDX: 0000000000004040 RSI: 0000200000000180 RDI: 0000000000000003 [ 93.915231][ T7277] RBP: 00007f9cec59a090 R08: 0000000000000000 R09: 0000000000000000 [ 93.915238][ T7277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.915244][ T7277] R13: 00007f9ceba26038 R14: 00007f9ceba25fa0 R15: 00007fffaa83a828 [ 93.915257][ T7277] [ 93.930450][ T7275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.525'. [ 93.991117][ T5725] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.104161][ T7289] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 94.196032][ T7293] FAULT_INJECTION: forcing a failure. [ 94.196032][ T7293] name failslab, interval 1, probability 0, space 0, times 0 [ 94.200271][ T7293] CPU: 0 UID: 0 PID: 7293 Comm: syz.0.532 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.200296][ T7293] Tainted: [L]=SOFTLOCKUP [ 94.200301][ T7293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.200311][ T7293] Call Trace: [ 94.200317][ T7293] [ 94.200322][ T7293] dump_stack_lvl+0x100/0x190 [ 94.200349][ T7293] should_fail_ex.cold+0x5/0xa [ 94.200370][ T7293] should_failslab+0xc2/0x120 [ 94.200390][ T7293] kmem_cache_alloc_noprof+0x91/0x6a0 [ 94.200410][ T7293] ? __might_fault+0xc5/0x140 [ 94.200425][ T7293] ? do_getname+0x35/0x390 [ 94.200442][ T7293] do_getname+0x35/0x390 [ 94.200459][ T7293] user_path_at+0x26/0x60 [ 94.200470][ T7293] __x64_sys_mount+0x1fb/0x310 [ 94.200487][ T7293] ? __pfx___x64_sys_mount+0x10/0x10 [ 94.200506][ T7293] do_syscall_64+0x115/0x870 [ 94.200522][ T7293] ? clear_bhb_loop+0x70/0xc0 [ 94.200536][ T7293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.200548][ T7293] RIP: 0033:0x7f1accd9e0d9 [ 94.200558][ T7293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.200569][ T7293] RSP: 002b:00007f1acdcad028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 94.200581][ T7293] RAX: ffffffffffffffda RBX: 00007f1acd025fa0 RCX: 00007f1accd9e0d9 [ 94.200588][ T7293] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 94.200595][ T7293] RBP: 00007f1acdcad090 R08: 00002000000000c0 R09: 0000000000000000 [ 94.200601][ T7293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.200608][ T7293] R13: 00007f1acd026038 R14: 00007f1acd025fa0 R15: 00007ffd3e3cfa58 [ 94.200621][ T7293] [ 94.306940][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 94.306954][ T42] audit: type=1400 audit(1786574020.612:548): avc: denied { mmap_zero } for pid=7294 comm="syz.0.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 94.359151][ T42] audit: type=1400 audit(1786574020.662:549): avc: denied { search } for pid=7297 comm="syz.0.534" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 94.385525][ T42] audit: type=1400 audit(1786574020.692:550): avc: denied { append } for pid=7297 comm="syz.0.534" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 94.536685][ T7298] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 94.926561][ T42] audit: type=1400 audit(1786574021.232:551): avc: denied { bind } for pid=7305 comm="syz.2.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.557840][ T42] audit: type=1400 audit(1786574021.862:552): avc: denied { setcurrent } for pid=7324 comm="syz.3.