last executing test programs: 1m0.601052626s ago: executing program 3 (id=144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000040)={0x0, 0x5078, 0xc00, 0x100002, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000180)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000500)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x49, 0x0, 0x9, 0x3, 0x0, 0x10, 0x0, 0x1}) io_uring_enter(r3, 0x1, 0x1, 0x5, 0x0, 0x0) r7 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) fcntl$addseals(r7, 0x409, 0x3) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x64}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4040) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000004c0)={r7, 0x1, 0x0, 0x2000}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000780)={0x0, 0x0, '\x00', @bt={0x6, 0x7ff, 0x8, 0x3, 0x0, 0x0, 0x1d, 0x9}}) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_1\x00'}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r1, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) 1m0.600763444s ago: executing program 3 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0xc1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000013c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000001480)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bcbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/net/can/rcvlist_all\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="040e04093120"], 0x7) 59.928150539s ago: executing program 3 (id=153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x40, r1, 0x5, 0x30000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x0, {0x800, 0xffff, 0x5, 0xfff}}}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, 0x40}}, 0x20004084) 59.927831456s ago: executing program 3 (id=154): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000002600000326bd7000fedbdf250811000006000300000000000600040000000000e7efbff7edb07f86fc5ff1f2b0ef529ce0ffb60c49eec63aa2f9f1ca3ea6d3edd0f2106c8270e56b636918b86deba0b827796d752a7a5378616eff84972f64b99dfda0faf38081ca83f1b8c0fad81165d90b9bb84701e5e3109dde98aaad8bab988a490eede018bf45b9c44eef6828966c0b57f6a0fad7937702b4d62fb343848be56ee770ddc959b53789503c58c6cc3f6442b4b529ae5bfcce9bc8a571"], 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x4) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000002600000326bd7000fedbdf250811000006000300000000000600040000000000e7efbff7edb07f86fc5ff1f2b0ef529ce0ffb60c49eec63aa2f9f1ca3ea6d3edd0f2106c8270e56b636918b86deba0b827796d752a7a5378616eff84972f64b99dfda0faf38081ca83f1b8c0fad81165d90b9bb84701e5e3109dde98aaad8bab988a490eede018bf45b9c44eef6828966c0b57f6a0fad7937702b4d62fb343848be56ee770ddc959b53789503c58c6cc3f6442b4b529ae5bfcce9bc8a571"], 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x4) syz_emit_ethernet(0x56, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f40000000000000ff0200000000000000000000000000010001c204dc"], 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f40000000000000ff0200000000000000000000000000010001c204dc"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a40)=ANY=[], 0x184}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r2 = socket$unix(0x1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./tracing\x00', &(0x7f0000000840)='tracefs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000800)='./tracing\x00', &(0x7f0000000840)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./tracing/uprobe_events\x00', 0x81, 0x41) write(r3, &(0x7f00000008c0)='p:t_st/event1 ./file0:0x0 arg2=$', 0x20) (async) write(r3, &(0x7f00000008c0)='p:t_st/event1 ./file0:0x0 arg2=$', 0x20) bind$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = syz_io_uring_setup(0x208c, &(0x7f0000000400)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bc}, &(0x7f0000000100), &(0x7f0000000900), &(0x7f0000000940)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)=""/113, 0x71}], 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)=""/113, 0x71}], 0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$unix(0x1, 0x2, 0x0) (async) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r5, &(0x7f0000000100), 0x307017fdb7a66cb, 0x3ec0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000700)) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a0a050023080000440012800b000100697036746e6c00"], 0x64}, 0x1, 0x0, 0x0, 0x400e0}, 0x4008000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) symlinkat(&(0x7f0000000180)='./file1\x00', r0, &(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00') socket$nl_route(0x10, 0x3, 0x0) 59.811835349s ago: executing program 3 (id=156): syz_open_dev$loop(0x0, 0xf01c, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000540)={0x0, 0x0, @pic={0x5, 0xa, 0x1, 0x5, 0x1, 0x2, 0x3, 0x0, 0x7, 0x80, 0x6, 0x4, 0x1, 0x80, 0x2d, 0xc}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000780)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x1, 0xb, 0x5, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 59.526760932s ago: executing program 3 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/trace_clock\x00', 0x1, 0x0) close(0x3) 59.454633818s ago: executing program 32 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/trace_clock\x00', 0x1, 0x0) close(0x3) 5.394484701s ago: executing program 2 (id=683): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) 5.300844929s ago: executing program 2 (id=685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="01002cbd700000100000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32, @ANYBLOB="0c000180080001", @ANYRES32, @ANYBLOB="0c00010028010000000000007104baf9e9260570f1539facea93b34858023a7b46af9a1190c109ff2b99f29d7e2dfd981de5ac5b0afd747e8ac7ac94819bfbc5eaede5ba168b05b19121d0073a9ee37daf03f84875d6a68afa161b689aa87040950fd0d3872639ae86bee695037c4a1bce3c9dbd65eb81662e74d10702c893825ee74b461b15b20e4ec7d7c3c3af"], 0x48}}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="f40600", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.227117263s ago: executing program 2 (id=687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001d80)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0x5}}]}}]}, 0x40}}, 0x4c800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000580)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)='\r', 0x1}], 0x1}, 0x8004) (fail_nth: 3) 5.112897926s ago: executing program 2 (id=689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x2383, @loopback}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x275a, 0x0) getpeername$inet(r5, &(0x7f0000000780)={0x2, 0x0, @multicast2}, &(0x7f00000007c0)=0x10) unshare(0x2040400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r6, 0x2) write$cgroup_int(r5, &(0x7f0000000100), 0x12) sendfile(r4, r5, 0x0, 0xffffffff000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000400)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r7}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.110912888s ago: executing program 0 (id=690): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xb5, &(0x7f0000000300)={@empty, @broadcast, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@x25={0x805, {0x0, 0x3, 0xb, "0c5ca9a409dceb3b4623f50d58123f244a873c77ef475da41f8544ac3cd2bad10295fdab9253ad56f8e54e25270e3005e07340b0e1be205a47c8ce431125cfe9e8b3c118cf0bcf34a7ab7948bd1eb769d3729f15ac833fc5a0f2c8483fc7dfa840c39ed25be1ba800e723b8a14d3a391555e1d137ce52205cace841bf800d327edc1570dbbc96c42c6a576d3710b1f2383a02f30dd85cd262e3af8c7b351a94c"}}}}, &(0x7f00000003c0)={0x1, 0x2, [0x1eb, 0xed5, 0x8b3, 0x966]}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x121040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 5.042759584s ago: executing program 2 (id=691): syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e0403220c"], 0x7) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@fallback, 0xffffffffffffffff, 0x1e, 0x903ea37b68dc12bf}, 0x20) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@mask_fadd={0x58, 0x114, 0x8, {{0xffff, 0x4}, 0x0, 0x0, 0x1, 0x1d, 0x8, 0x800, 0x3f, 0x3}}], 0x58}, 0x0) syz_usb_connect(0x1, 0x8e, &(0x7f0000000c80)={{0x12, 0x1, 0x250, 0xf7, 0x13, 0x66, 0x20, 0x483, 0x1234, 0x2b92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x1, 0xf1, 0x5, 0x0, 0x7, "", [{{0x9, 0x4, 0xc1, 0x5, 0x6, 0x77, 0x4f, 0x41, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x800, 0x2b}, [@extension_unit={0x9, 0x24, 0x8, 0x4, 0x2, 0x3, '0Q'}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x201, 0x6, 0x0, 0x4, 0x3, 0xa6}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x1ff, 0x3, 0x61, 0x8, 0x8, 0x2}]}], [{{0x9, 0x5, 0x0, 0x3, 0x400, 0x3, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x8, 0x9, 0x92}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x8, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x69, 0x9fa}]}}, {{0x9, 0x5, 0xa, 0x2, 0x10, 0x4, 0xfa, 0xc7}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x10, 0xff, 0x8, [@generic={0x2}]}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x0, 0x8, 0x10}}]}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x250, 0x5, 0x5, 0x62, 0x20, 0x9}, 0x0, 0x0, 0x5, [{0xf1, &(0x7f0000001100)=@string={0xf1, 0x3, "1722980318d4fbcb82bc52df73a25514423906ea992240863ad586945ac0f587763957cfab628e8a21bec9f692279085289ad3f497d76afb566c11e3029747166a549bd8754c5ec3fdfedb7cbb66ea3b8be0934617a3b4629478737ea811cc50951f60a8b92374b8334f9a6b1972c11d2e09de8a55096c5a03117f689046626ed9ce0382900cbbe1b9838f3c1f8dce5d7144ff4b1e94c13ad7d9e02bf7cf95f63ec6ef6756726056c54b3d374153764e44c12cf1945d0a7715c83bd2ada2ecdd5d472378ac76bfeebf55198db63d9a2f82888219637261ae19061baa82a876423adbf056aa3a22edc7b2fae8026603"}}, {0x66, &(0x7f0000001200)=@string={0x66, 0x3, "fd75058d875ee3801928a7dfbcc4258e5778bc186e2b652342b143e4acc3a2de69369437f2f6ca67ff33bebfe678763ed2b0cdc980ee399cfa71f27b0b7bcdc2b005766803ea42b99c621fa3ec9fe915b52a66ac3a6aa07a4cee495ff2071637c6987327"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x240a}}, {0xc9, &(0x7f00000012c0)=@string={0xc9, 0x3, "91632ecf893e2a43e236c7b6a5a0321e86b088f6470fcaf38a256666bb623e8465ddd85d05579508bf4652835a137a3324cc8a68c894d39a57793821e846ba741979411cad9f65d01fe7a1bc27ffa7b0f6a36fe308ea7e76876fce4d5389d9a9cf892e4c7a565bd85b07b82b5fab92d6e6c8855fe42b0ec8f8c96e99bfd0281325f90a0b676b3615305882a299271f151c5c29ee42875151177de6a41d4954f23e83d3b36ed618828808116c3af362771ba55275075bd1350981cbb1d90e667845612c4ae2c8de"}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0xf8ff}}]}) 4.260300652s ago: executing program 1 (id=701): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00', 0x181) syz_usb_connect(0x0, 0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000404f1004000001010200010902200001010080320904000002000000000705810200020007050202", @ANYRES16], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/ttyUSB0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/virtio/drivers/virtio_net/uevent\x00', 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000003c0)=[@increfs]}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000700)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000440)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x100a, 0x2, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000640)={0x0, 0x18, 0x30}}}], 0x17}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000006c0)=[@increfs={0x40046304, 0x1}]}) 2.860304473s ago: executing program 4 (id=707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000000)=0x2000004, 0x4) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) setns(0xc9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x400c0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000001100)=@newtfilter={0x908, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0x10, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @filter_kind_options=@f_basic={{0xa}, {0x890, 0x2, [@TCA_BASIC_POLICE={0x884, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x7, 0xfffff801, 0x9ea, 0x1d, 0x9, 0x1, 0xe, 0x401, 0x6, 0x5, 0x9, 0xa, 0xf, 0x1000, 0x80, 0x9, 0x5, 0x8, 0x7, 0x3ff, 0x0, 0x8, 0x9, 0x2f5a, 0x8a6, 0x1, 0x100, 0x9, 0x2, 0x5, 0x7, 0xfffffff7, 0x1, 0x0, 0x6c, 0xf145, 0x3, 0x9, 0xfff, 0x0, 0x7, 0x2, 0x1, 0x4, 0x1, 0x3, 0x4, 0x3ff, 0x4, 0x7, 0x8, 0x4, 0x2, 0x3, 0x3, 0x8, 0xd8c3, 0x9, 0x4, 0xffff442a, 0x0, 0x7, 0xfffff001, 0x6, 0xfff, 0x100, 0x200, 0x200, 0x0, 0x5, 0x71, 0x9, 0x5, 0x4, 0x8, 0x80000001, 0x1, 0x2, 0x8, 0x5, 0xffffffff, 0x8, 0x427, 0x2, 0x80, 0x1ff, 0x4, 0x0, 0x3, 0x7fff, 0x2c7, 0xb3a9, 0x5, 0x1, 0x1, 0x5, 0x5f2, 0x8, 0xc3, 0x8, 0x0, 0x3, 0x2, 0xc, 0x7, 0x4, 0x83, 0x5, 0x0, 0x7, 0xffffffff, 0x7ff, 0x800, 0x9, 0x2, 0x6, 0x400, 0x1, 0x7, 0x5, 0x9, 0x81, 0x7fff, 0x1, 0x9, 0x2, 0x7, 0xfffffffa, 0x8, 0x400, 0x7, 0xa6, 0x9, 0x1ff, 0x40, 0x9, 0x9, 0x1, 0xffff4979, 0x9, 0x0, 0x4, 0x7, 0x1, 0x9, 0x0, 0x7, 0x8, 0x81, 0xf, 0x7ff, 0x0, 0x8, 0x101, 0xbb, 0x80, 0x6, 0x6, 0x0, 0x6c, 0x80000001, 0x80, 0x9, 0x5, 0x4, 0x9, 0xffffff27, 0x504f9ae1, 0x8, 0x8000, 0x7, 0x1ff, 0x1, 0x7, 0x10001, 0x2, 0x4, 0x5, 0x679, 0x9, 0x1ff, 0x9, 0x5, 0x8, 0x1ff, 0xe0, 0x0, 0x80000001, 0x1, 0x81, 0x2, 0xb, 0x24a4cbdc, 0x3, 0x7, 0x232f, 0x6c8b, 0x7, 0x4, 0x8, 0x401, 0x6, 0x7, 0x120, 0x0, 0x2, 0x800, 0x85, 0x81, 0xffffffff, 0x9, 0x0, 0xfffffff9, 0x3, 0x400, 0x1, 0xd94, 0x8, 0xd14, 0x7, 0xa, 0x3, 0x4, 0x9, 0xda, 0x6, 0x80, 0x53a, 0x1, 0x0, 0x3, 0x19, 0xb3e6, 0x8, 0xe86, 0x5, 0xb7, 0x4, 0x5, 0x8, 0x1, 0x308, 0x8, 0xf89, 0x0, 0xfffffff1, 0x8, 0x4, 0x400, 0x7ad, 0xe9ad, 0xb, 0x8, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x18}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc4a, 0x8, 0x3894df38, 0x8, 0x2, {0x5, 0x0, 0x6, 0xc05, 0x1, 0x3}, {0xce, 0x2, 0x2, 0x8, 0x1, 0x101}, 0x6, 0x1, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x45, 0x400, 0x4, 0x4, 0x5e3, 0xc, 0x0, 0xfff, 0x196d, 0x6, 0x8d16, 0x42, 0x4, 0xfffffffa, 0x7fffffff, 0x7, 0x2, 0xd7c, 0x815f, 0x10001, 0x6, 0x10, 0x1, 0xb87a, 0xf0fb, 0x1c00000, 0x3, 0x4, 0xdf79, 0x1000, 0x7, 0x305, 0xf, 0x101, 0x1, 0x1, 0xe, 0x2, 0x2, 0x80000001, 0x8, 0x2, 0x3, 0x0, 0x6, 0x7ff, 0x7, 0xcc3, 0x5, 0x3, 0x7e, 0xfff, 0x1, 0x1, 0x5cf6cdc3, 0xaea, 0x2, 0x2, 0xff, 0x5, 0x3, 0x7ff, 0xffc00000, 0x18000, 0x10000, 0x1, 0x5, 0xffffffff, 0x6, 0x7fff, 0x9, 0x4, 0x5, 0xce0, 0x1, 0x1000, 0x0, 0x40, 0x5efd, 0x2, 0x100, 0xd, 0x1, 0x3, 0x3, 0x553f, 0x1, 0x3, 0x4, 0x8, 0x3, 0x7, 0x0, 0x9ef, 0x400, 0x1383, 0x0, 0x2, 0x9, 0x10000, 0xffff, 0x9, 0x8, 0x10001, 0x5, 0x5, 0x1, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x54, 0x23, 0x8, 0xfffffffe, 0x4092, 0x5, 0xffff, 0x8, 0xbac, 0x81, 0x5, 0x8b76, 0x7, 0x400, 0x415c, 0x4, 0x2, 0x8c, 0x161, 0x8, 0xe92, 0xffff8001, 0x6, 0x4d593606, 0x10001, 0xfffffff3, 0xfffffffa, 0x6, 0x349, 0xe, 0x3, 0x7, 0x0, 0x9, 0x1, 0x80000, 0x6, 0x8, 0x2c, 0x528015f0, 0x3, 0x8873, 0x2, 0x4, 0x5, 0x100, 0xa63, 0xdc20, 0xffffffff, 0x9, 0x9, 0x8001, 0x9, 0x800, 0x3, 0x7ff, 0x8, 0xfffffff4, 0x2, 0x400, 0xa98, 0x8, 0x7, 0x4, 0x6, 0xe6a, 0x200, 0x5, 0x6, 0x4, 0x44, 0xc, 0x876, 0x8000, 0xf55, 0x4, 0xffff55e3, 0x8, 0x3, 0x5, 0x7, 0x6450, 0x5, 0x9, 0x5, 0xfffff800, 0x10, 0x4, 0x4, 0x0, 0x1, 0x0, 0xfffffe01, 0x9, 0x10, 0x5, 0x8001, 0x0, 0x0, 0x8, 0x10, 0xfffffb49, 0x0, 0x0, 0xc, 0x1, 0xa, 0x4, 0x6, 0x611d, 0x7, 0x3, 0x408, 0xfff, 0x0, 0x8, 0xffffffff, 0x6, 0x6, 0x1, 0xfff, 0x500, 0x7, 0x5, 0xf00, 0x7, 0x10000, 0x9, 0x466cffac, 0x100, 0x8, 0x3, 0x5, 0x8, 0x5, 0x9, 0xf1, 0x5, 0x6, 0xba, 0x6, 0x3, 0x5, 0x5]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x3c65ee7b80a046a}}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0xbe04}, @TCA_CHAIN={0x8, 0xb, 0x401}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}]}, 0x908}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x4000}) setns(0xc9, 0x0) r9 = socket(0x8, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r9) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000f00), 0x56) r10 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r10, 0x8982, &(0x7f0000000440)={0x0, 'veth1_virt_wifi\x00', {0x13}, 0xffbd}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0xfffffee4, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="58000000100001002dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1843010000000000140003007866726d30000000000000000000000024001a8020000a800500080002000000000008005c0000005772602103b262d241bc3e615453726c5eafd99d8e716b0731d70b535f985cdeadc27ca1f63a597006367e79552d708c4991da8450f16edcb3e2107ad97595192412b21746ac8d3280a4ab226530465d3e98762e1f56d6fbacea68af3a35bd92682fa7aa2751f66534f2029eca4ab7aa632659c2c4a8d075d2ea5091e4b4b420393931989866ecd8f301e73141cf88fab7d664"], 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) sendmsg$kcm(r8, &(0x7f0000000f40)={&(0x7f0000000f80)=@xdp={0x2c, 0x0, r7, 0x2042}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="27030200dc0f14000e0007000024c1020000fc24451551e792289fc77e4dca6e341e3207c2fb7fe0406e52534b4f", 0x2e}], 0x1}, 0x4005) 2.729254288s ago: executing program 4 (id=708): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000cc0)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f00)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002280)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002340)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x0, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x90}}, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x0, 0x6, 0x588}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) (fail_nth: 3) 2.600343229s ago: executing program 4 (id=709): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000540), 0x0, 0x40002) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000680)) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f00000006c0)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) 2.54647594s ago: executing program 4 (id=710): sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001000200"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x88040, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000280)={0x1, &(0x7f0000000300)=[{0x6}]}) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000400)=""/209, 0xd1, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x2040, 0x0) fcntl$getflags(r4, 0x401) read$FUSE(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) symlink(&(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000200)='./file0\x00') rmdir(&(0x7f0000000240)='./file0/file0/..