last executing test programs: 32.968593946s ago: executing program 3 (id=1245): mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000200)={'trans=virtio,', {[{@nodevmap}]}}) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210281ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async) syz_open_dev$I2C(&(0x7f0000002780), 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3cd4e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d42822f7346b616fe28ed0b9f42b0efdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af829500000000", 0x13c}], 0x2}, 0x0) (async) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffd, 0x6, 0xab, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="ea8393c3aba8", 0xfffffffffffffffd, 0x3, 0x10030, 0x0, 0x0}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000009c40)=ANY=[@ANYBLOB="0414"], 0x17) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') write$eventfd(r4, 0x0, 0x1f) read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 32.968084911s ago: executing program 3 (id=1246): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 32.866401371s ago: executing program 3 (id=1247): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = syz_open_dev$vcsn(0x0, 0x800, 0xbbd3fb8d46d55e3b) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000400000a1180022000000000000ffff0000000f0100810401a80016002000014003000008600cfab94dcf5c04df22cad561c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb", 0x67}, {0x0}, {&(0x7f0000000140)="b5007d04dc22", 0x6}], 0x3, 0x0, 0x0, 0x7400}, 0x8004) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_io_uring_setup(0x10f8, &(0x7f00000003c0)={0x0, 0xa6c, 0x800, 0x3, 0x382, 0x0, r1}, 0x0, &(0x7f00000002c0)) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 31.998749895s ago: executing program 3 (id=1257): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x20400) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x7, 0x1, 0x4, 0x6}}) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x7, 0x1, 0x4, 0x6}}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket(0x9, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)={0x54, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x10001}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x4}]}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xd}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'pimreg\x00'}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x3f6}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x4000800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) setuid(0xee01) (async) setuid(0xee01) ioctl$FS_IOC_RESVSP(r5, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) (async) ioctl$FS_IOC_RESVSP(r5, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008085}, 0x4044020) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000), 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1b00729300daa78241e7b497db00000000001053087be60000000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r8, &(0x7f0000000040)}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r8, &(0x7f0000000040)}, 0x20) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000001480)) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r9, 0x4010744d) (async) ioctl$PPPIOCSCOMPRESS(r9, 0x4010744d) 31.939041403s ago: executing program 3 (id=1259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f40), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000), 0x4) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x30, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x9, 0x1, '(.%^\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x30}}, 0x24040000) 31.618590465s ago: executing program 3 (id=1263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000020080008400000000814000580080001"], 0x5c}}, 0x0) 31.5238593s ago: executing program 32 (id=1263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000020080008400000000814000580080001"], 0x5c}}, 0x0) 2.127078307s ago: executing program 1 (id=1821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000840003a000814000580080001"], 0x5c}}, 0x0) 2.125804044s ago: executing program 1 (id=1822): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x24, 0x1c, 0x114236db3b607435, 0x70bd28, 0x25dfd3fe, {0x2, 0x0, 0x0, r3, 0x2, 0x80, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x8040) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffd, 0x8}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r0, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 2.007416926s ago: executing program 1 (id=1823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r6, @ANYBLOB="0800c300741300000800c40001"], 0x30}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x30, r2, 0x601, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}, {0x8, 0x0, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r9 = accept$alg(r8, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="ca", 0x1}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0xe803) recvmsg(r9, &(0x7f0000002c00)={0x0, 0x0, 0x0}, 0x100) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x1040) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r13, {0xc, 0xc}, {}, {0x5, 0xf}}, [@TCA_RATE={0x5, 0x5, {0x9, 0x7}}, @filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x81, 0x8, 0xfff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}}, 0x20040054) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x6c, 0x7, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_RULE_USERDATA={0x4e, 0x7, 0x1, 0x0, "a4196753eff92c5a785d6a61369337185cbdcc34b16f753020f9c286c883faa99f656033e34a4dfa4022110208fa98e3877bece5ba28c388191c1f3ab7a6d5c4744b95476b7a7fdfd9cb"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x811}, 0x44881) 1.11975219s ago: executing program 4 (id=1825): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) flistxattr(r0, &(0x7f0000000000)=""/147, 0x93) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000d73000/0x4000)=nil], 0x0, &(0x7f00000003c0), 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x1e, 0x0, &(0x7f00000002c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000002c0)="0f01c4baf80c66b894b8b08f66efbafc0cecf30f52714f652e0f229d26f30f0966b9ff0300000f32f00fc131baf80c66b894fb3a8266efbafc0c66ed660f2a5879660f76a3dc16"}], 0x1, 0x0, 0x0, 0xfffffffffffffe2a) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x4000, 0x6000}}, "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", "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"}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c77b80e00004066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f320fc7ab00c00f30d2bc0a000f23c80f79376635040040000f23f8b8f4008ee0", 0x56}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.039950991s ago: executing program 1 (id=1828): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0xf0ffffffffffff, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x8, 0x4b, 0x0, 0x0, 0x2e}) 955.332309ms ago: executing program 1 (id=1831): mkdir(&(0x7f0000000100)='./file0\x00', 0x1bd) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x141201, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x34a}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x82, 0x0}, 0x400c080) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e23, 0xffffffff, @loopback, 0x800}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r7, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x62, 0x1, 0x0}, &(0x7f0000001380)=0x74) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000040)={{&(0x7f00009a7000/0x3000)=nil, 0x3000}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766476fb11aca85d8fe4ff2ffff7b3c9c646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r6]) 954.99116ms ago: executing program 2 (id=1833): r0 = socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) stat(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x800, 0x27dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="9400000010000104000000000000000000000020", @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c0000140006"], 0x94}}, 0x0) 891.696587ms ago: executing program 2 (id=1835): prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x6) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/raw6\x00') preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000040)=""/103, 0x67}, {&(0x7f00000000c0)=""/137, 0x89}, {&(0x7f0000000180)=""/179, 0xb3}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000280)=""/131, 0x83}, {&(0x7f0000000340)=""/183, 0xb7}], 0x6, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000540)={r2, 0x1}, &(0x7f0000000580)=0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) r3 = accept4$inet6(r1, 0x0, &(0x7f00000005c0), 0x80000) preadv(r3, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/214, 0xd6}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/225, 0xe1}, {&(0x7f0000000900)=""/79, 0x4f}, {&(0x7f0000000980)=""/72, 0x48}], 0x5, 0x9, 0x280000) connect$vsock_stream(r1, &(0x7f0000000a80)={0x28, 0x0, 0x2711, @hyper}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)=@getnexthop={0x54, 0x6a, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004040}, 0x80) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000c00)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) r4 = accept$ax25(r1, &(0x7f0000000c40)={{0x3, @netrom}, [@default, @netrom, @default, @null, @bcast, @default, @netrom, @rose]}, &(0x7f0000000cc0)=0x48) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000d00)=0x2) getsockname$packet(r1, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000dc0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xd, 0xb}, {0xa, 0xffe0}, {0x7, 0x8}}, [""]}, 0x24}}, 0x10) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000ec0)) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3000, 0x6, &(0x7f0000ffb000/0x3000)=nil) preadv(r3, &(0x7f0000004180)=[{&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/190, 0xbe}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/160, 0xa0}, {&(0x7f0000004080)=""/212, 0xd4}], 0x6, 0x800, 0x3) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000004280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f00000048c0)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004880)={&(0x7f00000042c0)={0x5a4, r6, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x1f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x335, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1}, {0xc}, @device_a, @device_a, @device_a, {0x1, 0x8}}, @random="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"}}, @NL80211_ATTR_FRAME={0x237, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @random="b945a09c1a3e", @broadcast, @broadcast, {0x6, 0x8}, "", @void, @value=@ver_80211n={0x0, 0x5, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, @random="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"}}]}, 0x5a4}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f00000049c0)={&(0x7f0000004900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004980)={&(0x7f0000004940)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200400c1}, 0x24000041) 839.524169ms ago: executing program 2 (id=1836): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000cc0)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x250, 0x0, 0x250, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x27}, 0x1000000, 0xff, 'wg1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x3, 0xf4, 'kmp\x00', "377da29a98a85027440fb1647c5950ecfd45c615dfd84bacf537ed92ac620b95fe75775bfa0c1f3636674f1bc9affc23d45f6e27b674720897315a51a5338ca0ac2dd6b5b2d96bd558dc767e923d15aba2f74dff1149e15f5ba483d804234a06e4bc7d462efc9092f876f845199bb88c0f39fec8f07125d04e8375b370fdb68d", 0x5d, 0x2, {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x0, 0x3, 0x0, 0x4, 0x4], 0x1, 0x3}, {0x4, [0x6, 0x5, 0x6, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000300)="2dc2ae80250b22298da809f39f0141ded0a01b353ea1a5a62ed2a38fb2e98f0ff4cd2539221a74be", 0x28, 0xfffffffffffffff9) r1 = add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)="42f2d226dfbf55c6ebc9d4ba14698c2ec0416b3cb15f0b947b9e046bd3c42dcc8b201664bd37d5e1dcb2f64ec074a225ac13a89be79e2bd5bdcd8cffc5ee0512dfe666423022c73264aee90673292872b9ed8e53787dcf53322f00", 0xfffff, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x15031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ac4000/0x3000)=nil, 0x3000}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x40048c67) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r6, 0x1}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r6, 0x5}) add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)="a7e3b60f6ad492d64ae3c6b3e4754c1ffca81a888a3f4e3892daa218b7b96d35368b580ec886748cc9a7cba4cc042bdf30a7ddb251db9266bbdd7affd9b0698905d5140e7fadf2d7dada577f95dd5a8b8756f12867c07fceb831039735987e8d", 0x60, r1) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x20000091, &(0x7f0000000140)={0x11, 0x4, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x8, 0x4b, 0x0, 0x0, 0x2e}) 751.643116ms ago: executing program 4 (id=1839): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sysfs$1(0x1, &(0x7f0000000100)='/dev/hwrng\x00') readv(r0, &(0x7f0000000680)=[{&(0x7f0000000200)=""/88, 0x58}, {&(0x7f0000000b00)=""/170, 0xaa}], 0x2) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000040)) 680.71015ms ago: executing program 1 (id=1841): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)=ANY=[@ANYBLOB="cc0000001b00d115000000000000000000000000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000f53b"], 0xcc}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@wr_drn={0x6e, 0x20, {0x2, 0x9}}, @wr_drn={0x6e, 0x20, {0x3, 0x8000000000000000}}, @uexit={0x0, 0x18, 0x4}, @cpuid={0x14, 0x18, {0x3, 0x6}}, @wrmsr={0x1e, 0x20, {0x939, 0x23}}, @code={0xa, 0x9c, {"66baf80cb85b193780ef66bafc0cb00c0d66baf80cb8aa6d2c836f66bafc0cb90c0b0000b800980000ba000000000f30c482010c2c6b65360f01d1c442adaee266baf80cb85cbdca8e66baf80cb874c6018eef66bafc0c66b892f366ef66bafc0c66ed66450f383ec7450f01c448b826f30000000000000f23d00f21f8351000000c0f23f866b887008ec8"}}], 0x12c}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 680.294436ms ago: executing program 2 (id=1842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000840005c000814000580080001"], 0x5c}}, 0x0) 581.425053ms ago: executing program 2 (id=1844): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close(0x3) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xfffffffffffffffe, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x7fff, 0x8, 0xfffffffffffffffa, 0x2, 0x0, 0x6], 0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r9, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r10, 0x4) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r11, &(0x7f0000000140)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0}, 0x40880) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8004, {0x0, 0x0, 0x0, r8, {0xf}, {0x0, 0xffff}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000ffff", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x3, 0x0) 581.264246ms ago: executing program 0 (id=1845): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') (async) r1 = socket(0x2, 0x2, 0x1) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000980)="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", 0x20b}], 0x1}, 0xc0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c}) (async) r3 = openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x100401, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) (async) close(r4) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000001c0)={0x40000008}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) (async) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)) 391.872635ms ago: executing program 0 (id=1846): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0xffc9, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 391.428851ms ago: executing program 0 (id=1847): prlimit64(0x0, 0x7, &(0x7f0000000780), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r3], 0x2c}}, 0x20008000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6gre0\x00', r3, 0x29, 0xa, 0xe3, 0x7, 0x42, @local, @private2, 0x7, 0x10, 0x4e7, 0x480}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000680), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x48180, 0x0) getdents64(r7, 0x0, 0xc0) getdents(r7, 0x0, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 271.626255ms ago: executing program 0 (id=1848): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x100, 0x70bd28, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x24000c71) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)={0x2, 'netpci0\x00', {0x7f}, 0x2}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'vlan0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x3, 0x87, "51b43eac102444d99806fe5ec6be9d86153dedf75a34c8ccdde0ef92f55e5656a6ee261caf66655ace43972a24ae9da8f58671697b11d6fd7f0939b2dff2d40d324bd3914feb9d96c53ea6b5cd138adb6793c7eb05b3dfd04c99640cf8b5483255a728d1cffd4b9c31b497b99ff22c3cf9e6839199b9d841ce46ebc045b8e6eaf6223354a2603c"}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x30, 0x7, 'system_u:object_r:iptables_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000005}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x0, 0x0, {0xc00000000, 0xd62, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x800, 0x7, 0x10}}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="258c4c5e70b6"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040800}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r5, 0x2, 0x7fffffff, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048051}, 0x4040050) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000880)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x400000, 0x1d3, 0x2}, 0x18) readlinkat(r9, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)=""/16, 0x10) bind$x25(r4, &(0x7f0000000a80), 0x12) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x18, r5, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r4) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, r10, 0x400, 0x70bd26, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000014) r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000d00), 0x1, 0x0) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000e40)={'gre0\x00', &(0x7f0000000dc0)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x0, 0xe, {{0x17, 0x4, 0x3, 0x0, 0x5c, 0x65, 0x0, 0x78, 0x29, 0x0, @local, @loopback, {[@generic={0x7, 0x3, "80"}, @timestamp={0x44, 0x28, 0x31, 0x0, 0x1, [0x4, 0x1f, 0x2, 0x10000, 0x0, 0xd, 0x6b, 0x6, 0x9]}, @ssrr={0x89, 0x1b, 0xf1, [@local, @rand_addr=0x64010100, @broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}]}}}}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r11, &(0x7f0000000f40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x48, r12, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r13}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x483}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008010}, 0x20000080) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000fc0)={0x2, 0x0, 0x1, 0x0, 0x2, 0x0, [{0x8, 0x7, 0x6a, '\x00', 0x2}, {0xec8a, 0x2, 0xa, '\x00', 0x84}]}) 270.998049ms ago: executing program 2 (id=1849): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)) epoll_wait(r3, &(0x7f0000000500)=[{}], 0x1, 0x20400000) write$P9_RVERSION(r2, 0x0, 0x13) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) readv(r0, &(0x7f0000000000), 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x2000000000001, 0x0, 0x0, 0xd, 0xd, "e0e5cc1b1ee13c773ddf9b0183e861c0b919f19c36c34b3f285165040000000001004000000000001b5731f2826941d43c0a28bef130a37600", "3c565b323b0a1997bfed1933f9881e1300bf63b7404de14128858bc9925db8e638d60d3738978774a611c544ca30ff3837dae200000000000000080000000020", "9ce976f8f482b6b54c9e64394f18daa5f83d193405d328a5895ac1a9057f2514", [0x6c, 0x1]}) 142.002615ms ago: executing program 4 (id=1850): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000000)=""/58, &(0x7f0000000040)=0x3a) rt_tgsigqueueinfo(0x0, 0x0, 0xffffffff, &(0x7f0000000000)={0x0, 0x0, 0x2127}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x5c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="140f38e2d94aca7a2de0e7fe30e8a2710d68e95e174b558d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "204885ade13feda5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d1313fdd5f1c5ccb26c4953982b70643"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x4000004) syz_emit_ethernet(0x12, &(0x7f0000000240)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@generic={0x4305}}}, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0x4a4, r7, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x1e8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x860}, @TIPC_NLA_NODE_ID={0x46, 0x3, "26627ef077e62fe97f49b73ecb1dc7d2a4c6facc94a35aa45d4be6be7dac63a3b74c0585414daf44cddce980dfeff82def191e5b880aefc4ffa07f28fbf976a21db7"}, @TIPC_NLA_NODE_ID={0xea, 0x3, "bafaa1331e57635035f31931e9b09dae652246ff280e903fed1fd62dc9c83a862542167b519f224048728fab68c5c78d5cb50336e00c78446c2db462644397222a8f644e160c3671bfa477bc47bd35145173e3027248621e8101470478654ea803c793124a06c71708da6e08a9200815a641a8d33fd2723e9f152af41aaeee194abc6e14f580a04912295ba57d1693143a90180c2dc2952718b5343dee6fde712b508c1414a320c78b965e5fdb91eb69bc25541ea2ba21eac6b666b2c4c94fd54e5824eaf12e09390de989fd7e8076d4608faa33d3432883ed8097f870aa54e1e1cc20792be4"}, @TIPC_NLA_NODE_ID={0x6b, 0x3, "9b1ecbd2eee92b1c91a5a4e9408e562c70927bec0edcb9c3314409d306f5eec465168e9b21e45e822dd43e1141a4ab3d6687c12605ba237183658455d0051faadb86043769a2372af3ef6d2959692158257fe4f174fdd3067763ba08bd74507e4631ae72ddfa61"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "b9a0e6e376d21a744609b75690689073ea07d70d"}}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x45f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x83}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x826}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}]}, @TIPC_NLA_BEARER={0x12c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x190}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe1}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0xfffffffd}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010101}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8500}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfdb}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x40008040}, 0x24000040) dup2(r5, r5) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xffa, &(0x7f000062b000)=""/4090, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r9, 0x80044dfd, &(0x7f0000001480)) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x9}, &(0x7f0000000040)=0x8) 61.969821ms ago: executing program 4 (id=1851): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x200000000000000, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x8, 0x4b, 0x0, 0x0, 0x2e}) 61.298546ms ago: executing program 0 (id=1852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400060000814000580080001"], 0x5c}}, 0x0) 61.030127ms ago: executing program 4 (id=1853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x74, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x141a82, 0x12) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f00000000c0)={0x3, {{0x2, 0x4e22, @remote}}}, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x119, 0x487, 0x0, &(0x7f0000000480)) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) r5 = dup(r1) sendfile(r5, r2, 0x0, 0x8000fffffffe) 1.234532ms ago: executing program 0 (id=1854): r0 = socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) stat(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x800, 0x27dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400000000000000000000008c", @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c0000140006"], 0x94}}, 0x0) 0s ago: executing program 4 (id=1855): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0xffe4, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) kernel console output (not intermixed with test programs): 451034][ T8584] netlink: 'syz.1.635': attribute type 10 has an invalid length. [ 110.459761][ T8584] batman_adv: batadv0: Adding interface: team0 [ 110.463182][ T8584] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.479367][ T8584] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 110.719725][ T8664] btrfs: Unknown parameter 'nbrecoveryØK;Ò^i‘^Êîvåè0³­' [ 110.720443][ T8592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8592 comm=syz.1.638 [ 110.801350][ T8672] FAULT_INJECTION: forcing a failure. [ 110.801350][ T8672] name failslab, interval 1, probability 0, space 0, times 0 [ 110.808511][ T8672] CPU: 2 UID: 0 PID: 8672 Comm: syz.1.642 Not tainted syzkaller #0 PREEMPT(full) [ 110.808536][ T8672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.808548][ T8672] Call Trace: [ 110.808554][ T8672] [ 110.808561][ T8672] dump_stack_lvl+0x16c/0x1f0 [ 110.808583][ T8672] should_fail_ex+0x512/0x640 [ 110.808603][ T8672] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 110.808627][ T8672] should_failslab+0xc2/0x120 [ 110.808651][ T8672] __kvmalloc_node_noprof+0x141/0x9c0 [ 110.808672][ T8672] ? seq_read_iter+0x830/0x12d0 [ 110.808695][ T8672] ? seq_read_iter+0x830/0x12d0 [ 110.808710][ T8672] seq_read_iter+0x830/0x12d0 [ 110.808743][ T8672] ? __mutex_trylock_common+0xe9/0x250 [ 110.808777][ T8672] proc_reg_read_iter+0x220/0x310 [ 110.808807][ T8672] vfs_read+0x8bf/0xcf0 [ 110.808829][ T8672] ? __pfx___mutex_lock+0x10/0x10 [ 110.808847][ T8672] ? __pfx_vfs_read+0x10/0x10 [ 110.808883][ T8672] ksys_read+0x12a/0x250 [ 110.808901][ T8672] ? __pfx_ksys_read+0x10/0x10 [ 110.808939][ T8672] do_syscall_64+0xcd/0x4e0 [ 110.808959][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.808977][ T8672] RIP: 0033:0x7fe64238eec9 [ 110.808993][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.809009][ T8672] RSP: 002b:00007fe643192038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.809027][ T8672] RAX: ffffffffffffffda RBX: 00007fe6425e5fa0 RCX: 00007fe64238eec9 [ 110.809038][ T8672] RDX: 0000000000002020 RSI: 0000200000000500 RDI: 0000000000000003 [ 110.809049][ T8672] RBP: 00007fe643192090 R08: 0000000000000000 R09: 0000000000000000 [ 110.809059][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.809069][ T8672] R13: 00007fe6425e6038 R14: 00007fe6425e5fa0 R15: 00007ffe167d46a8 [ 110.809093][ T8672] [ 111.032661][ T8683] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 111.246251][ T6041] usb 8-1: USB disconnect, device number 16 [ 111.293680][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 111.293697][ T40] audit: type=1400 audit(1759692924.241:822): avc: denied { watch } for pid=8698 comm="syz.2.647" path="/dev/nvram" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 111.310461][ T40] audit: type=1400 audit(1759692924.251:823): avc: denied { watch_sb } for pid=8698 comm="syz.2.647" path="/dev/nvram" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 111.620721][ T8666] bond3: entered allmulticast mode [ 111.919788][ T8760] FAULT_INJECTION: forcing a failure. [ 111.919788][ T8760] name failslab, interval 1, probability 0, space 0, times 0 [ 111.925391][ T8760] CPU: 3 UID: 0 PID: 8760 Comm: syz.0.653 Not tainted syzkaller #0 PREEMPT(full) [ 111.925408][ T8760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.925414][ T8760] Call Trace: [ 111.925418][ T8760] [ 111.925423][ T8760] dump_stack_lvl+0x16c/0x1f0 [ 111.925438][ T8760] should_fail_ex+0x512/0x640 [ 111.925450][ T8760] ? __kmalloc_noprof+0xca/0x880 [ 111.925468][ T8760] should_failslab+0xc2/0x120 [ 111.925481][ T8760] __kmalloc_noprof+0xdd/0x880 [ 111.925497][ T8760] ? vmalloc_info_show+0x74/0xcf0 [ 111.925511][ T8760] ? vmalloc_info_show+0x74/0xcf0 [ 111.925520][ T8760] vmalloc_info_show+0x74/0xcf0 [ 111.925531][ T8760] ? seq_read_iter+0x830/0x12d0 [ 111.925544][ T8760] seq_read_iter+0x50e/0x12d0 [ 111.925560][ T8760] proc_reg_read_iter+0x220/0x310 [ 111.925579][ T8760] vfs_read+0x8bf/0xcf0 [ 111.925592][ T8760] ? __pfx___mutex_lock+0x10/0x10 [ 111.925603][ T8760] ? __pfx_vfs_read+0x10/0x10 [ 111.925622][ T8760] ksys_read+0x12a/0x250 [ 111.925633][ T8760] ? __pfx_ksys_read+0x10/0x10 [ 111.925647][ T8760] do_syscall_64+0xcd/0x4e0 [ 111.925659][ T8760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.925670][ T8760] RIP: 0033:0x7fa31698eec9 [ 111.925679][ T8760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.925690][ T8760] RSP: 002b:00007fa317820038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.925701][ T8760] RAX: ffffffffffffffda RBX: 00007fa316be5fa0 RCX: 00007fa31698eec9 [ 111.925708][ T8760] RDX: 0000000000002020 RSI: 0000200000000500 RDI: 0000000000000003 [ 111.925714][ T8760] RBP: 00007fa317820090 R08: 0000000000000000 R09: 0000000000000000 [ 111.925721][ T8760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.925727][ T8760] R13: 00007fa316be6038 R14: 00007fa316be5fa0 R15: 00007ffdca043858 [ 111.925741][ T8760] [ 112.379131][ T840] IPVS: starting estimator thread 0... [ 112.391737][ T8812] __nla_validate_parse: 83 callbacks suppressed [ 112.391747][ T8812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.664'. [ 112.469446][ T8810] IPVS: using max 44 ests per chain, 105600 per kthread [ 112.522791][ T40] audit: type=1400 audit(1759692925.471:824): avc: denied { write } for pid=8817 comm="syz.0.666" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 112.530102][ T40] audit: type=1400 audit(1759692925.471:825): avc: denied { open } for pid=8817 comm="syz.0.666" path="/174/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 112.538773][ T40] audit: type=1400 audit(1759692925.471:826): avc: denied { ioctl } for pid=8817 comm="syz.0.666" path="/174/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 112.604635][ T8818] 9pnet: Could not find request transport: vi¢Ô›kB_Ûäüap¾Irtio [ 112.607216][ T40] audit: type=1400 audit(1759692925.551:827): avc: denied { ioctl } for pid=8830 comm="syz.3.668" path="pid:[4026532865]" dev="nsfs" ino=4026532865 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 112.636086][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.669'. [ 112.638866][ T8836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.669'. [ 112.647494][ T8836] geneve2: entered promiscuous mode [ 112.649818][ T8836] geneve2: entered allmulticast mode [ 112.779368][ T840] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 112.857945][ T8871] FAULT_INJECTION: forcing a failure. [ 112.857945][ T8871] name failslab, interval 1, probability 0, space 0, times 0 [ 112.863693][ T8871] CPU: 0 UID: 0 PID: 8871 Comm: syz.1.676 Not tainted syzkaller #0 PREEMPT(full) [ 112.863721][ T8871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.863747][ T8871] Call Trace: [ 112.863754][ T8871] [ 112.863764][ T8871] dump_stack_lvl+0x16c/0x1f0 [ 112.863791][ T8871] should_fail_ex+0x512/0x640 [ 112.863815][ T8871] ? __kmalloc_noprof+0xca/0x880 [ 112.863849][ T8871] should_failslab+0xc2/0x120 [ 112.863874][ T8871] __kmalloc_noprof+0xdd/0x880 [ 112.863925][ T8871] ? vmalloc_info_show+0x74/0xcf0 [ 112.863947][ T8871] ? vmalloc_info_show+0x74/0xcf0 [ 112.863965][ T8871] vmalloc_info_show+0x74/0xcf0 [ 112.863983][ T8871] ? seq_read_iter+0x43f/0x12d0 [ 112.864009][ T8871] seq_read_iter+0x50e/0x12d0 [ 112.864041][ T8871] proc_reg_read_iter+0x220/0x310 [ 112.864071][ T8871] vfs_read+0x8bf/0xcf0 [ 112.864094][ T8871] ? __pfx___mutex_lock+0x10/0x10 [ 112.864113][ T8871] ? __pfx_vfs_read+0x10/0x10 [ 112.864149][ T8871] ksys_read+0x12a/0x250 [ 112.864171][ T8871] ? __pfx_ksys_read+0x10/0x10 [ 112.864197][ T8871] do_syscall_64+0xcd/0x4e0 [ 112.864211][ T8871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.864225][ T8871] RIP: 0033:0x7fe64238eec9 [ 112.864236][ T8871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.864249][ T8871] RSP: 002b:00007fe643192038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 112.864289][ T8871] RAX: ffffffffffffffda RBX: 00007fe6425e5fa0 RCX: 00007fe64238eec9 [ 112.864303][ T8871] RDX: 0000000000002020 RSI: 0000200000000500 RDI: 0000000000000003 [ 112.864314][ T8871] RBP: 00007fe643192090 R08: 0000000000000000 R09: 0000000000000000 [ 112.864321][ T8871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.864329][ T8871] R13: 00007fe6425e6038 R14: 00007fe6425e5fa0 R15: 00007ffe167d46a8 [ 112.864345][ T8871] [ 112.874496][ T8874] No source specified [ 112.961291][ T840] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 112.966136][ T840] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 112.972547][ T840] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 112.976760][ T840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.986466][ T8824] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 112.995777][ T840] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.996148][ T8878] geneve3: entered promiscuous mode [ 113.001782][ T8878] geneve3: entered allmulticast mode [ 113.140750][ T8911] befs: (nbd1): unable to read superblock [ 113.148927][ T40] audit: type=1400 audit(1759692926.091:828): avc: denied { ioctl } for pid=8899 comm="syz.3.681" path="socket:[23033]" dev="sockfs" ino=23033 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 113.243908][ T8923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.684'. [ 113.248740][ T34] usb 7-1: USB disconnect, device number 6 [ 113.344752][ T8947] binder_alloc: binder_alloc_mmap_handler: 8945 200000ffe000-200000fff000 already mapped failed -16 [ 113.522680][ T8957] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 113.538085][ T40] audit: type=1400 audit(1759692926.481:829): avc: denied { read } for pid=8955 comm="syz.3.688" name="file1" dev="9p" ino=71827671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.548910][ T8957] evm: overlay not supported [ 113.551332][ T40] audit: type=1400 audit(1759692926.481:830): avc: denied { read write } for pid=8955 comm="syz.3.688" name="file1" dev="overlay" ino=71827671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.562178][ T40] audit: type=1400 audit(1759692926.481:831): avc: denied { open } for pid=8955 comm="syz.3.688" path="/160/bus/file1" dev="overlay" ino=71827671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.751494][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 113.754839][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 113.805593][ T8985] syzkaller1: entered promiscuous mode [ 113.807284][ T8985] syzkaller1: entered allmulticast mode [ 113.856760][ T9001] netlink: 64 bytes leftover after parsing attributes in process `syz.3.697'. [ 113.877993][ T8995] tipc: Started in network mode [ 113.881295][ T8995] tipc: Node identity 1ec419e24f64, cluster identity 4711 [ 113.884631][ T8995] tipc: Enabled bearer , priority 0 [ 113.887437][ T9005] syzkaller0: entered promiscuous mode [ 113.890012][ T9005] syzkaller0: entered allmulticast mode [ 113.902816][ T9005] tipc: Resetting bearer [ 113.915504][ T9005] tipc: Disabling bearer [ 113.941685][ T9012] Bluetooth: MGMT ver 1.23 [ 114.112558][ T9033] overlayfs: failed to resolve 'verity=off': -2 [ 114.261230][ T9037] /dev/sr0: Can't open blockdev [ 114.324306][ T9051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.707'. [ 114.640074][ T9100] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 114.695687][ T9109] tmpfs: Unknown parameter 'euid' [ 114.714651][ T9109] 9pnet: Could not find request transport: xen [ 114.742999][ T9119] random: crng reseeded on system resumption [ 114.761118][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 114.784533][ T9122] netlink: 20 bytes leftover after parsing attributes in process `syz.1.719'. [ 114.938474][ T9144] loop2: detected capacity change from 0 to 7 [ 114.954958][ T9144] Dev loop2: unable to read RDB block 7 [ 114.957777][ T9144] loop2: unable to read partition table [ 114.960872][ T9144] loop2: partition table beyond EOD, truncated [ 114.963927][ T9144] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 115.063286][ T9161] fuse: Bad value for 'rootmode' [ 115.489576][ T7347] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 115.641019][ T7347] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 66, setting to 64 [ 115.647720][ T7347] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 115.651764][ T7347] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.655631][ T7347] usb 8-1: Product: syz [ 115.658034][ T7347] usb 8-1: Manufacturer: syz [ 115.660312][ T7347] usb 8-1: SerialNumber: syz [ 115.664661][ T7347] usb 8-1: config 0 descriptor?? [ 116.234279][ T840] usb 8-1: USB disconnect, device number 17 [ 116.339383][ T6035] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 116.365969][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 116.365988][ T40] audit: type=1400 audit(1759692929.311:852): avc: denied { setattr } for pid=9282 comm="syz.0.750" name="file0" dev="9p" ino=71827669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.499447][ T6035] usb 6-1: Using ep0 maxpacket: 8 [ 116.506582][ T6035] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 116.512541][ T6035] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 116.516918][ T6035] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.521480][ T6035] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.527670][ T6035] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 116.532369][ T6035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.743464][ T6035] usb 6-1: GET_CAPABILITIES returned 0 [ 116.746068][ T6035] usbtmc 6-1:16.0: can't read capabilities [ 116.763853][ T6035] usb 6-1: USB disconnect, device number 7 [ 116.797762][ T9313] Bluetooth: MGMT ver 1.23 [ 116.800527][ T9313] Bluetooth: hci1: too big key_count value 18182 [ 117.103843][ T9354] i2c i2c-1: Invalid block write size 34 [ 117.948291][ T40] audit: type=1400 audit(1759692930.891:853): avc: denied { ioctl } for pid=9391 comm="syz.0.770" path="socket:[23664]" dev="sockfs" ino=23664 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 118.226749][ T40] audit: type=1400 audit(1759692931.171:854): avc: denied { connect } for pid=9403 comm="syz.2.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.252599][ T9410] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 118.257045][ T9409] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 118.391567][ T9429] __nla_validate_parse: 17 callbacks suppressed [ 118.391587][ T9429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.776'. [ 118.403630][ T9427] bridge0: entered promiscuous mode [ 118.406013][ T9427] macsec1: entered promiscuous mode [ 118.410729][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.777'. [ 118.414415][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.777'. [ 118.466283][ T9442] loop2: detected capacity change from 0 to 7 [ 118.472162][ T6406] Dev loop2: unable to read RDB block 7 [ 118.474135][ T6406] loop2: unable to read partition table [ 118.476048][ T6406] loop2: partition table beyond EOD, truncated [ 118.501434][ T9442] Dev loop2: unable to read RDB block 7 [ 118.503610][ T9442] loop2: unable to read partition table [ 118.506034][ T9442] loop2: partition table beyond EOD, truncated [ 118.508330][ T9442] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 118.592864][ T40] audit: type=1400 audit(1759692931.541:855): avc: denied { watch } for pid=9449 comm="syz.0.781" path="/208/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 118.647352][ T9460] mkiss: ax0: crc mode is auto. [ 118.959467][ T5996] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 119.119361][ T5996] usb 6-1: Using ep0 maxpacket: 32 [ 119.122755][ T5996] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 151, changing to 11 [ 119.127407][ T5996] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58669, setting to 1024 [ 119.131961][ T5996] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.142082][ T5996] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 119.145909][ T5996] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 119.149770][ T5996] usb 6-1: Product: syz [ 119.151507][ T5996] usb 6-1: Manufacturer: syz [ 119.153781][ T5996] usb 6-1: SerialNumber: syz [ 119.158821][ T9466] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.166564][ T5996] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input13 [ 119.224054][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'. [ 119.228277][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'. [ 119.429537][ T9520] random: crng reseeded on system resumption [ 119.636417][ T40] audit: type=1400 audit(1759692932.581:856): avc: denied { read write } for pid=9537 comm="syz.0.794" name="nullb0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 119.645249][ T40] audit: type=1400 audit(1759692932.581:857): avc: denied { open } for pid=9537 comm="syz.0.794" path="/dev/nullb0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 119.652590][ T40] audit: type=1400 audit(1759692932.581:858): avc: denied { map } for pid=9537 comm="syz.0.794" path="/dev/nullb0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 119.660023][ T40] audit: type=1400 audit(1759692932.581:859): avc: denied { execute } for pid=9537 comm="syz.0.794" path="/dev/nullb0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 120.159084][ T9546] netlink: 20 bytes leftover after parsing attributes in process `syz.2.796'. [ 120.790741][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880360a9400: rx timeout, send abort [ 120.795771][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880360a9400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 120.803528][ T40] audit: type=1400 audit(1759692933.751:860): avc: denied { read } for pid=5337 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 120.816221][ T40] audit: type=1400 audit(1759692933.751:861): avc: denied { search } for pid=5337 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.654360][ T5996] usb 6-1: USB disconnect, device number 8 [ 121.679362][ T5996] appletouch 6-1:1.0: input: appletouch disconnected [ 121.705600][ T9583] FAULT_INJECTION: forcing a failure. [ 121.705600][ T9583] name failslab, interval 1, probability 0, space 0, times 0 [ 121.713283][ T9583] CPU: 0 UID: 0 PID: 9583 Comm: syz.1.804 Not tainted syzkaller #0 PREEMPT(full) [ 121.713315][ T9583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 121.713328][ T9583] Call Trace: [ 121.713337][ T9583] [ 121.713346][ T9583] dump_stack_lvl+0x16c/0x1f0 [ 121.713374][ T9583] should_fail_ex+0x512/0x640 [ 121.713397][ T9583] ? __kmalloc_noprof+0xca/0x880 [ 121.713434][ T9583] should_failslab+0xc2/0x120 [ 121.713462][ T9583] __kmalloc_noprof+0xdd/0x880 [ 121.713492][ T9583] ? rcu_is_watching+0x12/0xc0 [ 121.713525][ T9583] ? vmalloc_info_show+0x74/0xcf0 [ 121.713553][ T9583] ? vmalloc_info_show+0x74/0xcf0 [ 121.713572][ T9583] vmalloc_info_show+0x74/0xcf0 [ 121.713592][ T9583] ? __free_frozen_pages+0x80f/0x1160 [ 121.713620][ T9583] ? seq_read_iter+0x43f/0x12d0 [ 121.713649][ T9583] seq_read_iter+0x50e/0x12d0 [ 121.713684][ T9583] proc_reg_read_iter+0x220/0x310 [ 121.713719][ T9583] vfs_read+0x8bf/0xcf0 [ 121.713747][ T9583] ? __pfx___mutex_lock+0x10/0x10 [ 121.713769][ T9583] ? __pfx_vfs_read+0x10/0x10 [ 121.713813][ T9583] ksys_read+0x12a/0x250 [ 121.713835][ T9583] ? __pfx_ksys_read+0x10/0x10 [ 121.713867][ T9583] do_syscall_64+0xcd/0x4e0 [ 121.713892][ T9583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.713914][ T9583] RIP: 0033:0x7fe64238eec9 [ 121.713938][ T9583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.713960][ T9583] RSP: 002b:00007fe643192038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.713982][ T9583] RAX: ffffffffffffffda RBX: 00007fe6425e5fa0 RCX: 00007fe64238eec9 [ 121.713996][ T9583] RDX: 0000000000002020 RSI: 0000200000000500 RDI: 0000000000000003 [ 121.714009][ T9583] RBP: 00007fe643192090 R08: 0000000000000000 R09: 0000000000000000 [ 121.714023][ T9583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.714036][ T9583] R13: 00007fe6425e6038 R14: 00007fe6425e5fa0 R15: 00007ffe167d46a8 [ 121.714068][ T9583] [ 121.808674][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.836357][ T9591] netlink: 'syz.0.805': attribute type 4 has an invalid length. [ 121.839222][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 121.839234][ T40] audit: type=1400 audit(1759692934.781:867): avc: denied { lock } for pid=9590 comm="syz.0.805" path="socket:[25907]" dev="sockfs" ino=25907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 121.902434][ T40] audit: type=1400 audit(1759692934.851:868): avc: denied { create } for pid=9621 comm="syz.3.807" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 122.162847][ T9635] /dev/sr0: Can't open blockdev [ 122.213805][ T40] audit: type=1400 audit(1759692935.161:869): avc: denied { execmem } for pid=9675 comm="syz.2.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 123.183371][ T9727] netlink: 36 bytes leftover after parsing attributes in process `syz.3.826'. [ 123.236900][ T9731] FAULT_INJECTION: forcing a failure. [ 123.236900][ T9731] name failslab, interval 1, probability 0, space 0, times 0 [ 123.242799][ T9731] CPU: 0 UID: 0 PID: 9731 Comm: syz.2.827 Not tainted syzkaller #0 PREEMPT(full) [ 123.242825][ T9731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.242835][ T9731] Call Trace: [ 123.242841][ T9731] [ 123.242848][ T9731] dump_stack_lvl+0x16c/0x1f0 [ 123.242870][ T9731] should_fail_ex+0x512/0x640 [ 123.242890][ T9731] ? __kmalloc_noprof+0xca/0x880 [ 123.242919][ T9731] should_failslab+0xc2/0x120 [ 123.242941][ T9731] __kmalloc_noprof+0xdd/0x880 [ 123.242966][ T9731] ? rcu_is_watching+0x12/0xc0 [ 123.242992][ T9731] ? vmalloc_info_show+0x74/0xcf0 [ 123.243014][ T9731] ? vmalloc_info_show+0x74/0xcf0 [ 123.243029][ T9731] vmalloc_info_show+0x74/0xcf0 [ 123.243047][ T9731] ? seq_read_iter+0x43f/0x12d0 [ 123.243069][ T9731] seq_read_iter+0x50e/0x12d0 [ 123.243098][ T9731] proc_reg_read_iter+0x220/0x310 [ 123.243128][ T9731] vfs_read+0x8bf/0xcf0 [ 123.243150][ T9731] ? __pfx___mutex_lock+0x10/0x10 [ 123.243167][ T9731] ? __pfx_vfs_read+0x10/0x10 [ 123.243202][ T9731] ksys_read+0x12a/0x250 [ 123.243220][ T9731] ? __pfx_ksys_read+0x10/0x10 [ 123.243245][ T9731] do_syscall_64+0xcd/0x4e0 [ 123.243264][ T9731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.243282][ T9731] RIP: 0033:0x7f7d1778eec9 [ 123.243297][ T9731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.243313][ T9731] RSP: 002b:00007f7d18553038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.243331][ T9731] RAX: ffffffffffffffda RBX: 00007f7d179e5fa0 RCX: 00007f7d1778eec9 [ 123.243342][ T9731] RDX: 0000000000002020 RSI: 0000200000000500 RDI: 0000000000000003 [ 123.243352][ T9731] RBP: 00007f7d18553090 R08: 0000000000000000 R09: 0000000000000000 [ 123.243362][ T9731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.243372][ T9731] R13: 00007f7d179e6038 R14: 00007f7d179e5fa0 R15: 00007ffc1f6585a8 [ 123.243396][ T9731] [ 123.337904][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.359392][ T7347] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 123.509268][ T7347] usb 5-1: Using ep0 maxpacket: 8 [ 123.519437][ T7347] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.522650][ T7347] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 123.525979][ T7347] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 123.531339][ T7347] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 123.534939][ T7347] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 123.538252][ T7347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.546524][ T7347] hub 5-1:1.0: bad descriptor, ignoring hub [ 123.548460][ T7347] hub 5-1:1.0: probe with driver hub failed with error -5 [ 123.552098][ T7347] cdc_wdm 5-1:1.0: skipping garbage [ 123.553866][ T7347] cdc_wdm 5-1:1.0: skipping garbage [ 123.557092][ T7347] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 123.559752][ T7347] cdc_wdm 5-1:1.0: Unknown control protocol [ 123.746402][ T40] audit: type=1400 audit(2000000000.650:870): avc: denied { read write } for pid=9720 comm="syz.0.825" name="cdc-wdm0" dev="devtmpfs" ino=3066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 123.755855][ T40] audit: type=1400 audit(2000000000.650:871): avc: denied { open } for pid=9720 comm="syz.0.825" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 124.167729][ T9721] cdc_wdm 5-1:1.0: Error autopm - -16 [ 124.167903][ T7347] usb 5-1: USB disconnect, device number 8 [ 124.295641][ T9794] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48160 sclass=netlink_tcpdiag_socket pid=9794 comm=syz.3.837 [ 124.311566][ T7347] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 124.494421][ T7347] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.501213][ T7347] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 124.505559][ T7347] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 124.510208][ T7347] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 124.514024][ T7347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.521649][ T9775] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 124.531852][ T7347] hub 5-1:1.0: bad descriptor, ignoring hub [ 124.534412][ T7347] hub 5-1:1.0: probe with driver hub failed with error -5 [ 124.537757][ T7347] cdc_wdm 5-1:1.0: skipping garbage [ 124.540113][ T7347] cdc_wdm 5-1:1.0: skipping garbage [ 124.544840][ T7347] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 124.548251][ T7347] cdc_wdm 5-1:1.0: Unknown control protocol [ 124.731322][ T40] audit: type=1400 audit(2000000001.629:872): avc: denied { mounton } for pid=9720 comm="syz.0.825" path="/file0" dev="ramfs" ino=25207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 124.741650][ T9721] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 124.744968][ T9721] overlayfs: failed to set xattr on upper [ 124.746819][ T9721] overlayfs: ...falling back to redirect_dir=nofollow. [ 124.748983][ T9721] overlayfs: ...falling back to index=off. [ 124.752639][ T9721] overlayfs: ...falling back to uuid=null. [ 124.763147][ T9721] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 124.772635][ T40] audit: type=1400 audit(2000000001.679:873): avc: denied { sqpoll } for pid=9720 comm="syz.0.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 124.789686][ T9834] netlink: 5 bytes leftover after parsing attributes in process `syz.1.846'. [ 124.941842][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'. [ 124.974987][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'. [ 125.019423][ T840] usb 5-1: USB disconnect, device number 9 [ 125.065231][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'. [ 125.068787][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'. [ 125.456822][ T40] audit: type=1400 audit(2000000002.359:874): avc: denied { read } for pid=9920 comm="syz.1.855" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 125.465976][ T40] audit: type=1400 audit(2000000002.359:875): avc: denied { open } for pid=9920 comm="syz.1.855" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 125.479937][ T40] audit: type=1400 audit(2000000002.359:876): avc: denied { ioctl } for pid=9920 comm="syz.1.855" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 125.544733][ T9932] overlayfs: invalid redirect ((null)) [ 125.544786][ T9931] overlayfs: missing 'lowerdir' [ 125.580019][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.859'. [ 125.582944][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.859'. [ 126.078486][ T9983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.870'. [ 126.398771][ T9998] netlink: 'syz.0.873': attribute type 21 has an invalid length. [ 126.402673][ T9998] netlink: 'syz.0.873': attribute type 6 has an invalid length. [ 126.407676][ T9998] netlink: 132 bytes leftover after parsing attributes in process `syz.0.873'. [ 126.414535][ T9998] netlink: 'syz.0.873': attribute type 21 has an invalid length. [ 126.418932][ T9998] netlink: 'syz.0.873': attribute type 6 has an invalid length. [ 126.422311][ T9998] netlink: 132 bytes leftover after parsing attributes in process `syz.0.873'. [ 126.559510][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.799934][T10033] program syz.1.883 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.872128][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 126.872166][ T40] audit: type=1400 audit(2000000003.779:883): avc: denied { append } for pid=10040 comm="syz.0.884" name="card2" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 126.894661][T10042] netlink: 'syz.0.884': attribute type 11 has an invalid length. [ 126.958521][T10058] FAULT_INJECTION: forcing a failure. [ 126.958521][T10058] name failslab, interval 1, probability 0, space 0, times 0 [ 126.964153][T10058] CPU: 2 UID: 0 PID: 10058 Comm: syz.0.890 Not tainted syzkaller #0 PREEMPT(full) [ 126.964170][T10058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.964178][T10058] Call Trace: [ 126.964182][T10058] [ 126.964187][T10058] dump_stack_lvl+0x16c/0x1f0 [ 126.964203][T10058] should_fail_ex+0x512/0x640 [ 126.964216][T10058] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 126.964231][T10058] should_failslab+0xc2/0x120 [ 126.964245][T10058] __kvmalloc_node_noprof+0x141/0x9c0 [ 126.964259][T10058] ? seq_read_iter+0x830/0x12d0 [ 126.964273][T10058] ? seq_read_iter+0x830/0x12d0 [ 126.964283][T10058] seq_read_iter+0x830/0x12d0 [ 126.964292][T10058] ? __mutex_trylock_common+0xe9/0x250 [ 126.964313][T10058] proc_reg_read_iter+0x220/0x310 [ 126.964333][T10058] vfs_read+0x8bf/0xcf0 [ 126.964347][T10058] ? __pfx___mutex_lock+0x10/0x10 [ 126.964363][T10058] ? __pfx_vfs_read+0x10/0x10 [ 126.964389][T10058] ksys_read+0x12a/0x250 [ 126.964400][T10058] ? __pfx_ksys_read+0x10/0x10 [ 126.964415][T10058] do_syscall_64+0xcd/0x4e0 [ 126.964428][T10058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.964440][T10058] RIP: 0033:0x7fa31698eec9 [ 126.964450][T10058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.964461][T10058] RSP: 002b:00007fa317820038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 126.964473][T10058] RAX: ffffffffffffffda RBX: 00007fa316be5fa0 RCX: 00007fa31698eec9 [ 126.964480][T10058] RDX: 0000000000002020 RSI: 0000200000000500 RDI: 0000000000000003 [ 126.964487][T10058] RBP: 00007fa317820090 R08: 0000000000000000 R09: 0000000000000000 [ 126.964494][T10058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.964500][T10058] R13: 00007fa316be6038 R14: 00007fa316be5fa0 R15: 00007ffdca043858 [ 126.964515][T10058] [ 127.052223][ T40] audit: type=1400 audit(2000000003.959:884): avc: denied { create } for pid=10060 comm="syz.0.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.131594][ T40] audit: type=1400 audit(2000000004.039:885): avc: denied { connect } for pid=10076 comm="syz.1.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.236205][T10084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.272992][T10094] syzkaller1: entered promiscuous mode [ 127.274918][T10094] syzkaller1: entered allmulticast mode [ 127.280569][T10094] cgroup: Need name or subsystem set [ 127.359259][ T6035] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 127.368630][T10104] FAULT_INJECTION: forcing a failure. [ 127.368630][T10104] name failslab, interval 1, probability 0, space 0, times 0 [ 127.373178][T10104] CPU: 2 UID: 0 PID: 10104 Comm: syz.3.899 Not tainted syzkaller #0 PREEMPT(full) [ 127.373194][T10104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.373201][T10104] Call Trace: [ 127.373204][T10104] [ 127.373208][T10104] dump_stack_lvl+0x16c/0x1f0 [ 127.373224][T10104] should_fail_ex+0x512/0x640 [ 127.373236][T10104] ? __kmalloc_noprof+0xca/0x880 [ 127.373254][T10104] should_failslab+0xc2/0x120 [ 127.373268][T10104] __kmalloc_noprof+0xdd/0x880 [ 127.373283][T10104] ? vmalloc_info_show+0x74/0xcf0 [ 127.373297][T10104] ? vmalloc_info_show+0x74/0xcf0 [ 127.373306][T10104] vmalloc_info_show+0x74/0xcf0 [ 127.373317][T10104] ? seq_read_iter+0x830/0x12d0 [ 127.373330][T10104] seq_read_iter+0x50e/0x12d0 [ 127.373346][T10104] proc_reg_read_iter+0x220/0x310 [ 127.373364][T10104] vfs_read+0x8bf/0xcf0 [ 127.373378][T10104] ? __pfx___mutex_lock+0x10/0x10 [ 127.373389][T10104] ? __pfx_vfs_read+0x10/0x10 [ 127.373408][T10104] ksys_read+0x12a/0x250 [ 127.373419][T10104] ? __pfx_ksys_read+0x10/0x10 [ 127.373434][T10104] do_syscall_64+0xcd/0x4e0 [ 127.373445][T10104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.373457][T10104] RIP: 0033:0x7f3c3ef8eec9 [ 127.373466][T10104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.373478][T10104] RSP: 002b:00007f3c3d1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.373488][T10104] RAX: ffffffffffffffda RBX: 00007f3c3f1e5fa0 RCX: 00007f3c3ef8eec9 [ 127.373495][T10104] RDX: 0000000000002020 RSI: 0000200000000500 RDI: 0000000000000003 [ 127.373501][T10104] RBP: 00007f3c3d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 127.373508][T10104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.373514][T10104] R13: 00007f3c3f1e6038 R14: 00007f3c3f1e5fa0 R15: 00007ffdd92feb58 [ 127.373527][T10104] [ 127.464334][T10111] blkio.reset_stats is deprecated [ 127.492711][T10117] program syz.0.902 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.523225][ T6035] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.528053][ T6035] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.538750][ T6035] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.544985][ T6035] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.548881][ T6035] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.556894][ T6035] usb 7-1: config 0 descriptor?? [ 127.865282][T10156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.961276][T10166] overlayfs: overlapping lowerdir path [ 128.171963][T10072] batadv1: entered allmulticast mode [ 128.198604][T10184] tmpfs: Unknown parameter 'grpquota' [ 128.205251][T10184] netlink: 'syz.3.917': attribute type 1 has an invalid length. [ 128.304434][ T6035] usbhid 7-1:0.0: can't add hid device: -71 [ 128.306378][ T6035] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 128.310059][ T6035] usb 7-1: USB disconnect, device number 7 [ 128.360504][T10189] FAULT_INJECTION: forcing a failure. [ 128.360504][T10189] name failslab, interval 1, probability 0, space 0, times 0 [ 128.365332][T10189] CPU: 2 UID: 0 PID: 10189 Comm: syz.3.918 Not tainted syzkaller #0 PREEMPT(full) [ 128.365356][T10189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.365367][T10189] Call Trace: [ 128.365373][T10189] [ 128.365381][T10189] dump_stack_lvl+0x16c/0x1f0 [ 128.365405][T10189] should_fail_ex+0x512/0x640 [ 128.365425][T10189] ? fs_reclaim_acquire+0xae/0x150 [ 128.365449][T10189] should_failslab+0xc2/0x120 [ 128.365472][T10189] __kmalloc_noprof+0xdd/0x880 [ 128.365499][T10189] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 128.365524][T10189] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 128.365543][T10189] tomoyo_realpath_from_path+0xc2/0x6e0 [ 128.365566][T10189] ? tomoyo_profile+0x47/0x60 [ 128.365590][T10189] tomoyo_path_number_perm+0x245/0x580 [ 128.365616][T10189] ? tomoyo_path_number_perm+0x237/0x580 [ 128.365646][T10189] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 128.365674][T10189] ? find_held_lock+0x2b/0x80 [ 128.365724][T10189] ? find_held_lock+0x2b/0x80 [ 128.365748][T10189] ? hook_file_ioctl_common+0x145/0x410 [ 128.365776][T10189] ? __fget_files+0x20e/0x3c0 [ 128.365800][T10189] security_file_ioctl+0x9b/0x240 [ 128.365821][T10189] __x64_sys_ioctl+0xb7/0x210 [ 128.365856][T10189] do_syscall_64+0xcd/0x4e0 [ 128.365875][T10189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.365892][T10189] RIP: 0033:0x7f3c3ef8eec9 [ 128.365908][T10189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.365924][T10189] RSP: 002b:00007f3c3d1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.365942][T10189] RAX: ffffffffffffffda RBX: 00007f3c3f1e5fa0 RCX: 00007f3c3ef8eec9 [ 128.365954][T10189] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 128.365965][T10189] RBP: 00007f3c3d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 128.365975][T10189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.365985][T10189] R13: 00007f3c3f1e6038 R14: 00007f3c3f1e5fa0 R15: 00007ffdd92feb58 [ 128.366010][T10189] [ 128.366017][T10189] ERROR: Out of memory at tomoyo_realpath_from_path. [ 128.705722][T10209] bond4 (unregistering): Released all slaves [ 128.880885][ T6035] IPVS: starting estimator thread 0... [ 128.924271][T10300] FAULT_INJECTION: forcing a failure. [ 128.924271][T10300] name failslab, interval 1, probability 0, space 0, times 0 [ 128.930030][T10300] CPU: 2 UID: 0 PID: 10300 Comm: syz.1.928 Not tainted syzkaller #0 PREEMPT(full) [ 128.930057][T10300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.930067][T10300] Call Trace: [ 128.930074][T10300] [ 128.930081][T10300] dump_stack_lvl+0x16c/0x1f0 [ 128.930104][T10300] should_fail_ex+0x512/0x640 [ 128.930123][T10300] ? __kmalloc_noprof+0xca/0x880 [ 128.930152][T10300] should_failslab+0xc2/0x120 [ 128.930175][T10300] __kmalloc_noprof+0xdd/0x880 [ 128.930200][T10300] ? vmalloc_info_show+0x74/0xcf0 [ 128.930241][T10300] ? vmalloc_info_show+0x74/0xcf0 [ 128.930260][T10300] vmalloc_info_show+0x74/0xcf0 [ 128.930278][T10300] ? seq_read_iter+0x43f/0x12d0 [ 128.930300][T10300] seq_read_iter+0x50e/0x12d0 [ 128.930329][T10300] proc_reg_read_iter+0x220/0x310 [ 128.930358][T10300] vfs_read+0x8bf/0xcf0 [ 128.930380][T10300] ? __pfx___mutex_lock+0x10/0x10 [ 128.930399][T10300] ? __pfx_vfs_read+0x10/0x10 [ 128.930433][T10300] ksys_read+0x12a/0x250 [ 128.930450][T10300] ? __pfx_ksys_read+0x10/0x10 [ 128.930475][T10300] do_syscall_64+0xcd/0x4e0 [ 128.930495][T10300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.930525][T10300] RIP: 0033:0x7fe64238eec9 [ 128.930541][T10300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.930559][T10300] RSP: 002b:00007fe643192038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.930576][T10300] RAX: ffffffffffffffda RBX: 00007fe6425e5fa0 RCX: 00007fe64238eec9 [ 128.930588][T10300] RDX: 0000000000002020 RSI: 0000200000000500 RDI: 0000000000000003 [ 128.930599][T10300] RBP: 00007fe643192090 R08: 0000000000000000 R09: 0000000000000000 [ 128.930608][T10300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.930619][T10300] R13: 00007fe6425e6038 R14: 00007fe6425e5fa0 R15: 00007ffe167d46a8 [ 128.930644][T10300] [ 128.961012][ T40] audit: type=1400 audit(2000000005.869:886): avc: denied { mounton } for pid=10302 comm="syz.0.929" path="/244/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 128.999321][T10293] IPVS: using max 24 ests per chain, 57600 per kthread [ 129.097783][ T40] audit: type=1400 audit(2000000005.999:887): avc: denied { accept } for pid=10316 comm="syz.0.