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 96.282411][ T42] audit: type=1400 audit(1786574022.592:553): avc: denied { getopt } for pid=7353 comm="syz.3.557" lport=11142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.417307][ T7352] dlm: plock device version mismatch: kernel (1.2.0), user (469434881.44245109.3622833615) [ 96.424863][ T42] audit: type=1400 audit(1786574022.732:554): avc: denied { create } for pid=7351 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 96.442552][ T42] audit: type=1400 audit(1786574022.742:555): avc: denied { connect } for pid=7351 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 96.551135][ T5725] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.613463][ T7369] /dev/sg0: Can't lookup blockdev [ 96.616161][ T7369] xt_l2tp: v2 doesn't support IP mode [ 96.724110][ T7373] dummy0: entered allmulticast mode [ 96.727765][ T42] audit: type=1400 audit(1786574023.032:556): avc: denied { watch } for pid=7372 comm="syz.2.564" path="/138/bus" dev="tmpfs" ino=769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 96.736425][ T42] audit: type=1400 audit(1786574023.032:557): avc: denied { watch_sb } for pid=7372 comm="syz.2.564" path="/138/bus" dev="tmpfs" ino=769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.001115][ T1036] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 97.171799][ T1036] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 97.182184][ T1036] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.191075][ T1036] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 97.196486][ T1036] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.213681][ T7373] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 97.231874][ T1036] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.423590][ T65] block nbd0: Receive control failed (result -32) [ 97.427354][ T7392] block nbd0: Receive control failed (result -32) [ 97.823105][ T7409] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 97.843598][ T7409] overlayfs: failed to set xattr on upper [ 97.845558][ T7409] overlayfs: ...falling back to redirect_dir=nofollow. [ 97.847669][ T7409] overlayfs: ...falling back to index=off. [ 97.849555][ T7409] overlayfs: ...falling back to uuid=null. [ 97.861104][ T7409] overlayfs: maximum fs stacking depth exceeded [ 98.198606][ T7427] FAULT_INJECTION: forcing a failure. [ 98.198606][ T7427] name failslab, interval 1, probability 0, space 0, times 0 [ 98.206958][ T7427] CPU: 0 UID: 0 PID: 7427 Comm: syz.3.579 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.206979][ T7427] Tainted: [L]=SOFTLOCKUP [ 98.206983][ T7427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.206990][ T7427] Call Trace: [ 98.206993][ T7427] [ 98.206999][ T7427] dump_stack_lvl+0x100/0x190 [ 98.207018][ T7427] should_fail_ex.cold+0x5/0xa [ 98.207034][ T7427] should_failslab+0xc2/0x120 [ 98.207051][ T7427] __kmalloc_cache_noprof+0x91/0x6c0 [ 98.207065][ T7427] ? rtnl_newlink+0x126/0x2380 [ 98.207083][ T7427] ? __pfx_rtnl_newlink+0x10/0x10 [ 98.207099][ T7427] rtnl_newlink+0x126/0x2380 [ 98.207119][ T7427] ? __pfx_rtnl_newlink+0x10/0x10 [ 98.207134][ T7427] ? find_held_lock+0x2b/0x80 [ 98.207149][ T7427] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 98.207164][ T7427] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 98.207179][ T7427] ? avc_has_perm_noaudit+0x145/0x3b0 [ 98.207196][ T7427] ? __lock_acquire+0x49f/0x1a40 [ 98.207219][ T7427] ? find_held_lock+0x2b/0x80 [ 98.207229][ T7427] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 98.207257][ T7427] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 98.207273][ T7427] ? __pfx_rtnl_newlink+0x10/0x10 [ 98.207289][ T7427] rtnetlink_rcv_msg+0x95e/0xe90 [ 98.207307][ T7427] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 98.207327][ T7427] ? ref_tracker_free+0x37e/0x6c0 [ 98.207357][ T7427] netlink_rcv_skb+0x159/0x420 [ 98.207370][ T7427] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 98.207387][ T7427] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 98.207403][ T7427] ? netlink_deliver_tap+0x1ae/0xcc0 [ 98.207417][ T7427] netlink_unicast+0x585/0x850 [ 98.207431][ T7427] ? __pfx_netlink_unicast+0x10/0x10 [ 