\x00') sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000fedbdf251800000008000300", @ANYRES32=r5, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a280001800800"], 0x64}}, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 2.541841942s ago: executing program 0 (id=711): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) gettid() timer_create(0x1, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0x6, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000340)=0x1, 0x4) write(r4, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000380), 0x800, 0x2) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0xffffffffffffff48) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x437, 0x800003, 0x0, {0x0, 0x0, 0x0, r5, 0x504c3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0xd7b}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(r1, &(0x7f0000000540)=[{{&(0x7f0000000580)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r8, {0xe, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000001740)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f00000001c0)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'syzkaller0\x00'}) 2.146839265s ago: executing program 1 (id=712): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 2.026909428s ago: executing program 2 (id=713): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x458, 0x528, 0xfeffffff, 0x458, 0x528, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {}, 0xe, 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x6, 0x1], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)=@newtaction={0x14, 0x30, 0x9e54f29ff072a93b}, 0x14}}, 0x0) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/vhci\x00', 0x2, 0x0) write(r5, &(0x7f0000000380)="ff00", 0x2) 1.961732991s ago: executing program 1 (id=714): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x4076cbba9945d516, &(0x7f0000000040)={0x0, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(r0, 0x84, 0x25, &(0x7f0000000c40)={0x0, @in6={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x200}}, 0x100, 0x7, 0x1000}, &(0x7f0000000d00)=0x90) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(&(0x7f00000005c0)=@filename='none\x00', &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/crypto/af_alg_restrict\x00', 0x1, 0x0) write(r5, &(0x7f00000006c0)='0\n', 0x2) close(r5) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000780)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f", 0x20) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)='\x00'/144, 0x90}], 0x1, &(0x7f0000000900)=[@op={0x18}], 0x18}, 0x0) read$alg(r7, &(0x7f0000000940)=""/144, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x34, r4, 0x4, 0x400, 0xfdc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "32443cf8318706ab769f0e9469"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x400c010) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000400)={&(0x7f0000000100), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf4, r1, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x10001, 0x1a}}}}, [@NL80211_ATTR_IE={0xbd, 0x2a, [@erp={0x2a, 0x1, {0x1}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x10}}, @random={0x6, 0x9a, "674d69516353b47bd2fcdd7a8a5f318880c9af01f34c40a6c466a2fd84327014d66b64a2efe13db979e4c5102a8c505080e7a83da40517ba0d5395ad47ec0e08dd99f53d541e310897c3b1161981588556ab10437ef3ade19d26bbc8f050177ef523e3ee79ffc146a55201a66811b04a69343b41fc0a236d963313a771b5b900ef70caf07d7d7db741721376b41ab4e9cdc330e56f13acf2f17c"}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x40}}, @peer_mgmt={0x75, 0x6, {0x1, 0x0, @val=0x4, @void, @void}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@mesh_id={0x72, 0x6}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x800) r11 = syz_open_dev$mtd(&(0x7f0000000a00), 0xffffffffffffff12, 0x10100) ioctl$XFS_IOC_FSINUMBERS(r11, 0xc0205867, &(0x7f0000000b80)={&(0x7f0000000a40)=0xec, 0x6, &(0x7f0000000a80)=[{}], &(0x7f0000000bc0)}) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000001600)={'batadv0\x00', 0x0}) sendto$packet(r12, &(0x7f0000001640)="05178100", 0x4, 0x50, &(0x7f0000001680)={0x11, 0x8100, r13, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) 1.309567684s ago: executing program 1 (id=715): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002a40)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000002a80)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000002ac0)='.\x00', &(0x7f0000002b00)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000002b40)='./bus\x00', &(0x7f0000002b80), 0x40, &(0x7f0000002bc0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000002c00)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002c40)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/rebind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='/', 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private0}}, &(0x7f0000000380)=0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), 0x410, &(0x7f0000000340)={[{@nfs_export_on}], [{@seclabel}, {@uid_eq={'uid', 0x3d, r3}}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.307453829s ago: executing program 4 (id=716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000001080)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x10, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x731, 0x5, 0xfffffff8, 0x2}, 0x42}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000f00), 0x56) sendmsg$kcm(r6, &(0x7f0000000f40)={&(0x7f0000000f80)=@xdp={0x2c, 0x0, r5, 0x2042}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="27030200dc0f14000e0007000024c1020000fc24451551e792289fc77e4dca6e341e3207c2fb7fe0406e52534b4f", 0x2e}], 0x1}, 0x4005) 1.220314432s ago: executing program 1 (id=717): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f0000000ac0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000b40)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x40840) recvmsg(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x10020) 1.219993174s ago: executing program 0 (id=718): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000540), 0x0, 0x40002) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000680)) 1.120796325s ago: executing program 4 (id=719): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x800) syz_emit_ethernet(0xb5, &(0x7f0000000300)={@empty, @broadcast, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@x25={0x805, {0x0, 0x3, 0xb, "0c5ca9a409dceb3b4623f50d58123f244a873c77ef475da41f8544ac3cd2bad10295fdab9253ad56f8e54e25270e3005e07340b0e1be205a47c8ce431125cfe9e8b3c118cf0bcf34a7ab7948bd1eb769d3729f15ac833fc5a0f2c8483fc7dfa840c39ed25be1ba800e723b8a14d3a391555e1d137ce52205cace841bf800d327edc1570dbbc96c42c6a576d3710b1f2383a02f30dd85cd262e3af8c7b351a94c"}}}}, &(0x7f00000003c0)={0x1, 0x2, [0x1eb, 0xed5, 0x8b3, 0x966]}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x121040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 384.002416ms ago: executing program 1 (id=720): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00', 0x181) syz_usb_connect(0x0, 0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000404f1004000001010200010902200001010080320904000002000000000705810200020007050202", @ANYRES16], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/ttyUSB0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/virtio/drivers/virtio_net/uevent\x00', 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000003c0)=[@increfs]}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000700)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000004c0)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x100a, 0x2, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000640)={0x0, 0x18, 0x30}}}], 0x17}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000006c0)=[@increfs={0x40046304, 0x1}]}) 379.877559ms ago: executing program 0 (id=721): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60, 0x4000}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20010, 0x284a0}}}}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x22802, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0003006a0500003f000000000000000000000005010905a10105091901290a150025017501950a8102950175068103c0"], 0x135) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000640)=ANY=[@ANYBLOB='\f'], 0x10) 74.382795ms ago: executing program 0 (id=722): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 0s ago: executing program 0 (id=723): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000002c0), &(0x7f00000003c0)=0x4) add_key$user(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), 0xc9, 0xfffffffffffffffd) mount(&(0x7f0000000400), &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') lremovexattr(&(0x7f0000000400)='./mnt/file0\x00', &(0x7f0000000700)=@random={'security.', '@$\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000640)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000680), &(0x7f00000006c0)='./mnt\x00', 0x6, 0x2) lsetxattr$security_selinux(&(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000005c0), &(0x7f0000000600)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x1) r3 = syz_open_dev$evdev(&(0x7f0000000580), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffffffffffffa5}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0x0, 0x0}) r6 = syz_io_uring_setup(0x80, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x0) sendto$unix(r4, &(0x7f0000000900)="61ac20", 0x3, 0x804, 0x0, 0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000940)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x40000100, 0x1}) io_uring_enter(r6, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$EVIOCRMFF(r3, 0x4004550d, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c0003003412000078560000010000000010000005200973a10185010a19031500250775089501b1020a16039501b102850216008026ff7f75100a5304950181020a5404950181020a550495018102c0"], 0x154) write$UHID_DESTROY(r10, &(0x7f0000000c40), 0x4) kernel console output (not intermixed with test programs): 51.253314][ T6243] prepare_alloc_pages+0x1f0/0x5b0 [ 51.253337][ T6243] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 51.253359][ T6243] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 51.253384][ T6243] ? __lock_acquire+0x5c0/0x1f40 [ 51.253411][ T6243] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 51.253432][ T6243] ? try_charge_memcg+0x183/0xf60 [ 51.253458][ T6243] ? __lock_acquire+0x5c0/0x1f40 [ 51.253485][ T6243] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.253507][ T6243] ? policy_nodemask+0xed/0x4f0 [ 51.253534][ T6243] alloc_pages_mpol+0x201/0x550 [ 51.253559][ T6243] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 51.253591][ T6243] alloc_pages_noprof+0x1a/0x160 [ 51.253608][ T6243] pgd_alloc+0x4d/0x630 [ 51.253625][ T6243] ? mutex_init_lockdep+0xf1/0x120 [ 51.253640][ T6243] mm_init+0x6a3/0xeb0 [ 51.253652][ T6243] mm_alloc+0x47/0x60 [ 51.253663][ T6243] alloc_bprm+0x2c0/0x9e0 [ 51.253678][ T6243] do_execveat_common.isra.0+0x19c/0x580 [ 51.253692][ T6243] ? do_getname+0x191/0x390 [ 51.253705][ T6243] __x64_sys_execve+0x93/0xd0 [ 51.253720][ T6243] do_syscall_64+0x123/0x790 [ 51.253737][ T6243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.253748][ T6243] RIP: 0033:0x7fc43cd9e559 [ 51.253757][ T6243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.253767][ T6243] RSP: 002b:00007fc43dc2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 51.253777][ T6243] RAX: ffffffffffffffda RBX: 00007fc43d025fa0 RCX: 00007fc43cd9e559 [ 51.253784][ T6243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 51.253790][ T6243] RBP: 00007fc43dc2b090 R08: 0000000000000000 R09: 0000000000000000 [ 51.253796][ T6243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.253804][ T6243] R13: 00007fc43d026038 R14: 00007fc43d025fa0 R15: 00007ffec5ce6ac8 [ 51.253818][ T6243] [ 51.397010][ T6249] FAULT_INJECTION: forcing a failure. [ 51.397010][ T6249] name failslab, interval 1, probability 0, space 0, times 0 [ 51.397038][ T6249] CPU: 2 UID: 0 PID: 6249 Comm: syz.3.136 Not tainted syzkaller #0 PREEMPT(full) [ 51.397058][ T6249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.397066][ T6249] Call Trace: [ 51.397073][ T6249] [ 51.397080][ T6249] dump_stack_lvl+0x100/0x190 [ 51.397112][ T6249] should_fail_ex.cold+0x5/0xa [ 51.397138][ T6249] should_failslab+0xc2/0x120 [ 51.397167][ T6249] __kmalloc_noprof+0xfc/0x840 [ 51.397187][ T6249] ? kvm_io_bus_register_dev+0x1d2/0x710 [ 51.397214][ T6249] kvm_io_bus_register_dev+0x1d2/0x710 [ 51.397245][ T6249] kvm_pic_init+0x22f/0x380 [ 51.397266][ T6249] kvm_arch_vm_ioctl+0xec4/0x18d0 [ 51.397285][ T6249] ? __x64_sys_openat+0x12d/0x210 [ 51.397302][ T6249] ? do_syscall_64+0x123/0x790 [ 51.397325][ T6249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.397346][ T6249] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 51.397373][ T6249] ? __lock_acquire+0x5c0/0x1f40 [ 51.397402][ T6249] ? __lock_acquire+0x5c0/0x1f40 [ 51.397428][ T6249] ? __lock_acquire+0x5c0/0x1f40 [ 51.397453][ T6249] ? __lock_acquire+0x5c0/0x1f40 [ 51.397476][ T6249] ? lock_acquire+0x1d1/0x380 [ 51.397496][ T6249] ? unwind_next_frame+0xbd/0x2090 [ 51.397531][ T6249] ? find_held_lock+0x2b/0x80 [ 51.397554][ T6249] ? is_bpf_text_address+0x8a/0x1a0 [ 51.397579][ T6249] ? is_bpf_text_address+0x8a/0x1a0 [ 51.397606][ T6249] ? bpf_ksym_find+0x128/0x1c0 [ 51.397624][ T6249] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 51.397646][ T6249] ? is_bpf_text_address+0x94/0x1a0 [ 51.397670][ T6249] ? kernel_text_address+0x8d/0x100 [ 51.397693][ T6249] ? __kernel_text_address+0xd/0x30 [ 51.397712][ T6249] ? unwind_get_return_address+0x59/0xa0 [ 51.397740][ T6249] ? arch_stack_walk+0xa6/0xf0 [ 51.397773][ T6249] ? tomoyo_path_number_perm+0x46d/0x580 [ 51.397796][ T6249] ? stack_trace_save+0x8e/0xc0 [ 51.397815][ T6249] ? __pfx_stack_trace_save+0x10/0x10 [ 51.397835][ T6249] ? stack_depot_save_flags+0x27/0x9f0 [ 51.397855][ T6249] ? __lock_acquire+0x5c0/0x1f40 [ 51.397877][ T6249] ? tomoyo_path_number_perm+0x46d/0x580 [ 51.397905][ T6249] kvm_vm_ioctl+0xcac/0x4170 [ 51.397935][ T6249] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 51.397975][ T6249] ? kasan_quarantine_put+0x104/0x240 [ 51.397998][ T6249] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.398024][ T6249] ? find_held_lock+0x2b/0x80 [ 51.398048][ T6249] ? tomoyo_path_number_perm+0x28f/0x580 [ 51.398072][ T6249] ? tomoyo_path_number_perm+0x28f/0x580 [ 51.398102][ T6249] ? tomoyo_path_number_perm+0x188/0x580 [ 51.398127][ T6249] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 51.398150][ T6249] ? __pfx_futex_wait+0x10/0x10 [ 51.398190][ T6249] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.398217][ T6249] ? do_vfs_ioctl+0x226/0x13e0 [ 51.398241][ T6249] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 51.398262][ T6249] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 51.398289][ T6249] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 51.398320][ T6249] ? __fget_files+0x34/0x3d0 [ 51.398357][ T6249] ? selinux_file_ioctl+0x13b/0x290 [ 51.398381][ T6249] ? selinux_file_ioctl+0xb6/0x290 [ 51.398406][ T6249] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 51.398428][ T6249] __x64_sys_ioctl+0x18e/0x210 [ 51.398452][ T6249] do_syscall_64+0x123/0x790 [ 51.398480][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.398499][ T6249] RIP: 0033:0x7fd63099e559 [ 51.398514][ T6249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.398530][ T6249] RSP: 002b:00007fd631922028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.398549][ T6249] RAX: ffffffffffffffda RBX: 00007fd630c25fa0 RCX: 00007fd63099e559 [ 51.398562][ T6249] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000005 [ 51.398574][ T6249] RBP: 00007fd630a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 51.398585][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.398597][ T6249] R13: 00007fd630c26038 R14: 00007fd630c25fa0 R15: 00007ffc37c84ac8 [ 51.398624][ T6249] [ 51.405031][ T6246] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 51.436061][ T6249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.136'. [ 51.533818][ T6257] ip6t_hbh: Not strict - not implemented [ 51.666904][ T6266] netlink: 240 bytes leftover after parsing attributes in process `syz.3.136'. [ 51.930248][ T5809] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 52.108824][ T5809] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 52.111122][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 52.111135][ T5809] usb 5-1: Product: syz [ 52.111143][ T5809] usb 5-1: SerialNumber: syz [ 52.132714][ T5809] usb 5-1: config 0 descriptor?? [ 52.247822][ T6268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 52.346065][ T5809] usb 5-1: USB disconnect, device number 3 [ 52.667986][ T5878] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 52.698969][ T6291] ip6t_hbh: Not strict - not implemented [ 52.827241][ T5878] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 52.829541][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 52.829554][ T5878] usb 6-1: Product: syz [ 52.829562][ T5878] usb 6-1: SerialNumber: syz [ 52.831856][ T5878] usb 6-1: config 0 descriptor?? [ 52.919087][ T6294] syzkaller0: entered promiscuous mode [ 52.919103][ T6294] syzkaller0: entered allmulticast mode [ 53.079146][ T5878] usb 6-1: USB disconnect, device number 3 [ 53.141128][ T6303] syzkaller0: entered promiscuous mode [ 53.141143][ T6303] syzkaller0: entered allmulticast mode [ 53.463612][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.530596][ T6316] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 53.532000][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.553624][ T43] kauditd_printk_skb: 313 callbacks suppressed [ 53.553634][ T43] audit: type=1800 audit(1792148960.711:618): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129785 res=0 errno=0 [ 53.558038][ T43] audit: type=1800 audit(1792148960.721:619): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129888 res=0 errno=0 [ 53.560105][ T6316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.563379][ T5089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.565801][ T5089] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.566901][ T5089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.567594][ T5089] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.568006][ T5089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.578274][ T43] audit: type=1800 audit(1792148960.741:620): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129907 res=0 errno=0 [ 53.583119][ T43] audit: type=1800 