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.165695][ T40] audit: type=1400 audit(2000000006.069:888): avc: denied { lock } for pid=10316 comm="syz.0.932" path="socket:[27160]" dev="sockfs" ino=27160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.281923][T10342] loop2: detected capacity change from 0 to 7 [ 129.286924][ T5962] Dev loop2: unable to read RDB block 7 [ 129.290724][ T5962] loop2: AHDI p2 [ 129.292727][ T5962] loop2: partition table partially beyond EOD, truncated [ 129.297260][T10342] Dev loop2: unable to read RDB block 7 [ 129.299967][T10342] loop2: AHDI p2 [ 129.301604][T10342] loop2: partition table partially beyond EOD, truncated [ 129.430810][T10362] cgroup: Bad value for 'name' [ 129.537400][ T40] audit: type=1400 audit(2000000006.439:889): avc: denied { setattr } for pid=10367 comm="syz.1.943" name="ptyq7" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 129.613675][T10383] loop2: detected capacity change from 0 to 7 [ 129.618385][ T5962] Dev loop2: unable to read RDB block 7 [ 129.620863][ T5962] loop2: unable to read partition table [ 129.623159][ T5962] loop2: partition table beyond EOD, truncated [ 129.626810][T10383] Dev loop2: unable to read RDB block 7 [ 129.631571][T10383] loop2: unable to read partition table [ 129.634637][T10383] loop2: partition table beyond EOD, truncated [ 129.639754][T10383] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 129.652841][T10392] MINIX-fs: blocksize too small for device [ 129.773670][ T40] audit: type=1400 audit(2000000006.679:890): avc: denied { map } for pid=10404 comm="syz.1.947" path="/dev/hpet" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 129.784081][T10405] tmpfs: Bad value for 'mpol' [ 129.786737][ T40] audit: type=1400 audit(2000000006.689:891): avc: denied { execute } for pid=10404 comm="syz.1.947" path="/dev/hpet" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 129.837442][T10414] __nla_validate_parse: 29 callbacks suppressed [ 129.837462][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'. [ 129.843890][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'. [ 129.908752][T10422] FAULT_INJECTION: forcing a failure. [ 129.908752][T10422] name failslab, interval 1, probability 0, space 0, times 0 [ 129.915908][T10422] CPU: 1 UID: 0 PID: 10422 Comm: syz.1.955 Not tainted syzkaller #0 PREEMPT(full) [ 129.915936][T10422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.915947][T10422] Call Trace: [ 129.915954][T10422] [ 129.915961][T10422] dump_stack_lvl+0x16c/0x1f0 [ 129.915984][T10422] should_fail_ex+0x512/0x640 [ 129.916003][T10422] ? __kmalloc_noprof+0xca/0x880 [ 129.916032][T10422] should_failslab+0xc2/0x120 [ 129.916054][T10422] __kmalloc_noprof+0xdd/0x880 [ 129.916079][T10422] ? rcu_is_watching+0x12/0xc0 [ 129.916127][T10422] ? vmalloc_info_show+0x74/0xcf0 [ 129.916153][T10422] ? vmalloc_info_show+0x74/0xcf0 [ 129.916168][T10422] vmalloc_info_show+0x74/0xcf0 [ 129.916184][T10422] ? kfree+0x2b8/0x6d0 [ 129.916207][T10422] ? seq_read_iter+0x43f/0x12d0 [ 129.916230][T10422] seq_read_iter+0x50e/0x12d0 [ 129.916259][T10422] proc_reg_read_iter+0x220/0x310 [ 129.916287][T10422] vfs_read+0x8bf/0xcf0 [ 129.916309][T10422] ? __pfx___mutex_lock+0x10/0x10 [ 129.916327][T10422] ? __pfx_vfs_read+0x10/0x10 [ 129.916363][T10422] ksys_read+0x12a/0x250 [ 129.916381][T10422] ? __pfx_ksys_read+0x10/0x10 [ 129.916407][T10422] do_syscall_64+0xcd/0x4e0 [ 129.916426][T10422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.916444][T10422] RIP: 0033:0x7fe64238eec9 [ 129.916460][T10422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.916478][T10422] RSP: 002b:00007fe643192038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.916495][T10422] RAX: ffffffffffffffda RBX: 00007fe6425e5fa0 RCX: 00007fe64238eec9 [ 129.916507][T10422] RDX: 0000000000002020 RSI: 0000200000000500 RDI: 0000000000000003 [ 129.916518][T10422] RBP: 00007fe643192090 R08: 0000000000000000 R09: 0000000000000000 [ 129.916528][T10422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.916538][T10422] R13: 00007fe6425e6038 R14: 00007fe6425e5fa0 R15: 00007ffe167d46a8 [ 129.916569][T10422] [ 130.010116][T10423] syz_tun: entered promiscuous mode [ 130.013369][T10423] batadv_slave_0: entered promiscuous mode [ 130.015948][T10423] batadv_slave_0: left promiscuous mode [ 130.018824][T10423] syz_tun: left promiscuous mode [ 130.030980][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.951'. [ 130.034060][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.951'. [ 130.037202][T10415] netlink: 'syz.0.951': attribute type 11 has an invalid length. [ 130.040353][T10415] netlink: 'syz.0.951': attribute type 13 has an invalid length. [ 130.145699][T10434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.957'. [ 130.200603][T10440] netlink: 'syz.1.959': attribute type 11 has an invalid length. [ 130.204528][T10440] trusted_key: syz.1.959 sent an empty control message without MSG_MORE. [ 130.209123][T10440] random: crng reseeded on system resumption [ 130.398527][T10449] loop2: detected capacity change from 0 to 7 [ 130.403911][ T6406] Dev loop2: unable to read RDB block 7 [ 130.406656][ T6406] loop2: unable to read partition table [ 130.411758][ T6406] loop2: partition table beyond EOD, truncated [ 130.416270][T10449] Dev loop2: unable to read RDB block 7 [ 130.419273][T10449] loop2: unable to read partition table [ 130.422805][T10449] loop2: partition table beyond EOD, truncated [ 130.425985][T10449] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 130.562979][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'. [ 130.566826][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'. [ 130.636461][T10476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.967'. [ 130.767669][T10490] loop2: detected capacity change from 0 to 7 [ 130.770763][ T6406] Dev loop2: unable to read RDB block 7 [ 130.772642][ T6406] loop2: unable to read partition table [ 130.774561][ T6406] loop2: partition table beyond EOD, truncated [ 130.779023][T10490] Dev loop2: unable to read RDB block 7 [ 130.783234][T10490] loop2: unable to read partition table [ 130.785431][T10490] loop2: partition table beyond EOD, truncated [ 130.787721][T10490] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 130.902304][ T40] audit: type=1400 audit(2000000007.809:892): avc: denied { write } for pid=10497 comm="syz.2.972" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 130.948452][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 130.953057][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 130.996330][T10508] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.377677][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.382517][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.385619][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.389407][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.393477][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.398112][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.402107][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.406131][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.409290][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.412546][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.416254][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.421888][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.426512][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.430070][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.432815][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.435729][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.438889][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.442919][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.446421][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.449898][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.452949][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.456035][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.459052][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.462317][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.466330][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.470283][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.474421][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.479454][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.483534][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.487432][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.491633][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.496559][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.500827][T10526] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 131.555234][T10534] loop2: detected capacity change from 0 to 7 [ 131.558762][ T6406] Dev loop2: unable to read RDB block 7 [ 131.561923][ T6406] loop2: AHDI p2 [ 131.563615][ T6406] loop2: partition table partially beyond EOD, truncated [ 131.567521][T10534] Dev loop2: unable to read RDB block 7 [ 131.571137][T10534] loop2: AHDI p2 [ 131.572806][T10534] loop2: partition table partially beyond EOD, truncated [ 131.721611][T10552] FAULT_INJECTION: forcing a failure. [ 131.721611][T10552] name failslab, interval 1, probability 0, space 0, times 0 [ 131.726957][T10552] CPU: 3 UID: 0 PID: 10552 Comm: syz.0.982 Not tainted syzkaller #0 PREEMPT(full) [ 131.726983][T10552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.727013][T10552] Call Trace: [ 131.727020][T10552] [ 131.727028][T10552] dump_stack_lvl+0x16c/0x1f0 [ 131.727052][T10552] should_fail_ex+0x512/0x640 [ 131.727073][T10552] ? __kmalloc_noprof+0xca/0x880 [ 131.727105][T10552] should_failslab+0xc2/0x120 [ 131.727130][T10552] __kmalloc_noprof+0xdd/0x880 [ 131.727157][T10552] ? rcu_is_watching+0x12/0xc0 [ 131.727184][T10552] ? vmalloc_info_show+0x74/0xcf0 [ 131.727209][T10552] ? vmalloc_info_show+0x74/0xcf0 [ 131.727226][T10552] vmalloc_info_show+0x74/0xcf0 [ 131.727243][T10552] ? __free_frozen_pages+0x80f/0x1160 [ 131.727269][T10552] ? seq_read_iter+0x43f/0x12d0 [ 131.727294][T10552] seq_read_iter+0x50e/0x12d0 [ 131.727325][T10552] proc_reg_read_iter+0x220/0x310 [ 131.727357][T10552] vfs_read+0x8bf/0xcf0 [ 131.727380][T10552] ? __pfx___mutex_lock+0x10/0x10 [ 131.727399][T10552] ? __pfx_vfs_read+0x10/0x10 [ 131.727438][T10552] ksys_read+0x12a/0x250 [ 131.727456][T10552] ? __pfx_ksys_read+0x10/0x10 [ 131.727484][T10552] do_syscall_64+0xcd/0x4e0 [ 131.727504][T10552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.727524][T10552] RIP: 0033:0x7fa31698eec9 [ 131.727540][T10552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.727558][T10552] RSP: 002b:00007fa317820038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.727578][T10552] RAX: ffffffffffffffda RBX: 00007fa316be5fa0 RCX: 00007fa31698eec9 [ 131.727590][T10552] RDX: 0000000000002020 RSI: 0000200000000500 RDI: 0000000000000003 [ 131.727602][T10552] RBP: 00007fa317820090 R08: 0000000000000000 R09: 0000000000000000 [ 131.727613][T10552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.727624][T10552] R13: 00007fa316be6038 R14: 00007fa316be5fa0 R15: 00007ffdca043858 [ 131.727652][T10552] [ 131.929840][T10571] pim6reg: entered allmulticast mode [ 131.955204][T10577] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 132.246559][T10588] loop2: detected capacity change from 0 to 7 [ 132.251887][ T6406] Dev loop2: unable to read RDB block 7 [ 132.254046][ T6406] loop2: AHDI p2 [ 132.255555][ T6406] loop2: partition table partially beyond EOD, truncated [ 132.261887][T10588] Dev loop2: unable to read RDB block 7 [ 132.264742][T10588] loop2: AHDI p2 [ 132.266771][T10588] loop2: partition table partially beyond EOD, truncated [ 132.309412][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.480510][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 132.480522][ T40] audit: type=1400 audit(2000000009.389:894): avc: denied { setopt } for pid=10603 comm="syz.0.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.603270][ T40] audit: type=1400 audit(2000000009.509:895): avc: denied { write } for pid=10621 comm="syz.0.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 132.611784][ T40] audit: type=1400 audit(2000000009.509:896): avc: denied { nlmsg_write } for pid=10621 comm="syz.0.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 132.619723][ T40] audit: type=1400 audit(2000000009.519:897): avc: denied { append } for pid=10621 comm="syz.0.998" name="001" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 132.774103][T10637] loop2: detected capacity change from 0 to 7 [ 132.778527][ T6406] Dev loop2: unable to read RDB block 7 [ 132.780848][ T6406] loop2: AHDI p2 [ 132.782406][ T6406] loop2: partition table partially beyond EOD, truncated [ 132.810657][T10637] Dev loop2: unable to read RDB block 7 [ 132.812580][T10637] loop2: AHDI p2 [ 132.813910][T10637] loop2: partition table partially beyond EOD, truncated [ 132.935656][T10654] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 132.976946][T10654] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 132.987404][T10665] IPVS: Error connecting to the multicast addr [ 132.990255][T10654] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 133.035741][T10682] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 133.040259][T10682] netlink: 'syz.2.1005': attribute type 3 has an invalid length. [ 133.043487][T10682] NCSI netlink: No device for ifindex 0 [ 133.092934][T10687] netlink: 'syz.2.1008': attribute type 30 has an invalid length. [ 133.121262][T10687] bond2: option arp_missed_max: invalid value (0) [ 133.123835][T10687] bond2: option arp_missed_max: allowed values 1 - 255 [ 133.128222][T10687] bond2 (unregistering): Released all slaves [ 133.134669][T10723] loop2: detected capacity change from 0 to 7 [ 133.141489][T10723] Dev loop2: unable to read RDB block 7 [ 133.143881][T10723] loop2: AHDI p2 [ 133.146704][T10723] loop2: partition table partially beyond EOD, truncated [ 133.216360][T10771] FAULT_INJECTION: forcing a failure. [ 133.216360][T10771] name failslab, interval 1, probability 0, space 0, times 0 [ 133.224031][T10771] CPU: 1 UID: 0 PID: 10771 Comm: syz.1.1012 Not tainted syzkaller #0 PREEMPT(full) [ 133.224056][T10771] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.224067][T10771] Call Trace: [ 133.224098][T10771] [ 133.224106][T10771] dump_stack_lvl+0x16c/0x1f0 [ 133.224130][T10771] should_fail_ex+0x512/0x640 [ 133.224148][T10771] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 133.224170][T10771] should_failslab+0xc2/0x120 [ 133.224192][T10771] __kvmalloc_node_noprof+0x141/0x9c0 [ 133.224212][T10771] ? traverse.part.0.constprop.0+0x397/0x650 [ 133.224236][T10771] ? traverse.part.0.constprop.0+0x397/0x650 [ 133.224252][T10771] traverse.part.0.constprop.0+0x397/0x650 [ 133.224268][T10771] ? __pfx___mutex_lock+0x10/0x10 [ 133.224286][T10771] ? find_held_lock+0x2b/0x80 [ 133.224315][T10771] seq_lseek+0x2bb/0x450 [ 133.224337][T10771] proc_reg_llseek+0x101/0x2f0 [ 133.224367][T10771] ksys_lseek+0xf0/0x1b0 [ 133.224394][T10771] do_syscall_64+0xcd/0x4e0 [ 133.224413][T10771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.224431][T10771] RIP: 0033:0x7fe64238eec9 [ 133.224445][T10771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.224462][T10771] RSP: 002b:00007fe643192038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 133.224480][T10771] RAX: ffffffffffffffda RBX: 00007fe6425e5fa0 RCX: 00007fe64238eec9 [ 133.224492][T10771] RDX: 0000000000000000 RSI: 0000000000000164 RDI: 0000000000000003 [ 133.224502][T10771] RBP: 00007fe643192090 R08: 0000000000000000 R09: 0000000000000000 [ 133.224512][T10771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.224522][T10771] R13: 00007fe6425e6038 R14: 00007fe6425e5fa0 R15: 00007ffe167d46a8 [ 133.224554][T10771] [ 133.446204][T10794] loop2: detected capacity change from 0 to 7 [ 133.456942][T10794] Dev loop2: unable to read RDB block 7 [ 133.460555][T10794] loop2: unable to read partition table [ 133.463382][T10794] loop2: partition table beyond EOD, truncated [ 133.466707][T10794] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 133.535664][T10809] FAULT_INJECTION: forcing a failure. [ 133.535664][T10809] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 133.544748][T10809] CPU: 2 UID: 0 PID: 10809 Comm: syz.2.1023 Not tainted syzkaller #0 PREEMPT(full) [ 133.544773][T10809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.544783][T10809] Call Trace: [ 133.544790][T10809] [ 133.544796][T10809] dump_stack_lvl+0x16c/0x1f0 [ 133.544818][T10809] should_fail_ex+0x512/0x640 [ 133.544839][T10809] _copy_to_user+0x32/0xd0 [ 133.544860][T10809] simple_read_from_buffer+0xcb/0x170 [ 133.544889][T10809] proc_fail_nth_read+0x197/0x240 [ 133.544911][T10809] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.544933][T10809] ? rw_verify_area+0xcf/0x6c0 [ 133.544957][T10809] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.544977][T10809] vfs_read+0x1e4/0xcf0 [ 133.544996][T10809] ? __pfx___mutex_lock+0x10/0x10 [ 133.545012][T10809] ? __pfx_vfs_read+0x10/0x10 [ 133.545035][T10809] ? __fget_files+0x20e/0x3c0 [ 133.545059][T10809] ksys_read+0x12a/0x250 [ 133.545074][T10809] ? __pfx_ksys_read+0x10/0x10 [ 133.545091][T10809] ? fput+0x9b/0xd0 [ 133.545116][T10809] do_syscall_64+0xcd/0x4e0 [ 133.545133][T10809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.545151][T10809] RIP: 0033:0x7f7d1778d8dc [ 133.545165][T10809] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 133.545181][T10809] RSP: 002b:00007f7d18553030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 133.545197][T10809] RAX: ffffffffffffffda RBX: 00007f7d179e5fa0 RCX: 00007f7d1778d8dc [ 133.545208][T10809] RDX: 000000000000000f RSI: 00007f7d185530a0 RDI: 0000000000000004 [ 133.545218][T10809] RBP: 00007f7d18553090 R08: 0000000000000000 R09: 0000000000000000 [ 133.545227][T10809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.545236][T10809] R13: 00007f7d179e6038 R14: 00007f7d179e5fa0 R15: 00007ffc1f6585a8 [ 133.545259][T10809] [ 133.632153][ T40] audit: type=1326 audit(2000000010.539:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10804 comm="syz.1.1022" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe64238eec9 code=0x0 [ 133.647975][T10815] IPVS: Error connecting to the multicast addr [ 133.783345][T10838] loop2: detected capacity change from 0 to 7 [ 133.788454][ T6406] Dev loop2: unable to read RDB block 7 [ 133.794621][ T6406] loop2: unable to read partition table [ 133.797584][ T6406] loop2: partition table beyond EOD, truncated [ 133.804230][T10838] Dev loop2: unable to read RDB block 7 [ 133.806304][T10838] loop2: unable to read partition table [ 133.808899][T10838] loop2: partition table beyond EOD, truncated [ 133.813042][T10838] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 133.835906][ T40] audit: type=1400 audit(2000000010.739:899): avc: denied { setopt } for pid=10844 comm="syz.2.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 133.844950][T10847] IPv6: addrconf: prefix option has invalid lifetime [ 133.922912][T10856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10856 comm=syz.0.1034 [ 134.157532][T10883] loop2: detected capacity change from 0 to 7 [ 134.164226][ T5962] Dev loop2: unable to read RDB block 7 [ 134.166695][ T5962] loop2: unable to read partition table [ 134.169406][ T5962] loop2: partition table beyond EOD, truncated [ 134.175341][T10883] Dev loop2: unable to read RDB block 7 [ 134.178365][T10883] loop2: unable to read partition table [ 134.181656][T10883] loop2: partition table beyond EOD, truncated [ 134.184271][T10883] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 134.273719][T10893] netlink: 'syz.3.1043': attribute type 2 has an invalid length. [ 134.278961][T10893] netlink: 'syz.3.1043': attribute type 1 has an invalid length. [ 134.285004][T10894] netlink: 'syz.3.1043': attribute type 2 has an invalid length. [ 134.288541][T10894] netlink: 'syz.3.1043': attribute type 1 has an invalid length. [ 134.336374][T10898] binder_alloc: 10896: binder_alloc_buf, no vma [ 134.483800][T10927] loop2: detected capacity change from 0 to 7 [ 134.487802][ T6406] Dev loop2: unable to read RDB block 7 [ 134.490074][ T6406] loop2: unable to read partition table [ 134.492141][ T6406] loop2: partition table beyond EOD, truncated [ 134.498422][T10927] Dev loop2: unable to read RDB block 7 [ 134.503458][T10927] loop2: unable to read partition table [ 134.505226][ T40] audit: type=1400 audit(2000000011.409:900): avc: denied { unmount } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 134.505607][T10927] loop2: partition table beyond EOD, truncated [ 134.515409][T10927] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 134.547377][T10935] bridge_slave_0: default FDB implementation only supports local addresses [ 134.594176][T10937] FAULT_INJECTION: forcing a failure. [ 134.594176][T10937] name failslab, interval 1, probability 0, space 0, times 0 [ 134.598468][T10937] CPU: 3 UID: 0 PID: 10937 Comm: syz.1.1052 Not tainted syzkaller #0 PREEMPT(full) [ 134.598484][T10937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.598491][T10937] Call Trace: [ 134.598495][T10937] [ 134.598500][T10937] dump_stack_lvl+0x16c/0x1f0 [ 134.598514][T10937] should_fail_ex+0x512/0x640 [ 134.598526][T10937] ? __kmalloc_noprof+0xca/0x880 [ 134.598544][T10937] should_failslab+0xc2/0x120 [ 134.598558][T10937] __kmalloc_noprof+0xdd/0x880 [ 134.598573][T10937] ? rcu_is_watching+0x12/0xc0 [ 134.598588][T10937] ? vmalloc_info_show+0x74/0xcf0 [ 134.598602][T10937] ? vmalloc_info_show+0x74/0xcf0 [ 134.598611][T10937] vmalloc_info_show+0x74/0xcf0 [ 134.598622][T10937] ? seq_read_iter+0x43f/0x12d0 [ 134.598636][T10937] seq_read_iter+0x50e/0x12d0 [ 134.598652][T10937] proc_reg_read_iter+0x220/0x310 [ 134.598671][T10937] vfs_read+0x8bf/0xcf0 [ 134.598684][T10937] ? __pfx___mutex_lock+0x10/0x10 [ 134.598694][T10937] ? __pfx_vfs_read+0x10/0x10 [ 134.598714][T10937] ksys_read+0x12a/0x250 [ 134.598725][T10937] ? __pfx_ksys_read+0x10/0x10 [ 134.598740][T10937] do_syscall_64+0xcd/0x4e0 [ 134.598751][T10937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.598762][T10937] RIP: 0033:0x7fe64238eec9 [ 134.598772][T10937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.598782][T10937] RSP: 002b:00007fe643192038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 134.598793][T10937] RAX: ffffffffffffffda RBX: 00007fe6425e5fa0 RCX: 00007fe64238eec9 [ 134.598800][T10937] RDX: 0000000000002020 RSI: 0000200000000500 RDI: 0000000000000003 [ 134.598806][T10937] RBP: 00007fe643192090 R08: 0000000000000000 R09: 0000000000000000 [ 134.598812][T10937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.598818][T10937] R13: 00007fe6425e6038 R14: 00007fe6425e5fa0 R15: 00007ffe167d46a8 [ 134.598832][T10937] [ 134.776566][T10949] binder_alloc: 10948: binder_alloc_buf, no vma [ 134.932537][T10975] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 134.952858][T10982] loop2: detected capacity change from 0 to 7 [ 134.956502][T10982] Dev loop2: unable to read RDB block 7 [ 134.958628][T10982] loop2: unable to read partition table [ 134.962360][T10982] loop2: partition table beyond EOD, truncated [ 134.964485][T10982] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 134.970596][T10985] __nla_validate_parse: 21 callbacks suppressed [ 134.970607][T10985] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1062'. [ 135.027264][T10994] SELinux: Context system_u:object_r:sound_device_t:s0 is not valid (left unmapped). [ 135.035096][ T40] audit: type=1400 audit(2000000011.939:901): avc: denied { relabelto } for pid=10993 comm="syz.2.1064" name="file0" dev="tmpfs" ino=1218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:sound_device_t:s0" [ 135.050777][ T40] audit: type=1400 audit(2000000011.939:902): avc: denied { associate } for pid=10993 comm="syz.2.1064" name="file0" dev="tmpfs" ino=1218 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sound_device_t:s0" [ 135.065431][T10996] binder_alloc: 10995: binder_alloc_buf, no vma [ 135.316617][T11017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1068'. [ 135.320617][T11017] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1068'. [ 135.795322][T11033] loop2: detected capacity change from 0 to 7 [ 135.798535][T11033] Dev loop2: unable to read RDB block 7 [ 135.801188][T11033] loop2: unable to read partition table [ 135.803872][T11033] loop2: partition table beyond EOD, truncated [ 135.806400][T11033] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 135.883349][T11042] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1075'. [ 135.993355][T11045] FAULT_INJECTION: forcing a failure. [ 135.993355][T11045] name failslab, interval 1, probability 0, space 0, times 0 [ 135.997623][T11045] CPU: 2 UID: 0 PID: 11045 Comm: syz.3.1076 Not tainted syzkaller #0 PREEMPT(full) [ 135.997639][T11045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.997646][T11045] Call Trace: [ 135.997651][T11045] [ 135.997655][T11045] dump_stack_lvl+0x16c/0x1f0 [ 135.997671][T11045] should_fail_ex+0x512/0x640 [ 135.997683][T11045] ? __kmalloc_noprof+0xca/0x880 [ 135.997701][T11045] should_failslab+0xc2/0x120 [ 135.997715][T11045] __kmalloc_noprof+0xdd/0x880 [ 135.997730][T11045] ? rcu_is_watching+0x12/0xc0 [ 135.997747][T11045] ? vmalloc_info_show+0x74/0xcf0 [ 135.997760][T11045] ? vmalloc_info_show+0x74/0xcf0 [ 135.997770][T11045] vmalloc_info_show+0x74/0xcf0 [ 135.997780][T11045] ? seq_read_iter+0x43f/0x12d0 [ 135.997794][T11045] seq_read_iter+0x50e/0x12d0 [ 135.997811][T11045] proc_reg_read_iter+0x220/0x310 [ 135.997829][T11045] vfs_read+0x8bf/0xcf0 [ 135.997842][T11045] ? __pfx___mutex_lock+0x10/0x10 [ 135.997853][T11045] ? __pfx_vfs_read+0x10/0x10 [ 135.997873][T11045] ksys_read+0x12a/0x250 [ 135.997883][T11045] ? __pfx_ksys_read+0x10/0x10 [ 135.997898][T11045] do_syscall_64+0xcd/0x4e0 [ 135.997910][T11045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.997921][T11045] RIP: 0033:0x7f3c3ef8eec9 [ 135.997931][T11045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.997941][T11045] RSP: 002b:00007f3c3d1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 135.997952][T11045] RAX: ffffffffffffffda RBX: 00007f3c3f1e5fa0 RCX: 00007f3c3ef8eec9 [ 135.997959][T11045] RDX: 0000000000002020 RSI: 0000200000000500 RDI: 0000000000000003 [ 135.997965][T11045] RBP: 00007f3c3d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 135.997971][T11045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.997977][T11045] R13: 00007f3c3f1e6038 R14: 00007f3c3f1e5fa0 R15: 00007ffdd92feb58 [ 135.997991][T11045] [ 136.191256][T11072] loop2: detected capacity change from 0 to 7 [ 136.194470][T11072] Dev loop2: unable to read RDB block 7 [ 136.196941][T11072] loop2: unable to read partition table [ 136.199536][T11072] loop2: partition table beyond EOD, truncated [ 136.202642][T11072] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 136.954518][T11099] FAULT_INJECTION: forcing a