98.207443][ T7427] ? __pfx_sock_has_perm+0x10/0x10 [ 98.207462][ T7427] netlink_sendmsg+0x8b0/0xda0 [ 98.207476][ T7427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.207489][ T7427] ? selinux_socket_sendmsg+0x198/0x2f0 [ 98.207512][ T7427] ____sys_sendmsg+0xa4d/0xbe0 [ 98.207536][ T7427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.207554][ T7427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.207589][ T7427] ___sys_sendmsg+0x190/0x1e0 [ 98.207606][ T7427] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.207619][ T7427] ? __lock_acquire+0x49f/0x1a40 [ 98.207639][ T7427] ? get_pid_task+0x106/0x250 [ 98.207681][ T7427] __sys_sendmsg+0x160/0x210 [ 98.207704][ T7427] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.207736][ T7427] do_syscall_64+0x115/0x870 [ 98.207757][ T7427] ? clear_bhb_loop+0x70/0xc0 [ 98.207780][ T7427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.207797][ T7427] RIP: 0033:0x7fad0cd9e0d9 [ 98.207812][ T7427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.207830][ T7427] RSP: 002b:00007fad0dcbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.207846][ T7427] RAX: ffffffffffffffda RBX: 00007fad0d025fa0 RCX: 00007fad0cd9e0d9 [ 98.207853][ T7427] RDX: 0000000004004000 RSI: 0000200000000000 RDI: 0000000000000004 [ 98.207860][ T7427] RBP: 00007fad0dcbf090 R08: 0000000000000000 R09: 0000000000000000 [ 98.207867][ T7427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.207873][ T7427] R13: 00007fad0d026038 R14: 00007fad0d025fa0 R15: 00007ffff2fceb38 [ 98.207887][ T7427] [ 98.368509][ T7432] xt_cgroup: invalid path, errno=-2 [ 98.376646][ T5725] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 98.740903][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'. [ 98.745847][ T7443] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 98.859832][ T7450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.587'. [ 98.910192][ T7452] FAULT_INJECTION: forcing a failure. [ 98.910192][ T7452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.917517][ T7452] CPU: 0 UID: 0 PID: 7452 Comm: syz.0.588 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.917548][ T7452] Tainted: [L]=SOFTLOCKUP [ 98.917553][ T7452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.917559][ T7452] Call Trace: [ 98.917564][ T7452] [ 98.917569][ T7452] dump_stack_lvl+0x100/0x190 [ 98.917589][ T7452] should_fail_ex.cold+0x5/0xa [ 98.917604][ T7452] _copy_from_user+0x2e/0xd0 [ 98.917622][ T7452] copy_mount_options+0x76/0x190 [ 98.917641][ T7452] __x64_sys_mount+0x1ab/0x310 [ 98.917658][ T7452] ? __pfx___x64_sys_mount+0x10/0x10 [ 98.917677][ T7452] do_syscall_64+0x115/0x870 [ 98.917693][ T7452] ? clear_bhb_loop+0x70/0xc0 [ 98.917707][ T7452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.917719][ T7452] RIP: 0033:0x7f1accd9e0d9 [ 98.917729][ T7452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.917741][ T7452] RSP: 002b:00007f1acdcad028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 98.917753][ T7452] RAX: ffffffffffffffda RBX: 00007f1acd025fa0 RCX: 00007f1accd9e0d9 [ 98.917760][ T7452] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 98.917767][ T7452] RBP: 00007f1acdcad090 R08: 0000200000000480 R09: 0000000000000000 [ 98.917773][ T7452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.917780][ T7452] R13: 00007f1acd026038 R14: 00007f1acd025fa0 R15: 00007ffd3e3cfa58 [ 98.917798][ T7452] [ 98.919305][ T7452] fuse: Invalid rootmode [ 99.079961][ T7462] mtrr: base(0x10000000) is not aligned on a size(0x80000000) boundary [ 99.201202][ T1351] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 99.351810][ T1351] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 