audit(1792148960.741:621): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129918 res=0 errno=0 [ 53.604921][ T6316] bond1: (slave geneve2): making interface the new active one [ 53.605761][ T6316] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 53.626204][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.670877][ T43] audit: type=1400 audit(1792148960.831:622): avc: denied { mounton } for pid=6332 comm="syz.2.164" path="/55/proc/135/task/136/fail-nth" dev="proc" ino=11694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 53.670986][ T6333] ext3: Unknown parameter 'proc' [ 53.704878][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.722437][ T6337] ip6t_hbh: Not strict - not implemented [ 53.783107][ T43] audit: type=1800 audit(1792148960.941:623): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130016 res=0 errno=0 [ 53.784368][ T43] audit: type=1800 audit(1792148960.941:624): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=130021 res=0 errno=0 [ 53.784808][ T43] audit: type=1800 audit(1792148960.941:625): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=130025 res=0 errno=0 [ 53.785244][ T43] audit: type=1800 audit(1792148960.941:626): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=130024 res=0 errno=0 [ 53.809852][ T43] audit: type=1800 audit(1792148960.971:627): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=130027 res=0 errno=0 [ 53.827436][ T6319] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.856285][ T12] bridge_slave_1: left allmulticast mode [ 53.856307][ T12] bridge_slave_1: left promiscuous mode [ 53.857115][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.877932][ T12] bridge_slave_0: left allmulticast mode [ 53.877949][ T12] bridge_slave_0: left promiscuous mode [ 53.878054][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.019242][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.021405][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.022366][ T12] bond0 (unregistering): Released all slaves [ 54.390790][ T6319] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.392489][ T6319] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.392554][ T6319] bridge_slave_0: entered allmulticast mode [ 54.396338][ T6319] bridge_slave_0: entered promiscuous mode [ 54.401787][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 54.402406][ T6319] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.402447][ T6319] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.402506][ T6319] bridge_slave_1: entered allmulticast mode [ 54.405550][ T6319] bridge_slave_1: entered promiscuous mode [ 54.462108][ T6319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.474542][ T6319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.578834][ T12] hsr_slave_0: left promiscuous mode [ 54.581845][ T12] hsr_slave_1: left promiscuous mode [ 54.582960][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.582979][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.588743][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.588755][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.612687][ T12] veth1_macvtap: left promiscuous mode [ 54.612719][ T12] veth0_macvtap: left promiscuous mode [ 54.612765][ T12] veth1_vlan: left promiscuous mode [ 54.612804][ T12] veth0_vlan: left promiscuous mode [ 54.624719][ T6380] ip6t_hbh: Not strict - not implemented [ 54.882265][ T12] team0 (unregistering): Port device team_slave_1 removed [ 54.894419][ T12] team0 (unregistering): Port device team_slave_0 removed [ 55.037600][ T6319] team0: Port device team_slave_0 added [ 55.040495][ T6319] team0: Port device team_slave_1 added [ 55.041120][ T5443] 8021q: adding VLAN 0 to HW filter on device eth3 [ 55.074036][ T6319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.074046][ T6319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.074058][ T6319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.074952][ T6319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.074959][ T6319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.074971][ T6319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.075297][ T6392] bond0: no command found in slaves file - use +ifname or -ifname [ 55.162427][ T6319] hsr_slave_0: entered promiscuous mode [ 55.162866][ T6319] hsr_slave_1: entered promiscuous mode [ 55.163136][ T6319] debugfs: 'hsr0' already exists in 'hsr' [ 55.163147][ T6319] Cannot create hsr debugfs directory [ 55.375472][ T6319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.379865][ T6319] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.402274][ T5443] 8021q: adding VLAN 0 to HW filter on device eth4 [ 55.402461][ T6319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.405808][ T6319] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.406189][ T6319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.414634][ T6319] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.415016][ T6319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.422323][ T6319] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.512703][ T6319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.523083][ T6319] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.535255][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.535304][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.547719][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.547763][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.627037][ T5734] Bluetooth: hci0: command tx timeout [ 55.754166][ T5443] 8021q: adding VLAN 0 to HW filter on device eth5 [ 55.925700][ T6319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.046922][ T5838] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 56.073151][ T6319] veth0_vlan: entered promiscuous mode [ 56.079597][ T6319] veth1_vlan: entered promiscuous mode [ 56.092803][ T6493] netlink: 'syz.2.198': attribute type 2 has an invalid length. [ 56.117128][ T6319] veth0_macvtap: entered promiscuous mode [ 56.119716][ T6319] veth1_macvtap: entered promiscuous mode [ 56.128808][ T6319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.135516][ T6319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.205713][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.205732][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.215669][ T5838] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 56.221247][ T5838] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 56.221275][ T5838] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 56.221296][ T5838] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 56.221315][ T5838] usb 5-1: config 0 interface 0 has no altsetting 0 [ 56.225262][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 56.225285][ T5838] usb 5-1: Product: syz [ 56.225297][ T5838] usb 5-1: Manufacturer: syz [ 56.225311][ T5838] usb 5-1: SerialNumber: syz [ 56.231635][ T5838] usb 5-1: config 0 descriptor?? [ 56.258767][ T5838] usb 5-1: selecting invalid altsetting 0 [ 56.262093][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.262113][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.268651][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.268680][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.268708][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.268733][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.452795][ T35] usb 5-1: USB disconnect, device number 4 [ 56.587176][ T6513] ip6t_hbh: Not strict - not implemented [ 56.666812][ T5601] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 56.826755][ T5601] usb 7-1: Using ep0 maxpacket: 32 [ 56.828884][ T5601] usb 7-1: unable to get BOS descriptor or descriptor too short [ 56.828922][ T5601] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 56.830410][ T5601] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 56.830429][ T5601] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 56.830444][ T5601] usb 7-1: config 14 has no interface number 0 [ 56.830456][ T5601] usb 7-1: config 14 has no interface number 1 [ 56.830496][ T5601] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 56.830513][ T5601] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 56.830532][ T5601] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 56.830551][ T5601] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 56.830571][ T5601] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 56.830590][ T5601] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 56.830635][ T5601] usb 7-1: config 14 interface 57 has no altsetting 0 [ 56.830650][ T5601] usb 7-1: config 14 interface 228 has no altsetting 0 [ 56.832543][ T5601] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.832561][ T5601] usb 7-1: Product: syz [ 56.832572][ T5601] usb 7-1: Manufacturer: syz [ 56.832583][ T5601] usb 7-1: SerialNumber: syz [ 57.046871][ T5601] legousbtower 7-1:14.57: interrupt endpoints not found [ 57.174213][ T6519] FAULT_INJECTION: forcing a failure. [ 57.174213][ T6519] name failslab, interval 1, probability 0, space 0, times 0 [ 57.174282][ T6519] CPU: 0 UID: 0 PID: 6519 Comm: syz.4.205 Not tainted syzkaller #0 PREEMPT(full) [ 57.174298][ T6519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.174305][ T6519] Call Trace: [ 57.174310][ T6519] [ 57.174315][ T6519] dump_stack_lvl+0x100/0x190 [ 57.174345][ T6519] should_fail_ex.cold+0x5/0xa [ 57.174361][ T6519] should_failslab+0xc2/0x120 [ 57.174382][ T6519] kmem_cache_alloc_noprof+0x92/0x6a0 [ 57.174411][ T6519] ? __kernfs_new_node+0xd2/0xa10 [ 57.174427][ T6519] __kernfs_new_node+0xd2/0xa10 [ 57.174442][ T6519] ? __pfx___kernfs_new_node+0x10/0x10 [ 57.174456][ T6519] ? lock_acquire+0x1d1/0x380 [ 57.174469][ T6519] ? kernfs_root+0x23/0x2a0 [ 57.174481][ T6519] ? find_held_lock+0x2b/0x80 [ 57.174498][ T6519] ? kernfs_root+0xee/0x2a0 [ 57.174508][ T6519] ? kernfs_root+0xee/0x2a0 [ 57.174523][ T6519] kernfs_new_node+0x117/0x150 [ 57.174538][ T6519] __kernfs_create_file+0x53/0x350 [ 57.174555][ T6519] sysfs_add_file_mode_ns+0x207/0x3c0 [ 57.174576][ T6519] internal_create_group+0x593/0xfb0 [ 57.174593][ T6519] ? __pfx_internal_create_group+0x10/0x10 [ 57.174627][ T6519] ? kernfs_create_link+0x1bd/0x240 [ 57.174656][ T6519] internal_create_groups+0x9d/0x150 [ 57.174676][ T6519] device_add+0x71a/0x1970 [ 57.174705][ T6519] ? __pfx_device_add+0x10/0x10 [ 57.174725][ T6519] ? kfree_const+0x5a/0x70 [ 57.174748][ T6519] ? kfree+0x1e5/0x6d0 [ 57.174774][ T6519] device_create_groups_vargs+0x1f8/0x270 [ 57.174791][ T6519] device_create+0xed/0x130 [ 57.174810][ T6519] ? __pfx_device_create+0x10/0x10 [ 57.174824][ T6519] ? __pfx_vsnprintf+0x10/0x10 [ 57.174845][ T6519] ? __pfx___debug_object_init+0x10/0x10 [ 57.174863][ T6519] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 57.174882][ T6519] bdi_register_va+0x114/0x820 [ 57.174898][ T6519] ? __pfx_bdi_register_va+0x10/0x10 [ 57.174913][ T6519] ? lockdep_init_map_type+0x5c/0x250 [ 57.174927][ T6519] ? bdi_init+0x3f4/0x5b0 [ 57.174942][ T6519] super_setup_bdi_name+0xff/0x250 [ 57.174955][ T6519] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 57.174968][ T6519] ? __raw_spin_lock_init+0x3a/0x110 [ 57.174988][ T6519] ? ceph_get_tree+0x9e1/0x1fd0 [ 57.175005][ T6519] ceph_get_tree+0xa02/0x1fd0 [ 57.175017][ T6519] ? security_capable+0x80/0x260 [ 57.175031][ T6519] vfs_get_tree+0x92/0x320 [ 57.175042][ T6519] path_mount+0x7d0/0x2850 [ 57.175057][ T6519] ? __pfx_path_mount+0x10/0x10 [ 57.175068][ T6519] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.175084][ T6519] ? putname+0xb1/0x110 [ 57.175093][ T6519] ? kmem_cache_free+0x127/0x6c0 [ 57.175109][ T6519] ? __x64_sys_mount+0x293/0x310 [ 57.175120][ T6519] __x64_sys_mount+0x293/0x310 [ 57.175132][ T6519] ? __pfx___x64_sys_mount+0x10/0x10 [ 57.175148][ T6519] do_syscall_64+0x123/0x790 [ 57.175165][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.175176][ T6519] RIP: 0033:0x7f323019e559 [ 57.175186][ T6519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.175196][ T6519] RSP: 002b:00007f3231139028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 57.175207][ T6519] RAX: ffffffffffffffda RBX: 00007f3230425fa0 RCX: 00007f323019e559 [ 57.175214][ T6519] RDX: 0000200000000400 RSI: 00002000000003c0 RDI: 0000200000000380 [ 57.175220][ T6519] RBP: 00007f32302358b0 R08: 0000000000000000 R09: 0000000000000000 [ 57.175226][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.175232][ T6519] R13: 00007f3230426038 R14: 00007f3230425fa0 R15: 00007ffcf5d6c9f8 [ 57.175247][ T6519] [ 57.183234][ T6519] ceph: No mds server is up or the cluster is laggy [ 57.250841][ T5601] legousbtower 7-1:14.228: get version request failed: -121 [ 57.250916][ T5601] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -121 [ 57.430983][ T6533] warning: `syz.4.209' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.459721][ T5734] Bluetooth: hci4: command 0x1003 tx timeout [ 57.460050][ T5089] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 57.509889][ T6537] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2234 (4468 ns) > initial count (2 ns). Using initial count to start timer. [ 57.583880][ T6540] netlink: 'syz.4.211': attribute type 2 has an invalid length. [ 57.697378][ T5089] Bluetooth: hci0: command tx timeout [ 58.034972][ T6543] netlink: 'syz.1.212': attribute type 4 has an invalid length. [ 58.069306][ T6545] ip6t_hbh: Not strict - not implemented [ 58.688261][ T43] kauditd_printk_skb: 87 callbacks suppressed [ 58.688278][ T43] audit: type=1400 audit(1792148965.851:715): avc: denied { create } for pid=6552 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 58.782021][ T43] audit: type=1326 audit(1792148965.941:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.1.219" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f190319e559 code=0x0 [ 58.891022][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 58.891036][ T6561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.219'. [ 58.925158][ T43] audit: type=1800 audit(1792148966.081:717): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=140697 res=0 errno=0 [ 58.928790][ T43] audit: type=1800 audit(1792148966.091:718): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=140701 res=0 errno=0 [ 59.000507][ T43] audit: type=1800 audit(1792148966.161:719): pid=6567 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.222" name="namespace" dev="sysfs" ino=6476 res=0 errno=0 [ 59.013072][ T6569] ip6t_hbh: Not strict - not implemented [ 59.032391][ T6572] FAULT_INJECTION: forcing a failure. [ 59.032391][ T6572] name failslab, interval 1, probability 0, space 0, times 0 [ 59.032410][ T6572] CPU: 0 UID: 0 PID: 6572 Comm: syz.0.224 Not tainted syzkaller #0 PREEMPT(full) [ 59.032422][ T6572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.032428][ T6572] Call Trace: [ 59.032432][ T6572] [ 59.032437][ T6572] dump_stack_lvl+0x100/0x190 [ 59.032457][ T6572] should_fail_ex.cold+0x5/0xa [ 59.032473][ T6572] should_failslab+0xc2/0x120 [ 59.032490][ T6572] __kmalloc_noprof+0xfc/0x840 [ 59.032505][ T6572] ? tomoyo_encode2+0xfb/0x3c0 [ 59.032524][ T6572] tomoyo_encode2+0xfb/0x3c0 [ 59.032543][ T6572] tomoyo_encode+0x29/0x50 [ 59.032559][ T6572] tomoyo_realpath_from_path+0x18c/0x690 [ 59.032580][ T6572] tomoyo_path_number_perm+0x23c/0x580 [ 59.032594][ T6572] ? tomoyo_path_number_perm+0x22e/0x580 [ 59.032610][ T6572] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 59.032630][ T6572] ? __lock_acquire+0x5c0/0x1f40 [ 59.032649][ T6572] ? __fget_files+0x34/0x3d0 [ 59.032664][ T6572] ? find_held_lock+0x2b/0x80 [ 59.032680][ T6572] ? hook_file_ioctl_common+0x140/0x440 [ 59.032695][ T6572] ? __fget_files+0x21f/0x3d0 [ 59.032719][ T6572] security_file_ioctl+0xd3/0x230 [ 59.032736][ T6572] __x64_sys_ioctl+0xb7/0x210 [ 59.032750][ T6572] do_syscall_64+0x123/0x790 [ 59.032769][ T6572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.032780][ T6572] RIP: 0033:0x7f974159e559 [ 59.032789][ T6572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.032799][ T6572] RSP: 002b:00007f97424aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.032810][ T6572] RAX: ffffffffffffffda RBX: 00007f9741825fa0 RCX: 00007f974159e559 [ 59.032817][ T6572] RDX: 00002000000007c0 RSI: 00000000c06864b8 RDI: 0000000000000003 [ 59.032823][ T6572] RBP: 00007f97424aa090 R08: 0000000000000000 R09: 0000000000000000 [ 59.032829][ T6572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.032836][ T6572] R13: 00007f9741826038 R14: 00007f9741825fa0 R15: 00007ffd9e3e65d8 [ 59.032850][ T6572] [ 59.032859][ T6572] ERROR: Out of memory at tomoyo_realpath_from_path. [ 59.228471][ T43] audit: type=1400 audit(1792148966.391:720): avc: denied { create } for pid=6575 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 59.229887][ T43] audit: type=1400 audit(1792148966.391:721): avc: denied { accept } for pid=6575 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.303232][ T6577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.416374][ T35] usb 7-1: USB disconnect, device number 3 [ 59.685842][ T6587] omfs: Invalid superblock (0) [ 59.687710][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 59.776717][ T5089] Bluetooth: hci0: command tx timeout [ 59.789798][ T43] audit: type=1400 audit(1792148966.951:722): avc: denied { map } for pid=6591 comm="syz.4.229" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 59.916635][ T5809] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 60.077049][ T5809] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 60.077883][ T5809] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 60.077898][ T5809] usb 6-1: config 0 interface 0 has no altsetting 0 [ 60.079476][ T5809] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 60.079488][ T5809] usb 6-1: Product: syz [ 60.079495][ T5809] usb 6-1: Manufacturer: syz [ 60.079502][ T5809] usb 6-1: SerialNumber: syz [ 60.081289][ T5809] usb 6-1: config 0 descriptor?? [ 60.084228][ T43] audit: type=1800 audit(1792148967.241:723): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=140859 res=0 errno=0 [ 60.085221][ T5809] usb 6-1: selecting invalid altsetting 0 [ 60.086451][ T43] audit: type=1800 audit(1792148967.241:724): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=140891 res=0 errno=0 [ 60.235157][ T6597] netlink: 104 bytes leftover after parsing attributes in process `syz.4.234'. [ 60.293747][ T5809] usb 6-1: USB disconnect, device number 4 [ 60.530526][ T6605] netlink: 36 bytes leftover after