failure. [ 136.954518][T11099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.958699][T11099] CPU: 2 UID: 0 PID: 11099 Comm: syz.2.1087 Not tainted syzkaller #0 PREEMPT(full) [ 136.958716][T11099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.958723][T11099] Call Trace: [ 136.958727][T11099] [ 136.958731][T11099] dump_stack_lvl+0x16c/0x1f0 [ 136.958745][T11099] should_fail_ex+0x512/0x640 [ 136.958759][T11099] _copy_to_iter+0x29f/0x1710 [ 136.958774][T11099] ? kfree+0x2b8/0x6d0 [ 136.958788][T11099] ? vmalloc_info_show+0x9e5/0xcf0 [ 136.958801][T11099] ? __pfx__copy_to_iter+0x10/0x10 [ 136.958814][T11099] ? vmalloc_info_show+0x9e5/0xcf0 [ 136.958823][T11099] ? _raw_spin_unlock+0x28/0x50 [ 136.958838][T11099] ? vmalloc_info_show+0x9e5/0xcf0 [ 136.958852][T11099] seq_read_iter+0xd02/0x12d0 [ 136.958869][T11099] proc_reg_read_iter+0x220/0x310 [ 136.958887][T11099] vfs_read+0x8bf/0xcf0 [ 136.958901][T11099] ? __pfx___mutex_lock+0x10/0x10 [ 136.958912][T11099] ? __pfx_vfs_read+0x10/0x10 [ 136.958931][T11099] ksys_read+0x12a/0x250 [ 136.958941][T11099] ? __pfx_ksys_read+0x10/0x10 [ 136.958956][T11099] do_syscall_64+0xcd/0x4e0 [ 136.958968][T11099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.958979][T11099] RIP: 0033:0x7f7d1778eec9 [ 136.958989][T11099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.958999][T11099] RSP: 002b:00007f7d18553038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 136.959010][T11099] RAX: ffffffffffffffda RBX: 00007f7d179e5fa0 RCX: 00007f7d1778eec9 [ 136.959017][T11099] RDX: 0000000000002020 RSI: 0000200000000500 RDI: 0000000000000003 [ 136.959023][T11099] RBP: 00007f7d18553090 R08: 0000000000000000 R09: 0000000000000000 [ 136.959029][T11099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.959035][T11099] R13: 00007f7d179e6038 R14: 00007f7d179e5fa0 R15: 00007ffc1f6585a8 [ 136.959049][T11099] [ 137.027306][T11112] loop2: detected capacity change from 0 to 7 [ 137.030594][T11112] Dev loop2: unable to read RDB block 7 [ 137.033095][T11112] loop2: unable to read partition table [ 137.035633][T11112] loop2: partition table beyond EOD, truncated [ 137.038523][T11112] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 137.449847][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1103'. [ 137.454368][T11171] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 137.512300][T11165] FAULT_INJECTION: forcing a failure. [ 137.512300][T11165] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 137.523424][T11165] CPU: 0 UID: 0 PID: 11165 Comm: syz.0.1101 Not tainted syzkaller #0 PREEMPT(full) [ 137.523453][T11165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.523467][T11165] Call Trace: [ 137.523475][T11165] [ 137.523483][T11165] dump_stack_lvl+0x16c/0x1f0 [ 137.523511][T11165] should_fail_ex+0x512/0x640 [ 137.523538][T11165] should_fail_alloc_page+0xe7/0x130 [ 137.523569][T11165] prepare_alloc_pages+0x3c2/0x610 [ 137.523594][T11165] ? lockdep_hardirqs_on+0x7c/0x110 [ 137.523631][T11165] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 137.523670][T11165] ? __pfx_sprintf+0x10/0x10 [ 137.523698][T11165] ? get_symbol_offset+0x98/0x150 [ 137.523722][T11165] ? get_symbol_pos+0x33b/0x440 [ 137.523750][T11165] ? kallsyms_expand_symbol.constprop.0+0x21f/0x310 [ 137.523778][T11165] ? kernel_clone+0xfc/0x930 [ 137.523810][T11165] ? kernel_clone+0xfc/0x930 [ 137.523842][T11165] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 137.523877][T11165] ? __sprint_symbol.constprop.0+0x151/0x1f0 [ 137.523904][T11165] ? __pfx___sprint_symbol.constprop.0+0x10/0x10 [ 137.523930][T11165] ? __lock_acquire+0x62e/0x1ce0 [ 137.523958][T11165] ? __pfx_widen_string+0x10/0x10 [ 137.523982][T11165] ? __pfx_stack_trace_save+0x10/0x10 [ 137.524021][T11165] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.524112][T11165] ? policy_nodemask+0xea/0x4e0 [ 137.524141][T11165] alloc_pages_mpol+0x1fb/0x550 [ 137.524169][T11165] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 137.524199][T11165] ? __lock_acquire+0x62e/0x1ce0 [ 137.524224][T11165] folio_alloc_mpol_noprof+0x36/0x2f0 [ 137.524257][T11165] vma_alloc_folio_noprof+0xed/0x1e0 [ 137.524287][T11165] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 137.524346][T11165] do_pte_missing+0x2202/0x3ba0 [ 137.524380][T11165] ? find_held_lock+0x2b/0x80 [ 137.524419][T11165] __handle_mm_fault+0x1556/0x2aa0 [ 137.524454][T11165] ? mt_find+0x3e2/0xa20 [ 137.524479][T11165] ? __pfx___handle_mm_fault+0x10/0x10 [ 137.524506][T11165] ? __pfx_mt_find+0x10/0x10 [ 137.524544][T11165] ? find_vma+0xbf/0x140 [ 137.524566][T11165] ? __pfx_find_vma+0x10/0x10 [ 137.524593][T11165] handle_mm_fault+0x589/0xd10 [ 137.524625][T11165] ? trace_raw_output_exceptions+0x141/0x150 [ 137.524654][T11165] do_user_addr_fault+0x7a6/0x1370 [ 137.524683][T11165] ? rcu_is_watching+0x12/0xc0 [ 137.524718][T11165] exc_page_fault+0x5c/0xb0 [ 137.524757][T11165] asm_exc_page_fault+0x26/0x30 [ 137.524777][T11165] RIP: 0010:_copy_to_iter+0x37e/0x1710 [ 137.524802][T11165] Code: fd 4d 85 f6 0f 85 52 ff ff ff e8 8d ab 1a fd 4c 8b 74 24 18 89 de 4c 89 f7 e8 5e 26 83 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 f6 a4 0f 1f 00 48 89 cd 0f 01 ca 49 89 df 49 29 cf e9 22 ff ff ff [ 137.524823][T11165] RSP: 0018:ffffc9002219fb18 EFLAGS: 00050246 [ 137.524842][T11165] RAX: 0000000000000001 RBX: 0000000000002020 RCX: 0000000000001520 [ 137.524855][T11165] RDX: ffffed100bc50404 RSI: ffff88805e280b00 RDI: 0000200000001000 [ 137.524869][T11165] RBP: 0000200000000500 R08: 0000000000000000 R09: ffffed100bc50403 [ 137.524882][T11165] R10: ffff88805e28201f R11: 0000000000000000 R12: ffffc9002219fda0 [ 137.524896][T11165] R13: 0000200000002520 R14: ffff88805e280000 R15: 00007ffffffff000 [ 137.524927][T11165] ? _copy_to_iter+0x372/0x1710 [ 137.524954][T11165] ? kfree+0x2b8/0x6d0 [ 137.524981][T11165] ? vmalloc_info_show+0x9e5/0xcf0 [ 137.525005][T11165] ? __pfx__copy_to_iter+0x10/0x10 [ 137.525030][T11165] ? vmalloc_info_show+0x9e5/0xcf0 [ 137.525050][T11165] ? _raw_spin_unlock+0x28/0x50 [ 137.525078][T11165] ? vmalloc_info_show+0x9e5/0xcf0 [ 137.525109][T11165] seq_read_iter+0xd02/0x12d0 [ 137.525145][T11165] proc_reg_read_iter+0x220/0x310 [ 137.525180][T11165] vfs_read+0x8bf/0xcf0 [ 137.525206][T11165] ? __pfx___mutex_lock+0x10/0x10 [ 137.525227][T11165] ? __pfx_vfs_read+0x10/0x10 [ 137.525271][T11165] ksys_read+0x12a/0x250 [ 137.525292][T11165] ? __pfx_ksys_read+0x10/0x10 [ 137.525323][T11165] do_syscall_64+0xcd/0x4e0 [ 137.525346][T11165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.525366][T11165] RIP: 0033:0x7fa31698eec9 [ 137.525383][T11165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.525403][T11165] RSP: 002b:00007fa317820038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 137.525421][T11165] RAX: ffffffffffffffda RBX: 00007fa316be5fa0 RCX: 00007fa31698eec9 [ 137.525434][T11165] RDX: 0000000000002020 RSI: 0000200000000500 RDI: 0000000000000003 [ 137.525446][T11165] RBP: 00007fa317820090 R08: 0000000000000000 R09: 0000000000000000 [ 137.525458][T11165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.525471][T11165] R13: 00007fa316be6038 R14: 00007fa316be5fa0 R15: 00007ffdca043858 [ 137.525501][T11165] [ 137.564402][T11186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1107'. [ 137.595454][T11188] fuse: Unknown parameter 'groqp_in' [ 137.650653][T11195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1108'. [ 137.941577][T11207] xt_time: unknown flags 0xf4 [ 137.991725][T11233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1119'. [ 138.003647][T11224] FAULT_INJECTION: forcing a failure. [ 138.003647][T11224] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 138.008716][T11224] CPU: 1 UID: 0 PID: 11224 Comm: syz.0.1116 Not tainted syzkaller #0 PREEMPT(full) [ 138.008735][T11224] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 138.008742][T11224] Call Trace: [ 138.008748][T11224] [ 138.008753][T11224] dump_stack_lvl+0x16c/0x1f0 [ 138.008770][T11224] should_fail_ex+0x512/0x640 [ 138.008787][T11224] should_fail_alloc_page+0xe7/0x130 [ 138.008805][T11224] prepare_alloc_pages+0x3c2/0x610 [ 138.008821][T11224] ? rcu_is_watching+0x12/0xc0 [ 138.008842][T11224] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 138.008864][T11224] ? __pfx_sprintf+0x10/0x10 [ 138.008884][T11224] ? get_symbol_pos+0x33b/0x440 [ 138.008898][T11224] ? kallsyms_expand_symbol.constprop.0+0x21f/0x310 [ 138.008917][T11224] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 138.008944][T11224] ? __lock_acquire+0x62e/0x1ce0 [ 138.008961][T11224] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 138.008980][T11224] ? policy_nodemask+0xea/0x4e0 [ 138.008998][T11224] alloc_pages_mpol+0x1fb/0x550 [ 138.009014][T11224] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 138.009031][T11224] ? __lock_acquire+0x62e/0x1ce0 [ 138.009045][T11224] folio_alloc_mpol_noprof+0x36/0x2f0 [ 138.009065][T11224] vma_alloc_folio_noprof+0xed/0x1e0 [ 138.009083][T11224] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 138.009106][T11224] do_pte_missing+0x2202/0x3ba0 [ 138.009124][T11224] ? find_held_lock+0x2b/0x80 [ 138.009147][T11224] __handle_mm_fault+0x1556/0x2aa0 [ 138.009184][T11224] ? mt_find+0x3e2/0xa20 [ 138.009198][T11224] ? __pfx___handle_mm_fault+0x10/0x10 [ 138.009214][T11224] ? __pfx_mt_find+0x10/0x10 [ 138.009236][T11224] ? find_vma+0xbf/0x140 [ 138.009249][T11224] ? __pfx_find_vma+0x10/0x10 [ 138.009264][T11224] handle_mm_fault+0x589/0xd10 [ 138.009283][T11224] ? trace_raw_output_exceptions+0x141/0x150 [ 138.009300][T11224] do_user_addr_fault+0x7a6/0x1370 [ 138.009317][T11224] ? rcu_is_watching+0x12/0xc0 [ 138.009337][T11224] exc_page_fault+0x5c/0xb0 [ 138.009357][T11224] asm_exc_page_fault+0x26/0x30 [ 138.009369][T11224] RIP: 0010:_copy_to_iter+0x37e/0x1710 [ 138.009385][T11224] Code: fd 4d 85 f6 0f 85 52 ff ff ff e8 8d ab 1a fd 4c 8b 74 24 18 89 de 4c 89 f7 e8 5e 26 83 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 f6 a4 0f 1f 00 48 89 cd 0f 01 ca 49 89 df 49 29 cf e9 22 ff ff ff [ 138.009397][T11224] RSP: 0018:ffffc900221afb18 EFLAGS: 00050246 [ 138.009409][T11224] RAX: 0000000000000001 RBX: 0000000000002020 RCX: 0000000000000520 [ 138.009417][T11224] RDX: ffffed100bc50404 RSI: ffff88805e281b00 RDI: 0000200000002000 [ 138.009427][T11224] RBP: 0000200000000500 R08: 0000000000000000 R09: ffffed100bc50403 [ 138.009435][T11224] R10: ffff88805e28201f R11: 0000000000000000 R12: ffffc900221afda0 [ 138.009442][T11224] R13: 0000200000002520 R14: ffff88805e280000 R15: 00007ffffffff000 [ 138.009459][T11224] ? _copy_to_iter+0x372/0x1710 [ 138.009475][T11224] ? kfree+0x2b8/0x6d0 [ 138.009491][T11224] ? vmalloc_info_show+0x9e5/0xcf0 [ 138.009505][T11224] ? __pfx__copy_to_iter+0x10/0x10 [ 138.009520][T11224] ? vmalloc_info_show+0x9e5/0xcf0 [ 138.009531][T11224] ? _raw_spin_unlock+0x28/0x50 [ 138.009549][T11224] ? vmalloc_info_show+0x9e5/0xcf0 [ 138.009566][T11224] seq_read_iter+0xd02/0x12d0 [ 138.009586][T11224] proc_reg_read_iter+0x220/0x310 [ 138.009607][T11224] vfs_read+0x8bf/0xcf0 [ 138.009622][T11224] ? __pfx___mutex_lock+0x10/0x10 [ 138.009634][T11224] ? __pfx_vfs_read+0x10/0x10 [ 138.009658][T11224] ksys_read+0x12a/0x250 [ 138.009674][T11224] ? __pfx_ksys_read+0x10/0x10 [ 138.009691][T11224] do_syscall_64+0xcd/0x4e0 [ 138.009703][T11224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.009714][T11224] RIP: 0033:0x7fa31698eec9 [ 138.009723][T11224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.009734][T11224] RSP: 002b:00007fa317820038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.009744][T11224] RAX: ffffffffffffffda RBX: 00007fa316be5fa0 RCX: 00007fa31698eec9 [ 138.009751][T11224] RDX: 0000000000002020 RSI: 0000200000000500 RDI: 0000000000000003 [ 138.009757][T11224] RBP: 00007fa317820090 R08: 0000000000000000 R09: 0000000000000000 [ 138.009764][T11224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.009770][T11224] R13: 00007fa316be6038 R14: 00007fa316be5fa0 R15: 00007ffdca043858 [ 138.009785][T11224] [ 138.055921][T11227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11227 comm=syz.2.1117 [ 138.071312][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.146134][T11240] fuse: Bad value for 'user_id' [ 138.180876][T11244] (syz.0.1122,11244,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 138.187167][T11240] fuse: Bad value for 'user_id' [ 138.189304][T11244] (syz.0.1122,11244,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 138.195638][T11244] (syz.0.1122,11244,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 138.198711][T11244] (syz.0.1122,11244,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 138.463274][ T40] audit: type=1400 audit(2000000015.369:903): avc: denied { append } for pid=11284 comm="syz.2.1133" name="ndctl0" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 138.492706][T11303] netlink: 'syz.0.1136': attribute type 1 has an invalid length. [ 138.496165][T11303] netlink: 'syz.0.1136': attribute type 4 has an invalid length. [ 138.499819][T11303] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1136'. [ 138.500348][T11305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1137'. [ 138.520085][T11279] FAULT_INJECTION: forcing a failure. [ 138.520085][T11279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.524607][T11279] CPU: 2 UID: 0 PID: 11279 Comm: syz.1.1131 Not tainted syzkaller #0 PREEMPT(full) [ 138.524624][T11279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 138.524631][T11279] Call Trace: [ 138.524636][T11279] [ 138.524640][T11279] dump_stack_lvl+0x16c/0x1f0 [ 138.524655][T11279] should_fail_ex+0x512/0x640 [ 138.524671][T11279] _copy_to_user+0x32/0xd0 [ 138.524686][T11279] simple_read_from_buffer+0xcb/0x170 [ 138.524707][T11279] proc_fail_nth_read+0x197/0x240 [ 138.524723][T11279] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.524738][T11279] ? rw_verify_area+0xcf/0x6c0 [ 138.524756][T11279] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.524770][T11279] vfs_read+0x1e4/0xcf0 [ 138.524783][T11279] ? __pfx___mutex_lock+0x10/0x10 [ 138.524794][T11279] ? __pfx_vfs_read+0x10/0x10 [ 138.524809][T11279] ? __fget_files+0x20e/0x3c0 [ 138.524820][T11279] ? rcu_watching_snap_stopped_since+0x40/0x110 [ 138.524845][T11279] ksys_read+0x12a/0x250 [ 138.524856][T11279] ? __pfx_ksys_read+0x10/0x10 [ 138.524871][T11279] do_syscall_64+0xcd/0x4e0 [ 138.524883][T11279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.524895][T11279] RIP: 0033:0x7fe64238d8dc [ 138.524904][T11279] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 138.524915][T11279] RSP: 002b:00007fe643192030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.524926][T11279] RAX: ffffffffffffffda RBX: 00007fe6425e5fa0 RCX: 00007fe64238d8dc [ 138.524932][T11279] RDX: 000000000000000f RSI: 00007fe6431920a0 RDI: 0000000000000004 [ 138.524939][T11279] RBP: 00007fe643192090 R08: 0000000000000000 R09: 0000000000000000 [ 138.524945][T11279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.524951][T11279] R13: 00007fe6425e6038 R14: 00007fe6425e5fa0 R15: 00007ffe167d46a8 [ 138.524964][T11279] [ 138.536343][T11311] binder: BINDER_SET_CONTEXT_MGR already set [ 138.572981][ T40] audit: type=1400 audit(2000000015.479:904): avc: denied { write } for pid=11317 comm="syz.1.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 138.575119][T11311] binder: 11310:11311 ioctl 4018620d 200000000040 returned -16 [ 138.694060][ T40] audit: type=1400 audit(2000000015.599:905): avc: denied { ioctl } for pid=11324 comm="syz.3.1141" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x6401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 139.112092][ T40] audit: type=1400 audit(2000000016.019:906): avc: denied { shutdown } for pid=11365 comm="syz.1.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 139.306402][T11403] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 139.315679][T11403] qnx6: wrong signature (magic) in superblock #1. [ 139.318492][T11403] qnx6: unable to read the first superblock [ 139.358311][T11409] netlink: 'syz.1.1162': attribute type 1 has an invalid length. [ 139.370355][T11409] erspan1: entered promiscuous mode [ 139.372319][T11413] netlink: 'syz.3.1163': attribute type 1 has an invalid length. [ 139.437162][ T40] audit: type=1400 audit(139.312:907): avc: denied { remount } for pid=11417 comm="syz.1.1164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 139.450539][T11420] loop2: detected capacity change from 0 to 7 [ 139.454308][T11420] Dev loop2: unable to read RDB block 7 [ 139.457048][T11420] loop2: unable to read partition table [ 139.460190][T11420] loop2: partition table beyond EOD, truncated [ 139.463076][T11420] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 139.466955][T11420] openvswitch: netlink: Flow key attr not present in new flow. [ 139.533404][ T1467] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 139.668425][T11451] 9pnet_virtio: no channels available for device syz [ 139.670928][ T1467] usb 5-1: device descriptor read/64, error -71 [ 139.743815][T11461] loop2: detected capacity change from 0 to 7 [ 139.746840][T11461] Dev loop2: unable to read RDB block 7 [ 139.748646][T11461] loop2: unable to read partition table [ 139.751482][T11461] loop2: partition table beyond EOD, truncated [ 139.755217][T11461] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 139.818989][T11467] netlink: 'syz.2.1174': attribute type 6 has an invalid length. [ 139.823259][T11467] netlink: 'syz.2.1174': attribute type 5 has an invalid length. [ 139.826542][T11467] netlink: 'syz.2.1174': attribute type 4 has an invalid length. [ 139.909530][ T1467] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 140.059498][ T1467] usb 5-1: device descriptor read/64, error -71 [ 140.171516][ T1467] usb usb5-port1: attempt power cycle [ 140.392493][T11497] __nla_validate_parse: 10 callbacks suppressed [ 140.392512][T11497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1182'. [ 140.427161][T11497] nbd: illegal input index 1879048192 [ 140.529366][ T1467] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 140.551624][ T40] audit: type=1400 audit(140.432:908): avc: denied { execute } for pid=11500 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 140.560940][ T40] audit: type=1400 audit(140.432:909): avc: denied { execute_no_trans } for pid=11500 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 140.571707][ T1467] usb 5-1: device descriptor read/8, error -71 [ 140.613459][T11504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1184'. [ 140.751441][ T5956] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.758082][ T5956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.763205][ T5956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.768181][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.774964][ T5956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 140.812440][ T1467] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 140.843194][ T1467] usb 5-1: device descriptor read/8, error -71 [ 140.850232][ T40] audit: type=1400 audit(140.722:910): avc: denied { mount } for pid=11517 comm="syz.2.1188" name="/" dev="configfs" ino=3086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 140.860231][ T40] audit: type=1400 audit(140.732:911): avc: denied { search } for pid=11517 comm="syz.2.1188" name="/" dev="configfs" ino=3086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.869763][ T40] audit: type=1400 audit(140.732:912): avc: denied { search } for pid=11517 comm="syz.2.1188" name="/" dev="configfs" ino=3086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.953307][T11520] chnl_net:caif_netlink_parms(): no params data found [ 140.961554][ T1467] usb usb5-port1: unable to enumerate USB device [ 141.114143][T11520] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.117264][T11520] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.120321][T11520] bridge_slave_0: entered allmulticast mode [ 141.123847][T11520] bridge_slave_0: entered promiscuous mode [ 141.127964][T11520] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.134292][T11520] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.137467][T11520] bridge_slave_1: entered allmulticast mode [ 141.143147][T11520] bridge_slave_1: entered promiscuous mode [ 141.214572][T11520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.225250][T11520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.236618][T11951] misc userio: Invalid payload size [ 141.286512][T11520] team0: Port device team_slave_0 added [ 141.293542][T11520] team0: Port device team_slave_1 added [ 141.358402][T11520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.362815][T11520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.376427][T11520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.386178][T11520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.390269][T11520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.401274][T11520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.482174][T11520] hsr_slave_0: entered promiscuous mode [ 141.485361][T11520] hsr_slave_1: entered promiscuous mode [ 141.488672][T11520] debugfs: 'hsr0' already exists in 'hsr' [ 141.492933][T11520] Cannot create hsr debugfs directory [ 141.683256][T11520] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.688142][T11520] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 141.796215][T11520] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.799513][T11520] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 141.864956][T11520] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.869015][T11520] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 141.931449][T11520] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.935481][T11520] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 142.084149][T12560] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1196'. [ 142.093833][T11520] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 142.102838][T11520] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 142.112303][T11520] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 142.119968][T11520] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 142.154898][T12575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1198'. [ 142.160364][T12575] netlink: 'syz.0.1198': attribute type 3 has an invalid length. [ 142.163910][T12575] overlay: filesystem on ./bus not supported as upperdir [ 142.181963][T11520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.205858][T11520] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.218753][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.221480][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.238009][ T6093] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.240790][ T6093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.252119][ T5949] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 142.260744][T12587] syz_tun: entered allmulticast mode [ 142.265917][ T5949] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 142.323966][T12582] FAULT_INJECTION: forcing a failure. [ 142.323966][T12582] name failslab, interval 1, probability 0, space 0, times 0 [ 142.330348][T12582] CPU: 1 UID: 0 PID: 12582 Comm: syz.0.1199 Not tainted syzkaller #0 PREEMPT(full) [ 142.330372][T12582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.330384][T12582] Call Trace: [ 142.330390][T12582] [ 142.330399][T12582] dump_stack_lvl+0x16c/0x1f0 [ 142.330422][T12582] should_fail_ex+0x512/0x640 [ 142.330440][T12582] ? fs_reclaim_acquire+0xae/0x150 [ 142.330464][T12582] should_failslab+0xc2/0x120 [ 142.330486][T12582] __kmalloc_noprof+0xdd/0x880 [ 142.330513][T12582] ? tomoyo_encode2+0x100/0x3e0 [ 142.330538][T12582] ? tomoyo_encode2+0x100/0x3e0 [ 142.330556][T12582] tomoyo_encode2+0x100/0x3e0 [ 142.330579][T12582] tomoyo_encode+0x29/0x50 [ 142.330597][T12582] tomoyo_realpath_from_path+0x18f/0x6e0 [ 142.330620][T12582] ? tomoyo_profile+0x47/0x60 [ 142.330645][T12582] tomoyo_path_number_perm+0x245/0x580 [ 142.330671][T12582] ? tomoyo_path_number_perm+0x237/0x580 [ 142.330713][T12582] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 142.330742][T12582] ? find_held_lock+0x2b/0x80 [ 142.330790][T12582] ? find_held_lock+0x2b/0x80 [ 142.330814][T12582] ? hook_file_ioctl_common+0x145/0x410 [ 142.330843][T12582] ? __fget_files+0x20e/0x3c0 [ 142.330866][T12582] security_file_ioctl+0x9b/0x240 [ 142.330888][T12582] __x64_sys_ioctl+0xb7/0x210 [ 142.330916][T12582] do_syscall_64+0xcd/0x4e0 [ 142.330936][T12582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.330953][T12582] RIP: 0033:0x7fa31698eec9 [ 142.330968][T12582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.330986][T12582] RSP: 002b:00007fa317820038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.331003][T12582] RAX: ffffffffffffffda RBX: 00007fa316be5fa0 RCX: 00007fa31698eec9 [ 142.331015][T12582] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 142.331025][T12582] RBP: 00007fa317820090 R08: 0000000000000000 R09: 0000000000000000 [ 142.331036][T12582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.331046][T12582] R13: 00007fa316be6038 R14: 00007fa316be5fa0 R15: 00007ffdca043858 [ 142.331071][T12582] [ 142.331088][T12582] ERROR: Out of memory at tomoyo_realpath_from_path. [ 142.415887][T11520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.459150][T11520] veth0_vlan: entered promiscuous mode [ 142.464455][T11520] veth1_vlan: entered promiscuous mode [ 142.483458][T11520] veth0_macvtap: entered promiscuous mode [ 142.491084][T12605] affs: No valid root block on device nullb0 [ 142.493792][T11520] veth1_macvtap: entered promiscuous mode [ 142.514362][T12608] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1204'. [ 142.522389][T12610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1205'. [ 142.523869][T11520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.535953][T11520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.544926][ T6093] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.549054][ T6093] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.561812][ T6093] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.564881][ T6093] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.636198][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.639962][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.681338][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.684281][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.789403][ T5949] Bluetooth: hci0: command tx timeout [ 142.979390][ T7347] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 143.131096][ T7347] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 143.136716][ T7347] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 143.142875][ T7347] usb 6-1: config 1 interface 0 has no altsetting 0 [ 143.146287][T12657] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1211'. [ 143.148867][ T7347] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.153882][ T7347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.157867][ T7347] usb 6-1: Product: syz [ 143.160450][ T7347] usb 6-1: Manufacturer: syz [ 143.163194][ T7347] usb 6-1: SerialNumber: syz [ 143.169885][T12643] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 143.172725][T12643] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 143.224466][ T5949] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 143.385924][ T7347] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 143.392385][ T7347] usb 6-1: USB disconnect, device number 9 [ 143.545678][T12686] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1215'. [ 143.604823][ T5949] Bluetooth: hci2: unexpected event for opcode 0x041c [ 143.613328][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 143.613339][ T40] audit: type=1400 audit(143.492:920): avc: denied { ioctl } for pid=12694 comm="syz.2.1218" path="socket:[33799]" dev="sockfs" ino=33799 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 143.621879][T12695] IPv6: NLM_F_CREATE should be specified when creating new route [ 143.729385][ T5995] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 143.755538][T12701] FAULT_INJECTION: forcing a failure. [ 143.755538][T12701] name failslab, interval 1, probability 0, space 0, times 0 [ 143.756141][ T40] audit: type=1400 audit(143.632:921): avc: denied { ioctl } for pid=12704 comm="syz.2.1220" path="socket:[30593]" dev="sockfs" ino=30593 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 143.761391][T12701] CPU: 2 UID: 0 PID: 12701 Comm: syz.3.1219 Not tainted syzkaller #0 PREEMPT(full) [ 143.761420][T12701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.761432][T12701] Call Trace: [ 143.761440][T12701] [ 143.761447][T12701] dump_stack_lvl+0x16c/0x1f0 [ 143.761478][T12701] should_fail_ex+0x512/0x640 [ 143.761504][T12701] ? __kmalloc_cache_noprof+0x5f/0x780 [ 143.761535][T12701] should_failslab+0xc2/0x120 [ 143.761559][T12701] __kmalloc_cache_noprof+0x72/0x780 [ 143.761588][T12701] ? __pfx___might_resched+0x10/0x10 [ 143.761616][T12701] ? vhost_task_create+0xe5/0x370 [ 143.761641][T12701] ? rcu_is_watching+0x12/0xc0 [ 143.761669][T12701] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 143.761703][T12701] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 143.761731][T12701] ? vhost_task_create+0xe5/0x370 [ 143.761754][T12701] vhost_task_create+0xe5/0x370 [ 143.761777][T12701] ? __pfx_vhost_task_create+0x10/0x10 [ 143.761811][T12701] ? __pfx_vhost_task_fn+0x10/0x10 [ 143.761848][T12701] kvm_mmu_post_init_vm+0x1b7/0x380 [ 143.761877][T12701] kvm_arch_vcpu_ioctl_run+0x66/0x1970 [ 143.761908][T12701] ? kvm_vcpu_ioctl+0x14c5/0x1690 [ 143.761944][T12701] kvm_vcpu_ioctl+0x5eb/0x1690 [ 143.761975][T12701] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 143.762003][T12701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 143.762033][T12701] ? do_vfs_ioctl+0x128/0x14f0 [ 