99.356288][ T1351] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.360115][ T1351] usb 8-1: config 0 has no interfaces? [ 99.363561][ T1351] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 99.366311][ T1351] usb 8-1: Product: syz [ 99.367758][ T1351] usb 8-1: SerialNumber: syz [ 99.370811][ T1351] usb 8-1: config 0 descriptor?? [ 99.742734][ T1351] usb 7-1: USB disconnect, device number 4 [ 99.748689][ T7397] dummy0: left allmulticast mode [ 99.778422][ T7456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.787087][ T7456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.794902][ T1036] usb 8-1: USB disconnect, device number 10 [ 100.096812][ T7473] SELinux: Context system_u:object_r:devpts_t:s0 is not valid (left unmapped). [ 100.103054][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 100.103068][ T42] audit: type=1400 audit(1786574026.412:589): avc: denied { relabelto } for pid=7472 comm="syz.0.597" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:devpts_t:s0" [ 100.116928][ T42] audit: type=1400 audit(1786574026.412:590): avc: denied { associate } for pid=7472 comm="syz.0.597" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:devpts_t:s0" [ 100.753471][ T42] audit: type=1400 audit(1786574027.062:591): avc: denied { append } for pid=7488 comm="syz.2.601" name="frontend0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 101.312444][ T7499] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 101.317134][ T7501] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 101.407135][ T42] audit: type=1400 audit(1786574027.712:592): avc: denied { read } for pid=7506 comm="syz.3.606" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 101.457016][ T7507] smpboot: CPU 1 is now offline [ 101.525867][ T7507] smpboot: CPU 3 is now offline [ 101.526329][ T7509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.573756][ T7508] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 101.578146][ T7509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.631245][ T7508] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 101.663115][ T42] audit: type=1400 audit(1786574027.972:593): avc: denied { mounton } for pid=7510 comm="syz.2.607" path="/142/bus" dev="tmpfs" ino=793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 101.762691][ T42] audit: type=1400 audit(1786574028.072:594): avc: denied { remove_name } for pid=7510 comm="syz.2.607" name="file1" dev="9p" ino=77885981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.772217][ T42] audit: type=1400 audit(1786574028.072:595): avc: denied { rename } for pid=7510 comm="syz.2.607" name="file1" dev="9p" ino=77885981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.779337][ T42] audit: type=1400 audit(1786574028.072:596): avc: denied { unlink } for pid=7510 comm="syz.2.607" name="file0" dev="9p" ino=77885979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.790367][ T7511] block nbd2: NBD_DISCONNECT [ 101.793976][ T7511] netlink: 96 bytes leftover after parsing attributes in process `syz.2.607'. [ 101.870456][ T7521] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 101.872047][ T42] audit: type=1400 audit(1786574028.182:597): avc: denied { create } for pid=7520 comm="syz.3.609" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 101.903773][ T42] audit: type=1400 audit(1786574028.182:598): avc: denied { associate } for pid=7520 comm="syz.3.609" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 102.025096][ T7526] program syz.0.610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.279337][ T7539] fuse: Bad value for 'fd' [ 102.345046][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.618'. [ 