parsing attributes in process `syz.2.236'. [ 60.992236][ T6639] ci_hdrc ci_hdrc.0: error -EINVAL: invalid resource (null) [ 60.992255][ T6639] ci_hdrc ci_hdrc.0: probe with driver ci_hdrc failed with error -22 [ 61.202092][ T6667] FAULT_INJECTION: forcing a failure. [ 61.202092][ T6667] name failslab, interval 1, probability 0, space 0, times 0 [ 61.202113][ T6667] CPU: 0 UID: 0 PID: 6667 Comm: syz.1.262 Not tainted syzkaller #0 PREEMPT(full) [ 61.202125][ T6667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.202131][ T6667] Call Trace: [ 61.202135][ T6667] [ 61.202140][ T6667] dump_stack_lvl+0x100/0x190 [ 61.202173][ T6667] should_fail_ex.cold+0x5/0xa [ 61.202189][ T6667] should_failslab+0xc2/0x120 [ 61.202210][ T6667] __kvmalloc_node_noprof+0x113/0x9b0 [ 61.202225][ T6667] ? lock_acquire+0x1d1/0x380 [ 61.202238][ T6667] ? __might_fault+0xc5/0x140 [ 61.202248][ T6667] ? seq_read_iter+0x819/0x1270 [ 61.202266][ T6667] seq_read_iter+0x819/0x1270 [ 61.202287][ T6667] seq_read+0x344/0x4d0 [ 61.202302][ T6667] ? __pfx_seq_read+0x10/0x10 [ 61.202317][ T6667] ? lock_acquire+0x1d1/0x380 [ 61.202332][ T6667] ? avc_policy_seqno+0x9/0x20 [ 61.202343][ T6667] ? selinux_file_permission+0x8f/0x6d0 [ 61.202362][ T6667] ? rw_verify_area+0xce/0x6d0 [ 61.202374][ T6667] ? __pfx_seq_read+0x10/0x10 [ 61.202389][ T6667] vfs_read+0x1e4/0xb40 [ 61.202403][ T6667] ? lock_acquire+0x1d1/0x380 [ 61.202415][ T6667] ? __fget_files+0x34/0x3d0 [ 61.202431][ T6667] ? __pfx_vfs_read+0x10/0x10 [ 61.202443][ T6667] ? find_held_lock+0x2b/0x80 [ 61.202459][ T6667] ? __fget_files+0x215/0x3d0 [ 61.202477][ T6667] ? __fget_files+0x21f/0x3d0 [ 61.202497][ T6667] ksys_read+0x12a/0x250 [ 61.202510][ T6667] ? __pfx_ksys_read+0x10/0x10 [ 61.202527][ T6667] do_syscall_64+0x123/0x790 [ 61.202547][ T6667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.202559][ T6667] RIP: 0033:0x7f190319e559 [ 61.202568][ T6667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.202578][ T6667] RSP: 002b:00007f190414b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.202615][ T6667] RAX: ffffffffffffffda RBX: 00007f1903425fa0 RCX: 00007f190319e559 [ 61.202625][ T6667] RDX: 00000000ffffff7a RSI: 0000200000000340 RDI: 0000000000000004 [ 61.202635][ T6667] RBP: 00007f190414b090 R08: 0000000000000000 R09: 0000000000000000 [ 61.202644][ T6667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.202653][ T6667] R13: 00007f1903426038 R14: 00007f1903425fa0 R15: 00007ffd6ff0dc58 [ 61.202673][ T6667] [ 61.206629][ T5878] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 61.380617][ T5878] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 61.383218][ T5878] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 61.383233][ T5878] usb 9-1: Product: syz [ 61.383240][ T5878] usb 9-1: SerialNumber: syz [ 61.384828][ T5878] usb 9-1: config 0 descriptor?? [ 61.598670][ T5878] usb 9-1: USB disconnect, device number 2 [ 61.639286][ T6691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=6691 comm=syz.1.270 [ 61.858077][ T5089] Bluetooth: hci0: command tx timeout [ 61.964208][ T5089] Bluetooth: hci3: Malformed Event: 0x13 [ 62.816749][ T5878] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 62.967403][ T5878] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 62.969683][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 62.969697][ T5878] usb 6-1: Product: syz [ 62.969705][ T5878] usb 6-1: SerialNumber: syz [ 62.972485][ T5878] usb 6-1: config 0 descriptor?? [ 63.092614][ T6754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.297'. [ 63.145606][ T6757] bridge1: entered promiscuous mode [ 63.145696][ T6757] bridge1: entered allmulticast mode [ 63.205992][ T5878] usb 6-1: USB disconnect, device number 5 [ 63.450902][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 63.450924][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 63.798470][ T6786] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 63.800741][ T43] kauditd_printk_skb: 149 callbacks suppressed [ 63.800753][ T43] audit: type=1400 audit(1792148970.961:874): avc: denied { connect } for pid=6785 comm="syz.1.308" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.801907][ T43] audit: type=1400 audit(1792148970.961:875): avc: denied { write } for pid=6785 comm="syz.1.308" path="socket:[17712]" dev="sockfs" ino=17712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.829094][ T6788] netlink: 'syz.4.310': attribute type 2 has an invalid length. [ 63.873289][ T43] audit: type=1400 audit(1792148971.031:876): avc: denied { mount } for pid=6791 comm="syz.1.312" name="/" dev="configfs" ino=3120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 63.873928][ T43] audit: type=1400 audit(1792148971.031:877): avc: denied { search } for pid=6791 comm="syz.1.312" name="/" dev="configfs" ino=3120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.874096][ T43] audit: type=1400 audit(1792148971.031:878): avc: denied { search } for pid=6791 comm="syz.1.312" name="usb_gadget" dev="configfs" ino=5306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.883557][ T43] audit: type=1400 audit(1792148971.041:879): avc: denied { unmount } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 63.979385][ T6798] netlink: 'syz.0.322': attribute type 2 has an invalid length. [ 64.018990][ T43] audit: type=1800 audit(1792148971.181:880): pid=6801 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.314" name="driver_override" dev="sysfs" ino=5216 res=0 errno=0 [ 64.021543][ T43] audit: type=1800 audit(1792148971.181:881): pid=6801 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.314" name="bind" dev="sysfs" ino=29819 res=0 errno=0 [ 64.059224][ T6807] FAULT_INJECTION: forcing a failure. [ 64.059224][ T6807] name failslab, interval 1, probability 0, space 0, times 0 [ 64.059243][ T6807] CPU: 0 UID: 0 PID: 6807 Comm: syz.0.315 Not tainted syzkaller #0 PREEMPT(full) [ 64.059256][ T6807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.059262][ T6807] Call Trace: [ 64.059271][ T6807] [ 64.059275][ T6807] dump_stack_lvl+0x100/0x190 [ 64.059302][ T6807] should_fail_ex.cold+0x5/0xa [ 64.059324][ T6807] should_failslab+0xc2/0x120 [ 64.059344][ T6807] __kmalloc_noprof+0xfc/0x840 [ 64.059358][ T6807] ? __pfx_dynamic_dname+0x10/0x10 [ 64.059372][ T6807] ? tomoyo_encode2+0xfb/0x3c0 [ 64.059392][ T6807] tomoyo_encode2+0xfb/0x3c0 [ 64.059410][ T6807] tomoyo_encode+0x29/0x50 [ 64.059427][ T6807] tomoyo_realpath_from_path+0x18c/0x690 [ 64.059447][ T6807] tomoyo_path_number_perm+0x23c/0x580 [ 64.059462][ T6807] ? tomoyo_path_number_perm+0x22e/0x580 [ 64.059478][ T6807] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 64.059498][ T6807] ? __lock_acquire+0x5c0/0x1f40 [ 64.059517][ T6807] ? __fget_files+0x34/0x3d0 [ 64.059533][ T6807] ? find_held_lock+0x2b/0x80 [ 64.059550][ T6807] ? hook_file_ioctl_common+0x140/0x440 [ 64.059565][ T6807] ? __fget_files+0x21f/0x3d0 [ 64.059583][ T6807] security_file_ioctl+0xd3/0x230 [ 64.059599][ T6807] __x64_sys_ioctl+0xb7/0x210 [ 64.059615][ T6807] do_syscall_64+0x123/0x790 [ 64.059635][ T6807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.059647][ T6807] RIP: 0033:0x7f974159e559 [ 64.059656][ T6807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.059667][ T6807] RSP: 002b:00007f97424aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.059681][ T6807] RAX: ffffffffffffffda RBX: 00007f9741825fa0 RCX: 00007f974159e559 [ 64.059688][ T6807] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000003 [ 64.059695][ T6807] RBP: 00007f97424aa090 R08: 0000000000000000 R09: 0000000000000000 [ 64.059701][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.059707][ T6807] R13: 00007f9741826038 R14: 00007f9741825fa0 R15: 00007ffd9e3e65d8 [ 64.059722][ T6807] [ 64.059731][ T6807] ERROR: Out of memory at tomoyo_realpath_from_path. [ 64.092007][ T43] audit: type=1400 audit(1792148971.251:882): avc: denied { create } for pid=6812 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 64.095587][ T43] audit: type=1400 audit(1792148971.251:883): avc: denied { mount } for pid=6812 comm="syz.0.317" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 64.321850][ T6815] mmap: syz.1.318 (6815) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.325265][ T6815] ima: policy update completed [ 64.375509][ T6827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.320'. [ 64.375525][ T6827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.320'. [ 64.375534][ T6827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.320'. [ 64.623709][ T6838] FAULT_INJECTION: forcing a failure. [ 64.623709][ T6838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.623734][ T6838] CPU: 0 UID: 0 PID: 6838 Comm: syz.1.323 Not tainted syzkaller #0 PREEMPT(full) [ 64.623747][ T6838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.623754][ T6838] Call Trace: [ 64.623757][ T6838] [ 64.623762][ T6838] dump_stack_lvl+0x100/0x190 [ 64.623782][ T6838] should_fail_ex.cold+0x5/0xa [ 64.623799][ T6838] _copy_from_user+0x2e/0xd0 [ 64.623821][ T6838] copy_msghdr_from_user+0x9f/0x4c0 [ 64.623844][ T6838] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 64.623862][ T6838] ? lock_acquire+0x1d1/0x380 [ 64.623875][ T6838] ? get_pid_task+0x2a/0x250 [ 64.623891][ T6838] ___sys_sendmsg+0x106/0x1e0 [ 64.623907][ T6838] ? __pfx____sys_sendmsg+0x10/0x10 [ 64.623939][ T6838] ? get_pid_task+0x106/0x250 [ 64.623959][ T6838] ? find_held_lock+0x2b/0x80 [ 64.623984][ T6838] __sys_sendmsg+0x160/0x210 [ 64.623996][ T6838] ? __pfx___sys_sendmsg+0x10/0x10 [ 64.624014][ T6838] do_syscall_64+0x123/0x790 [ 64.624032][ T6838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.624043][ T6838] RIP: 0033:0x7f190319e559 [ 64.624052][ T6838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.624063][ T6838] RSP: 002b:00007f1904109028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.624074][ T6838] RAX: ffffffffffffffda RBX: 00007f1903426180 RCX: 00007f190319e559 [ 64.624081][ T6838] RDX: 0000000004000000 RSI: 0000200000000740 RDI: 0000000000000009 [ 64.624087][ T6838] RBP: 00007f1904109090 R08: 0000000000000000 R09: 0000000000000000 [ 64.624093][ T6838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.624100][ T6838] R13: 00007f1903426218 R14: 00007f1903426180 R15: 00007ffd6ff0dc58 [ 64.624114][ T6838] [ 64.657646][ T5734] Bluetooth: hci4: command 0x1003 tx timeout [ 64.658958][ T5089] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 65.410492][ T6877] No source specified [ 65.434628][ T6881] capability: warning: `syz.2.342' uses deprecated v2 capabilities in a way that may be insecure [ 65.444074][ T6881] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 65.464394][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.464407][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.776023][ T6898] FAULT_INJECTION: forcing a failure. [ 65.776023][ T6898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.776052][ T6898] CPU: 0 UID: 0 PID: 6898 Comm: syz.0.350 Not tainted syzkaller #0 PREEMPT(full) [ 65.776072][ T6898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.776080][ T6898] Call Trace: [ 65.776084][ T6898] [ 65.776089][ T6898] dump_stack_lvl+0x100/0x190 [ 65.776125][ T6898] should_fail_ex.cold+0x5/0xa [ 65.776150][ T6898] _copy_to_user+0x32/0xd0 [ 65.776172][ T6898] simple_read_from_buffer+0xcb/0x170 [ 65.776198][ T6898] proc_fail_nth_read+0x1af/0x230 [ 65.776225][ T6898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.776250][ T6898] ? rw_verify_area+0xce/0x6d0 [ 65.776265][ T6898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.776290][ T6898] vfs_read+0x1e4/0xb40 [ 65.776310][ T6898] ? lock_acquire+0x1d1/0x380 [ 65.776329][ T6898] ? __fget_files+0x34/0x3d0 [ 65.776347][ T6898] ? __pfx_vfs_read+0x10/0x10 [ 65.776365][ T6898] ? find_held_lock+0x2b/0x80 [ 65.776390][ T6898] ? __fget_files+0x215/0x3d0 [ 65.776415][ T6898] ? __fget_files+0x21f/0x3d0 [ 65.776440][ T6898] ksys_read+0x12a/0x250 [ 65.776460][ T6898] ? __pfx_ksys_read+0x10/0x10 [ 65.776487][ T6898] do_syscall_64+0x123/0x790 [ 65.776528][ T6898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.776547][ T6898] RIP: 0033:0x7f974155ed8e [ 65.776562][ T6898] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 65.776577][ T6898] RSP: 002b:00007f97424a9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.776592][ T6898] RAX: ffffffffffffffda RBX: 00007f97424aa6c0 RCX: 00007f974155ed8e [ 65.776599][ T6898] RDX: 000000000000000f RSI: 00007f97424aa0a0 RDI: 0000000000000003 [ 65.776609][ T6898] RBP: 00007f97424aa090 R08: 0000000000000000 R09: 0000000000000000 [ 65.776619][ T6898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.776628][ T6898] R13: 00007f9741826038 R14: 00007f9741825fa0 R15: 00007ffd9e3e65d8 [ 65.776653][ T6898] [ 65.914814][ T6912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=6912 comm=syz.0.355 [ 65.989995][ T6915] ima: signed policy file (specified as an absolute pathname) required [ 66.133462][ T6915] ima: signed policy file (specified as an absolute pathname) required [ 66.133817][ T6915] ima: signed policy file (specified as an absolute pathname) required [ 66.134035][ T6915] ima: signed policy file (specified as an absolute pathname) required [ 66.134254][ T6915] ima: policy update failed [ 66.507689][ T35] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 66.658049][ T35] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 66.659220][ T35] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 66.659260][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.660505][ T35] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 66.660526][ T35] usb 5-1: Manufacturer: syz [ 66.663109][ T35] usb 5-1: config 0 descriptor?? [ 66.716657][ T35] rc_core: IR keymap rc-hauppauge not found [ 66.716675][ T35] Registered IR keymap rc-empty [ 66.722707][ T35] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 66.725272][ T35] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 66.880755][ T61] usb 5-1: USB disconnect, device number 5 [ 67.479716][ T6966] ima: signed policy file (specified as an absolute pathname) required [ 67.480176][ T6964] ima: policy update failed [ 67.568021][ T6980] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 67.619248][ T6974] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 67.657742][ T6985] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 67.937620][ T5734] Bluetooth: hci4: command 0x1003 tx timeout [ 67.938446][ T5089] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 68.283762][ T7003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.380'. [ 68.349818][ T7007] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 68.424986][ T7012] ip6t_hbh: Not strict - not implemented [ 68.851372][ T43] kauditd_printk_skb: 247 callbacks suppressed [ 68.851391][ T43] audit: type=1400 audit(1792148976.011:1131): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 68.875342][ T43] audit: type=1400 audit(1792148976.031:1132): avc: denied { create } for pid=7030 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.878264][ T43] audit: type=1400 audit(1792148976.041:1133): avc: denied { write } for pid=7030 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.878838][ T43] audit: type=1400 audit(1792148976.041:1134): avc: denied { read } for pid=7030 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.880569][ T43] audit: type=1400 audit(1792148976.041:1135): avc: denied { ioctl } for pid=7030 comm="syz.2.390" path="socket:[19280]" dev="sockfs" ino=19280 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.880850][ T7031] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.390'. [ 68.925261][ T43] audit: type=1400 audit(1792148976.081:1136): avc: denied { read } for pid=7032 comm="syz.2.391" dev="nsfs" ino=4026532982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.925559][ T43] audit: type=1400 audit(1792148976.081:1137): avc: denied { open } for pid=7032 comm="syz.2.391" path="net:[4026532982]" dev="nsfs" ino=4026532982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.926068][ T43] audit: type=1400 audit(1792148976.081:1138): avc: denied { create } for pid=7032 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 68.929520][ T7033] FAULT_INJECTION: forcing a failure. [ 68.929520][ T7033] name failslab, interval 1, probability 0, space 0, times 0 [ 68.929547][ T7033] CPU: 2 UID: 0 PID: 7033 Comm: syz.2.391 Not tainted syzkaller #0 PREEMPT(full) [ 68.929566][ T7033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.929577][ T7033] Call Trace: [ 68.929583][ T7033] [ 68.929590][ T7033] dump_stack_lvl+0x100/0x190 [ 68.929622][ T7033] should_fail_ex.cold+0x5/0xa [ 68.929648][ T7033] should_failslab+0xc2/0x120 [ 68.929675][ T7033] kmem_cache_alloc_noprof+0x92/0x6a0 [ 68.929699][ T7033] ? do_getname+0x35/0x390 [ 68.929720][ T7033] do_getname+0x35/0x390 [ 68.929747][ T7033] user_path_at+0x26/0x60 [ 68.929770][ T7033] __x64_sys_mount+0x1fb/0x310 [ 68.929789][ T7033] ? __pfx___x64_sys_mount+0x10/0x10 [ 68.929813][ T7033] do_syscall_64+0x123/0x790 [ 68.929843][ T7033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.929861][ T7033] RIP: 0033:0x7fc43cd9e559 [ 68.929876][ T7033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.929892][ T7033] RSP: 002b:00007fc43dc2b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.929909][ T7033] RAX: ffffffffffffffda RBX: 00007fc43d025fa0 RCX: 00007fc43cd9e559 [ 68.929920][ T7033] RDX: 0000200000000a80 RSI: 0000200000000a40 RDI: 0000000000000000 [ 68.929930][ T7033] RBP: 00007fc43dc2b090 R08: 0000200000000ac0 R09: 0000000000000000 [ 68.929940][ T7033] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 68.929950][ T7033] R13: 00007fc43d026038 R14: 00007fc43d025fa0 R15: 00007ffec5ce6ac8 [ 68.929972][ T7033] [ 68.968201][ T43] audit: type=1400 audit(1792148976.131:1139): avc: denied { read } for pid=7034 comm="syz.2.392" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 68.968370][ T43] audit: type=1400 audit(1792148976.131:1140): avc: denied { open } for pid=7034 comm="syz.2.392" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 69.243902][ T7059] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.401'. [ 69.306102][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 69.306116][ T7062] netlink: 28 bytes leftover after parsing attributes in process `syz.2.400'. [ 69.617026][ T5734] Bluetooth: hci0: command tx timeout [ 70.075129][ T7112] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 