143.762063][T12701] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 143.762092][T12701] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 143.762126][T12701] ? hook_file_ioctl_common+0x145/0x410 [ 143.762162][T12701] ? selinux_file_ioctl+0x180/0x270 [ 143.762182][T12701] ? selinux_file_ioctl+0xb4/0x270 [ 143.762207][T12701] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 143.762235][T12701] __x64_sys_ioctl+0x18b/0x210 [ 143.762264][T12701] do_syscall_64+0xcd/0x4e0 [ 143.762286][T12701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.762306][T12701] RIP: 0033:0x7f3c3ef8eec9 [ 143.762324][T12701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.762344][T12701] RSP: 002b:00007f3c3d1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.762365][T12701] RAX: ffffffffffffffda RBX: 00007f3c3f1e5fa0 RCX: 00007f3c3ef8eec9 [ 143.762380][T12701] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 143.762391][T12701] RBP: 00007f3c3d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 143.762402][T12701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.762415][T12701] R13: 00007f3c3f1e6038 R14: 00007f3c3f1e5fa0 R15: 00007ffdd92feb58 [ 143.762442][T12701] [ 143.882151][ T5995] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x82 is Bulk; changing to Interrupt [ 143.886448][ T5995] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x3 is Bulk; changing to Interrupt [ 143.890840][ T5995] usb 5-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.896246][ T5995] usb 5-1: config 1 interface 0 has no altsetting 0 [ 143.986018][T12716] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1222'. [ 144.631650][T12734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1226'. [ 144.723144][T12741] program syz.2.1228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.871102][ T5949] Bluetooth: hci0: command tx timeout [ 145.068739][T12821] FAULT_INJECTION: forcing a failure. [ 145.068739][T12821] name failslab, interval 1, probability 0, space 0, times 0 [ 145.074043][T12821] CPU: 3 UID: 0 PID: 12821 Comm: syz.2.1233 Not tainted syzkaller #0 PREEMPT(full) [ 145.074065][T12821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.074075][T12821] Call Trace: [ 145.074081][T12821] [ 145.074087][T12821] dump_stack_lvl+0x16c/0x1f0 [ 145.074105][T12821] should_fail_ex+0x512/0x640 [ 145.074117][T12821] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 145.074137][T12821] should_failslab+0xc2/0x120 [ 145.074151][T12821] kmem_cache_alloc_node_noprof+0x78/0x770 [ 145.074168][T12821] ? copy_process+0x4b5/0x76a0 [ 145.074188][T12821] ? copy_process+0x4b5/0x76a0 [ 145.074203][T12821] copy_process+0x4b5/0x76a0 [ 145.074225][T12821] ? __pfx_copy_process+0x10/0x10 [ 145.074243][T12821] ? lockdep_init_map_type+0x5c/0x280 [ 145.074257][T12821] ? lockdep_init_map_type+0x5c/0x280 [ 145.074269][T12821] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 145.074289][T12821] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 145.074305][T12821] vhost_task_create+0x1d2/0x370 [ 145.074319][T12821] ? __pfx_vhost_task_create+0x10/0x10 [ 145.074336][T12821] ? __pfx_vhost_task_fn+0x10/0x10 [ 145.074355][T12821] kvm_mmu_post_init_vm+0x1b7/0x380 [ 145.074370][T12821] kvm_arch_vcpu_ioctl_run+0x66/0x1970 [ 145.074387][T12821] ? kvm_vcpu_ioctl+0x14c5/0x1690 [ 145.074409][T12821] kvm_vcpu_ioctl+0x5eb/0x1690 [ 145.074425][T12821] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 145.074441][T12821] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 145.074458][T12821] ? do_vfs_ioctl+0x128/0x14f0 [ 145.074475][T12821] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 145.074491][T12821] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 145.074509][T12821] ? hook_file_ioctl_common+0x145/0x410 [ 145.074527][T12821] ? selinux_file_ioctl+0x180/0x270 [ 145.074537][T12821] ? selinux_file_ioctl+0xb4/0x270 [ 145.074549][T12821] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 145.074565][T12821] __x64_sys_ioctl+0x18b/0x210 [ 145.074582][T12821] do_syscall_64+0xcd/0x4e0 [ 145.074609][T12821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.074620][T12821] RIP: 0033:0x7f7d1778eec9 [ 145.074629][T12821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.074640][T12821] RSP: 002b:00007f7d18553038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.074651][T12821] RAX: ffffffffffffffda RBX: 00007f7d179e5fa0 RCX: 00007f7d1778eec9 [ 145.074661][T12821] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 145.074668][T12821] RBP: 00007f7d18553090 R08: 0000000000000000 R09: 0000000000000000 [ 145.074674][T12821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.074680][T12821] R13: 00007f7d179e6038 R14: 00007f7d179e5fa0 R15: 00007ffc1f6585a8 [ 145.074693][T12821] [ 145.167979][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.208497][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.214587][ T6035] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.389435][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.492399][ T6035] IPVS: starting estimator thread 0... [ 145.579284][T12848] IPVS: using max 27 ests per chain, 64800 per kthread [ 145.678025][T12868] 9pnet_virtio: no channels available for device syz [ 145.859371][T12886] __nla_validate_parse: 5 callbacks suppressed [ 145.859446][T12886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1248'. [ 145.934613][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'. [ 146.071070][ T6035] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.153438][T12935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1253'. [ 146.163234][T12935] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1253'. [ 146.219999][ T5996] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 146.224246][T12939] ucma_write: process 44 (syz.1.1254) changed security contexts after opening file descriptor, this is not allowed. [ 146.278001][ T5995] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.282181][ T5995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.285863][ T5995] usb 5-1: Product: І [ 146.287610][ T5995] usb 5-1: Manufacturer: 侮å¿ì¼¾íŽ³ë©¾å¹‡åœ®å©–ï“§é—ä¢á¶¿ëšžë§¹â’“죔â˜ê ä°›ã™ƒâ¢–î¯è„–á’Ⱪ [ 146.294144][ T5995] usb 5-1: can't set config #1, error -71 [ 146.297545][ T5995] usb 5-1: USB disconnect, device number 14 [ 146.371651][ T5996] usb 7-1: config 0 has no interfaces? [ 146.376844][ T5996] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 146.380859][ T5996] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.383847][ T5996] usb 7-1: Product: syz [ 146.385340][ T5996] usb 7-1: Manufacturer: syz [ 146.387096][ T5996] usb 7-1: SerialNumber: syz [ 146.395044][ T5996] usb 7-1: config 0 descriptor?? [ 146.608699][ T6035] usb 7-1: USB disconnect, device number 8 [ 146.959290][ T5949] Bluetooth: hci0: command tx timeout [ 147.093079][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.192118][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.203681][T13015] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1266'. [ 147.254127][T13019] netlink: 'syz.1.1268': attribute type 9 has an invalid length. [ 147.279605][ T5949] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 147.284467][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.284765][ T5949] Bluetooth: hci3: Injecting HCI hardware error event [ 147.293963][ T5949] Bluetooth: hci3: hardware error 0x00 [ 147.342776][T13023] kvm: user requested TSC rate below hardware speed [ 147.378028][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.386660][ T5959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.391619][ T5959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.396325][ T5959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.407096][ T5959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.410882][ T5959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.508520][T13062] 9pnet_fd: Insufficient options for proto=fd [ 147.611347][ T13] bridge_slave_1: left allmulticast mode [ 147.614678][ T13] bridge_slave_1: left promiscuous mode [ 147.621995][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.629003][ T13] bridge_slave_0: left allmulticast mode [ 147.631076][ T13] bridge_slave_0: left promiscuous mode [ 147.633054][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.846838][T13109] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 147.849170][T13109] [U] J"—e:ÀÆ" [ 148.062223][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.068006][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.072867][ T13] bond0 (unregistering): Released all slaves [ 148.079580][ T13] bond1 (unregistering): Released all slaves [ 148.097818][T13107] netlink: 'syz.1.1276': attribute type 12 has an invalid length. [ 148.100790][T13107] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1276'. [ 148.104379][T13107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=13107 comm=syz.1.1276 [ 148.192637][T13025] chnl_net:caif_netlink_parms(): no params data found [ 148.243797][T13236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1278'. [ 148.433261][T13025] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.436816][T13025] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.443685][T13025] bridge_slave_0: entered allmulticast mode [ 148.447841][T13025] bridge_slave_0: entered promiscuous mode [ 148.485330][T13025] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.487863][T13025] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.490878][T13025] bridge_slave_1: entered allmulticast mode [ 148.494204][T13025] bridge_slave_1: entered promiscuous mode [ 148.556563][T13025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.566640][T13025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.613870][ T13] hsr_slave_0: left promiscuous mode [ 148.617239][ T13] hsr_slave_1: left promiscuous mode [ 148.623400][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.626830][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.632312][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.635706][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.699064][ T13] veth1_macvtap: left promiscuous mode [ 148.702318][ T13] veth0_macvtap: left promiscuous mode [ 148.704720][ T13] veth1_vlan: left promiscuous mode [ 148.722185][T13619] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 149.031393][ T5959] Bluetooth: hci0: command tx timeout [ 149.353405][ T5949] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 149.354140][T13633] netlink: 'syz.1.1287': attribute type 1 has an invalid length. [ 149.429342][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 149.431278][ T5949] Bluetooth: hci2: command tx timeout [ 149.630390][T13640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1288'. [ 149.731738][ T13] team0 (unregistering): Port device team_slave_1 removed [ 149.825190][ T13] team0 (unregistering): Port device team_slave_0 removed [ 150.500558][T13634] bridge1: port 1(geneve2) entered blocking state [ 150.503514][T13634] bridge1: port 1(geneve2) entered disabled state [ 150.506643][T13634] geneve2: entered allmulticast mode [ 150.515781][T13634] geneve2: entered promiscuous mode [ 150.524272][T13025] team0: Port device team_slave_0 added [ 150.529891][T13025] team0: Port device team_slave_1 added [ 150.557589][T13721] overlayfs: regular lower layers cannot follow data lower layers [ 150.559562][ T40] audit: type=1400 audit(150.432:922): avc: denied { connect } for pid=13720 comm="syz.2.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.576800][T13705] netlink: 'syz.0.1289': attribute type 1 has an invalid length. [ 150.579526][T13757] program syz.1.1291 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.638639][T13025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.642213][T13025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.654396][T13025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.668688][T13025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.671957][T13025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.684347][T13025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.705125][T13848] veth0_to_bond: entered allmulticast mode [ 150.733966][T13860] binder: BINDER_SET_CONTEXT_MGR already set [ 150.737181][T13860] binder: 13857:13860 ioctl 4018620d 200000000040 returned -16 [ 150.836051][T13025] hsr_slave_0: entered promiscuous mode [ 150.838382][T13025] hsr_slave_1: entered promiscuous mode [ 150.841339][T13025] debugfs: 'hsr0' already exists in 'hsr' [ 150.843603][T13025] Cannot create hsr debugfs directory [ 150.850164][T13877] io-wq is not configured for unbound workers [ 151.162069][T13025] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 151.174964][T13025] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 151.183899][T13025] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 151.211099][T13025] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 151.316757][T13025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.345083][T13025] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.367701][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.371476][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.399484][ T6096] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.401888][ T6096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.509599][ T5949] Bluetooth: hci2: command tx timeout [ 151.568606][T14235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1298'. [ 151.616687][T13025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.649862][ T40] audit: type=1400 audit(151.522:923): avc: denied { associate } for pid=14241 comm="syz.2.1299" name="file3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 151.836605][T13025] veth0_vlan: entered promiscuous mode [ 151.841865][T13025] veth1_vlan: entered promiscuous mode [ 151.861007][T14266] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1302'. [ 151.878205][T14269] binder: BINDER_SET_CONTEXT_MGR already set [ 151.880953][T13025] veth0_macvtap: entered promiscuous mode [ 151.884947][T14269] binder: 14268:14269 ioctl 4018620d 200000000040 returned -16 [ 151.890932][T13025] veth1_macvtap: entered promiscuous mode [ 151.904995][T13025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.913157][T13025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.921625][ T9859] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.948672][ T9859] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.957660][ T9859] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.968421][ T9859] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.025510][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.028646][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.040344][ T40] audit: type=1400 audit(151.922:924): avc: denied { write } for pid=14270 comm="syz.2.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 152.062240][ T9876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.065151][ T9876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.103834][ T13] IPVS: stop unused estimator thread 0... [ 152.104656][T14271] kvm: kvm [14270]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 152.110000][T14271] kvm: kvm [14270]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 152.150202][ T6093] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 152.255829][T14315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1309'. [ 152.268243][ T6093] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.271126][ T6093] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.289395][ T840] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.309556][ T29] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 152.377572][T14330] gre0: Master is either lo or non-ether device [ 152.406071][T14333] binder: BINDER_SET_CONTEXT_MGR already set [ 152.408502][T14333] binder: 14332:14333 ioctl 4018620d 200000000040 returned -16 [ 152.417672][T14338] program syz.1.1314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.440376][T14344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1316'. [ 152.443353][T14344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1316'. [ 152.478667][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 152.489671][ T29] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 152.493254][ T29] usb 5-1: can't read configurations, error -71 [ 152.519272][T14360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1319'. [ 152.529541][ T6035] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.577448][ T40] audit: type=1400 audit(152.452:925): avc: denied { bind } for pid=14366 comm="syz.4.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 152.586623][ T40] audit: type=1400 audit(152.462:926): avc: denied { connect } for pid=14366 comm="syz.4.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 152.595082][ T40] audit: type=1400 audit(152.462:927): avc: denied { write } for pid=14366 comm="syz.4.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 152.659331][ T840] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 152.733106][T14394] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1328'. [ 152.795538][T14402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1330'. [ 152.809421][ T840] usb 6-1: Using ep0 maxpacket: 16 [ 152.814251][ T840] usb 6-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 64 [ 152.817537][ T840] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.823862][ T840] usb 6-1: config 1 interface 0 has no altsetting 0 [ 152.830104][ T840] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.833670][ T840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.837693][ T840] usb 6-1: Product: syz [ 152.839029][ T840] usb 6-1: Manufacturer: syz [ 152.842072][ T840] usb 6-1: SerialNumber: syz [ 152.844535][ T40] audit: type=1400 audit(152.722:928): avc: denied { bind } for pid=14405 comm="syz.2.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 152.845414][T14406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1331'. [ 152.854226][ T40] audit: type=1400 audit(152.722:929): avc: denied { setopt } for pid=14405 comm="syz.2.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 152.854921][T14338] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 152.912533][ T40] audit: type=1400 audit(152.792:930): avc: denied { firmware_load } for pid=14410 comm="syz.2.1332" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 153.109808][ T6035] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.278365][ T840] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 153.290065][ T840] usb 6-1: USB disconnect, device number 10 [ 153.311267][T14448] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1338'. [ 153.365167][T14451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=14451 comm=syz.1.1339 [ 153.404758][T14458] __vm_enough_memory: pid: 14458, comm: syz.0.1342, bytes: 21200668905472 not enough memory for the allocation [ 153.441895][T14458] vcan1: entered allmulticast mode [ 153.451231][T14467] netlink: 'syz.1.1343': attribute type 12 has an invalid length. [ 153.456586][T14465] __vm_enough_memory: pid: 14465, comm: syz.0.1342, bytes: 21200668905472 not enough memory for the allocation [ 153.460926][T14411] syz.2.1332 (14411) used greatest stack depth: 18968 bytes left [ 153.472984][T14458] vcan2: entered allmulticast mode [ 153.518450][T14480] loop2: detected capacity change from 0 to 7 [ 153.522469][T14480] Dev loop2: unable to read RDB block 7 [ 153.525371][T14480] loop2: AHDI p2 [ 153.526983][T14480] loop2: partition table partially beyond EOD, truncated [ 153.564166][T14492] FAULT_INJECTION: forcing a failure. [ 153.564166][T14492] name failslab, interval 1, probability 0, space 0, times 0 [ 153.569663][T14492] CPU: 3 UID: 0 PID: 14492 Comm: syz.1.1348 Not tainted syzkaller #0 PREEMPT(full) [ 153.569694][T14492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.569702][T14492] Call Trace: [ 153.569715][T14492] [ 153.569719][T14492] dump_stack_lvl+0x16c/0x1f0 [ 153.569746][T14492] should_fail_ex+0x512/0x640 [ 153.569765][T14492] ? fs_reclaim_acquire+0xae/0x150 [ 153.569780][T14492] should_failslab+0xc2/0x120 [ 153.569795][T14492] __kmalloc_noprof+0xdd/0x880 [ 153.569813][T14492] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 153.569831][T14492] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 153.569843][T14492] tomoyo_realpath_from_path+0xc2/0x6e0 [ 153.569857][T14492] ? tomoyo_profile+0x47/0x60 [ 153.569873][T14492] tomoyo_path_number_perm+0x245/0x580 [ 153.569891][T14492] ? tomoyo_path_number_perm+0x237/0x580 [ 153.569910][T14492] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 153.569929][T14492] ? find_held_lock+0x2b/0x80 [ 153.569959][T14492] ? find_held_lock+0x2b/0x80 [ 153.569975][T14492] ? hook_file_ioctl_common+0x145/0x410 [ 153.569994][T14492] ? __fget_files+0x20e/0x3c0 [ 153.570009][T14492] security_file_ioctl+0x9b/0x240 [ 153.570023][T14492] __x64_sys_ioctl+0xb7/0x210 [ 153.570042][T14492] do_syscall_64+0xcd/0x4e0 [ 153.570054][T14492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.570065][T14492] RIP: 0033:0x7efc7a38eec9 [ 153.570075][T14492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.570086][T14492] RSP: 002b:00007efc7b1fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.570097][T14492] RAX: ffffffffffffffda RBX: 00007efc7a5e5fa0 RCX: 00007efc7a38eec9 [ 153.570105][T14492] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 153.570111][T14492] RBP: 00007efc7b1fe090 R08: 0000000000000000 R09: 0000000000000000 [ 153.570118][T14492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.570124][T14492] R13: 00007efc7a5e6038 R14: 00007efc7a5e5fa0 R15: 00007ffe688d34b8 [ 153.570139][T14492] [ 153.571116][T14492] ERROR: Out of memory at tomoyo_realpath_from_path. [ 153.589480][ T5949] Bluetooth: hci2: command tx timeout [ 153.592379][T14492] loop2: detected capacity change from 0 to 7 [ 153.652062][T14496] Dev loop2: unable to read RDB block 7 [ 153.654593][T14496] loop2: AHDI p2 [ 153.656243][T14496] loop2: partition table partially beyond EOD, truncated [ 153.662713][T14492] Dev loop2: unable to read RDB block 7 [ 153.664639][T14492] loop2: AHDI p2 [ 153.666065][T14492] loop2: partition table partially beyond EOD, truncated [ 153.743135][ T40] audit: type=1400 audit(153.622:931): avc: denied { read } for pid=14506 comm="syz.1.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 153.888204][T14547] loop2: detected capacity change from 0 to 7 [ 153.895501][T14548] Dev loop2: unable to read RDB block 7 [ 153.897336][T14548] loop2: AHDI p2 [ 153.898656][T14548] loop2: partition table partially beyond EOD, truncated [ 153.905541][T14548] FAULT_INJECTION: forcing a failure. [ 153.905541][T14548] name failslab, interval 1, probability 0, space 0, times 0 [ 153.907449][T14547] Dev loop2: unable to read RDB block 7 [ 153.911129][T14548] CPU: 0 UID: 0 PID: 14548 Comm: syz.2.1360 Not tainted syzkaller #0 PREEMPT(full) [ 153.911152][T14548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.911163][T14548] Call Trace: [ 153.911168][T14548] [ 153.911175][T14548] dump_stack_lvl+0x16c/0x1f0 [ 153.911197][T14548] should_fail_ex+0x512/0x640 [ 153.911216][T14548] ? fs_reclaim_acquire+0xae/0x150 [ 153.911237][T14548] should_failslab+0xc2/0x120 [ 153.911258][T14548] __kmalloc_noprof+0xdd/0x880 [ 153.911284][T14548] ? tomoyo_encode2+0x100/0x3e0 [ 153.911316][T14548] ? tomoyo_encode2+0x100/0x3e0 [ 153.911334][T14548] tomoyo_encode2+0x100/0x3e0 [ 153.911358][T14548] tomoyo_encode+0x29/0x50 [ 153.911375][T14548] tomoyo_realpath_from_path+0x18f/0x6e0 [ 153.911402][T14548] tomoyo_path_number_perm+0x245/0x580 [ 153.911429][T14548] ? tomoyo_path_number_perm+0x237/0x580 [ 153.911458][T14548] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 153.911486][T14548] ? find_held_lock+0x2b/0x80 [ 153.911534][T14548] ? find_held_lock+0x2b/0x80 [ 153.911556][T14548] ? hook_file_ioctl_common+0x145/0x410 [ 153.911585][T14548] ? __fget_files+0x20e/0x3c0 [ 153.911607][T14548] security_file_ioctl+0x9b/0x240 [ 153.911627][T14548] __x64_sys_ioctl+0xb7/0x210 [ 153.911655][T14548] do_syscall_64+0xcd/0x4e0 [ 153.911673][T14548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.911689][T14548] RIP: 0033:0x7f7d1778eec9 [ 153.911703][T14548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.911719][T14548] RSP: 002b:00007f7d18553038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.911736][T14548] RAX: ffffffffffffffda RBX: 00007f7d179e5fa0 RCX: 00007f7d1778eec9 [ 153.911746][T14548] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 153.911756][T14548] RBP: 00007f7d18553090 R08: 0000000000000000 R09: 0000000000000000 [ 153.911765][T14548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.911775][T14548] R13: 00007f7d179e6038 R14: 00007f7d179e5fa0 R15: 00007ffc1f6585a8 [ 153.911798][T14548] [ 153.911815][T14548] ERROR: Out of memory at tomoyo_realpath_from_path. [ 153.915415][T14547] loop2: AHDI p2 [ 154.012682][T14547] loop2: partition table partially beyond EOD, truncated [ 154.063705][T14565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14565 comm=syz.4.1365 [ 154.090701][T14565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14565 comm=syz.4.1365 [ 154.208776][T14592] FAULT_INJECTION: forcing a failure. [ 154.208776][T14592] name failslab, interval 1, probability 0, space 0, times 0 [ 154.215101][T14592] CPU: 1 UID: 0 PID: 14592 Comm: syz.0.1372 Not tainted syzkaller #0 PREEMPT(full) [ 154.215135][T14592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.215143][T14592] Call Trace: [ 154.215148][T14592] [ 154.215152][T14592] dump_stack_lvl+0x16c/0x1f0 [ 154.215170][T14592] should_fail_ex+0x512/0x640 [ 154.215184][T14592] ? fs_reclaim_acquire+0xae/0x150 [ 154.215201][T14592] should_failslab+0xc2/0x120 [ 154.215216][T14592] __kmalloc_noprof+0xdd/0x880 [ 154.215233][T14592] ? tomoyo_encode2+0x100/0x3e0 [ 154.215262][T14592] ? tomoyo_encode2+0x100/0x3e0 [ 154.215273][T14592] tomoyo_encode2+0x100/0x3e0 [ 154.215287][T14592] tomoyo_encode+0x29/0x50 [ 154.215298][T14592] tomoyo_realpath_from_path+0x18f/0x6e0 [ 154.215315][T14592] tomoyo_path_number_perm+0x245/0x580 [ 154.215333][T14592] ? tomoyo_path_number_perm+0x237/0x580 [ 154.215351][T14592] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 154.215369][T14592] ? find_held_lock+0x2b/0x80 [ 154.215398][T14592] ? find_held_lock+0x2b/0x80 [ 154.215413][T14592] ? hook_file_ioctl_common+0x145/0x410 [ 154.215432][T14592] ? __fget_files+0x20e/0x3c0 [ 154.215451][T14592] security_file_ioctl+0x9b/0x240 [ 154.215466][T14592] __x64_sys_ioctl+0xb7/0x210 [ 154.215485][T14592] do_syscall_64+0xcd/0x4e0 [ 154.215497][T14592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.215509][T14592] RIP: 0033:0x7fa31698eec9 [ 154.215520][T14592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.215531][T14592] RSP: 002b:00007fa317820038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.215543][T14592] RAX: ffffffffffffffda RBX: 00007fa316be5fa0 RCX: 00007fa31698eec9 [ 154.215550][T14592] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 154.215557][T14592] RBP: 00007fa317820090 R08: 0000000000000000 R09: 0000000000000000 [ 154.215563][T14592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.215569][T14592] R13: 00007fa316be6038 R14: 00007fa316be5fa0 R15: 00007ffdca043858 [ 154.215583][T14592] [ 154.215616][T14592] ERROR: Out of memory at tomoyo_realpath_from_path. [ 154.272405][T14600] loop2: detected capacity change from 0 to 7 [ 154.312573][T14600] Dev loop2: unable to read RDB block 7 [ 154.315999][T14600] loop2: AHDI p2 [ 154.318282][T14600] loop2: partition table partially beyond EOD, truncated [ 154.337361][T14602] fuse: Bad value for 'group_id' [ 154.341818][T14602] fuse: Bad value for 'group_id' [ 154.366850][T14609] loop2: detected capacity change from 0 to 7 [ 154.371407][ T6406] Dev loop2: unable to read RDB block 7 [ 154.373830][ T6406] loop2: AHDI p2 [ 154.375473][ T6406] loop2: partition table partially beyond EOD, truncated [ 154.381138][T14609] Dev loop2: unable to read RDB block 7 [ 154.383436][T14609] loop2: AHDI p2 [ 154.385220][T14609] loop2: partition table partially beyond EOD, truncated [ 154.566339][T14634] nvme_fabrics: missing parameter 'transport=%s' [ 154.568457][T14634] nvme_fabrics: missing parameter 'nqn=%s' [ 154.591751][T14641] FAULT_INJECTION: forcing a failure. [ 154.591751][T14641] name failslab, interval 1, probability 0, space 0, times 0 [ 154.597610][T14641] CPU: 1 UID: 0 PID: 14641 Comm: syz.0.1384 Not tainted syzkaller #0 PREEMPT(full) [ 154.597627][T14641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.597634][T14641] Call Trace: [ 154.597638][T14641] [ 154.597643][T14641] dump_stack_lvl+0x16c/0x1f0 [ 154.597659][T14641] should_fail_ex+0x512/0x640 [ 154.597673][T14641] ? fs_reclaim_acquire+0xae/0x150 [ 154.597689][T14641] should_failslab+0xc2/0x120 [ 154.597704][T14641] __kmalloc_noprof+0xdd/0x880 [ 154.597720][T14641] ? __kernel_text_address+0xd/0x40 [ 154.597735][T14641] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 154.597752][T14641] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 154.597764][T14641] tomoyo_realpath_from_path+0xc2/0x6e0 [ 154.597778][T14641] ? tomoyo_profile+0x47/0x60 [ 154.597795][T14641] tomoyo_path_perm+0x274/0x460 [ 154.597812][T14641] ? tomoyo_path_perm+0x260/0x460 [ 154.597830][T14641] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 154.597862][T14641] ? __pfx___mutex_trylock_common+0x10/0x10 [ 154.597877][T14641] ? __pfx___might_resched+0x10/0x10 [ 154.597896][T14641] security_inode_getattr+0x116/0x290 [ 154.597909][T14641] vfs_getattr+0x25/0x60 [ 154.597924][T14641] loop_query_min_dio_size.isra.0+0x117/0x250 [ 154.597938][T14641] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 154.597959][T14641] ? filemap_write_and_wait_range+0x7d/0x130 [ 154.597974][T14641] loop_configure+0x847/0x15c0 [ 154.597989][T14641] ? stack_trace_save+0x8e/0xc0 [ 154.598007][T14641] ? __pfx_stack_trace_save+0x10/0x10 [ 