102.348759][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.618'. [ 102.352709][ T7544] netlink: 'syz.3.618': attribute type 15 has an invalid length. [ 102.355920][ T7544] netlink: 'syz.3.618': attribute type 18 has an invalid length. [ 102.959878][ T7576] MTD: Couldn't look up './bus': -15 [ 103.017873][ T7578] FAULT_INJECTION: forcing a failure. [ 103.017873][ T7578] name failslab, interval 1, probability 0, space 0, times 0 [ 103.037706][ T7578] CPU: 2 UID: 0 PID: 7578 Comm: syz.0.630 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.037726][ T7578] Tainted: [L]=SOFTLOCKUP [ 103.037731][ T7578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.037738][ T7578] Call Trace: [ 103.037742][ T7578] [ 103.037747][ T7578] dump_stack_lvl+0x100/0x190 [ 103.037809][ T7578] should_fail_ex.cold+0x5/0xa [ 103.037832][ T7578] should_failslab+0xc2/0x120 [ 103.037856][ T7578] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 103.037872][ T7578] ? __d_alloc+0x35/0xa50 [ 103.037889][ T7578] __d_alloc+0x35/0xa50 [ 103.037904][ T7578] d_alloc+0x4a/0x1e0 [ 103.037919][ T7578] lookup_one_qstr_excl+0x171/0x250 [ 103.037935][ T7578] ? mnt_want_write+0x161/0x410 [ 103.037948][ T7578] filename_unlinkat+0x275/0x730 [ 103.037961][ T7578] ? __might_fault+0xc5/0x140 [ 103.037973][ T7578] ? __pfx_filename_unlinkat+0x10/0x10 [ 103.037993][ T7578] ? do_getname+0x191/0x390 [ 103.038009][ T7578] __x64_sys_unlinkat+0xc0/0x130 [ 103.038023][ T7578] do_syscall_64+0x115/0x870 [ 103.038056][ T7578] ? clear_bhb_loop+0x70/0xc0 [ 103.038070][ T7578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.038082][ T7578] RIP: 0033:0x7f1accd9e0d9 [ 103.038093][ T7578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.038104][ T7578] RSP: 002b:00007f1acdcad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 103.038122][ T7578] RAX: ffffffffffffffda RBX: 00007f1acd025fa0 RCX: 00007f1accd9e0d9 [ 103.038129][ T7578] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 103.038136][ T7578] RBP: 00007f1acdcad090 R08: 0000000000000000 R09: 0000000000000000 [ 103.038142][ T7578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.038148][ T7578] R13: 00007f1acd026038 R14: 00007f1acd025fa0 R15: 00007ffd3e3cfa58 [ 103.038163][ T7578] [ 103.445058][ T7590] netlink: 830 bytes leftover after parsing attributes in process `syz.2.635'. [ 103.614358][ T7595] FAULT_INJECTION: forcing a failure. [ 103.614358][ T7595] name failslab, interval 1, probability 0, space 0, times 0 [ 103.645747][ T7595] CPU: 3 UID: 0 PID: 7595 Comm: syz.3.636 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.645779][ T7595] Tainted: [L]=SOFTLOCKUP [ 103.645785][ T7595] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.645796][ T7595] Call Trace: [ 103.645801][ T7595] [ 103.645808][ T7595] dump_stack_lvl+0x100/0x190 [ 103.645838][ T7595] should_fail_ex.cold+0x5/0xa [ 103.645858][ T7595] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 103.645901][ T7595] should_failslab+0xc2/0x120 [ 103.645927][ T7595] kmem_cache_alloc_noprof+0x91/0x6a0 [ 103.645950][ T7595] ? skb_clone+0x190/0x400 [ 103.645994][ T7595] skb_clone+0x190/0x400 [ 103.646018][ T7595] netlink_deliver_tap+0xaed/0xcc0 [ 103.646043][ T7595] netlink_unicast+0x62b/0x850 [ 103.646066][ T7595] ? __pfx_netlink_unicast+0x10/0x10 [ 103.646085][ T7595] ? __pfx_sock_has_perm+0x10/0x10 [ 103.646132][ T7595] netlink_sendmsg+0x8b0/0xda0 [ 103.646156][ T7595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.646177][ T7595] ? selinux_socket_sendmsg+0x198/0x2f0 [ 103.646206][ T7595] ____sys_sendmsg+0xa4d/0xbe0 [ 103.646233][ T7595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.646253][ T7595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.646292][ T7595] ___sys_sendmsg+0x190/0x1e0 [ 103.646311][ T7595] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.646327][ T7595] ? __lock_acquire+0x49f/0x1a40 [ 103.646359][ T7595] ? get_pid_task+0x106/0x250 [ 103.646406][ T7595] __sys_sendmsg+0x160/0x210 [ 103.646430][ T7595] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.646468][ T7595] do_syscall_64+0x115/0x870 [ 103.646491][ T7595] ? clear_bhb_loop+0x70/0xc0 [ 103.646513][ T7595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.646531][ T7595] RIP: 0033:0x7fad0cd9e0d9 [ 103.646545][ T7595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.646561][ T7595] RSP: 002b:00007fad0dcbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.646579][ T7595] RAX: ffffffffffffffda RBX: 00007fad0d025fa0 RCX: 00007fad0cd9e0d9 [ 103.646590][ T7595] RDX: 0000000000004880 RSI: 00002000000001c0 RDI: 0000000000000004 [ 103.646601][ T7595] RBP: 00007fad0dcbf090 R08: 0000000000000000 R09: 0000000000000000 [ 103.646615][ T7595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.646626][ T7595] R13: 00007fad0d026038 R14: 00007fad0d025fa0 R15: 00007ffff2fceb38 [ 103.646649][ T7595] [ 104.410949][ T6848] Bluetooth: hci4: Frame reassembly failed (-84) [ 104.416739][ T6845] Bluetooth: hci4: Frame reassembly failed (-84) [ 104.544898][ T7637] ------------[ cut here ]------------ [ 104.546771][ T7637] 1 [ 104.546779][ T7637] WARNING: mm/page_alloc.c:5280 at __alloc_frozen_pages_noprof+0x2427/0x2dc0, CPU#2: syz.3.654/7637 [ 104.550933][ T7637] Modules linked in: [ 104.553182][ T7637] CPU: 2 UID: 0 PID: 7637 Comm: syz.3.654 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.557238][ T7637] Tainted: [L]=SOFTLOCKUP [ 104.558599][ T7637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.561829][ T7637] RIP: 0010:__alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 104.564734][ T7637] Code: e9 8d fb ff ff 31 d2 be 28 12 00 00 48 c7 c7 a0 74 e1 8b e8 9b 93 68 ff 2e 2e 2e 31 c0 e9 02 ed ff ff c6 05 be 37 9c 0e 01 90 <0f> 0b 90 e9 6f df ff ff 48 c7 c7 40 be d3 8e 45 89 f7 44 8b 74 24 [ 104.570686][ T7637] RSP: 0018:ffffc90006b2f728 EFLAGS: 00010246 [ 104.572730][ T7637] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 104.575206][ T7637] RDX: 0000000000000000 RSI: 1ffff92000d65eff RDI: 0000000000040cc0 [ 104.577683][ T7637] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 104.580225][ T7637] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 104.582819][ T7637] R13: 1ffff92000d65f3d R14: ffffffff9b74e444 R15: 0000000000000001 [ 104.585297][ T7637] FS: 00007fad0dcbf6c0(0000) GS:ffff8880d5fec000(0000) knlGS:0000000000000000 [ 104.588035][ T7637] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.590241][ T7637] CR2: 00007fad0dc7dd58 CR3: 000000005fee5000 CR4: 0000000000352ef0 [ 104.593080][ T7637] Call Trace: [ 104.594231][ T7637] [ 104.595287][ T7637] ? find_held_lock+0x2b/0x80 [ 104.596868][ T7637] ? is_bpf_text_address+0x8a/0x1a0 [ 104.598590][ T7637] ? is_bpf_text_address+0x8a/0x1a0 [ 104.600335][ T7637] ? bpf_ksym_find+0x128/0x1c0 [ 104.602054][ T7637] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 104.604167][ T7637] ? is_bpf_text_address+0x94/0x1a0 [ 104.606053][ T7637] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 104.608198][ T7637] ? __pfx_widen_string+0x10/0x10 [ 104.609847][ T7637] ? __kernel_text_address+0xd/0x30 [ 104.611583][ T7637] ? unwind_get_return_address+0x59/0xa0 [ 104.613602][ T7637] ? arch_stack_walk+0xa6/0xf0 [ 104.615369][ T7637] ? __pfx_stack_trace_save+0x10/0x10 [ 104.617194][ T7637] ? stack_depot_save_flags+0x27/0x9d0 [ 104.618957][ T7637] ? __lock_acquire+0x49f/0x1a40 [ 104.620588][ T7637] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.625718][ T7637] ? policy_nodemask+0xed/0x4f0 [ 104.627624][ T7637] alloc_pages_mpol+0x1fb/0x540 [ 104.629492][ T7637] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 104.631318][ T7637] ___kmalloc_large_node+0xe5/0x120 [ 104.632971][ T7637] __kmalloc_large_node_noprof+0x1c/0x70 [ 104.634734][ T7637] __kmalloc_noprof+0x5a1/0x820 [ 104.636271][ T7637] ? drm_syncobj_array_find+0x34/0x3a0 [ 104.638513][ T7637] drm_syncobj_array_find+0x34/0x3a0 [ 104.640391][ T7637] drm_syncobj_timeline_wait_ioctl+0x236/0x390 [ 104.642485][ T7637] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 104.644570][ T7637] ? find_held_lock+0x2b/0x80 [ 104.646093][ T7637] ? drm_dev_exit+0x41/0x60 [ 104.647632][ T7637] ? drm_dev_exit+0x41/0x60 [ 104.649161][ T7637] drm_ioctl_kernel+0x1f3/0x3e0 [ 104.650749][ T7637] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 104.653104][ T7637] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 104.654868][ T7637] drm_ioctl+0x5e6/0xc60 [ 104.656242][ T7637] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 104.658970][ T7637] ? __pfx_drm_ioctl+0x10/0x10 [ 104.661110][ T7637] ? selinux_file_ioctl+0x13b/0x290 [ 104.663344][ T7637] ? selinux_file_ioctl+0xb6/0x290 [ 104.665539][ T7637] ? __pfx_drm_ioctl+0x10/0x10 [ 104.667579][ T7637] __x64_sys_ioctl+0x18e/0x210 [ 104.669294][ T7637] do_syscall_64+0x115/0x870 [ 104.670881][ T7637] ? clear_bhb_loop+0x70/0xc0 [ 104.672558][ T7637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.674475][ T7637] RIP: 0033:0x7fad0cd9e0d9 [ 104.675947][ T7637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.682261][ T7637] RSP: 002b:00007fad0dcbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.684968][ T7637] RAX: ffffffffffffffda RBX: 00007fad0d025fa0 RCX: 00007fad0cd9e0d9 [ 104.687753][ T7637] RDX: 0000200000000280 RSI: 00000000c03064ca RDI: 0000000000000009 [ 104.690352][ T7637] RBP: 00007fad0ce35024 R08: 0000000000000000 R09: 0000000000000000 [ 104.692982][ T7637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.695500][ T7637] R13: 00007fad0d026038 R14: 00007fad0d025fa0 R15: 00007ffff2fceb38 [ 104.698073][ T7637] [ 104.699062][ T7637] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.701430][ T7637] CPU: 2 UID: 0 PID: 7637 Comm: syz.3.654 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.704763][ T7637] Tainted: [L]=SOFTLOCKUP [ 104.706140][ T7637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.709270][ T7637] Call Trace: [ 104.710386][ T7637] [ 104.711325][ T7637] dump_stack_lvl+0x100/0x190 [ 104.712876][ T7637] vpanic+0x552/0x970 [ 104.714168][ T7637] ? __pfx_vpanic+0x10/0x10 [ 104.715533][ T7637] panic+0xd1/0xe0 [ 104.716747][ T7637] ? __pfx_panic+0x10/0x10 [ 104.718630][ T7637] ? check_panic_on_warn+0x1f/0x90 [ 104.720814][ T7637] check_panic_on_warn.cold+0x19/0x34 [ 104.722987][ T7637] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 104.725584][ T7637] __warn.cold+0x191/0x318 [ 104.727486][ T7637] __report_bug+0x30f/0x440 [ 104.729445][ T7637] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 104.731480][ T7637] ? __pfx___report_bug+0x10/0x10 [ 104.733081][ T7637] ? __lock_acquire+0x49f/0x1a40 [ 104.734685][ T7637] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 104.736651][ T7637] report_bug+0xb2/0x220 [ 104.738441][ T7637] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 104.741035][ T7637] handle_bug+0x16a/0x2a0 [ 104.742723][ T7637] exc_invalid_op+0x17/0x50 [ 104.744474][ T7637] asm_exc_invalid_op+0x1a/0x20 [ 104.746465][ T7637] RIP: 0010:__alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 104.749255][ T7637] Code: e9 8d fb ff ff 31 d2 be 28 12 00 00 48 c7 c7 a0 74 e1 8b e8 9b 93 68 ff 2e 2e 2e 31 c0 e9 02 ed ff ff c6 05 be 37 9c 0e 01 90 <0f> 0b 90 e9 6f df ff ff 48 c7 c7 40 be d3 8e 45 89 f7 44 8b 74 24 [ 104.756970][ T7637] RSP: 0018:ffffc90006b2f728 EFLAGS: 00010246 [ 104.759170][ T7637] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 104.762084][ T7637] RDX: 0000000000000000 RSI: 1ffff92000d65eff RDI: 0000000000040cc0 [ 104.765203][ T7637] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 104.768363][ T7637] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 104.771543][ T7637] R13: 1ffff92000d65f3d R14: ffffffff9b74e444 R15: 0000000000000001 [ 104.774721][ T7637] ? find_held_lock+0x2b/0x80 [ 104.776617][ T7637] ? is_bpf_text_address+0x8a/0x1a0 [ 104.778809][ T7637] ? is_bpf_text_address+0x8a/0x1a0 [ 104.780993][ T7637] ? bpf_ksym_find+0x128/0x1c0 [ 104.783034][ T7637] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 104.785576][ T7637] ? is_bpf_text_address+0x94/0x1a0 [ 104.787744][ T7637] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 104.790383][ T7637] ? __pfx_widen_string+0x10/0x10 [ 104.792106][ T7637] ? __kernel_text_address+0xd/0x30 [ 104.793834][ T7637] ? unwind_get_return_address+0x59/0xa0 [ 104.795653][ T7637] ? arch_stack_walk+0xa6/0xf0 [ 104.797382][ T7637] ? __pfx_stack_trace_save+0x10/0x10 [ 104.799214][ T7637] ? stack_depot_save_flags+0x27/0x9d0 [ 104.801006][ T7637] ? __lock_acquire+0x49f/0x1a40 [ 104.802709][ T7637] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.805116][ T7637] ? policy_nodemask+0xed/0x4f0 [ 104.807128][ T7637] alloc_pages_mpol+0x1fb/0x540 [ 104.808848][ T7637] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 104.810544][ T7637] ___kmalloc_large_node+0xe5/0x120 [ 104.812223][ T7637] __kmalloc_large_node_noprof+0x1c/0x70 [ 104.814029][ T7637] __kmalloc_noprof+0x5a1/0x820 [ 104.815547][ T7637] ? drm_syncobj_array_find+0x34/0x3a0 [ 104.817295][ T7637] drm_syncobj_array_find+0x34/0x3a0 [ 104.818947][ T7637] drm_syncobj_timeline_wait_ioctl+0x236/0x390 [ 104.820887][ T7637] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 104.823039][ T7637] ? find_held_lock+0x2b/0x80 [ 104.824508][ T7637] ? drm_dev_exit+0x41/0x60 [ 104.825944][ T7637] ? drm_dev_exit+0x41/0x60 [ 104.827565][ T7637] drm_ioctl_kernel+0x1f3/0x3e0 [ 104.829118][ T7637] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 104.831216][ T7637] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 104.832961][ T7637] drm_ioctl+0x5e6/0xc60 [ 104.834292][ T7637] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 104.836347][ T7637] ? __pfx_drm_ioctl+0x10/0x10 [ 104.838122][ T7637] ? selinux_file_ioctl+0x13b/0x290 [ 104.839810][ T7637] ? selinux_file_ioctl+0xb6/0x290 [ 104.841416][ T7637] ? __pfx_drm_ioctl+0x10/0x10 [ 104.842975][ T7637] __x64_sys_ioctl+0x18e/0x210 [ 104.844507][ T7637] do_syscall_64+0x115/0x870 [ 104.845959][ T7637] ? clear_bhb_loop+0x70/0xc0 [ 104.847475][ T7637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.849428][ T7637] RIP: 0033:0x7fad0cd9e0d9 [ 104.851091][ T7637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.858797][ T7637] RSP: 002b:00007fad0dcbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.862235][ T7637] RAX: ffffffffffffffda RBX: 00007fad0d025fa0 RCX: 00007fad0cd9e0d9 [ 104.865471][ T7637] RDX: 0000200000000280 RSI: 00000000c03064ca RDI: 0000000000000009 [ 104.868712][ T7637] RBP: 00007fad0ce35024 R08: 0000000000000000 R09: 0000000000000000 [ 104.872016][ T7637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.875268][ T7637] R13: 00007fad0d026038 R14: 00007fad0d025fa0 R15: 00007ffff2fceb38 [ 104.878548][ T7637] [ 104.880480][ T7637] Kernel Offset: disabled [ 104.882297][ T7637] Rebooting in 86400 seconds..