154.598024][T14641] ? stack_depot_save_flags+0x29/0x9c0 [ 154.598038][T14641] ? __lock_acquire+0xb97/0x1ce0 [ 154.598052][T14641] ? __pfx_loop_configure+0x10/0x10 [ 154.598062][T14641] ? __lock_acquire+0x62e/0x1ce0 [ 154.598087][T14641] lo_ioctl+0x265/0x1cc0 [ 154.598101][T14641] ? __pfx_lo_ioctl+0x10/0x10 [ 154.598112][T14641] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 154.598128][T14641] ? kasan_quarantine_put+0x10a/0x240 [ 154.598139][T14641] ? lockdep_hardirqs_on+0x7c/0x110 [ 154.598159][T14641] ? blk_get_meta_cap+0xbc/0x700 [ 154.598175][T14641] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 154.598194][T14641] ? blkdev_common_ioctl+0x1d6/0x2470 [ 154.598227][T14641] ? __pfx_lo_ioctl+0x10/0x10 [ 154.598238][T14641] blkdev_ioctl+0x277/0x6d0 [ 154.598254][T14641] ? __pfx_blkdev_ioctl+0x10/0x10 [ 154.598268][T14641] ? selinux_file_ioctl+0x180/0x270 [ 154.598279][T14641] ? selinux_file_ioctl+0xb4/0x270 [ 154.598292][T14641] ? __pfx_blkdev_ioctl+0x10/0x10 [ 154.598307][T14641] __x64_sys_ioctl+0x18b/0x210 [ 154.598325][T14641] do_syscall_64+0xcd/0x4e0 [ 154.598337][T14641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.598349][T14641] RIP: 0033:0x7fa31698eec9 [ 154.598359][T14641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.598370][T14641] RSP: 002b:00007fa317820038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.598381][T14641] RAX: ffffffffffffffda RBX: 00007fa316be5fa0 RCX: 00007fa31698eec9 [ 154.598389][T14641] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 154.598395][T14641] RBP: 00007fa317820090 R08: 0000000000000000 R09: 0000000000000000 [ 154.598402][T14641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.598408][T14641] R13: 00007fa316be6038 R14: 00007fa316be5fa0 R15: 00007ffdca043858 [ 154.598422][T14641] [ 154.598427][T14641] ERROR: Out of memory at tomoyo_realpath_from_path. [ 154.749817][T14641] loop2: detected capacity change from 0 to 7 [ 154.754371][ T5950] Dev loop2: unable to read RDB block 7 [ 154.756841][ T5950] loop2: AHDI p2 [ 154.758126][ T5950] loop2: partition table partially beyond EOD, truncated [ 154.763821][T14641] Dev loop2: unable to read RDB block 7 [ 154.766437][T14641] loop2: AHDI p2 [ 154.768248][T14641] loop2: partition table partially beyond EOD, truncated [ 154.819121][T14656] Invalid source name [ 154.821590][T14656] UBIFS error (pid: 14656): cannot open "/dev/sg0", error -22 [ 154.979928][T14673] tmpfs: Bad value for 'mpol' [ 154.986835][T14673] tmpfs: Bad value for 'mpol' [ 154.992540][T14656] /dev/sr0: Can't open blockdev [ 155.058808][T14687] loop3: detected capacity change from 0 to 7 [ 155.066303][ T6406] Dev loop3: unable to read RDB block 7 [ 155.068767][ T6406] loop3: unable to read partition table [ 155.072178][ T6406] loop3: partition table beyond EOD, truncated [ 155.083212][T14687] Dev loop3: unable to read RDB block 7 [ 155.085816][T14687] loop3: unable to read partition table [ 155.088870][T14687] loop3: partition table beyond EOD, truncated [ 155.093684][T14687] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 155.119545][T14687] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 155.141283][T14702] FAULT_INJECTION: forcing a failure. [ 155.141283][T14702] name failslab, interval 1, probability 0, space 0, times 0 [ 155.146761][T14702] CPU: 2 UID: 0 PID: 14702 Comm: syz.2.1396 Not tainted syzkaller #0 PREEMPT(full) [ 155.146789][T14702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.146801][T14702] Call Trace: [ 155.146809][T14702] [ 155.146819][T14702] dump_stack_lvl+0x16c/0x1f0 [ 155.146846][T14702] should_fail_ex+0x512/0x640 [ 155.146869][T14702] ? fs_reclaim_acquire+0xae/0x150 [ 155.146897][T14702] should_failslab+0xc2/0x120 [ 155.146924][T14702] __kmalloc_noprof+0xdd/0x880 [ 155.146954][T14702] ? tomoyo_encode2+0x100/0x3e0 [ 155.146983][T14702] ? tomoyo_encode2+0x100/0x3e0 [ 155.147005][T14702] tomoyo_encode2+0x100/0x3e0 [ 155.147031][T14702] tomoyo_encode+0x29/0x50 [ 155.147053][T14702] tomoyo_realpath_from_path+0x18f/0x6e0 [ 155.147085][T14702] tomoyo_path_perm+0x274/0x460 [ 155.147116][T14702] ? tomoyo_path_perm+0x260/0x460 [ 155.147149][T14702] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 155.147213][T14702] ? __pfx___mutex_trylock_common+0x10/0x10 [ 155.147238][T14702] ? __pfx___might_resched+0x10/0x10 [ 155.147273][T14702] security_inode_getattr+0x116/0x290 [ 155.147296][T14702] vfs_getattr+0x25/0x60 [ 155.147324][T14702] loop_query_min_dio_size.isra.0+0x117/0x250 [ 155.147348][T14702] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 155.147391][T14702] ? filemap_write_and_wait_range+0x7d/0x130 [ 155.147420][T14702] loop_configure+0x847/0x15c0 [ 155.147450][T14702] ? stack_trace_save+0x8e/0xc0 [ 155.147479][T14702] ? __pfx_stack_trace_save+0x10/0x10 [ 155.147511][T14702] ? stack_depot_save_flags+0x29/0x9c0 [ 155.147537][T14702] ? __lock_acquire+0xb97/0x1ce0 [ 155.147568][T14702] ? __pfx_loop_configure+0x10/0x10 [ 155.147588][T14702] ? __lock_acquire+0x62e/0x1ce0 [ 155.147640][T14702] lo_ioctl+0x265/0x1cc0 [ 155.147668][T14702] ? __pfx_lo_ioctl+0x10/0x10 [ 155.147689][T14702] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 155.147718][T14702] ? kasan_quarantine_put+0x10a/0x240 [ 155.147739][T14702] ? lockdep_hardirqs_on+0x7c/0x110 [ 155.147771][T14702] ? blk_get_meta_cap+0xbc/0x700 [ 155.147802][T14702] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 155.147839][T14702] ? blkdev_common_ioctl+0x1d6/0x2470 [ 155.147931][T14702] ? __pfx_lo_ioctl+0x10/0x10 [ 155.147955][T14702] blkdev_ioctl+0x277/0x6d0 [ 155.147982][T14702] ? __pfx_blkdev_ioctl+0x10/0x10 [ 155.148008][T14702] ? selinux_file_ioctl+0x180/0x270 [ 155.148030][T14702] ? selinux_file_ioctl+0xb4/0x270 [ 155.148053][T14702] ? __pfx_blkdev_ioctl+0x10/0x10 [ 155.148082][T14702] __x64_sys_ioctl+0x18b/0x210 [ 155.148115][T14702] do_syscall_64+0xcd/0x4e0 [ 155.148137][T14702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.148157][T14702] RIP: 0033:0x7f7d1778eec9 [ 155.148176][T14702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.148196][T14702] RSP: 002b:00007f7d18553038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.148217][T14702] RAX: ffffffffffffffda RBX: 00007f7d179e5fa0 RCX: 00007f7d1778eec9 [ 155.148230][T14702] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 155.148242][T14702] RBP: 00007f7d18553090 R08: 0000000000000000 R09: 0000000000000000 [ 155.148254][T14702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.148265][T14702] R13: 00007f7d179e6038 R14: 00007f7d179e5fa0 R15: 00007ffc1f6585a8 [ 155.148294][T14702] [ 155.148318][T14702] ERROR: Out of memory at tomoyo_realpath_from_path. [ 155.196846][T14712] vcan3: entered allmulticast mode [ 155.199734][T14702] loop2: detected capacity change from 0 to 7 [ 155.312305][T14706] Dev loop2: unable to read RDB block 7 [ 155.314482][T14706] loop2: AHDI p2 [ 155.315977][T14706] loop2: partition table partially beyond EOD, truncated [ 155.323176][T14702] Dev loop2: unable to read RDB block 7 [ 155.325175][T14702] loop2: AHDI p2 [ 155.326628][T14702] loop2: partition table partially beyond EOD, truncated [ 155.332473][ T5355] Dev loop2: unable to read RDB block 7 [ 155.334619][ T5355] loop2: AHDI p2 [ 155.335956][ T5355] loop2: partition table partially beyond EOD, truncated [ 155.365456][T14733] input: syz0 as /devices/virtual/input/input16 [ 155.669733][ T5949] Bluetooth: hci2: command tx timeout [ 155.672924][T14788] cgroup: fork rejected by pids controller in /syz1 [ 155.699303][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 155.852497][ T34] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 155.855669][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.858333][ T34] usb 9-1: Product: syz [ 155.860034][ T34] usb 9-1: Manufacturer: syz [ 155.861996][ T34] usb 9-1: SerialNumber: syz [ 155.948990][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.054306][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.069914][ T34] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 156.075090][ T34] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 156.079356][ T34] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 156.085157][ T34] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 156.091034][ T34] usb 9-1: USB disconnect, device number 2 [ 156.130168][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.221874][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.234866][ T5959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.239573][ T5959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.245303][ T5959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.248594][ T5959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.251438][ T5959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.431026][T14809] chnl_net:caif_netlink_parms(): no params data found [ 156.562628][T15021] Invalid logical block size (18) [ 156.565365][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.575800][ T13] bridge_slave_1: left allmulticast mode [ 156.577593][ T13] bridge_slave_1: left promiscuous mode [ 156.579493][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.586162][ T13] bridge_slave_0: left allmulticast mode [ 156.587904][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 156.587914][ T40] audit: type=1400 audit(524444.453:942): avc: denied { mount } for pid=15025 comm="syz.0.1425" name="/" dev="9p" ino=71827667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 156.588644][ T13] bridge_slave_0: left promiscuous mode [ 156.602348][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.610729][ T13] geneve2: left allmulticast mode [ 156.612803][ T13] geneve2: left promiscuous mode [ 156.617096][ T13] bridge1: port 1(geneve2) entered disabled state [ 156.628997][T15037] netlink: 'syz.4.1428': attribute type 10 has an invalid length. [ 156.985862][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.992793][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.998924][ T13] bond0 (unregistering): Released all slaves [ 157.053764][T15032] bond2: peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 157.072142][T15032] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.088430][T15037] batman_adv: batadv0: Adding interface: team0 [ 157.093192][T15037] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.105199][T15037] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 157.158384][T14809] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.162442][T14809] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.165578][T14809] bridge_slave_0: entered allmulticast mode [ 157.173390][T14809] bridge_slave_0: entered promiscuous mode [ 157.205707][T15210] __nla_validate_parse: 21 callbacks suppressed [ 157.205725][T15210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1431'. [ 157.207669][T14809] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.215694][T14809] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.219061][T14809] bridge_slave_1: entered allmulticast mode [ 157.223804][T14809] bridge_slave_1: entered promiscuous mode [ 157.344771][T14809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.355352][T14809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.418452][T14809] team0: Port device team_slave_0 added [ 157.426324][ T13] hsr_slave_0: left promiscuous mode [ 157.428601][ T13] hsr_slave_1: left promiscuous mode [ 157.431951][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.434234][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.437188][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.440239][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.462753][T15470] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1433'. [ 157.469279][ T13] veth1_macvtap: left promiscuous mode [ 157.472115][ T13] veth0_macvtap: left promiscuous mode [ 157.474530][ T13] veth1_vlan: left promiscuous mode [ 157.477856][ T13] veth0_vlan: left promiscuous mode [ 157.495740][T15473] snd_dummy snd_dummy.0: control 3:1:0:syz0:50 is already present [ 157.738418][T15483] Invalid logical block size (25) [ 157.788740][ T40] audit: type=1400 audit(524445.607:943): avc: denied { setopt } for pid=15484 comm="syz.2.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 157.968758][ T41] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 158.244096][T15505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1441'. [ 158.377694][ T5949] Bluetooth: hci0: command tx timeout [ 158.431439][ T13] team0 (unregistering): Port device team_slave_1 removed [ 158.506342][ T13] team0 (unregistering): Port device team_slave_0 removed [ 159.150672][T14809] team0: Port device team_slave_1 added [ 159.239598][T15580] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1443'. [ 159.279756][T14809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.283284][T14809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.296202][T14809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.303169][T14809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.306289][T14809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.318205][T14809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.324800][T15639] Invalid logical block size (31) [ 159.351495][T15579] /dev/sr0: Can't open blockdev [ 159.396747][T15711] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1448'. [ 159.429564][T14809] hsr_slave_0: entered promiscuous mode [ 159.431816][T14809] hsr_slave_1: entered promiscuous mode [ 159.433903][T14809] debugfs: 'hsr0' already exists in 'hsr' [ 159.436678][T14809] Cannot create hsr debugfs directory [ 159.517112][T15903] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 159.517112][T15903] The task syz.4.1448 (15903) triggered the difference, watch for misbehavior. [ 160.080377][T16033] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 160.086824][T14809] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 160.093940][T14809] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 160.100443][T14809] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 160.106651][T14809] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 160.158162][T14809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.171239][T16055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1453'. [ 160.172371][T14809] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.182151][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.184732][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.197520][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.200776][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.220563][T16060] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1454'. [ 160.344933][T16076] Invalid logical block size (63) [ 160.360527][T14809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.418463][T14809] veth0_vlan: entered promiscuous mode [ 160.425141][T14809] veth1_vlan: entered promiscuous mode [ 160.447022][T14809] veth0_macvtap: entered promiscuous mode [ 160.453055][T14809] veth1_macvtap: entered promiscuous mode [ 160.465806][T14809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.476941][T14809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.477273][ T40] audit: type=1400 audit(524448.235:944): avc: denied { shutdown } for pid=16095 comm="syz.0.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.487177][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.497310][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.511379][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.524160][ T5949] Bluetooth: hci0: command tx timeout [ 160.524210][ T9860] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.560506][ T6096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.563765][ T6096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.572618][ T40] audit: type=1400 audit(524448.323:945): avc: denied { read } for pid=16103 comm="syz.4.1461" path="socket:[36649]" dev="sockfs" ino=36649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 160.586246][ T6096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.588715][ T6096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.609340][ T40] audit: type=1400 audit(524448.362:946): avc: denied { mounton } for pid=14809 comm="syz-executor" path="/syzkaller.kVhRk3/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=36655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 160.613872][T16122] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1462'. [ 160.651960][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1417'. [ 160.656502][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1417'. [ 160.677625][T16127] loop2: detected capacity change from 0 to 7 [ 160.681332][T16127] Dev loop2: unable to read RDB block 7 [ 160.683328][T16127] loop2: unable to read partition table [ 160.685367][T16127] loop2: partition table beyond EOD, truncated [ 160.687848][T16127] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 160.766909][T16144] Invalid logical block size (85) [ 161.015158][ T840] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 161.161789][ T40] audit: type=1400 audit(524448.899:947): avc: denied { listen } for pid=16155 comm="syz.1.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 161.189152][ T840] usb 7-1: Using ep0 maxpacket: 8 [ 161.193337][ T840] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 161.196359][ T840] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.200115][ T840] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.204618][ T840] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.209083][ T840] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.214380][ T840] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 161.217368][ T840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.433260][ T840] usb 7-1: usb_control_msg returned -32 [ 161.435092][ T840] usbtmc 7-1:16.0: can't read capabilities [ 162.040650][T16180] loop2: detected capacity change from 0 to 7 [ 162.044630][ T6406] Dev loop2: unable to read RDB block 7 [ 162.047366][ T6406] loop2: unable to read partition table [ 162.050659][ T6406] loop2: partition table beyond EOD, truncated [ 162.055284][T16180] Dev loop2: unable to read RDB block 7 [ 162.057021][T16180] loop2: unable to read partition table [ 162.059005][T16180] loop2: partition table beyond EOD, truncated [ 162.061184][T16180] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 162.172171][ T41] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.176053][ T41] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.192076][ T55] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.337788][T16205] Invalid logical block size (151) [ 162.378094][ T55] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.386334][ T55] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.454914][T16217] binder: Unknown parameter 'smackfsroot' [ 162.455002][ T40] audit: type=1400 audit(524450.159:948): avc: denied { remount } for pid=16216 comm="syz.1.1482" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 162.470399][T16217] binder: Unknown parameter '00000000000000000000005' [ 162.581056][T16222] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 162.635924][T16228] __nla_validate_parse: 4 callbacks suppressed [ 162.635938][T16228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1484'. [ 162.641889][ T5949] Bluetooth: hci0: command tx timeout [ 162.678877][ T40] audit: type=1400 audit(524450.384:949): avc: denied { execute } for pid=16229 comm="syz.1.1485" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 162.725238][ T34] usb 7-1: USB disconnect, device number 9 [ 162.781464][T16242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1487'. [ 162.785500][T16242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1487'. [ 162.890572][T16248] Invalid logical block size (201) [ 162.954099][ T40] audit: type=1400 audit(524450.649:950): avc: denied { accept } for pid=16251 comm="syz.1.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 162.991161][T16255] loop2: detected capacity change from 0 to 7 [ 162.994991][T16255] Dev loop2: unable to read RDB block 7 [ 162.997537][T16255] loop2: AHDI p2 [ 162.999670][T16255] loop2: partition table partially beyond EOD, truncated [ 163.046273][T16261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1494'. [ 163.132856][ T6096] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 163.480280][T16276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1497'. [ 163.483282][T16276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1497'. [ 163.603452][T16291] Invalid logical block size (228) [ 163.639669][T16295] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 163.642532][T16295] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 163.645974][T16295] vhci_hcd vhci_hcd.0: Device attached [ 163.655747][T16300] netlink: 'syz.0.1501': attribute type 1 has an invalid length. [ 163.678767][T16295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1501'. [ 163.701254][T16296] vhci_hcd: connection closed [ 163.701533][ T9860] vhci_hcd: stop threads [ 163.702041][T16337] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 163.704173][ T9860] vhci_hcd: release socket [ 163.709404][ T9860] vhci_hcd: disconnect device [ 163.712561][T16337] cramfs: wrong magic [ 163.727369][T16340] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 163.733993][ T40] audit: type=1400 audit(524451.413:951): avc: denied { map } for pid=16338 comm="syz.0.1503" path="/dev/vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 163.742789][ T40] audit: type=1400 audit(524451.413:952): avc: denied { execute } for pid=16338 comm="syz.0.1503" path="/dev/vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 163.751034][ T40] audit: type=1400 audit(524451.423:953): avc: denied { bind } for pid=16338 comm="syz.0.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 163.756483][T16343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1504'. [ 163.970136][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1507'. [ 163.973196][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1507'. [ 164.095501][T16376] FAULT_INJECTION: forcing a failure. [ 164.095501][T16376] name failslab, interval 1, probability 0, space 0, times 0 [ 164.101013][T16376] CPU: 3 UID: 0 PID: 16376 Comm: syz.1.1510 Not tainted syzkaller #0 PREEMPT(full) [ 164.101038][T16376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.101049][T16376] Call Trace: [ 164.101056][T16376] [ 164.101064][T16376] dump_stack_lvl+0x16c/0x1f0 [ 164.101090][T16376] should_fail_ex+0x512/0x640 [ 164.101111][T16376] ? fs_reclaim_acquire+0xae/0x150 [ 164.101135][T16376] should_failslab+0xc2/0x120 [ 164.101158][T16376] __kmalloc_noprof+0xdd/0x880 [ 164.101184][T16376] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 164.101211][T16376] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 164.101231][T16376] tomoyo_realpath_from_path+0xc2/0x6e0 [ 164.101253][T16376] ? tomoyo_profile+0x47/0x60 [ 164.101279][T16376] tomoyo_path_number_perm+0x245/0x580 [ 164.101305][T16376] ? tomoyo_path_number_perm+0x237/0x580 [ 164.101335][T16376] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 164.101378][T16376] ? find_held_lock+0x2b/0x80 [ 164.101432][T16376] ? find_held_lock+0x2b/0x80 [ 164.101457][T16376] ? hook_file_ioctl_common+0x145/0x410 [ 164.101486][T16376] ? __fget_files+0x20e/0x3c0 [ 164.101510][T16376] security_file_ioctl+0x9b/0x240 [ 164.101533][T16376] __x64_sys_ioctl+0xb7/0x210 [ 164.101562][T16376] do_syscall_64+0xcd/0x4e0 [ 164.101583][T16376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.101601][T16376] RIP: 0033:0x7fa67bf8eec9 [ 164.101617][T16376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.101634][T16376] RSP: 002b:00007fa67cdc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.101652][T16376] RAX: ffffffffffffffda RBX: 00007fa67c1e5fa0 RCX: 00007fa67bf8eec9 [ 164.101662][T16376] RDX: 0000200000000000 RSI: 00000000c0606610 RDI: 0000000000000003 [ 164.101674][T16376] RBP: 00007fa67cdc6090 R08: 0000000000000000 R09: 0000000000000000 [ 164.101684][T16376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.101694][T16376] R13: 00007fa67c1e6038 R14: 00007fa67c1e5fa0 R15: 00007ffd58916908 [ 164.101718][T16376] [ 164.197641][T16376] ERROR: Out of memory at tomoyo_realpath_from_path. [ 164.207455][ T40] audit: type=1400 audit(524451.883:954): avc: denied { map } for pid=16377 comm="syz.2.1511" path="socket:[36790]" dev="sockfs" ino=36790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 164.218306][ T40] audit: type=1400 audit(524451.893:955): avc: denied { checkpoint_restore } for pid=16377 comm="syz.2.1511" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 164.248432][T16385] Invalid logical block size (253) [ 164.358967][ T40] audit: type=1400 audit(524452.030:956): avc: denied { getopt } for pid=16387 comm="syz.2.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 164.359520][T16388] netlink: 'syz.2.1514': attribute type 10 has an invalid length. [ 164.395128][T16388] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 164.404007][T16387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.428105][T16398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=16398 comm=syz.1.1517 [ 164.432282][T16398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=16398 comm=syz.1.1517 [ 164.618027][T16407] FAULT_INJECTION: forcing a failure. [ 164.618027][T16407] name failslab, interval 1, probability 0, space 0, times 0 [ 164.622885][T16407] CPU: 1 UID: 0 PID: 16407 Comm: syz.0.1521 Not tainted syzkaller #0 PREEMPT(full) [ 164.622901][T16407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.622909][T16407] Call Trace: [ 164.622914][T16407] [ 164.622919][T16407] dump_stack_lvl+0x16c/0x1f0 [ 164.622935][T16407] should_fail_ex+0x512/0x640 [ 164.622948][T16407] ? fs_reclaim_acquire+0xae/0x150 [ 164.622965][T16407] should_failslab+0xc2/0x120 [ 164.622981][T16407] __kmalloc_noprof+0xdd/0x880 [ 164.622999][T16407] ? tomoyo_encode2+0x100/0x3e0 [ 164.623015][T16407] ? tomoyo_encode2+0x100/0x3e0 [ 164.623027][T16407] tomoyo_encode2+0x100/0x3e0 [ 164.623042][T16407] tomoyo_encode+0x29/0x50 [ 164.623055][T16407] tomoyo_realpath_from_path+0x18f/0x6e0 [ 164.623070][T16407] ? tomoyo_profile+0x47/0x60 [ 164.623086][T16407] tomoyo_path_number_perm+0x245/0x580 [ 164.623105][T16407] ? tomoyo_path_number_perm+0x237/0x580 [ 164.623124][T16407] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 164.623144][T16407] ? find_held_lock+0x2b/0x80 [ 164.623174][T16407] ? find_held_lock+0x2b/0x80 [ 164.623190][T16407] ? hook_file_ioctl_common+0x145/0x410 [ 164.623210][T16407] ? __fget_files+0x20e/0x3c0 [ 164.623225][T16407] security_file_ioctl+0x9b/0x240 [ 164.623239][T16407] __x64_sys_ioctl+0xb7/0x210 [ 164.623260][T16407] do_syscall_64+0xcd/0x4e0 [ 164.623273][T16407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.623286][T16407] RIP: 0033:0x7fa31698eec9 [ 164.623296][T16407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.623307][T16407] RSP: 002b:00007fa317820038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.623319][T16407] RAX: ffffffffffffffda RBX: 00007fa316be5fa0 RCX: 00007fa31698eec9 [ 164.623327][T16407] RDX: 0000200000000000 RSI: 00000000c0606610 RDI: 0000000000000003 [ 164.623334][T16407] RBP: 00007fa317820090 R08: 0000000000000000 R09: 0000000000000000 [ 164.623341][T16407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.623347][T16407] R13: 00007fa316be6038 R14: 00007fa316be5fa0 R15: 00007ffdca043858 [ 164.623362][T16407] [ 164.623375][T16407] ERROR: Out of memory at tomoyo_realpath_from_path. [ 164.656750][T16409] Invalid logical block size (254) [ 164.771760][ T5949] Bluetooth: hci0: command tx timeout [ 164.836738][T16429] QAT: Stopping all acceleration devices. [ 164.846306][T16429] netlink: 'syz.4.1529': attribute type 1 has an invalid length. [ 164.849911][T16429] netlink: 'syz.4.1529': attribute type 4 has an invalid length. [ 164.878278][T16431] loop2: detected capacity change from 0 to 7 [ 164.881190][T16431] Dev loop2: unable to read RDB block 7 [ 164.883269][T16431] loop2: AHDI p2 [ 164.885026][T16431] loop2: partition table partially beyond EOD, truncated [ 164.902944][T16435] FAULT_INJECTION: forcing a failure. [ 164.902944][T16435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.908288][T16435] CPU: 0 UID: 0 PID: 16435 Comm: syz.4.1531 Not tainted syzkaller #0 PREEMPT(full) [ 164.908306][T16435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.908314][T16435] Call Trace: [ 164.908319][T16435] [ 164.908324][T16435] dump_stack_lvl+0x16c/0x1f0 [ 164.908341][T16435] should_fail_ex+0x512/0x640 [ 164.908358][T16435] _copy_from_user+0x2e/0xd0 [ 164.908374][T16435] do_pagemap_scan+0xc3/0xcf0 [ 164.908393][T16435] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 164.908412][T16435] ? __pfx_do_pagemap_scan+0x10/0x10 [ 164.908427][T16435] ? do_vfs_ioctl+0x128/0x14f0 [ 164.908446][T16435] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 164.908467][T16435] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 164.908492][T16435] ? selinux_file_ioctl+0x180/0x270 [ 164.908505][T16435] ? selinux_file_ioctl+0xb4/0x270 [ 164.908519][T16435] do_pagemap_cmd+0x58/0x80 [ 164.908534][T16435] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 164.908550][T16435] __x64_sys_ioctl+0x18b/0x210 [ 164.908570][T16435] do_syscall_64+0xcd/0x4e0 [ 164.908583][T16435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.908596][T16435] RIP: 0033:0x7f058e38eec9 [ 164.908607][T16435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.908619][T16435] RSP: 002b:00007f058f182038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.908631][T16435] RAX: ffffffffffffffda RBX: 00007f058e5e5fa0 RCX: 00007f058e38eec9 [ 164.908639][T16435] RDX: 0000200000000000 RSI: 00000000c0606610 RDI: 0000000000000003 [ 164.908646][T16435] RBP: 00007f058f182090 R08: 0000000000000000 R09: 0000000000000000 [ 164.908654][T16435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.908661][T16435] R13: 00007f058e5e6038 R14: 00007f058e5e5fa0 R15: 00007fff57e4bb18 [ 164.908676][T16435] [ 164.987276][T16449] Invalid logical block size (768) [ 165.167950][T16471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16471 comm=syz.2.1541 [ 165.192196][ T1467] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 165.193403][T16474] loop2: detected capacity change from 0 to 7 [ 165.198567][ T5950] Dev loop2: unable to read RDB block 7 [ 165.201472][ T5950] loop2: AHDI p2 [ 165.204302][ T5950] loop2: partition table partially beyond EOD, truncated [ 165.209760][T16474] Dev loop2: unable to read RDB block 7 [ 165.211982][T16474] loop2: AHDI p2 [ 165.213497][T16474] loop2: partition table partially beyond EOD, truncated [ 165.240226][T16482] FAULT_INJECTION: forcing a failure. [ 165.240226][T16482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.247009][T16482] CPU: 3 UID: 0 PID: 16482 Comm: syz.2.1543 Not tainted syzkaller #0 PREEMPT(full) [ 165.247038][T16482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.247050][T16482] Call Trace: [ 165.247057][T16482] [ 165.247065][T16482] dump_stack_lvl+0x16c/0x1f0 [ 165.247089][T16482] should_fail_ex+0x512/0x640 [ 165.247114][T16482] _copy_to_user+0x32/0xd0 [ 165.247139][T16482] do_pagemap_scan+0xb80/0xcf0 [ 165.247170][T16482] ? __pfx_do_pagemap_scan+0x10/0x10 [ 165.247194][T16482] ? do_vfs_ioctl+0x128/0x14f0 [ 165.247236][T16482] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 165.247278][T16482] ? selinux_file_ioctl+0x180/0x270 [ 165.247297][T16482] ? selinux_file_ioctl+0xb4/0x270 [ 165.247321][T16482] do_pagemap_cmd+0x58/0x80 [ 165.247343][T16482] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 165.247367][T16482] __x64_sys_ioctl+0x18b/0x210 [ 165.247396][T16482] do_syscall_64+0xcd/0x4e0 [ 165.247417][T16482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.247436][T16482] RIP: 0033:0x7f7d1778eec9 [ 165.247452][T16482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.247471][T16482] RSP: 002b:00007f7d18553038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.247491][T16482] RAX: ffffffffffffffda RBX: 00007f7d179e5fa0 RCX: 00007f7d1778eec9 [ 165.247503][T16482] RDX: 0000200000000000 RSI: 00000000c0606610 RDI: 0000000000000003 [ 165.247515][T16482] RBP: 00007f7d18553090 R08: 0000000000000000 R09: 0000000000000000 [ 165.247527][T16482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.247538][T16482] R13: 00007f7d179e6038 R14: 00007f7d179e5fa0 R15: 00007ffc1f6585a8 [ 165.247565][T16482] [ 165.362527][ T1467] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 165.371731][ T1467] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.377099][ T1467] usb 6-1: Product: syz [ 165.378884][ T1467] usb 6-1: Manufacturer: syz [ 165.380826][ T1467] usb 6-1: SerialNumber: syz [ 165.388134][T16496] Invalid logical block size (1280) [ 165.390932][ T1467] usb 6-1: config 0 descriptor?? [ 165.402655][ T40] audit: type=1326 audit(524453.051:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16498 comm="syz.4.1547" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f058e38eec9 code=0x0 [ 165.602930][ T29] usb 6-1: USB disconnect, device number 11 [ 165.618823][T16513] syz.4.1547 uses old SIOCAX25GETINFO [ 165.826301][T16544] loop2: detected capacity change from 0 to 7 [ 165.828828][T16544] Dev loop2: unable to read RDB block 7 [ 165.830786][T16544] loop2: AHDI p2 [ 165.832149][T16544] loop2: partition table partially beyond EOD, truncated [ 165.836108][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.850080][T16547] FAULT_INJECTION: forcing a failure. [ 165.850080][T16547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.855071][T16547] CPU: 2 UID: 0 PID: 16547 Comm: syz.0.1555 Not tainted syzkaller #0 PREEMPT(full) [ 165.855089][T16547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.855096][T16547] Call Trace: [ 165.855100][T16547] [ 165.855105][T16547] dump_stack_lvl+0x16c/0x1f0 [ 165.855123][T16547] should_fail_ex+0x512/0x640 [ 165.855150][T16547] copy_fpstate_to_sigframe+0x854/0xaf0 [ 165.855173][T16547] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 165.855189][T16547] ? posixtimer_deliver_signal+0x105/0x6b0 [ 165.855207][T16547] ? x86_task_fpu+0x5f/0x90 [ 165.855223][T16547] get_sigframe+0x4a8/0x9c0 [ 165.855241][T16547] ? __pfx_get_sigframe+0x10/0x10 [ 165.855255][T16547] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 165.855273][T16547] ? _raw_spin_unlock_irq+0x29/0x50 [ 165.855290][T16547] ? siginfo_layout+0x177/0x290 [ 165.855308][T16547] x64_setup_rt_frame+0x12e/0xcf0 [ 165.855324][T16547] ? do_vfs_ioctl+0x128/0x14f0 [ 165.855348][T16547] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 165.855370][T16547] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 165.855399][T16547] arch_do_signal_or_restart+0x5e4/0x7c0 [ 165.855420][T16547] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 165.855446][T16547] ? selinux_file_ioctl+0xb4/0x270 [ 165.855467][T16547] exit_to_user_mode_loop+0x85/0x130 [ 165.855491][T16547] do_syscall_64+0x419/0x4e0 [ 165.855507][T16547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.855523][T16547] RIP: 0033:0x7fa31698eec9 [ 165.855537][T16547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.855552][T16547] RSP: 002b:00007fa317820038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.855568][T16547] RAX: 0000000000000000 RBX: 00007fa316be5fa0 RCX: 00007fa31698eec9 [ 165.855579][T16547] RDX: 0000200000000000 RSI: 00000000c0606610 RDI: 0000000000000003 [ 165.855588][T16547] RBP: 00007fa317820090 R08: 0000000000000000 R09: 0000000000000000 [ 165.855598][T16547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.855607][T16547] R13: 00007fa316be6038 R14: 00007fa316be5fa0 R15: 00007ffdca043858 [ 165.855629][T16547] [ 166.071266][T16562] Invalid logical block size (1536) [ 166.230555][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.254660][T16576] ubi31: attaching mtd0 [ 166.257737][T16576] ubi31: scanning is finished [ 166.259382][T16576] ubi31: empty MTD device detected [ 166.275671][T16587] sock: sock_set_timeout: `syz.4.1565' (pid 16587) tries to set negative timeout [ 166.316880][T16590] FAULT_INJECTION: forcing a failure. [ 166.316880][T16590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.321185][T16590] CPU: 3 UID: 0 PID: 16590 Comm: syz.4.1566 Not tainted syzkaller #0 PREEMPT(full) [ 166.321202][T16590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 166.321210][T16590] Call Trace: [ 166.321214][T16590] [ 166.321219][T16590] dump_stack_lvl+0x16c/0x1f0 [ 166.321235][T16590] should_fail_ex+0x512/0x640 [ 166.321250][T16590] _copy_from_user+0x2e/0xd0 [ 166.321263][T16590] restore_altstack+0x93/0x170 [ 166.321277][T16590] ? __pfx_restore_altstack+0x10/0x10 [ 166.321289][T16590] ? _raw_spin_unlock_irq+0x23/0x50 [ 166.321305][T16590] ? lockdep_hardirqs_on+0x7c/0x110 [ 166.321322][T16590] ? _raw_spin_unlock_irq+0x2e/0x50 [ 166.321337][T16590] ? set_current_blocked+0xdd/0x120 [ 166.321352][T16590] __do_sys_rt_sigreturn+0x13c/0x230 [ 166.321369][T16590] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 166.321389][T16590] do_syscall_64+0xcd/0x4e0 [ 166.321401][T16590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.321413][T16590] RIP: 0033:0x7f058e32af79 [ 166.321422][T16590] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 166.321433][T16590] RSP: 002b:00007f058f181340 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 166.321444][T16590] RAX: ffffffffffffffda RBX: 00007f058e5e5fa0 RCX: 00007f058e32af79 [ 166.321455][T16590] RDX: 00007f058f181340 RSI: 00007f058f181470 RDI: 0000000000000011 [ 166.321462][T16590] RBP: 00007f058f182090 R08: 0000000000000000 R09: 0000000000000000 [ 166.321468][T16590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.321474][T16590] R13: 00007f058e5e6038 R14: 00007f058e5e5fa0 R15: 00007fff57e4bb18 [ 166.321488][T16590] [ 166.441202][T16601] Invalid logical block size (1792) [ 166.468705][T16576] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 166.471150][T16576] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 166.473466][T16576] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 166.476056][T16576] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 166.478422][T16576] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 166.481136][T16576] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 166.484383][T16576] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4000448210 [ 166.487888][T16576] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 166.491157][T16604] ubi31: background thread "ubi_bgt31d" started, PID 16604 [ 166.540976][T16611] Invalid logical block size (-3) [ 166.550478][T16610] Bluetooth: MGMT ver 1.23 [ 166.636098][T16610] netlink: 'syz.0.1571': attribute type 4 has an invalid length. [ 166.663289][T16633] loop2: detected capacity change from 0 to 7 [ 166.670615][T16633] Dev loop2: unable to read RDB block 7 [ 166.672665][T16633] loop2: unable to read partition table [ 166.674595][T16633] loop2: partition table beyond EOD, truncated [ 166.677005][T16633] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 166.729668][T16644] gretap0: entered promiscuous mode [ 166.732190][T16644] batadv_slave_1: entered promiscuous mode [ 166.734282][T16644] batadv_slave_1: left promiscuous mode [ 166.741497][T16644] gretap0: left promiscuous mode [ 166.744863][T16649] Invalid logical block size (2304) [ 166.766496][T16643] FAULT_INJECTION: forcing a failure. [ 166.766496][T16643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.770642][T16643] CPU: 3 UID: 0 PID: 16643 Comm: syz.2.1578 Not tainted syzkaller #0 PREEMPT(full) [ 166.770657][T16643] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 166.770663][T16643] Call Trace: [ 166.770668][T16643] [ 166.770672][T16643] dump_stack_lvl+0x16c/0x1f0 [ 166.770687][T16643] should_fail_ex+0x512/0x640 [ 166.770701][T16643] _copy_from_user+0x2e/0xd0 [ 166.770715][T16643] restore_sigcontext+0xcb/0x6a0 [ 166.770732][T16643] ? __pfx_restore_sigcontext+0x10/0x10 [ 166.770757][T16643] ? __pfx_restore_altstack+0x10/0x10 [ 166.770769][T16643] ? _raw_spin_unlock_irq+0x23/0x50 [ 166.770784][T16643] ? lockdep_hardirqs_on+0x7c/0x110 [ 166.770803][T16643] __do_sys_rt_sigreturn+0x1bb/0x230 [ 166.770818][T16643] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 166.770837][T16643] do_syscall_64+0xcd/0x4e0 [ 166.770849][T16643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.770859][T16643] RIP: 0033:0x7f7d1772af79 [ 166.770868][T16643] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 166.770879][T16643] RSP: 002b:00007f7d18552340 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 166.770890][T16643] RAX: ffffffffffffffda RBX: 00007f7d179e5fa0 RCX: 00007f7d1772af79 [ 166.770896][T16643] RDX: 00007f7d18552340 RSI: 00007f7d18552470 RDI: 0000000000000011 [ 166.770903][T16643] RBP: 00007f7d18553090 R08: 0000000000000000 R09: 0000000000000000 [ 166.770909][T16643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.770915][T16643] R13: 00007f7d179e6038 R14: 00007f7d179e5fa0 R15: 00007ffc1f6585a8 [ 166.770928][T16643] [ 166.930047][T16673] loop2: detected capacity change from 0 to 7 [ 166.938958][ T5355] Dev loop2: unable to read RDB block 7 [ 166.940994][ T5355] loop2: AHDI p2 [ 166.942311][ T5355] loop2: partition table partially beyond EOD, truncated [ 166.945957][T16673] Dev loop2: unable to read RDB block 7 [ 166.948211][T16673] loop2: AHDI p2 [ 166.949983][T16673] loop2: partition table partially beyond EOD, truncated [ 166.953543][T16687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.960135][ T5355] Dev loop2: unable to read RDB block 7 [ 166.963173][ T5355] loop2: AHDI p2 [ 166.964679][ T5355] loop2: partition table partially beyond EOD, truncated [ 166.990253][T16687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.006439][T16687] batman_adv: batadv0: Adding interface: ipvlan2 [ 167.008844][T16687] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.021234][T16687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.025585][T16687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.029328][T16687] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 167.047104][T16705] netlink: 'syz.0.1592': attribute type 21 has an invalid length. [ 167.061166][T16710] netlink: 'syz.0.1592': attribute type 21 has an invalid length. [ 167.086819][T16713] overlayfs: statfs failed on './file0' [ 167.111820][T16717] FAULT_INJECTION: forcing a failure. [ 167.111820][T16717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.118003][T16717] CPU: 1 UID: 0 PID: 16717 Comm: syz.1.1594 Not tainted syzkaller #0 PREEMPT(full) [ 167.118024][T16717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 167.118031][T16717] Call Trace: [ 167.118036][T16717] [ 167.118040][T16717] dump_stack_lvl+0x16c/0x1f0 [ 167.118059][T16717] should_fail_ex+0x512/0x640 [ 167.118075][T16717] __fpu_restore_sig+0xfe/0x13a0 [ 167.118095][T16717] ? __lock_acquire+0xb97/0x1ce0 [ 167.118108][T16717] ? __pfx___fpu_restore_sig+0x10/0x10 [ 167.118127][T16717] ? do_raw_spin_unlock+0x172/0x230 [ 167.118146][T16717] ? __might_fault+0xe3/0x190 [ 167.118156][T16717] ? __might_fault+0x13b/0x190 [ 167.118168][T16717] fpu__restore_sig+0x151/0x190 [ 167.118187][T16717] restore_sigcontext+0x4c9/0x6a0 [ 167.118204][T16717] ? __pfx_restore_sigcontext+0x10/0x10 [ 167.118228][T16717] ? __pfx_restore_altstack+0x10/0x10 [ 167.118243][T16717] ? _raw_spin_unlock_irq+0x23/0x50 [ 167.118259][T16717] ? lockdep_hardirqs_on+0x7c/0x110 [ 167.118281][T16717] __do_sys_rt_sigreturn+0x1bb/0x230 [ 167.118297][T16717] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 167.118317][T16717] do_syscall_64+0xcd/0x4e0 [ 167.118328][T16717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.118340][T16717] RIP: 0033:0x7fa67bf8eec9 [ 167.118350][T16717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.118361][T16717] RSP: 002b:00007fa67cdc6038 EFLAGS: 00000246 [ 167.118371][T16717] RAX: 0000000000000000 RBX: 00007fa67c1e5fa0 RCX: 00007fa67bf8eec9 [ 167.118378][T16717] RDX: 0000200000000000 RSI: 00000000c0606610 RDI: 0000000000000003 [ 167.118385][T16717] RBP: 00007fa67cdc6090 R08: 0000000000000000 R09: 0000000000000000 [ 167.118391][T16717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.118397][T16717] R13: 00007fa67c1e6038 R14: 00007fa67c1e5fa0 R15: 00007ffd58916908 [ 167.118410][T16717] [ 167.284158][T16732] comedi comedi3: comedi_config --init_data is deprecated [ 167.332790][T16736] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 167.458086][T16748] Invalid logical block size (4608) [ 167.514978][T16754] netlink: 'syz.2.1604': attribute type 30 has an invalid length. [ 167.538530][T16754] bond3: option arp_missed_max: invalid value (0) [ 167.541138][T16754] bond3: option arp_missed_max: allowed values 1 - 255 [ 167.546424][T16754] bond3 (unregistering): Released all slaves [ 167.561718][T16799] loop3: detected capacity change from 0 to 7 [ 167.570499][ T6406] Dev loop3: unable to read RDB block 7 [ 167.574146][ T6406] loop3: unable to read partition table [ 167.576661][ T6406] loop3: partition table beyond EOD, truncated [ 167.581314][T16799] Dev loop3: unable to read RDB block 7 [ 167.584943][T16799] loop3: unable to read partition table [ 167.587798][T16799] loop3: partition table beyond EOD, truncated [ 167.590322][T16799] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 167.689858][ T5949] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 167.691091][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 167.691101][ T40] audit: type=1400 audit(524455.303:966): avc: denied { ioctl } for pid=16827 comm="syz.2.1607" path="socket:[39908]" dev="sockfs" ino=39908 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 167.875851][T16837] __nla_validate_parse: 44 callbacks suppressed [ 167.875865][T16837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1609'. [ 167.881248][T16837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1609'. [ 167.971440][T16847] Invalid logical block size (5354) [ 168.004079][T16850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1615'. [ 168.046753][T16855] 9pnet_fd: p9_fd_create_unix (16855): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 168.064982][T16857] delete_channel: no stack [ 168.106607][T16857] delete_channel: no stack [ 168.200387][T16864] loop2: detected capacity change from 0 to 7 [ 168.204535][ T6406] Dev loop2: unable to read RDB block 7 [ 168.206668][ T6406] loop2: unable to read partition table [ 168.209423][ T6406] loop2: partition table beyond EOD, truncated [ 168.214432][T16864] Dev loop2: unable to read RDB block 7 [ 168.216570][T16864] loop2: unable to read partition table [ 168.218458][T16864] loop2: partition table beyond EOD, truncated [ 168.220797][T16864] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 168.263643][ T9859] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 168.265873][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1620'. [ 168.270245][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1620'. [ 168.494519][ T40] audit: type=1400 audit(524456.090:967): avc: denied { read } for pid=16885 comm="syz.4.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 168.509030][T16892] Invalid logical block size (5657) [ 168.525735][T16898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1626'. [ 168.546289][T16900] input: syz0 as /devices/virtual/input/input18 [ 168.548984][T16900] input: failed to attach handler leds to device input18, error: -6 [ 168.595628][T16916] loop2: detected capacity change from 0 to 7 [ 168.599074][T16916] Dev loop2: unable to read RDB block 7 [ 168.601070][T16916] loop2: AHDI p1 [ 168.602244][T16916] loop2: partition table partially beyond EOD, truncated [ 168.602553][T16918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1630'. [ 168.609189][T16918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1630'. [ 168.668575][T16928] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 168.679727][T16937] Invalid logical block size (6400) [ 168.732812][ T40] audit: type=1400 audit(524456.327:968): avc: denied { getopt } for pid=16926 comm="syz.4.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.748519][ T40] audit: type=1400 audit(524456.337:969): avc: denied { listen } for pid=16930 comm="syz.2.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 168.753316][T16948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1638'. [ 168.756894][ T40] audit: type=1400 audit(524456.337:970): avc: denied { accept } for pid=16930 comm="syz.2.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 168.825753][T16955] loop2: detected capacity change from 0 to 7 [ 168.828971][T16955] Dev loop2: unable to read RDB block 7 [ 168.831186][T16955] loop2: AHDI p2 [ 168.834419][T16955] loop2: partition table partially beyond EOD, truncated [ 168.906052][T16952] kvm: kvm [16951]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x600000ff [ 168.910301][T16952] kvm: kvm [16951]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x60000001 [ 168.932541][T16952] kvm: kvm [16951]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x600000ff [ 168.957658][T16952] kvm: kvm [16951]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x600000ff [ 168.961293][T16952] kvm: kvm [16951]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x60000001 [ 168.980365][T16952] kvm_intel: kvm [16951]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x600000ff [ 169.575261][T16967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1642'. [ 169.605613][ T5355] Dev loop2: unable to read RDB block 7 [ 169.609016][ T5355] loop2: AHDI p2 [ 169.611646][ T5355] loop2: partition table partially beyond EOD, truncated [ 169.727556][ T40] audit: type=1400 audit(524457.313:971): avc: denied { remount } for pid=16990 comm="syz.4.1649" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 169.861720][ T5355] Dev loop2: unable to read RDB block 7 [ 169.864156][ T5355] loop2: AHDI p2 [ 169.865911][ T5355] loop2: partition table partially beyond EOD, truncated [ 170.003130][T17006] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 170.225909][ T5355] Dev loop2: unable to read RDB block 7 [ 170.227936][ T5355] loop2: AHDI p2 [ 170.229307][ T5355] loop2: partition table partially beyond EOD, truncated [ 170.262697][ T5355] Dev loop2: unable to read RDB block 7 [ 170.264655][ T5355] loop2: AHDI p2 [ 170.265947][ T5355] loop2: partition table partially beyond EOD, truncated [ 170.312447][ T5355] Dev loop2: unable to read RDB block 7 [ 170.314564][ T5355] loop2: AHDI p2 [ 170.315986][ T5355] loop2: partition table partially beyond EOD, truncated [ 170.330549][T17040] cgroup: Unknown subsys name 'dont_hash' [ 170.357100][ T5355] Dev loop2: unable to read RDB block 7 [ 170.359231][ T5355] loop2: AHDI p2 [ 170.360567][ T5355] loop2: partition table partially beyond EOD, truncated [ 170.398677][ T5355] Dev loop2: unable to read RDB block 7 [ 170.400469][ T5355] loop2: AHDI p2 [ 170.401784][ T5355] loop2: partition table partially beyond EOD, truncated [ 170.430554][ T5355] Dev loop2: unable to read RDB block 7 [ 170.432754][ T5355] loop2: AHDI p2 [ 170.434586][ T5355] loop2: partition table partially beyond EOD, truncated [ 170.440613][T17053] usb usb8: usbfs: process 17053 (syz.2.1658) did not claim interface 0 before use [ 170.447904][T17053] netlink: 'syz.2.1658': attribute type 1 has an invalid length. [ 170.456345][T17053] usb usb8: usbfs: process 17053 (syz.2.1658) did not claim interface 0 before use [ 170.488567][ T5355] Dev loop2: unable to read RDB block 7 [ 170.490580][ T5355] loop2: AHDI p2 [ 170.491943][ T5355] loop2: partition table partially beyond EOD, truncated [ 170.509190][T16995] syz.1.1650 (16995): drop_caches: 1 [ 170.529259][ T5355] Dev loop2: unable to read RDB block 7 [ 170.531192][ T5355] loop2: AHDI p2 [ 170.532582][ T5355] loop2: partition table partially beyond EOD, truncated [ 170.583017][ T5355] Dev loop2: unable to read RDB block 7 [ 170.586664][ T5355] loop2: AHDI p2 [ 170.588433][ T5355] loop2: partition table partially beyond EOD, truncated [ 170.630217][ T5355] Dev loop2: unable to read RDB block 7 [ 170.632051][ T5355] loop2: AHDI p2 [ 170.633293][ T5355] loop2: partition table partially beyond EOD, truncated [ 170.650558][T17075] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 170.693592][ T5355] Dev loop2: unable to read RDB block 7 [ 170.696601][ T5355] loop2: AHDI p2 [ 170.700173][ T5355] loop2: partition table partially beyond EOD, truncated [ 170.793858][ T5355] Dev loop2: unable to read RDB block 7 [ 170.795990][ T5355] loop2: AHDI p2 [ 170.797343][ T5355] loop2: partition table partially beyond EOD, truncated [ 170.863631][ T5355] Dev loop2: unable to read RDB block 7 [ 170.866876][ T5355] loop2: AHDI p2 [ 170.868272][ T5355] loop2: partition table partially beyond EOD, truncated [ 170.897447][ T5355] Dev loop2: unable to read RDB block 7 [ 170.899683][ T5355] loop2: AHDI p2 [ 170.900875][ T5355] loop2: partition table partially beyond EOD, truncated [ 170.951816][ T40] audit: type=1400 audit(524458.507:972): avc: denied { getopt } for pid=17123 comm="syz.4.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 170.978702][T17131] loop2: detected capacity change from 0 to 7 [ 170.988688][ T6406] Buffer I/O error on dev loop2, logical block 0, async page read [ 170.994594][ T6406] Buffer I/O error on dev loop2, logical block 0, async page read [ 170.997505][ T6406] Buffer I/O error on dev loop2, logical block 0, async page read [ 171.000703][ T6406] Buffer I/O error on dev loop2, logical block 0, async page read [ 171.003801][ T6406] Buffer I/O error on dev loop2, logical block 0, async page read [ 171.007007][ T6406] Buffer I/O error on dev loop2, logical block 0, async page read [ 171.010186][ T6406] Buffer I/O error on dev loop2, logical block 0, async page read [ 171.017030][ T6406] ldm_validate_partition_table(): Disk read failed. [ 171.019125][ T6406] Buffer I/O error on dev loop2, logical block 0, async page read [ 171.021913][ T6406] Buffer I/O error on dev loop2, logical block 0, async page read [ 171.024625][ T6406] Buffer I/O error on dev loop2, logical block 0, async page read [ 171.027541][ T6406] Dev loop2: unable to read RDB block 0 [ 171.029676][ T6406] loop2: unable to read partition table [ 171.032287][ T6406] loop2: partition table beyond EOD, truncated [ 171.035602][T17131] ldm_validate_partition_table(): Disk read failed. [ 171.038648][T17131] Dev loop2: unable to read RDB block 0 [ 171.040809][T17131] loop2: unable to read partition table [ 171.043617][T17131] loop2: partition table beyond EOD, truncated [ 171.047938][T17131] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 171.189150][ T40] audit: type=1400 audit(524458.754:973): avc: denied { write } for pid=17160 comm="syz.4.1685" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 171.205884][ T40] audit: type=1400 audit(524458.773:974): avc: denied { accept } for pid=17165 comm="syz.2.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 171.252869][T17182] Invalid logical block size (21760) [ 171.284197][ T40] audit: type=1400 audit(524458.843:975): avc: denied { watch } for pid=17183 comm="syz.2.1691" path="/412/file0" dev="tmpfs" ino=2189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 171.422653][T17208] tmpfs: Unknown parameter 'usrquota0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.422653][T17208] 0 [ 171.488908][T17208] loop2: detected capacity change from 0 to 7 [ 171.492304][T17208] Dev loop2: unable to read RDB block 7 [ 171.494717][T17208] loop2: AHDI p2 [ 171.496606][T17208] loop2: partition table partially beyond EOD, truncated [ 171.562122][T17224] Invalid logical block size (21930) [ 171.737236][T17248] loop2: detected capacity change from 0 to 7 [ 171.741704][ T6406] Dev loop2: unable to read RDB block 7 [ 171.743788][ T6406] loop2: AHDI p2 [ 171.744987][ T6406] loop2: partition table partially beyond EOD, truncated [ 171.750818][T17248] Dev loop2: unable to read RDB block 7 [ 171.753128][T17248] loop2: AHDI p2 [ 171.754668][T17248] loop2: partition table partially beyond EOD, truncated [ 171.792208][T17259] Invalid logical block size (38911) [ 171.960009][T17288] (syz.4.1718,17288,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 171.963447][T17288] (syz.4.1718,17288,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 171.969341][T17288] (syz.4.1718,17288,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 171.974207][T17288] (syz.4.1718,17288,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 172.137986][T17302] loop2: detected capacity change from 0 to 7 [ 172.140970][T17302] Dev loop2: unable to read RDB block 7 [ 172.143044][T17302] loop2: AHDI p2 [ 172.144246][T17302] loop2: partition table partially beyond EOD, truncated [ 172.195850][T17312] Invalid logical block size (43605) [ 172.235836][T17298] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 172.239973][T17298] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.249370][T17298] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 172.251926][T17318] binder: Unknown parameter '0xffffffffffffffff' [ 172.262738][T17298] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 172.267479][T17298] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 172.269442][T17298] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 172.291699][T17298] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 172.358433][T17332] afs: Unknown parameter 'subj_role' [ 172.405293][T17340] loop2: detected capacity change from 0 to 7 [ 172.408976][ T6406] Dev loop2: unable to read RDB block 7 [ 172.410760][ T6406] loop2: AHDI p1 [ 172.411926][ T6406] loop2: partition table partially beyond EOD, truncated [ 172.420903][T17340] Dev loop2: unable to read RDB block 7 [ 172.423064][T17340] loop2: AHDI p1 [ 172.424288][T17340] loop2: partition table partially beyond EOD, truncated [ 172.473034][T17352] Invalid logical block size (48858) [ 172.632536][T17361] xfrm0 speed is unknown, defaulting to 1000 [ 172.636365][T17361] xfrm0 speed is unknown, defaulting to 1000 [ 172.642961][T17361] xfrm0 speed is unknown, defaulting to 1000 [ 172.648018][T17361] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 172.655350][T17361] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 172.689592][T17361] xfrm0 speed is unknown, defaulting to 1000 [ 172.708526][T17361] xfrm0 speed is unknown, defaulting to 1000 [ 172.713060][T17361] xfrm0 speed is unknown, defaulting to 1000 [ 172.721442][T17361] xfrm0 speed is unknown, defaulting to 1000 [ 172.725420][T17361] xfrm0 speed is unknown, defaulting to 1000 [ 172.761706][ T40] kauditd_printk_skb: 1607 callbacks suppressed [ 172.761724][ T40] audit: type=1326 audit(524460.305:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17351 comm="syz.4.1736" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058e38eec9 code=0x7ff00000 [ 172.777390][ T40] audit: type=1326 audit(524460.325:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17351 comm="syz.4.1736" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058e38eec9 code=0x7ff00000 [ 172.801054][ T40] audit: type=1326 audit(524460.325:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17351 comm="syz.4.1736" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058e38eec9 code=0x7ff00000 [ 172.816891][ T40] audit: type=1326 audit(524460.325:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17351 comm="syz.4.1736" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058e38eec9 code=0x7ff00000 [ 172.827847][ T40] audit: type=1326 audit(524460.325:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17351 comm="syz.4.1736" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058e38eec9 code=0x7ff00000 [ 172.838448][ T40] audit: type=1400 audit(524460.325:2588): avc: denied { create } for pid=17370 comm="syz.1.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 172.847160][ T40] audit: type=1326 audit(524460.325:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17351 comm="syz.4.1736" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058e38eec9 code=0x7ff00000 [ 172.856484][ T40] audit: type=1326 audit(524460.325:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17351 comm="syz.4.1736" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058e38eec9 code=0x7ff00000 [ 172.864348][ T40] audit: type=1400 audit(524460.335:2592): avc: denied { setopt } for pid=17370 comm="syz.1.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 172.873988][ T40] audit: type=1326 audit(524460.325:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17351 comm="syz.4.1736" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058e38eec9 code=0x7ff00000 [ 173.000459][T17390] loop2: detected capacity change from 0 to 7 [ 173.004072][T17390] Dev loop2: unable to read RDB block 7 [ 173.007002][T17390] loop2: unable to read partition table [ 173.009066][T17390] loop2: partition table beyond EOD, truncated [ 173.013323][T17390] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 173.187718][T17401] Invalid logical block size (51711) [ 173.310762][T17408] __nla_validate_parse: 42 callbacks suppressed [ 173.310773][T17408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1752'. [ 173.406824][T17415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'. [ 173.409915][T17415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'. [ 173.571505][T17427] Invalid logical block size (55998) [ 173.612298][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 173.637193][T17431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1761'. [ 173.723194][T17440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1762'. [ 173.812755][T17447] comedi comedi0: comedi_config --init_data is deprecated [ 173.828209][T17449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'. [ 173.844548][T17455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1767'. [ 173.847769][T17455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1767'. [ 173.925906][T17470] Invalid logical block size (58623) [ 173.971524][T17475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1772'. [ 174.011451][T17479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1773'. [ 174.178843][T17495] binder: 17494:17495 ioctl 4c08 4 returned -22 [ 174.203607][T17497] Invalid logical block size (59924) [ 174.256336][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.262553][ T5949] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.307651][ T9866] bridge_slave_0: left allmulticast mode [ 174.309485][ T9866] bridge_slave_0: left promiscuous mode [ 174.311351][ T9866] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.346362][ T5949] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.346384][ T5959] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.555130][ T9866] bond1 (unregistering): (slave geneve2): Releasing active interface [ 174.745613][T17526] Invalid logical block size (61439) [ 174.950266][ T9866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.956688][ T9866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.965074][ T9866] bond0 (unregistering): Released all slaves [ 174.977848][ T9866] bond1 (unregistering): Released all slaves [ 175.203005][T17555] Invalid logical block size (65023) [ 175.312628][T17569] binder: 17568:17569 ioctl c0306201 200000000080 returned -22 [ 175.512892][T17598] Invalid logical block size (65024) [ 175.526528][ T9866] hsr_slave_0: left promiscuous mode [ 175.530572][ T9866] hsr_slave_1: left promiscuous mode [ 175.533709][ T9866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.538348][ T9866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.545191][ T9866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.549436][ T9866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.553261][ T9866] batman_adv: batadv0: Removing interface: team0 [ 175.592970][ T9866] veth1_vlan: left promiscuous mode [ 176.112667][T17616] kvm: kvm [17615]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc1) = 0x5 [ 176.118119][T17616] kvm: kvm [17615]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc2) = 0x5 [ 176.142784][T17616] kvm: kvm [17615]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x11e) = 0x5 [ 176.416103][ T5959] Bluetooth: hci0: command 0x0c1a tx timeout [ 176.419931][ T5959] Bluetooth: hci2: command 0x0c1a tx timeout [ 176.708880][ T9866] team0 (unregistering): Port device team_slave_1 removed [ 176.810669][ T9866] team0 (unregistering): Port device team_slave_0 removed [ 177.457306][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 177.541998][T17681] Invalid logical block size (65279) [ 177.809500][T17715] Option 'Ô_n'¶tr—1ZQ¥3Œ ¬-Öµ²ÙkÕXÜv~’' to dns_resolver key: bad/missing value [ 177.860117][T17719] Invalid logical block size (65431) [ 177.882583][T17703] random: crng reseeded on system resumption [ 177.898015][T17703] 9pnet_fd: Insufficient options for proto=fd [ 178.112689][ T40] kauditd_printk_skb: 17935 callbacks suppressed [ 178.112705][ T40] audit: type=1400 audit(524721.644:20528): avc: denied { append } for pid=17746 comm="syz.0.1845" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 178.259056][T17760] Invalid logical block size (65481) [ 178.496104][ T5949] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.506368][ T5949] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.535580][T17771] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 178.544137][T17773] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17773 comm=syz.0.1848 [ 178.545590][T17771] sctp: [Deprecated]: syz.4.1850 (pid 17771) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.545590][T17771] Use struct sctp_sack_info instead [ 178.603561][T17778] __nla_validate_parse: 26 callbacks suppressed [ 178.603574][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1852'. [ 178.608746][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1852'. [ 178.632671][ T40] audit: type=1400 audit(524722.164:20529): avc: denied { getopt } for pid=17779 comm="syz.4.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 178.666517][T17784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1854'. [ 178.670617][T17786] Invalid logical block size (65508) [ 178.702182][T17793] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1856'. [ 178.703828][ T40] audit: type=1404 audit(524722.234:20530): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 178.711704][ T40] audit: type=1400 audit(524722.244:20531): avc: denied { setopt } for pid=17789 comm="syz.0.1857" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 178.718800][ T40] audit: type=1400 audit(524722.244:20532): avc: denied { write } for pid=17789 comm="syz.0.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 178.725374][ T40] audit: type=1400 audit(524722.254:20533): avc: denied { prog_load } for pid=17789 comm="syz.0.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 178.733394][ T40] audit: type=1400 audit(524722.254:20534): avc: denied { write } for pid=17789 comm="syz.0.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 178.734066][T17790] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 178.740099][ T40] audit: type=1400 audit(524722.254:20535): avc: denied { read write } for pid=13025 comm="syz-executor" name="loop4" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 178.740136][ T40] audit: type=1400 audit(524722.264:20536): avc: denied { recv } for pid=17789 comm="syz.0.1857" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=56736 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 178.782755][ T40] audit: type=1400 audit(524722.314:20537): avc: denied { read write } for pid=5954 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 178.861434][ T9866] IPVS: stop unused estimator thread 0... [ 178.912548][T17810] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1862'. [ 179.377606][ T9866] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 183.226723][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.499958][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 184.499974][ T40] audit: type=1400 audit(524728.034:20570): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 184.513560][ T9876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 186.256989][ T40] audit: type=1400 audit(524729.794:20571): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=56736 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 187.697591][ T40] audit: type=1400 audit(524731.234:20572): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 188.976275][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.616798][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.619055][ T41] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 189.621840][ T40] audit: type=1400 audit(524733.154:20573): avc: denied { egress } for pid=28 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 192.818405][ T40] audit: type=1400 audit(524736.354:20574): avc: denied { egress } for pid=41 comm="kworker/u32:2" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 194.096479][ T40] audit: type=1400 audit(524737.634:20575): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=56736 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 195.376699][ T1168] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 199.858478][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.496685][ T9866] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.256819][ T9866] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 209.457897][ T40] audit: type=1400 audit(524752.994:20576): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=56736 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 209.980226][ T40] audit: type=1400 audit(524753.514:20577): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 211.013259][ T40] audit: type=1400 audit(524754.544:20578): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 212.016567][ T9876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.656951][ T40] audit: type=1400 audit(524756.194:20579): avc: denied { egress } for pid=0 comm="swapper/2" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 213.297061][ T40] audit: type=1400 audit(524756.834:20580): avc: denied { egress } for pid=28 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 214.013014][ T40] audit: type=1400 audit(524757.544:20581): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 217.058932][ T41] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.776179][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.776536][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.779318][ T40] audit: type=1400 audit(524761.314:20582): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 220.013268][ T40] audit: type=1400 audit(524763.544:20583): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 222.257553][ T9866] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.017311][ T9876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.657810][ T40] audit: type=1400 audit(524772.194:20584): avc: denied { egress } for pid=9876 comm="kworker/u32:37" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 230.491440][ T40] audit: type=1400 audit(524774.024:20585): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 232.013193][ T40] audit: type=1400 audit(524775.544:20586): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 233.056760][ T9876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.267433][ T40] audit: type=1400 audit(524780.804:20587): avc: denied { recv } for pid=0 comm="swapper/1" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 238.896891][ T9866] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 239.536629][ T40] audit: type=1400 audit(524783.074:20588): avc: denied { recv } for pid=5996 comm="kworker/2:4" saddr=127.0.0.1 src=56736 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 244.012735][ T40] audit: type=1400 audit(524787.544:20589): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 244.656937][ T9876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 250.417632][ T41] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.006813][ T40] audit: type=1400 audit(524794.544:20590): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 254.509799][ T40] audit: type=1400 audit(524798.044:20591): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 255.009705][ T40] audit: type=1400 audit(524798.544:20592): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 256.012790][ T40] audit: type=1400 audit(524799.544:20593): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 256.177475][ T41] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 261.301910][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.937417][ T9876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.514979][ T40] audit: type=1400 audit(524806.044:20594): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 263.015106][ T40] audit: type=1400 audit(524806.544:20595): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 267.056616][ T9866] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.012526][ T40] audit: type=1400 audit(524811.544:20596): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 270.021214][ T40] audit: type=1400 audit(524813.554:20597): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 272.816748][ T9866] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.022419][ T40] audit: type=1400 audit(524816.554:20598): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 276.659688][ T40] audit: type=1400 audit(524820.194:20599): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 276.669702][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.674961][ T40] audit: type=1400 audit(524820.204:20600): avc: denied { egress } for pid=28 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 278.576832][ T6094] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.012787][ T40] audit: type=1400 audit(524823.544:20601): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 281.781481][ T40] audit: type=1400 audit(524825.314:20602): avc: denied { egress } for pid=5996 comm="kworker/2:4" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 284.336783][ T9866] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 289.456472][ T6094] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.012459][ T40] audit: type=1400 audit(524835.544:20603): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 292.017886][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 294.576558][ T9876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.139266][ T40] audit: type=1400 audit(524840.674:20604): avc: denied { egress } for pid=55 comm="kworker/1:1" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 300.336566][ T9876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 302.267431][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.270577][ T40] audit: type=1400 audit(524845.804:20605): avc: denied { recv } for pid=5996 comm="kworker/2:4" saddr=127.0.0.1 src=56736 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 302.281963][ T40] audit: type=1400 audit(524845.814:20606): avc: denied { egress } for pid=40 comm="kauditd" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 304.012277][ T40] audit: type=1400 audit(524847.544:20607): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 306.096699][ T41] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.856571][ T9866] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 316.012058][ T40] audit: type=1400 audit(524859.544:20608): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 317.618377][ T40] audit: type=1400 audit(524861.154:20609): avc: denied { egress } for pid=9876 comm="kworker/u32:37" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 321.456844][ T9876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.740680][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.217147][ T1168] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 328.011982][ T40] audit: type=1400 audit(524871.544:20610): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 332.256855][ T9866] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 337.296788][ T41] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 340.011996][ T40] audit: type=1400 audit(524883.544:20611): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 342.338591][ T6094] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 347.696826][ T9866] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 352.011822][ T40] audit: type=1400 audit(524895.544:20612): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 352.817314][ T1168] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 358.576679][ T41] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 363.616608][ T9876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 364.011787][ T40] audit: type=1400 audit(524907.544:20613): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 368.828175][ T6094] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 373.937610][ T41] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 376.011742][ T40] audit: type=1400 audit(524919.544:20614): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 378.977238][ T1168] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 384.016711][ T41] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 384.178540][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.011868][ T40] audit: type=1400 audit(524931.544:20615): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 389.296725][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.296883][ T9866] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 395.056645][ T9876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 400.011737][ T40] audit: type=1400 audit(524943.544:20616): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 400.176795][ T9876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 404.658811][ T40] audit: type=1400 audit(524948.194:20617): avc: denied { egress } for pid=9876 comm="kworker/u32:37" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 404.666971][ T40] audit: type=1400 audit(524948.194:20618): avc: denied { egress } for pid=9876 comm="kworker/u32:37" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 405.936725][ T6094] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 409.779000][ T40] audit: type=1400 audit(524953.314:20619): avc: denied { egress } for pid=28 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 411.056968][ T6094] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 412.011300][ T40] audit: type=1400 audit(524955.544:20620): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 416.817121][ T41] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 421.936866][ T6094] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 424.011455][ T40] audit: type=1400 audit(524967.544:20621): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 425.138217][ T40] audit: type=1400 audit(524968.674:20622): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=56736 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 426.976675][ T9866] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.016760][ T9866] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 435.377390][ T40] audit: type=1400 audit(524978.914:20623): avc: denied { egress } for pid=41 comm="kworker/u32:2" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 436.010949][ T40] audit: type=1400 audit(524979.544:20624): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 437.147007][ T6094] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 440.496341][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 442.417291][ T9876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 445.617916][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.546408][ T9866] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 448.010961][ T40] audit: type=1400 audit(524991.544:20625): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 453.296785][ T9876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 460.011098][ T40] audit: type=1400 audit(525003.544:20626): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 462.896674][ T9876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 468.016694][ T1168] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 472.010785][ T40] audit: type=1400 audit(525015.544:20627): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 473.136626][ T1168] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 478.896757][ T9876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 484.010756][ T40] audit: type=1400 audit(525027.544:20628): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47490 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 VM DIAGNOSIS: 19:37:21 Registers: info registers vcpu 0 CPU#0 RAX=00000000001e0083 RBX=0000000000000000 RCX=ffffffff8b513a89 RDX=0000000000000000 RSI=ffffffff8d8276c6 RDI=ffffffff8bd04140 RBP=fffffbfff1bd2f40 RSP=ffffffff8de07e08 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=ffffffff9aa6aa48 R12=0000000000000000 R13=ffffffff8de97a00 R14=ffffffff905fbb90 R15=0000000000000000 RIP=ffffffff8b5125af RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6e67000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055b0474db168 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000400 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdb33fb7d20 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555e039035 000055555e038ea0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555e032fa8 000055555e032ec0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b0030fffffffffff ff0402a003000800 0298032208000290 0300100002800318 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000039003001000 0380030004028004 001000060176b20f 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff040380 0400100000080008 0176cc12100003b0 0300100003a00310 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01000418868398a0 0800010000000806 060120fa5c100001 b00300100001a003 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010000190030196 1000018003101000 700300100060030f ffffffffffff0450 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030010004003089c c0800430033e8080 0420030680808080 8080808010001003 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01c0100000030fff ffffffffff040380 0400100000080008 0176cc12100003b0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303a3030303001ff ffffffffffffffe5 0808c00304040008 bc0322040008b803 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 70656378655f7570 660a736579203a09 097570660a31203a 0964696369706120 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 090970770a323220 3a096c6576656c20 64697570630a7365 79203a096e6f6974 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7374206573702065 6420656d76207570 66203a0909736761 6c660a736579203a ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73617079625f6572 6f74735f63657073 2032765f65727463 6570732031765f65 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6e5f6270626920 6968622062737262 705f737262696520 7367706177732073 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74616e5f73746920 7374692072657375 5f32765f65727463 657073207465725f ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c666c630a34302e 30303235203a0973 70696d6f676f620a 796c6e6f5f657669 info registers vcpu 1 CPU#1 RAX=000000000021e48f RBX=0000000000000001 RCX=ffffffff8b513a89 RDX=0000000000000000 RSI=ffffffff8d8276c6 RDI=ffffffff8bd04140 RBP=ffffed1003b54490 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801daa2480 R14=ffffffff905fbb90 R15=0000000000000000 RIP=ffffffff8b5125af RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6f67000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055b03fe99660 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000121 Opmask01=0000000000000001 Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 75c83d850e8aa100 3b90a00ba7681e04 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c55cea7e0c02703 26c996261575e754 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 79776ddd148c7aa2 b214e0b3b4c4b7f0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f77b3866a453aae2 763220c87bfb3d37 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000240 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f8b90c08b73731fd a058e5f646cd0182 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6076cf4aa86e3f4b 1950bef791307ee1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e11376c393ad9400 08529c6cdc388688 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8b7abfa65e7890fd 21d5b61b6a6167ce ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 228dbd27df47ec78 eb3e6c5fd38512f3 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 251747ac0083a289 1b42bb55481f51b5 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69622f3a6e6962 732f7273752f3a6e 69622f7273752f00 0a732520202d2000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b4c470a1f4b4c47 560a5756500a1f4b 4c470a5756500a00 0a56000505080500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6474656e0002000f 0000006d69737665 6474656e0001000e 803e002c0000006d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8041000400000000 000300080000336d 697376656474656e 0002000f0000006d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697376656474656e 0001000e803e002c 0000006d69737665 6474656e0039000e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000336d69737665 6474656e0038000f 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000e002400000000 0008000500000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020642020206100 6361200a34312064 64203220200a2065 200a203300303420 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000002a74d9 RBX=0000000000000002 RCX=ffffffff8b513a89 RDX=0000000000000000 RSI=ffffffff8d8276c6 RDI=ffffffff8bd04140 RBP=ffffed1003b54920 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d506655 R10=ffff88806a8332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801daa4900 R14=ffffffff905fbb90 R15=0000000000000000 RIP=ffffffff8b5125af RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7067000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055b0474db168 CR3=000000002e073000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000031 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3376fd5b 00007fff3376fd5b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff33770260 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff33770260 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3235287469647561 20303034313d6570 7974203a74696475 61200000303d6500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3235227463647561 2030303431376570 7374203074636475 6120000030376500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f3a755f6d657473 79733d747865746e 6f637420745f6468 73733a725f6d6574 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20726565703d7373 616c637420745f64 656c6562616c6e75 3a725f7463656a62 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303d657669737369 6d72657020726565 703d7373616c6374 20745f64656c6562 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616c6e753a725f74 63656a626f3a755f 6d65747379733d74 7865746e6f637420 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 745f646873733a72 5f6d65747379733a 755f6d6574737973 3d747865746e6f63 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7320306874653d66 6974656e2032323d 747365642035312e 322e302e30313d72 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000199975 RBX=0000000000000003 RCX=ffffffff8b513a89 RDX=0000000000000000 RSI=ffffffff8d8276c6 RDI=ffffffff8bd04140 RBP=ffffed1003b56000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d526655 R10=ffff88806a9332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801dab0000 R14=ffffffff905fbb90 R15=0000000000000000 RIP=ffffffff8b5125af RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7167000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f38d19656c8 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000015422003 Opmask01=0000000000000001 Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a8efea675de65510 0c6fc3baf808caaa ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 edf9ee7eb5f16a56 f428c0764bd43a8b ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 89799eeac8c81f40 2c64ae0ece6d5a12 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6dbbe6497f5d355b dda338cbf82162f9 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b830bd4652e34a23 4788c61368852d3f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d42afa7534a66ff4 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2059a59b156db1a2 6a94e297906c2fca ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 baa921ec00000000 8f1c948c051a7ea4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a51c0fc115e7960 26df26b55b9107da ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c1ab589cde0ea76 96d66bd5d80bfcb4 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6168730073257325 7325204650420050 5241006e65706f5f 667062203a732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444d560056005600 5600054650420050 5241004b40554a5f 435547051f560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6474656e0002000f 0000006d69737665 6474656e0001000e 803e002c0000006d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8041000400000000 000300080000336d 697376656474656e 0002000f0000006d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697376656474656e 0001000e803e002c 0000006d69737665 6474656e0039000e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000336d69737665 6474656e0038000f 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000e002400000000 0008000500000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020642020206100 6361200a34312064 64203220200a2065 200a203300303420 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000