70.309551][ T7122] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 70.417825][ T25] e1000 0000:00:06.0 eth0: Reset adapter [ 70.556323][ T7130] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 70.657098][ T5734] Bluetooth: hci4: command 0x1003 tx timeout [ 70.657158][ T5089] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 70.693808][ T7149] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 70.791105][ T7151] bond0: entered promiscuous mode [ 70.791120][ T7151] bond_slave_0: entered promiscuous mode [ 70.791208][ T7151] bond_slave_1: entered promiscuous mode [ 70.797341][ T5838] e1000 0000:00:06.0 eth0: Reset adapter [ 70.949331][ T7150] block nbd0: shutting down sockets [ 71.041929][ T5878] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 71.089763][ T7167] FAULT_INJECTION: forcing a failure. [ 71.089763][ T7167] name failslab, interval 1, probability 0, space 0, times 0 [ 71.089785][ T7167] CPU: 2 UID: 0 PID: 7167 Comm: syz.0.435 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.089800][ T7167] Tainted: [L]=SOFTLOCKUP [ 71.089804][ T7167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.089811][ T7167] Call Trace: [ 71.089815][ T7167] [ 71.089819][ T7167] dump_stack_lvl+0x100/0x190 [ 71.089852][ T7167] should_fail_ex.cold+0x5/0xa [ 71.089869][ T7167] should_failslab+0xc2/0x120 [ 71.089890][ T7167] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 71.089905][ T7167] ? __alloc_skb+0x5b7/0x710 [ 71.089918][ T7167] ? __alloc_skb+0x140/0x710 [ 71.089930][ T7167] __alloc_skb+0x140/0x710 [ 71.089939][ T7167] ? __alloc_skb+0x5b7/0x710 [ 71.089948][ T7167] ? __pfx___alloc_skb+0x10/0x10 [ 71.089969][ T7167] netlink_alloc_large_skb+0x69/0x150 [ 71.089988][ T7167] netlink_sendmsg+0x680/0xda0 [ 71.090008][ T7167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.090027][ T7167] ? selinux_socket_sendmsg+0x198/0x2f0 [ 71.090045][ T7167] ____sys_sendmsg+0xa4d/0xbe0 [ 71.090058][ T7167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.090081][ T7167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.090098][ T7167] ? lock_acquire+0x1d1/0x380 [ 71.090111][ T7167] ? get_pid_task+0x2a/0x250 [ 71.090127][ T7167] ___sys_sendmsg+0x190/0x1e0 [ 71.090161][ T7167] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.090176][ T7167] ? get_pid_task+0x106/0x250 [ 71.090196][ T7167] ? find_held_lock+0x2b/0x80 [ 71.090221][ T7167] __sys_sendmsg+0x160/0x210 [ 71.090233][ T7167] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.090251][ T7167] do_syscall_64+0x123/0x790 [ 71.090273][ T7167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.090284][ T7167] RIP: 0033:0x7f974159e559 [ 71.090294][ T7167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.090304][ T7167] RSP: 002b:00007f97424aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.090315][ T7167] RAX: ffffffffffffffda RBX: 00007f9741825fa0 RCX: 00007f974159e559 [ 71.090322][ T7167] RDX: 0000000000040880 RSI: 0000200000000500 RDI: 000000000000000a [ 71.090329][ T7167] RBP: 00007f97424aa090 R08: 0000000000000000 R09: 0000000000000000 [ 71.090335][ T7167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.090342][ T7167] R13: 00007f9741826038 R14: 00007f9741825fa0 R15: 00007ffd9e3e65d8 [ 71.090356][ T7167] [ 71.094219][ T7166] block nbd0: shutting down sockets [ 71.141860][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.141904][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.150161][ T10] cfg80211: failed to load regulatory.db [ 71.254834][ T7177] ima: signed policy file (specified as an absolute pathname) required [ 71.363808][ T7187] ima: signed policy file (specified as an absolute pathname) required [ 71.364096][ T7187] ima: signed policy file (specified as an absolute pathname) required [ 71.364285][ T7187] ima: signed policy file (specified as an absolute pathname) required [ 71.365608][ T7176] ima: policy update failed [ 72.977586][ T1347] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 75.975832][ T43] kauditd_printk_skb: 139 callbacks suppressed [ 75.975847][ T43] audit: type=1400 audit(1792148983.131:1280): avc: denied { write } for pid=7199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.023315][ T43] audit: type=1400 audit(1792148983.181:1281): avc: denied { write } for pid=7202 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.529395][ T43] audit: type=1400 audit(1792148986.691:1282): avc: denied { write } for pid=7206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.590098][ T43] audit: type=1400 audit(1792148986.751:1283): avc: denied { write } for pid=7209 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.163763][ T43] audit: type=1400 audit(1792148987.321:1284): avc: denied { create } for pid=7215 comm="syz.2.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 80.164497][ T43] audit: type=1400 audit(1792148987.321:1285): avc: denied { bind } for pid=7215 comm="syz.2.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 80.176597][ T43] audit: type=1400 audit(1792148987.331:1286): avc: denied { mmap_zero } for pid=7215 comm="syz.2.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 80.178371][ T43] audit: type=1400 audit(1792148987.331:1287): avc: denied { kexec_image_load } for pid=7215 comm="syz.2.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 80.178430][ T7217] ima: impossible to appraise a kernel image without a file descriptor; try using kexec_file_load syscall. [ 80.198845][ T43] audit: type=1400 audit(1792148987.361:1288): avc: denied { write } for pid=7214 comm="syz.1.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.203198][ T7216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.440'. [ 80.246023][ T7221] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.443'. [ 80.363648][ T43] audit: type=1326 audit(1792148987.521:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.2.446" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc43cd9e559 code=0x0 [ 80.368573][ T7225] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 80.469604][ T7243] ima: impossible to appraise a kernel image without a file descriptor; try using kexec_file_load syscall. [ 80.474710][ T7234] ima: signed policy file (specified as an absolute pathname) required [ 80.587398][ T7234] ima: signed policy file (specified as an absolute pathname) required [ 80.587584][ T7234] ima: signed policy file (specified as an absolute pathname) required [ 80.587703][ T7234] ima: signed policy file (specified as an absolute pathname) required [ 80.587817][ T7233] ima: policy update failed [ 80.711712][ T7252] binder: 7248:7252 ioctl c018620c 200000000040 returned -1 [ 81.073687][ T7265] ima: impossible to appraise a kernel image without a file descriptor; try using kexec_file_load syscall. [ 81.155085][ T7270] ima: signed policy file (specified as an absolute pathname) required [ 81.155301][ T43] kauditd_printk_skb: 25 callbacks suppressed [ 81.155316][ T43] audit: type=1802 audit(1792148988.311:1315): pid=7270 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=signed policy required comm="syz.0.461" res=0 errno=0 [ 81.231040][ T43] audit: type=1400 audit(1792148988.391:1316): avc: denied { mount } for pid=7271 comm="syz.2.462" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 81.260001][ T43] audit: type=1400 audit(1792148988.421:1317): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 81.271070][ T7270] ima: signed policy file (specified as an absolute pathname) required [ 81.271169][ T43] audit: type=1802 audit(1792148988.431:1318): pid=7270 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=signed policy required comm="syz.0.461" res=0 errno=0 [ 81.271274][ T7267] ima: signed policy file (specified as an absolute pathname) required [ 81.271331][ T43] audit: type=1802 audit(1792148988.431:1319): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=signed policy required comm="syz.0.461" res=0 errno=0 [ 81.271404][ T7267] ima: signed policy file (specified as an absolute pathname) required [ 81.271456][ T43] audit: type=1802 audit(1792148988.431:1320): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=signed policy required comm="syz.0.461" res=0 errno=0 [ 81.271535][ T7266] ima: policy update failed [ 81.271592][ T43] audit: type=1802 audit(1792148988.431:1321): pid=7266 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.461" res=0 errno=0 [ 81.353504][ T43] audit: type=1400 audit(1792148988.511:1322): avc: denied { watch watch_reads } for pid=7278 comm="syz.1.465" path="/84" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.388158][ T43] audit: type=1400 audit(1792148988.551:1323): avc: denied { create } for pid=7282 comm="syz.1.467" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.389637][ T43] audit: type=1400 audit(1792148988.551:1324): avc: denied { ioctl } for pid=7282 comm="syz.1.467" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20141 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.484023][ T7293] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.472'. [ 81.662105][ T7309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.478'. [ 81.940650][ T7316] ªªªªª»: renamed from dummy0 (while UP) [ 82.342276][ T7325] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.676163][ T7351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.490'. [ 82.839896][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'. [ 82.839916][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 82.858559][ T5809] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 82.907342][ T7204] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 83.023120][ T5809] usb 9-1: Invalid ep0 maxpacket: 32 [ 83.118342][ T7349] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 83.144176][ T7374] ip_tables: iptables: counters copy to user failed while replacing table [ 83.166927][ T5809] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 83.180258][ T7374] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 83.317118][ T5809] usb 9-1: Invalid ep0 maxpacket: 32 [ 83.317451][ T5809] usb usb9-port1: attempt power cycle [ 83.647317][ T7384] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 83.666717][ T5809] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 83.683162][ T7389] netdevsim netdevsim1: Direct firmware load for . [ 83.683162][ T7389] failed with error -2 [ 83.685130][ T7389] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 83.685130][ T7389] [ 83.697399][ T5809] usb 9-1: Invalid ep0 maxpacket: 32 [ 83.836714][ T5809] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 83.866635][ T35] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 83.867197][ T5809] usb 9-1: Invalid ep0 maxpacket: 32 [ 83.867489][ T5809] usb usb9-port1: unable to enumerate USB device [ 84.019060][ T35] usb 7-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 84.019996][ T35] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 84.020014][ T35] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 84.021262][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 84.021275][ T35] usb 7-1: Product: syz [ 84.021283][ T35] usb 7-1: Manufacturer: syz [ 84.023329][ T7387] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 84.047361][ T35] iuu_phoenix 7-1:1.0: iuu_phoenix converter detected [ 84.051759][ T35] usb 7-1: iuu_phoenix converter now attached to ttyUSB0 [ 84.289009][ T7401] binder: 7386:7401 ioctl 5411 200000000700 returned -22 [ 84.293584][ T7401] binder: 7386:7401 ioctl c0306201 200000000500 returned -14 [ 84.651712][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 84.651732][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.506'. [ 85.066252][ T7410] UBLK_F_QUIESCE requires UBLK_F_USER_RECOVERY [ 85.318102][ T25] usb 7-1: USB disconnect, device number 4 [ 85.334238][ T25] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 85.334685][ T25] iuu_phoenix 7-1:1.0: device disconnected [ 85.498454][ T7412] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 85.841061][ T7426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.514'. [ 86.104180][ T7433] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 86.199492][ T43] kauditd_printk_skb: 63 callbacks suppressed [ 86.199504][ T43] audit: type=1800 audit(1792148993.361:1388): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.519" name="driver_override" dev="sysfs" ino=5216 res=0 errno=0 [ 86.200564][ T43] audit: type=1800 audit(1792148993.361:1389): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.519" name="bind" dev="sysfs" ino=29819 res=0 errno=0 [ 86.296043][ T43] audit: type=1800 audit(1792148993.451:1390): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35040 res=0 errno=0 [ 86.538163][ T6445] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 86.585562][ T43] audit: type=1800 audit(1792148993.741:1391): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34890 res=0 errno=0 [ 86.593350][ T43] audit: type=1800 audit(1792148993.751:1392): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34913 res=0 errno=0 [ 86.706744][ T6445] usb 9-1: Invalid ep0 maxpacket: 32 [ 86.725078][ T43] audit: type=1400 audit(1792148993.881:1393): avc: denied { create } for pid=7450 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.736839][ T43] audit: type=1400 audit(1792148993.901:1394): avc: denied { bind } for pid=7450 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.810308][ T43] audit: type=1400 audit(1792148993.971:1395): avc: denied { getopt } for pid=7408 comm="syz.0.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.829619][ T35] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 86.846980][ T6445] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 86.884741][ T43] audit: type=1800 audit(1792148994.041:1396): pid=7457 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.528" name="driver_override" dev="sysfs" ino=5216 res=0 errno=0 [ 86.895206][ T43] audit: type=1800 audit(1792148994.051:1397): pid=7457 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.528" name="bind" dev="sysfs" ino=29819 res=0 errno=0 [ 86.987192][ T35] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 86.988009][ T35] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 86.988025][ T35] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 86.989216][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 86.989228][ T35] usb 6-1: Product: syz [ 86.989235][ T35] usb 6-1: Manufacturer: syz [ 86.990965][ T7446] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 86.992716][ T35] iuu_phoenix 6-1:1.0: iuu_phoenix converter detected [ 87.002254][ T35] usb 6-1: iuu_phoenix converter now attached to ttyUSB0 [ 87.021326][ T6445] usb 9-1: Invalid ep0 maxpacket: 32 [ 87.021466][ T6445] usb usb9-port1: attempt power cycle [ 87.269379][ T7460] binder: 7444:7460 ioctl 5411 200000000700 returned -22 [ 87.275892][ T7460] binder: 7444:7460 ioctl c0306201 200000000500 returned -14 [ 87.367002][ T6445] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 87.387311][ T6445] usb 9-1: Invalid ep0 maxpacket: 32 [ 87.528275][ T6445] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 87.548845][ T6445] usb 9-1: Invalid ep0 maxpacket: 32 [ 87.549005][ T6445] usb usb9-port1: unable to enumerate USB device [ 88.268793][ T35] usb 6-1: USB disconnect, device number 6 [ 88.341912][ T7468] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 88.376224][ T35] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 88.379365][ T35] iuu_phoenix 6-1:1.0: device disconnected [ 89.002416][ T7483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.538'. [ 89.282927][ T7496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.542'. [ 89.316846][ T5734] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 89.316864][ T5734] CPU: 3 UID: 0 PID: 5734 Comm: kworker/u34:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.316882][ T5734] Tainted: [L]=SOFTLOCKUP [ 89.316886][ T5734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.316894][ T5734] Workqueue: hci0 hci_rx_work [ 89.316926][ T5734] Call Trace: [ 89.316930][ T5734] [ 89.316936][ T5734] dump_stack_lvl+0x100/0x190 [ 89.316957][ T5734] sysfs_warn_dup.cold+0x1c/0x28 [ 89.316975][ T5734] sysfs_create_dir_ns+0x24b/0x2b0 [ 89.316992][ T5734] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 89.317003][ T5734] ? find_held_lock+0x2b/0x80 [ 89.317026][ T5734] ? kobject_add_internal+0x25f/0x930 [ 89.317042][ T5734] ? kobject_add_internal+0x25f/0x930 [ 89.317056][ T5734] ? do_raw_spin_unlock+0x145/0x1e0 [ 89.317073][ T5734] kobject_add_internal+0x2c8/0x930 [ 89.317089][ T5734] kobject_add+0x16a/0x1e0 [ 89.317101][ T5734] ? __pfx_kobject_add+0x10/0x10 [ 89.317113][ T5734] ? class_to_subsys+0x10f/0x150 [ 89.317131][ T5734] ? kobject_put+0xb9/0x640 [ 89.317141][ T5734] ? _raw_spin_unlock+0x28/0x50 [ 89.317160][ T5734] device_add+0x294/0x1970 [ 89.317173][ T5734] ? __pfx_dev_set_name+0x10/0x10 [ 89.317187][ T5734] ? __pfx_device_add+0x10/0x10 [ 89.317199][ T5734] ? mgmt_send_event_skb+0x2fb/0x460 [ 89.317217][ T5734] hci_conn_add_sysfs+0x1a3/0x260 [ 89.317233][ T5734] le_conn_complete_evt+0x122f/0x2130 [ 89.317249][ T5734] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 89.317261][ T5734] ? hci_event_packet+0x186/0xcd0 [ 89.317271][ T5734] ? hci_event_packet+0x186/0xcd0 [ 89.317286][ T5734] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 89.317300][ T5734] ? skb_pull_data+0x15f/0x1e0 [ 89.317316][ T5734] hci_le_meta_evt+0x34a/0x5f0 [ 89.317330][ T5734] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 89.317345][ T5734] hci_event_packet+0x51c/0xcd0 [ 89.317357][ T5734] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 89.317371][ T5734] ? __pfx_hci_event_packet+0x10/0x10 [ 89.317386][ T5734] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.317404][ T5734] hci_rx_work+0x451/0xfc0 [ 89.317419][ T5734] process_one_work+0xac7/0x1b10 [ 89.317442][ T5734] ? __pfx_process_one_work+0x10/0x10 [ 89.317460][ T5734] ? lock_acquire+0x1d1/0x380 [ 89.317476][ T5734] ? __pfx_hci_rx_work+0x10/0x10 [ 89.317488][ T5734] worker_thread+0x5ef/0xe50 [ 89.317504][ T5734] ? kthread+0x13a/0x450 [ 89.317518][ T5734] ? __pfx_worker_thread+0x10/0x10 [ 89.317527][ T5734] kthread+0x373/0x450 [ 89.317542][ T5734] ? __pfx_kthread+0x10/0x10 [ 89.317558][ T5734] ret_from_fork+0x730/0xd60 [ 89.317572][ T5734] ? __pfx_ret_from_fork+0x10/0x10 [ 89.317585][ T5734] ? __switch_to+0x800/0x10f0 [ 89.317602][ T5734] ? __pfx_kthread+0x10/0x10 [ 89.317618][ T5734] ret_from_fork_asm+0x1a/0x30 [ 89.317637][ T5734] [ 89.317653][ T5734] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 89.317672][ T5734] Bluetooth: hci0: failed to register connection device [ 89.336625][ T7499] FAULT_INJECTION: forcing a failure. [ 89.336625][ T7499] name failslab, interval 1, probability 0, space 0, times 0 [ 89.336647][ T7499] CPU: 2 UID: 0 PID: 7499 Comm: syz.4.543 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.336663][ T7499] Tainted: [L]=SOFTLOCKUP [ 89.336668][ T7499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.336676][ T7499] Call Trace: [ 89.336680][ T7499] [ 89.336684][ T7499] dump_stack_lvl+0x100/0x190 [ 89.336704][ T7499] should_fail_ex.cold+0x5/0xa [ 89.336721][ T7499] should_failslab+0xc2/0x120 [ 89.336739][ T7499] __kmalloc_cache_noprof+0x91/0x6d0 [ 89.336753][ T7499] ? raw_ioctl_init+0x265/0x850 [ 89.336770][ T7499] raw_ioctl_init+0x265/0x850 [ 89.336785][ T7499] ? __pfx_raw_ioctl_init+0x10/0x10 [ 89.336800][ T7499] ? tomoyo_path_number_perm+0x188/0x580 [ 89.336825][ T7499] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 89.336837][ T7499] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 89.336856][ T7499] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 89.336877][ T7499] raw_ioctl+0x138a/0x2b80 [ 89.336894][ T7499] ? __pfx_raw_ioctl+0x10/0x10 [ 89.336909][ T7499] ? selinux_file_ioctl+0x13b/0x290 [ 89.336923][ T7499] ? selinux_file_ioctl+0xb6/0x290 [ 89.336939][ T7499] ? __pfx_raw_ioctl+0x10/0x10 [ 89.336954][ T7499] __x64_sys_ioctl+0x18e/0x210 [ 89.336968][ T7499] do_syscall_64+0x123/0x790 [ 89.336985][ T7499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.336997][ T7499] RIP: 0033:0x7f323019e1eb [ 89.337006][ T7499] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 89.337016][ T7499] RSP: 002b:00007f3231136f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.337032][ T7499] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f323019e1eb [ 89.337040][ T7499] RDX: 00007f3231137fd0 RSI: 0000000041015500 RDI: 0000000000000007 [ 89.337047][ T7499] RBP: 00007f3231137fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 89.337054][ T7499] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3231136fa0 [ 89.337061][ T7499] R13: 00002000000001c0 R14: 0000000000000005 R15: 0000000000000000 [ 89.337076][ T7499] [ 89.726719][ T61] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 89.877192][ T61] usb 7-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 89.879716][ T61] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 89.879741][ T61] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 89.882212][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 89.882231][ T61] usb 7-1: Product: syz [ 89.882242][ T61] usb 7-1: Manufacturer: syz [ 89.887988][ T7503] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 89.889569][ T61] iuu_phoenix 7-1:1.0: iuu_phoenix converter detected [ 89.904390][ T61] usb 7-1: iuu_phoenix converter now attached to ttyUSB0 [ 90.036594][ T35] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 90.052694][ T7522] netlink: 24 bytes leftover after parsing attributes in process `syz.4.553'. [ 90.151599][ T7525] binder: 7502:7525 ioctl 5411 200000000700 returned -22 [ 90.154062][ T7525] binder: 7502:7525 ioctl c0306201 200000000500 returned -14 [ 90.216606][ T35] usb 6-1: Invalid ep0 maxpacket: 32 [ 90.357426][ T7527] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 90.366708][ T35] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 90.526661][ T35] usb 6-1: Invalid ep0 maxpacket: 32 [ 90.526838][ T35] usb usb6-port1: attempt power cycle [ 90.876562][ T35] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 90.897220][ T35] usb 6-1: Invalid ep0 maxpacket: 32 [ 91.026582][ T35] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 91.047054][ T35] usb 6-1: Invalid ep0 maxpacket: 32 [ 91.047259][ T35] usb usb6-port1: unable to enumerate USB device [ 91.056734][ T5089] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 91.056762][ T5734] Bluetooth: hci4: command 0x1003 tx timeout [ 91.141206][ T5878] usb 7-1: USB disconnect, device number 5 [ 91.151144][ T5878] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 91.151469][ T5878] iuu_phoenix 7-1:1.0: device disconnected [ 91.676778][ T43] kauditd_printk_skb: 62 callbacks suppressed [ 91.676791][ T43] audit: type=1800 audit(1792148998.841:1460): pid=7548 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.561" name="driver_override" dev="sysfs" ino=5216 res=0 errno=0 [ 91.704605][ T43] audit: type=1400 audit(1792148998.861:1461): avc: denied { bind } for pid=7549 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.705024][ T7550] Bluetooth: MGMT ver 1.23 [ 91.707186][ T43] audit: type=1400 audit(1792148998.871:1462): avc: denied { unmount } for pid=7549 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 91.750742][ T43] audit: type=1400 audit(1792148998.911:1463): avc: denied { create } for pid=7553 comm="syz.2.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.760026][ T43] audit: type=1400 audit(1792148998.921:1464): avc: denied { read } for pid=7553 comm="syz.2.564" name="event1" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 91.760056][ T43] audit: type=1400 audit(1792148998.921:1465): avc: denied { open } for pid=7553 comm="syz.2.564" path="/dev/input/event1" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 91.760726][ T43] audit: type=1400 audit(1792148998.921:1466): avc: denied { ioctl } for pid=7553 comm="syz.2.564" path="/dev/input/event1" dev="devtmpfs" ino=943 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 91.762625][ T43] audit: type=1400 audit(1792148998.921:1467): avc: denied { connect } for pid=7553 comm="syz.2.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.766717][ T5838] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 91.821207][ T43] audit: type=1400 audit(1792148998.981:1468): avc: denied { create } for pid=7555 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 91.822829][ T43] audit: type=1400 audit(1792148998.981:1469): avc: denied { write } for pid=7555 comm="syz.2.565" path="socket:[23947]" dev="sockfs" ino=23947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 91.852150][ T1347] wacom 0003:056A:003F.0002: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 91.937057][ T5838] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 91.938963][ T5838] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 91.938976][ T5838] usb 9-1: Product: syz [ 91.938983][ T5838] usb 9-1: SerialNumber: syz [ 91.940291][ T5838] usb 9-1: config 0 descriptor?? [ 92.074642][ T7571] ip6t_hbh: Not strict - not implemented [ 92.151338][ T5838] usb 9-1: USB disconnect, device number 11 [ 92.942344][ T7590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.577'. [ 93.436672][ T61] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 93.446904][ T35] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 93.587256][ T61] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 93.589217][ T61] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 93.589231][ T61] usb 6-1: Product: syz [ 93.589238][ T61] usb 6-1: SerialNumber: syz [ 93.594729][ T61] usb 6-1: config 0 descriptor?? [ 93.597633][ T35] usb 7-1: Invalid ep0 maxpacket: 32 [ 93.726569][ T35] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 93.786663][ T25] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 93.807866][ T61] usb 6-1: USB disconnect, device number 11 [ 93.876727][ T35] usb 7-1: Invalid ep0 maxpacket: 32 [ 93.877080][ T35] usb usb7-port1: attempt power cycle [ 93.946589][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 93.947217][ T25] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 93.948066][ T25] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 93.948079][ T25] usb 9-1: config 0 has no interface number 0 [ 93.948097][ T25] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 93.948108][ T25] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 93.948120][ T25] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 93.948132][ T25] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 93.948152][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.949509][ T25] usb 9-1: config 0 descriptor?? [ 93.960651][ T25] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 94.211680][ T5878] usb 9-1: USB disconnect, device number 12 [ 94.211834][ C3] ldusb 9-1:0.55: usb_submit_urb failed (-19) [ 94.216673][ T35] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 94.247242][ T35] usb 7-1: Invalid ep0 maxpacket: 32 [ 94.396598][ T35] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 94.427617][ T35] usb 7-1: Invalid ep0 maxpacket: 32 [ 94.427972][ T35] usb usb7-port1: unable to enumerate USB device [ 94.546721][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 94.697580][ T25] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 94.698384][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 94.698402][ T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 94.699563][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 94.699575][ T25] usb 5-1: Product: syz [ 94.699583][ T25] usb 5-1: Manufacturer: syz [ 94.702098][ T7616] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 94.703070][ T25] iuu_phoenix 5-1:1.0: iuu_phoenix converter detected [ 94.706301][ T25] usb 5-1: iuu_phoenix converter now attached to ttyUSB0 [ 94.901684][ T7622] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 94.901777][ T7622] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.904618][ T7622] vhci_hcd vhci_hcd.0: Device attached [ 94.916035][ T7622] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 94.916051][ T7622] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.916390][ T7622] vhci_hcd vhci_hcd.0: Device attached [ 94.919932][ T7625] vhci_hcd: connection closed [ 94.920562][ T7623] vhci_hcd: connection closed [ 94.922941][ T12] vhci_hcd vhci_hcd.1: stop threads [ 94.923319][ T12] vhci_hcd vhci_hcd.1: release socket [ 94.923347][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 94.924292][ T12] vhci_hcd vhci_hcd.1: stop threads [ 94.924302][ T12] vhci_hcd vhci_hcd.1: release socket [ 94.924317][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 94.960744][ T7627] binder: 7615:7627 ioctl 5411 200000000700 returned -22 [ 95.464350][ T7629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.591'. [ 95.955444][ T5838] usb 5-1: USB disconnect, device number 6 [ 95.961269][ T5838] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 95.961830][ T5838] iuu_phoenix 5-1:1.0: device disconnected [ 96.403924][ T7642] kAFS: No cell specified [ 96.546682][ T5878] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 96.647306][ T5838] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 96.797369][ T5838] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 96.799310][ T5838] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 96.799323][ T5838] usb 7-1: Product: syz [ 96.799331][ T5838] usb 7-1: SerialNumber: syz [ 96.802006][ T5838] usb 7-1: config 0 descriptor?? [ 96.803170][ T43] kauditd_printk_skb: 67 callbacks suppressed [ 96.803184][ T43] audit: type=1800 audit(1792149003.961:1537): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=150101 res=0 errno=0 [ 96.805478][ T43] audit: type=1800 audit(1792149003.961:1538): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=150132 res=0 errno=0 [ 96.806387][ T43] audit: type=1800 audit(1792149003.961:1539): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=150108 res=0 errno=0 [ 96.808358][ T43] audit: type=1800 audit(1792149003.971:1540): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=150109 res=0 errno=0 [ 97.008952][ T43] audit: type=1800 audit(1792149004.171:1541): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=150130 res=0 errno=0 [ 97.010018][ T43] audit: type=1800 audit(1792149004.171:1542): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=150110 res=0 errno=0 [ 97.013454][ T43] audit: type=1800 audit(1792149004.171:1543): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=150131 res=0 errno=0 [ 97.014557][ T5838] usb 7-1: USB disconnect, device number 10 [ 97.396638][ T6445] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 97.546641][ T6445] usb 9-1: Invalid ep0 maxpacket: 32 [ 97.556139][ T43] audit: type=1800 audit(1792149004.711:1544): pid=7656 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.603" name="driver_override" dev="sysfs" ino=5216 res=0 errno=0 [ 97.560847][ T43] audit: type=1800 audit(1792149004.721:1545): pid=7656 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.603" name="bind" dev="sysfs" ino=29819 res=0 errno=0 [ 97.618824][ T43] audit: type=1400 audit(1792149004.771:1546): avc: denied { ioctl } for pid=7659 comm="syz.2.605" path="socket:[24143]" dev="sockfs" ino=24143 ioctlcmd=0x586e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.676689][ T6445] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 97.826615][ T6445] usb 9-1: Invalid ep0 maxpacket: 32 [ 97.826971][ T6445] usb usb9-port1: attempt power cycle [ 97.857433][ T61] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 97.899498][ T35] wacom 0003:056A:003F.0003: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 97.941550][ T7665] fido_id[7665]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 98.007421][ T61] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 98.008207][ T61] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.008230][ T61] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 98.008243][ T61] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 98.008262][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.103270][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 98.103284][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 98.176594][ T6445] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 98.198333][ T6445] usb 9-1: Invalid ep0 maxpacket: 32 [ 98.219627][ T7660] kernel read not supported for file /policy (pid: 7660 comm: syz.2.605) [ 98.256752][ T5734] Bluetooth: hci4: command 0x1003 tx timeout [ 98.258647][ T5089] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 98.326590][ T6445] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 98.347549][ T6445] usb 9-1: Invalid ep0 maxpacket: 32 [ 98.347777][ T6445] usb usb9-port1: unable to enumerate USB device [ 98.469563][ T61] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 98.469576][ T61] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 98.474402][ T61] cxacru 7-1:1.0: probe with driver cxacru failed with error -71 [ 98.477037][ T61] usb 7-1: USB disconnect, device number 11 [ 98.866347][ T7673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.610'. [ 99.039143][ T7677] kAFS: No cell specified [ 99.276662][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 99.427081][ T25] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 99.429291][ T25] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 99.429305][ T25] usb 5-1: Product: syz [ 99.429313][ T25] usb 5-1: SerialNumber: syz [ 99.430773][ T25] usb 5-1: config 0 descriptor?? [ 99.590576][ T7686] Can't find a SQUASHFS superblock on nullb0 [ 99.640571][ T25] usb 5-1: USB disconnect, device number 7 [ 99.701431][ T7690] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 99.703441][ T7690] xt_recent: Need "+ip", "-ip" or "/" [ 99.705205][ T7690] fuse: fd is not a fuse device [ 99.837852][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'. [ 99.837867][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 100.190772][ T7699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.620'. [ 100.277114][ T7702] loop0: detected capacity change from 0 to 4096 [ 100.344765][ T7702] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 100.344787][ T7702] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 100.344892][ T7702] loop0: [ 100.572773][ T7708] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 100.572799][ T7708] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.573257][ T7708] vhci_hcd vhci_hcd.0: Device attached [ 100.578053][ T7708] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 100.578076][ T7708] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.578106][ T7708] vhci_hcd vhci_hcd.0: Device attached [ 100.591445][ T7711] vhci_hcd: connection closed [ 100.592371][ T12] vhci_hcd vhci_hcd.2: stop threads [ 100.592393][ T12] vhci_hcd vhci_hcd.2: release socket [ 100.592412][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 100.593602][ T7709] vhci_hcd: connection closed [ 100.595105][ T12] vhci_hcd vhci_hcd.2: stop threads [ 100.595121][ T12] vhci_hcd vhci_hcd.2: release socket [ 100.595137][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 100.746736][ T7717] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 100.781508][ T7720] kAFS: No cell specified [ 101.016609][ T61] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 101.028678][ T5141] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 101.028697][ T5141] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 101.028743][ T5141] loop0: [ 101.187476][ T61] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 101.189767][ T61] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 101.189786][ T61] usb 6-1: Product: syz [ 101.189797][ T61] usb 6-1: SerialNumber: syz [ 101.193192][ T61] usb 6-1: config 0 descriptor?? [ 101.402745][ T61] usb 6-1: USB disconnect, device number 12 [ 101.437546][ T6445] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 101.596595][ T6445] usb 7-1: Invalid ep0 maxpacket: 32 [ 101.641556][ T61] wacom 0003:056A:003F.0004: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 101.726602][ T6445] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 101.837734][ T43] kauditd_printk_skb: 49 callbacks suppressed [ 101.837753][ T43] audit: type=1800 audit(1792149009.001:1595): pid=7730 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.631" name="driver_override" dev="sysfs" ino=5216 res=0 errno=0 [ 101.838900][ T43] audit: type=1800 audit(1792149009.001:1596): pid=7730 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.631" name="bind" dev="sysfs" ino=29819 res=0 errno=0 [ 101.886773][ T6445] usb 7-1: Invalid ep0 maxpacket: 32 [ 101.886980][ T6445] usb usb7-port1: attempt power cycle [ 101.933712][ T43] audit: type=1326 audit(1792149009.091:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.1.633" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f190319e559 code=0x0 [ 102.015274][ T7736] ima: signed policy file (specified as an absolute pathname) required [ 102.015399][ T43] audit: type=1802 audit(1792149009.171:1598): pid=7736 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=signed policy required comm="syz.4.634" res=0 errno=0 [ 102.015435][ T7735] ima: policy update failed [ 102.015563][ T43] audit: type=1802 audit(1792149009.171:1599): pid=7735 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.4.634" res=0 errno=0 [ 102.036216][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 102.036229][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'. [ 102.117017][ T7739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.635'. [ 102.117038][ T7739] netlink: 48 bytes leftover after parsing attributes in process `syz.4.635'. [ 102.176747][ T5734] Bluetooth: hci4: command 0x1003 tx timeout [ 102.177258][ T5089] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 102.228609][ T43] audit: type=1800 audit(1792149009.391:1600): pid=7745 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.637" name="attach" dev="sysfs" ino=36586 res=0 errno=0 [ 102.229029][ T7745] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 102.229053][ T7745] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.230800][ T7745] vhci_hcd vhci_hcd.0: Device attached [ 102.232953][ T43] audit: type=1800 audit(1792149009.391:1601): pid=7745 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.637" name="attach" dev="sysfs" ino=36586 res=0 errno=0 [ 102.233492][ T7745] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 102.233505][ T7745] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.233528][ T7745] vhci_hcd vhci_hcd.0: Device attached [ 102.233968][ T7748] vhci_hcd: connection closed [ 102.234466][ T7746] vhci_hcd: connection closed [ 102.234995][ T12] vhci_hcd vhci_hcd.4: stop threads [ 102.235009][ T12] vhci_hcd vhci_hcd.4: release socket [ 102.235019][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 102.235108][ T12] vhci_hcd vhci_hcd.4: stop threads [ 102.235116][ T12] vhci_hcd vhci_hcd.4: release socket [ 102.235124][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 102.248233][ T6445] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 102.276981][ T6445] usb 7-1: Invalid ep0 maxpacket: 32 [ 102.426621][ T6445] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 102.447339][ T6445] usb 7-1: Invalid ep0 maxpacket: 32 [ 102.447690][ T6445] usb usb7-port1: unable to enumerate USB device [ 102.781715][ T43] audit: type=1800 audit(1792149009.941:1602): pid=7753 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.639" name="bind" dev="sysfs" ino=13600 res=0 errno=0 [ 102.783851][ T7753] Console: switching to colour dummy device 80x25 [ 102.822226][ T43] audit: type=1800 audit(1792149009.981:1603): pid=7755 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.640" name="driver_override" dev="sysfs" ino=5216 res=0 errno=0 [ 102.823521][ T43] audit: type=1800 audit(1792149009.981:1604): pid=7755 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.640" name="bind" dev="sysfs" ino=29819 res=0 errno=0 [ 102.835782][ T7757] kAFS: No cell specified [ 103.031240][ T7769] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 103.031265][ T7769] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 103.031370][ T7769] vhci_hcd vhci_hcd.0: Device attached [ 103.036332][ T7769] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 103.036353][ T7769] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 103.036422][ T7769] vhci_hcd vhci_hcd.0: Device attached [ 103.037910][ T7772] vhci_hcd: connection closed [ 103.038613][ T7770] vhci_hcd: connection closed [ 103.038942][ T5824] vhci_hcd vhci_hcd.1: stop threads [ 103.038957][ T5824] vhci_hcd vhci_hcd.1: release socket [ 103.038969][ T5824] vhci_hcd vhci_hcd.1: disconnect device [ 103.039061][ T5824] vhci_hcd vhci_hcd.1: stop threads [ 103.039070][ T5824] vhci_hcd vhci_hcd.1: release socket [ 103.039082][ T5824] vhci_hcd vhci_hcd.1: disconnect device [ 103.076719][ T5838] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 103.227419][ T5838] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 103.229728][ T5838] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 103.229750][ T5838] usb 9-1: Product: syz [ 103.229761][ T5838] usb 9-1: SerialNumber: syz [ 103.232183][ T5838] usb 9-1: config 0 descriptor?? [ 103.249950][ T61] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 103.376603][ T61] usb 5-1: device descriptor read/64, error -71 [ 103.446260][ T5838] usb 9-1: USB disconnect, device number 17 [ 103.450002][ T7349] udevd[7349]: setting mode of /dev/bus/usb/009/017 to 020664 failed: No such file or directory [ 103.450056][ T7349] udevd[7349]: setting owner of /dev/bus/usb/009/017 to uid=0, gid=0 failed: No such file or directory [ 103.616775][ T61] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 103.678926][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.648'. [ 103.678946][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.648'. [ 103.746682][ T61] usb 5-1: device descriptor read/64, error -71 [ 103.857399][ T61] usb usb5-port1: attempt power cycle [ 104.206609][ T61] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 104.216710][ T5838] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 104.227507][ T61] usb 5-1: device descriptor read/8, error -71 [ 104.368424][ T5838] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 104.369890][ T5838] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.369920][ T5838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.380128][ T5838] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 104.380225][ T5838] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 104.380254][ T5838] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1 [ 104.381466][ T5838] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 104.381502][ T5838] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 104.385205][ T5838] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 104.386439][ T5838] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 104.386473][ T5838] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 104.391026][ T5838] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 104.478069][ T61] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 104.507163][ T61] usb 5-1: device descriptor read/8, error -71 [ 104.517672][ T7794] xt_hashlimit: size too large, truncated to 1048576 [ 104.583158][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.583564][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.616790][ T61] usb usb5-port1: unable to enumerate USB device [ 104.710671][ T5838] usb 9-1: USB disconnect, device number 18 [ 104.712215][ T5838] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 104.721941][ T5838] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 104.723035][ T5838] keyspan 9-1:1.0: device disconnected [ 104.766609][ T7607] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 104.916627][ T7607] usb 7-1: Invalid ep0 maxpacket: 32 [ 105.046686][ T7607] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 105.197500][ T7607] usb 7-1: Invalid ep0 maxpacket: 32 [ 105.197631][ T7607] usb usb7-port1: attempt power cycle [ 105.353957][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.661'. [ 105.353978][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.661'. [ 105.463763][ T7812] FAULT_INJECTION: forcing a failure. [ 105.463763][ T7812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.463786][ T7812] CPU: 2 UID: 0 PID: 7812 Comm: syz.1.664 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.463801][ T7812] Tainted: [L]=SOFTLOCKUP [ 105.463805][ T7812] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.463811][ T7812] Call Trace: [ 105.463815][ T7812] [ 105.463820][ T7812] dump_stack_lvl+0x100/0x190 [ 105.463853][ T7812] should_fail_ex.cold+0x5/0xa [ 105.463869][ T7812] _copy_from_iter+0x1f4/0x1690 [ 105.463890][ T7812] ? __asan_memset+0x23/0x50 [ 105.463904][ T7812] ? __pfx__copy_from_iter+0x10/0x10 [ 105.463919][ T7812] ? __pfx___alloc_skb+0x10/0x10 [ 105.463946][ T7812] netlink_sendmsg+0x808/0xda0 [ 105.463966][ T7812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.463984][ T7812] ? selinux_socket_sendmsg+0x198/0x2f0 [ 105.464007][ T7812] ____sys_sendmsg+0xa4d/0xbe0 [ 105.464020][ T7812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.464038][ T7812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.464055][ T7812] ? lock_acquire+0x1d1/0x380 [ 105.464068][ T7812] ? get_pid_task+0x2a/0x250 [ 105.464085][ T7812] ___sys_sendmsg+0x190/0x1e0 [ 105.464100][ T7812] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.464115][ T7812] ? get_pid_task+0x106/0x250 [ 105.464135][ T7812] ? find_held_lock+0x2b/0x80 [ 105.464159][ T7812] __sys_sendmsg+0x160/0x210 [ 105.464171][ T7812] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.464189][ T7812] do_syscall_64+0x123/0x790 [ 105.464209][ T7812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.464221][ T7812] RIP: 0033:0x7f190319e559 [ 105.464231][ T7812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.464241][ T7812] RSP: 002b:00007f190414b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.464252][ T7812] RAX: ffffffffffffffda RBX: 00007f1903425fa0 RCX: 00007f190319e559 [ 105.464259][ T7812] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 105.464265][ T7812] RBP: 00007f190414b090 R08: 0000000000000000 R09: 0000000000000000 [ 105.464272][ T7812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.464278][ T7812] R13: 00007f1903426038 R14: 00007f1903425fa0 R15: 00007ffd6ff0dc58 [ 105.464291][ T7812] [ 105.576589][ T7607] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 105.597122][ T7607] usb 7-1: Invalid ep0 maxpacket: 32 [ 105.736671][ T7607] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 105.758207][ T7607] usb 7-1: Invalid ep0 maxpacket: 32 [ 105.758328][ T7607] usb usb7-port1: unable to enumerate USB device [ 106.276681][ T5878] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 106.437484][ T5878] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 106.438454][ T5878] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 106.438478][ T5878] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 106.439857][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 106.439876][ T5878] usb 6-1: Product: syz [ 106.439889][ T5878] usb 6-1: Manufacturer: syz [ 106.443883][ T7831] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 106.469934][ T5878] iuu_phoenix 6-1:1.0: iuu_phoenix converter detected [ 106.479472][ T5878] usb 6-1: iuu_phoenix converter now attached to ttyUSB0 [ 106.706991][ T7846] binder: 7829:7846 ioctl 5411 200000000700 returned -22 [ 106.709017][ T7846] binder: 7829:7846 ioctl c0306201 200000000500 returned -14 [ 106.943802][ T7850] syzkaller0: entered promiscuous mode [ 106.943816][ T7850] syzkaller0: entered allmulticast mode [ 107.048344][ T5089] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 107.048361][ T5089] CPU: 3 UID: 0 PID: 5089 Comm: kworker/u34:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.048378][ T5089] Tainted: [L]=SOFTLOCKUP [ 107.048382][ T5089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.048390][ T5089] Workqueue: hci2 hci_rx_work [ 107.048406][ T5089] Call Trace: [ 107.048411][ T5089] [ 107.048415][ T5089] dump_stack_lvl+0x100/0x190 [ 107.048435][ T5089] sysfs_warn_dup.cold+0x1c/0x28 [ 107.048466][ T5089] sysfs_create_dir_ns+0x24b/0x2b0 [ 107.048479][ T5089] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 107.048489][ T5089] ? find_held_lock+0x2b/0x80 [ 107.048507][ T5089] ? kobject_add_internal+0x25f/0x930 [ 107.048519][ T5089] ? kobject_add_internal+0x25f/0x930 [ 107.048533][ T5089] ? do_raw_spin_unlock+0x145/0x1e0 [ 107.048551][ T5089] kobject_add_internal+0x2c8/0x930 [ 107.048566][ T5089] kobject_add+0x16a/0x1e0 [ 107.048579][ T5089] ? __pfx_kobject_add+0x10/0x10 [ 107.048591][ T5089] ? class_to_subsys+0x10f/0x150 [ 107.048606][ T5089] ? kobject_put+0xb9/0x640 [ 107.048616][ T5089] ? _raw_spin_unlock+0x28/0x50 [ 107.048634][ T5089] device_add+0x294/0x1970 [ 107.048646][ T5089] ? __pfx_dev_set_name+0x10/0x10 [ 107.048660][ T5089] ? __pfx_device_add+0x10/0x10 [ 107.048672][ T5089] ? mgmt_send_event_skb+0x2fb/0x460 [ 107.048689][ T5089] hci_conn_add_sysfs+0x1a3/0x260 [ 107.048705][ T5089] le_conn_complete_evt+0x122f/0x2130 [ 107.048722][ T5089] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 107.048734][ T5089] ? hci_event_packet+0x186/0xcd0 [ 107.048746][ T5089] ? hci_event_packet+0x186/0xcd0 [ 107.048762][ T5089] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 107.048776][ T5089] ? skb_pull_data+0x15f/0x1e0 [ 107.048793][ T5089] hci_le_meta_evt+0x34a/0x5f0 [ 107.048806][ T5089] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 107.048821][ T5089] hci_event_packet+0x51c/0xcd0 [ 107.048833][ T5089] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 107.048847][ T5089] ? __pfx_hci_event_packet+0x10/0x10 [ 107.048862][ T5089] ? lockdep_hardirqs_on+0x7d/0x110 [ 107.048880][ T5089] hci_rx_work+0x451/0xfc0 [ 107.048896][ T5089] process_one_work+0xac7/0x1b10 [ 107.048926][ T5089] ? __pfx_process_one_work+0x10/0x10 [ 107.048945][ T5089] ? lock_acquire+0x1d1/0x380 [ 107.048963][ T5089] ? __pfx_hci_rx_work+0x10/0x10 [ 107.048976][ T5089] worker_thread+0x5ef/0xe50 [ 107.048991][ T5089] ? __pfx_worker_thread+0x10/0x10 [ 107.049003][ T5089] ? kthread+0x13a/0x450 [ 107.049019][ T5089] ? __pfx_worker_thread+0x10/0x10 [ 107.049029][ T5089] kthread+0x373/0x450 [ 107.049046][ T5089] ? __pfx_kthread+0x10/0x10 [ 107.049063][ T5089] ret_from_fork+0x730/0xd60 [ 107.049076][ T5089] ? __pfx_ret_from_fork+0x10/0x10 [ 107.049090][ T5089] ? __switch_to+0x800/0x10f0 [ 107.049106][ T5089] ? __pfx_kthread+0x10/0x10 [ 107.049122][ T5089] ret_from_fork_asm+0x1a/0x30 [ 107.049141][ T5089] [ 107.049186][ T5089] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 107.049206][ T5089] Bluetooth: hci2: failed to register connection device [ 107.054015][ T7852] FAULT_INJECTION: forcing a failure. [ 107.054015][ T7852] name failslab, interval 1, probability 0, space 0, times 0 [ 107.054045][ T7852] CPU: 2 UID: 0 PID: 7852 Comm: syz.0.681 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.054070][ T7852] Tainted: [L]=SOFTLOCKUP [ 107.054076][ T7852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.054088][ T7852] Call Trace: [ 107.054094][ T7852] [ 107.054100][ T7852] dump_stack_lvl+0x100/0x190 [ 107.054128][ T7852] should_fail_ex.cold+0x5/0xa [ 107.054151][ T7852] should_failslab+0xc2/0x120 [ 107.054174][ T7852] kmem_cache_alloc_noprof+0x92/0x6a0 [ 107.054196][ T7852] ? __kernfs_new_node+0xd2/0xa10 [ 107.054218][ T7852] __kernfs_new_node+0xd2/0xa10 [ 107.054240][ T7852] ? __pfx___kernfs_new_node+0x10/0x10 [ 107.054263][ T7852] ? lock_acquire+0x1d1/0x380 [ 107.054282][ T7852] ? kernfs_root+0x23/0x2a0 [ 107.054298][ T7852] ? find_held_lock+0x2b/0x80 [ 107.054321][ T7852] ? kernfs_root+0xee/0x2a0 [ 107.054336][ T7852] ? kernfs_root+0xee/0x2a0 [ 107.054357][ T7852] kernfs_new_node+0x117/0x150 [ 107.054411][ T7852] kernfs_create_link+0xcc/0x240 [ 107.054439][ T7852] sysfs_do_create_link_sd+0x90/0x140 [ 107.054458][ T7852] sysfs_create_link+0x61/0xc0 [ 107.054475][ T7852] driver_sysfs_add+0x112/0x2d0 [ 107.054500][ T7852] really_probe+0x146/0xa60 [ 107.054529][ T7852] __driver_probe_device+0x210/0x460 [ 107.054552][ T7852] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 107.054575][ T7852] driver_probe_device+0x4a/0x140 [ 107.054598][ T7852] __driver_attach+0x21f/0x5b0 [ 107.054629][ T7852] ? __pfx___driver_attach+0x10/0x10 [ 107.054655][ T7852] bus_for_each_dev+0x13e/0x1d0 [ 107.054676][ T7852] ? __pfx_bus_for_each_dev+0x10/0x10 [ 107.054696][ T7852] ? bus_add_driver+0x2b5/0x5b0 [ 107.054740][ T7852] bus_add_driver+0x305/0x5b0 [ 107.054768][ T7852] driver_register+0x1e2/0x360 [ 107.054785][ T7852] ? rcu_is_watching+0x13/0xc0 [ 107.054809][ T7852] usb_gadget_register_driver_owner+0x132/0x210 [ 107.054836][ T7852] raw_ioctl+0x1a85/0x2b80 [ 107.054865][ T7852] ? __pfx_raw_ioctl+0x10/0x10 [ 107.054885][ T7852] ? selinux_file_ioctl+0x13b/0x290 [ 107.054908][ T7852] ? selinux_file_ioctl+0xb6/0x290 [ 107.054931][ T7852] ? __pfx_raw_ioctl+0x10/0x10 [ 107.054954][ T7852] __x64_sys_ioctl+0x18e/0x210 [ 107.054975][ T7852] do_syscall_64+0x123/0x790 [ 107.054999][ T7852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.055015][ T7852] RIP: 0033:0x7f974159e1eb [ 107.055031][ T7852] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 107.055046][ T7852] RSP: 002b:00007f97424a7f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.055064][ T7852] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f974159e1eb [ 107.055076][ T7852] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 107.055086][ T7852] RBP: 00007f97424a8fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 107.055096][ T7852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.055106][ T7852] R13: 00002000000001c0 R14: 0000000000000005 R15: 0000000000000000 [ 107.055128][ T7852] [ 107.055214][ T7852] raw-gadget.2 gadget.0: really_probe: driver_sysfs_add failed [ 107.055645][ T7852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.055977][ T7852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.268474][ T43] kauditd_printk_skb: 60 callbacks suppressed [ 107.268486][ T43] audit: type=1326 audit(1792149014.431:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.4.682" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f323019e559 code=0x0 [ 107.371105][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.682'. [ 107.371120][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.682'. [ 107.704670][ T61] usb 6-1: USB disconnect, device number 13 [ 107.708373][ T61] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 107.708698][ T61] iuu_phoenix 6-1:1.0: device disconnected [ 107.728251][ T7866] FAULT_INJECTION: forcing a failure. [ 107.728251][ T7866] name failslab, interval 1, probability 0, space 0, times 0 [ 107.728285][ T7866] CPU: 2 UID: 0 PID: 7866 Comm: syz.2.687 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.728311][ T7866] Tainted: [L]=SOFTLOCKUP [ 107.728317][ T7866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.728329][ T7866] Call Trace: [ 107.728335][ T7866] [ 107.728343][ T7866] dump_stack_lvl+0x100/0x190 [ 107.728374][ T7866] should_fail_ex.cold+0x5/0xa [ 107.728400][ T7866] should_failslab+0xc2/0x120 [ 107.728427][ T7866] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 107.728451][ T7866] ? __alloc_skb+0x5b7/0x710 [ 107.728466][ T7866] ? __alloc_skb+0x140/0x710 [ 107.728486][ T7866] __alloc_skb+0x140/0x710 [ 107.728499][ T7866] ? __alloc_skb+0x5b7/0x710 [ 107.728511][ T7866] ? __pfx___alloc_skb+0x10/0x10 [ 107.728528][ T7866] ? process_measurement+0x1020/0x2350 [ 107.728544][ T7866] ? process_measurement+0x10d0/0x2350 [ 107.728562][ T7866] alloc_skb_with_frags+0xdd/0x760 [ 107.728578][ T7866] sock_alloc_send_pskb+0x801/0x980 [ 107.728595][ T7866] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 107.728616][ T7866] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 107.728633][ T7866] ? find_held_lock+0x2b/0x80 [ 107.728649][ T7866] ? dev_get_by_index+0x180/0x380 [ 107.728659][ T7866] ? dev_get_by_index+0x180/0x380 [ 107.728673][ T7866] packet_sendmsg+0x1e2d/0x5040 [ 107.728687][ T7866] ? avc_has_perm_noaudit+0x450/0x470 [ 107.728704][ T7866] ? sock_has_perm+0x25a/0x2f0 [ 107.728717][ T7866] ? __pfx_sock_has_perm+0x10/0x10 [ 107.728735][ T7866] ? __pfx_packet_sendmsg+0x10/0x10 [ 107.728750][ T7866] ? selinux_socket_sendmsg+0x198/0x2f0 [ 107.728767][ T7866] ____sys_sendmsg+0xa4d/0xbe0 [ 107.728780][ T7866] ? __pfx_packet_sendmsg+0x10/0x10 [ 107.728793][ T7866] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.728810][ T7866] ? lock_acquire+0x1d1/0x380 [ 107.728822][ T7866] ? get_pid_task+0x2a/0x250 [ 107.728839][ T7866] ___sys_sendmsg+0x190/0x1e0 [ 107.728854][ T7866] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.728869][ T7866] ? get_pid_task+0x106/0x250 [ 107.728889][ T7866] ? find_held_lock+0x2b/0x80 [ 107.728930][ T7866] __sys_sendmsg+0x160/0x210 [ 107.728942][ T7866] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.728960][ T7866] do_syscall_64+0x123/0x790 [ 107.728978][ T7866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.728990][ T7866] RIP: 0033:0x7fc43cd9e559 [ 107.728999][ T7866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.729010][ T7866] RSP: 002b:00007fc43dc2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.729021][ T7866] RAX: ffffffffffffffda RBX: 00007fc43d025fa0 RCX: 00007fc43cd9e559 [ 107.729028][ T7866] RDX: 0000000000008004 RSI: 0000200000000540 RDI: 0000000000000008 [ 107.729035][ T7866] RBP: 00007fc43dc2b090 R08: 0000000000000000 R09: 0000000000000000 [ 107.729041][ T7866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.729048][ T7866] R13: 00007fc43d026038 R14: 00007fc43d025fa0 R15: 00007ffec5ce6ac8 [ 107.729062][ T7866] [ 107.838025][ T43] audit: type=1800 audit(1792149015.001:1666): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151919 res=0 errno=0 [ 107.839698][ T43] audit: type=1800 audit(1792149015.001:1667): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151930 res=0 errno=0 [ 108.126669][ T61] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 108.276570][ T61] usb 7-1: Invalid ep0 maxpacket: 32 [ 108.406628][ T61] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 108.428569][ T7890] netlink: 32 bytes leftover after parsing attributes in process `syz.4.697'. [ 108.428589][ T7890] bridge: RTM_NEWNEIGH with invalid ether address [ 108.540639][ T43] audit: type=1800 audit(1792149015.701:1668): pid=7895 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.699" name="enabled" dev="sysfs" ino=66800 res=0 errno=0 [ 108.557755][ T61] usb 7-1: Invalid ep0 maxpacket: 32 [ 108.557994][ T61] usb usb7-port1: attempt power cycle [ 108.591220][ T43] audit: type=1326 audit(1792149015.751:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7896 comm="syz.4.700" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f323019e559 code=0x0 [ 108.692343][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.700'. [ 108.692363][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.700'. [ 108.886625][ T25] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 108.906905][ T61] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 108.927504][ T61] usb 7-1: Invalid ep0 maxpacket: 32 [ 109.037207][ T25] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 109.037979][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 109.037995][ T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 109.039108][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 109.039119][ T25] usb 6-1: Product: syz [ 109.039127][ T25] usb 6-1: Manufacturer: syz [ 109.041031][ T7900] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 109.042177][ T43] audit: type=1800 audit(1792149016.201:1670): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152227 res=0 errno=0 [ 109.043930][ T43] audit: type=1800 audit(1792149016.201:1671): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=152258 res=0 errno=0 [ 109.044497][ T25] iuu_phoenix 6-1:1.0: iuu_phoenix converter detected [ 109.044847][ T43] audit: type=1800 audit(1792149016.201:1672): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=152234 res=0 errno=0 [ 109.045402][ T43] audit: type=1800 audit(1792149016.201:1673): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=152235 res=0 errno=0 [ 109.047479][ T25] usb 6-1: iuu_phoenix converter now attached to ttyUSB0 [ 109.056733][ T43] audit: type=1800 audit(1792149016.211:1674): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=152256 res=0 errno=0 [ 109.089760][ T61] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 109.117225][ T61] usb 7-1: Invalid ep0 maxpacket: 32 [ 109.117611][ T61] usb usb7-port1: unable to enumerate USB device [ 109.301047][ T7902] binder: 7899:7902 ioctl 5411 200000000700 returned -22 [ 109.302305][ T7902] binder: 7899:7902 ioctl c0306201 200000000500 returned -14 [ 109.471070][ T7904] deleting an unspecified loop device is not supported. [ 109.518011][ T7906] null_blk: disk nullb1 created [ 109.677718][ T25] wacom 0003:056A:003F.0005: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 109.856720][ T5734] Bluetooth: hci4: command 0x1003 tx timeout [ 109.856815][ T5089] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 110.262750][ T5878] usb 6-1: USB disconnect, device number 14 [ 110.269987][ T5878] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 110.270524][ T5878] iuu_phoenix 6-1:1.0: device disconnected [ 110.454022][ T7932] syzkaller0: entered promiscuous mode [ 110.454038][ T7932] syzkaller0: entered allmulticast mode [ 111.207173][ T7946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7946 comm=syz.1.714 [ 111.207546][ T7946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7946 comm=syz.1.714 [ 111.208262][ T7946] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 111.598010][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'. [ 111.598034][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.710'. [ 111.641346][ T7950] overlayfs: failed to resolve './file1/file0': -2 [ 112.657635][ T43] kauditd_printk_skb: 41 callbacks suppressed [ 112.657655][ T43] audit: type=1800 audit(1792149019.821:1716): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153678 res=0 errno=0 [ 112.661829][ T5838] wacom 0003:056A:003F.0006: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 112.662566][ T43] audit: type=1800 audit(1792149019.821:1717): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153700 res=0 errno=0 [ 112.711753][ T43] audit: type=1800 audit(1792149019.871:1718): pid=7962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=153680 res=0 errno=0 [ 112.816713][ T35] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 112.961268][ T43] audit: type=1800 audit(1792149020.121:1719): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153714 res=0 errno=0 [ 112.963187][ T43] audit: type=1400 audit(1792149020.121:1720): avc: denied { mount } for pid=7966 comm="syz.0.723" name="/" dev="ecryptfs" ino=1025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ecryptfs_t tclass=filesystem permissive=1 [ 112.965878][ T7967] ================================================================== [ 112.965891][ T7967] BUG: KASAN: slab-use-after-free in ecryptfs_write_tag_70_packet+0x117b/0x1410 [ 112.965918][ T7967] Read of size 4 at addr ffff88803e799898 by task syz.0.723/7967 [ 112.965926][ T7967] [ 112.965934][ ** replaying previous printk message ** [ 112.965934][ T7967] CPU: 3 UID: 0 PID: 7967 Comm: syz.0.723 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.965950][ T7967] Tainted: [L]=SOFTLOCKUP [ 112.965954][ T7967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.965960][ T7967] Call Trace: [ 112.965965][ T7967] [ 112.965971][ T7967] dump_stack_lvl+0x100/0x190 [ 112.965988][ T7967] print_report+0x13d/0x4b0 [ 112.966003][ T7967] ? __virt_addr_valid+0x239/0x430 [ 112.966015][ T7967] ? ecryptfs_write_tag_70_packet+0x117b/0x1410 [ 112.966030][ T7967] kasan_report+0xdf/0x1c0 [ 112.966046][ T7967] ? ecryptfs_write_tag_70_packet+0x117b/0x1410 [ 112.966062][ T7967] ecryptfs_write_tag_70_packet+0x117b/0x1410 [ 112.966080][ T7967] ? __pfx_ecryptfs_write_tag_70_packet+0x10/0x10 [ 112.966095][ T7967] ? __kmalloc_noprof+0x350/0x840 [ 112.966108][ T7967] ? ecryptfs_encrypt_and_encode_filename+0x371/0xa60 [ 112.966125][ T7967] ecryptfs_encrypt_and_encode_filename+0x428/0xa60 [ 112.966140][ T7967] ? __pfx_ecryptfs_encrypt_and_encode_filename+0x10/0x10 [ 112.966156][ T7967] ? d_alloc_parallel+0x9f6/0x14c0 [ 112.966171][ T7967] ecryptfs_lookup+0x1f7/0x830 [ 112.966187][ T7967] ? __pfx_ecryptfs_lookup+0x10/0x10 [ 112.966204][ T7967] ? down_read+0x13b/0x4c0 [ 112.966214][ T7967] ? __pfx_down_read+0x10/0x10 [ 112.966224][ T7967] __lookup_slow+0x155/0x320 [ 112.966236][ T7967] lookup_slow+0x50/0x70 [ 112.966246][ T7967] path_lookupat+0x5e8/0xc40 [ 112.966260][ T7967] filename_lookup+0x202/0x590 [ 112.966275][ T7967] ? __pfx_filename_lookup+0x10/0x10 [ 112.966293][ T7967] ? strncpy_from_user+0x19d/0x2d0 [ 112.966311][ T7967] path_removexattrat+0x1f3/0x5f0 [ 112.966327][ T7967] ? __pfx_path_removexattrat+0x10/0x10 [ 112.966377][ T7967] ? xfd_validate_state+0x129/0x190 [ 112.966395][ T7967] __x64_sys_lremovexattr+0x5e/0x80 [ 112.966408][ T7967] do_syscall_64+0x123/0x790 [ 112.966425][ T7967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.966437][ T7967] RIP: 0033:0x7f974159e559 [ 112.966447][ T7967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.966458][ T7967] RSP: 002b:00007f97424aa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 112.966473][ T7967] RAX: ffffffffffffffda RBX: 00007f9741825fa0 RCX: 00007f974159e559 [ 112.966481][ T7967] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000200000000400 [ 112.966487][ T7967] RBP: 00007f97416358b0 R08: 0000000000000000 R09: 0000000000000000 [ 112.966494][ T7967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.966518][ T7967] R13: 00007f9741826038 R14: 00007f9741825fa0 R15: 00007ffd9e3e65d8 [ 112.966535][ T7967] [ 112.966541][ T7967] [ 112.966545][ T7967] Allocated by task 7865: [ 112.966554][ T7967] kasan_save_stack+0x30/0x50 [ 112.966577][ T7967] kasan_save_track+0x14/0x30 [ 112.966597][ T7967] __kasan_kmalloc+0xaa/0xb0 [ 112.966615][ T7967] __kmalloc_noprof+0x32f/0x840 [ 112.966632][ T7967] security_inode_init_security+0x113/0x370 [ 112.966649][ T7967] shmem_symlink+0x163/0xbf0 [ 112.966665][ T7967] vfs_symlink+0x178/0x4d0 [ 112.966683][ T7967] filename_symlinkat+0x2a6/0x560 [ 112.966697][ T7967] __x64_sys_symlinkat+0x9c/0xe0 [ 112.966711][ T7967] do_syscall_64+0x123/0x790 [ 112.966733][ T7967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.966748][ T7967] [ 112.966751][ T7967] Freed by task 7865: [ 112.966759][ T7967] kasan_save_stack+0x30/0x50 [ 112.966778][ T7967] kasan_save_track+0x14/0x30 [ 112.966799][ T7967] kasan_save_free_info+0x3b/0x70 [ 112.966816][ T7967] __kasan_slab_free+0x5f/0x80 [ 112.966837][ T7967] kfree+0x22b/0x6d0 [ 112.966851][ T7967] security_inode_init_security+0x2bf/0x370 [ 112.966868][ T7967] shmem_symlink+0x163/0xbf0 [ 112.966884][ T7967] vfs_symlink+0x178/0x4d0 [ 112.966902][ T7967] filename_symlinkat+0x2a6/0x560 [ 112.966916][ T7967] __x64_sys_symlinkat+0x9c/0xe0 [ 112.966931][ T7967] do_syscall_64+0x123/0x790 [ 112.966952][ T7967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.966968][ T7967] [ 112.966972][ T7967] The buggy address belongs to the object at ffff88803e799800 [ 112.966972][ T7967] which belongs to the cache kmalloc-256 of size 256 [ 112.966985][ T7967] The buggy address is located 152 bytes inside of [ 112.966985][ T7967] freed 256-byte region [ffff88803e799800, ffff88803e799900) [ 112.967002][ T7967] [ 112.967006][ T7967] The buggy address belongs to the physical page: [ 112.967014][ T7967] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803e798c00 pfn:0x3e798 [ 112.967030][ T7967] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 112.967043][ T7967] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 112.967059][ T7967] page_type: f5(slab) [ 112.967075][ T7967] raw: 00fff00000000240 ffff88801d042b40 ffffea0000dc7090 ffffea0000fb2490 [ 112.967092][ T7967] raw: ffff88803e798c00 000000000010000b 00000000f5000000 0000000000000000 [ 112.967109][ T7967] head: 00fff00000000240 ffff88801d042b40 ffffea0000dc7090 ffffea0000fb2490 [ 112.967125][ T7967] head: ffff88803e798c00 000000000010000b 00000000f5000000 0000000000000000 [ 112.967141][ T7967] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 112.967158][ T7967] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 112.967169][ T7967] page dumped because: kasan: bad access detected [ 112.967177][ T7967] page_owner tracks the page as allocated [ 112.967183][ T7967] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6063, tgid 6063 (syz-executor), ts 48543292970 [ 112.967210][ T7967] post_alloc_hook+0xfd/0x120 [ 112.967227][ T7967] get_page_from_freelist+0x110d/0x35d0 [ 112.967246][ T7967] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 112.967265][ T7967] new_slab+0xa9/0x6e0 [ 112.967281][ T7967] refill_objects+0xe3/0x410 [ 112.967298][ T7967] __pcs_replace_empty_main+0x35e/0x650 [ 112.967313][ T7967] __kmalloc_noprof+0x67c/0x840 [ 112.967332][ T7967] security_inode_init_security+0x113/0x370 [ 112.967350][ T7967] shmem_symlink+0x163/0xbf0 [ 112.967366][ T7967] vfs_symlink+0x178/0x4d0 [ 112.967383][ T7967] filename_symlinkat+0x2a6/0x560 [ 112.967398][ T7967] __x64_sys_symlinkat+0x9c/0xe0 [ 112.967413][ T7967] do_syscall_64+0x123/0x790 [ 112.967436][ T7967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.967453][ T7967] page last free pid 5726 tgid 5726 ts 48538008353 stack trace: [ 112.967471][ T7967] __free_frozen_pages+0x79f/0x10f0 [ 112.967499][ T7967] qlist_free_all+0x47/0xf0 [ 112.967520][ T7967] kasan_quarantine_reduce+0x1a0/0x1f0 [ 112.967543][ T7967] __kasan_slab_alloc+0x69/0x90 [ 112.967568][ T7967] __kmalloc_node_noprof+0x2df/0x880 [ 112.967589][ T7967] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 112.967615][ T7967] __vmalloc_node_noprof+0xad/0xf0 [ 112.967640][ T7967] do_ip6t_get_ctl+0x7e0/0xc30 [ 112.967657][ T7967] nf_getsockopt+0x7c/0xe0 [ 112.967673][ T7967] ipv6_getsockopt+0x207/0x2a0 [ 112.967691][ T7967] tcp_getsockopt+0xa1/0x110 [ 112.967708][ T7967] do_sock_getsockopt+0x50a/0x6e0 [ 112.967729][ T7967] __sys_getsockopt+0x148/0x260 [ 112.967744][ T7967] __x64_sys_getsockopt+0xbd/0x160 [ 112.967759][ T7967] do_syscall_64+0x123/0x790 [ 112.967784][ T7967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.967802][ T7967] [ 112.967806][ T7967] Memory state around the buggy address: [ 112.967815][ T7967] ffff88803e799780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 112.967828][ T7967] ffff88803e799800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.967840][ T7967] >ffff88803e799880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.967850][ T7967] ^ [ 112.967859][ T7967] ffff88803e799900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 112.967871][ T7967] ffff88803e799980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 112.967881][ T7967] ================================================================== [ 112.976301][ T43] audit: type=1400 audit(1792149020.131:1721): avc: denied { read } for pid=5123 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 112.981761][ T43] audit: type=1400 audit(1792149020.131:1722): avc: denied { search } for pid=5123 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.981807][ T43] audit: type=1400 audit(1792149020.141:1723): avc: denied { write search } for pid=5123 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.981842][ T43] audit: type=1400 audit(1792149020.141:1724): avc: denied { add_name } for pid=5123 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.981875][ T43] audit: type=1400 audit(1792149020.141:1725): avc: denied { create } for pid=5123 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.996668][ T7967] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 113.272856][ T7967] CPU: 2 UID: 0 PID: 7967 Comm: syz.0.723 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.276184][ T7967] Tainted: [L]=SOFTLOCKUP [ 113.277541][ T7967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.280692][ T7967] Call Trace: [ 113.281758][ T7967] [ 113.282720][ T7967] dump_stack_lvl+0x100/0x190 [ 113.284214][ T7967] vpanic+0x553/0x970 [ 113.285496][ T7967] ? __pfx_vpanic+0x10/0x10 [ 113.286936][ T7967] ? mark_held_locks+0x40/0x70 [ 113.288449][ T7967] ? ecryptfs_write_tag_70_packet+0x117b/0x1410 [ 113.290452][ T7967] panic+0xd1/0xe0 [ 113.291645][ T7967] ? __pfx_panic+0x10/0x10 [ 113.293055][ T7967] ? ecryptfs_write_tag_70_packet+0x117b/0x1410 [ 113.295127][ T7967] ? preempt_schedule_common+0x3c/0xb0 [ 113.296840][ T7967] check_panic_on_warn.cold+0x19/0x34 [ 113.298524][ T7967] end_report.part.0+0x3a/0x90 [ 113.299992][ T7967] kasan_report.cold+0xe/0x18 [ 113.301483][ T7967] ? ecryptfs_write_tag_70_packet+0x117b/0x1410 [ 113.303353][ T7967] ecryptfs_write_tag_70_packet+0x117b/0x1410 [ 113.305109][ T7967] ? __pfx_ecryptfs_write_tag_70_packet+0x10/0x10 [ 113.307107][ T7967] ? __kmalloc_noprof+0x350/0x840 [ 113.308645][ T7967] ? ecryptfs_encrypt_and_encode_filename+0x371/0xa60 [ 113.310751][ T7967] ecryptfs_encrypt_and_encode_filename+0x428/0xa60 [ 113.312802][ T7967] ? __pfx_ecryptfs_encrypt_and_encode_filename+0x10/0x10 [ 113.315042][ T7967] ? d_alloc_parallel+0x9f6/0x14c0 [ 113.316655][ T7967] ecryptfs_lookup+0x1f7/0x830 [ 113.318275][ T7967] ? __pfx_ecryptfs_lookup+0x10/0x10 [ 113.320020][ T7967] ? down_read+0x13b/0x4c0 [ 113.321465][ T7967] ? __pfx_down_read+0x10/0x10 [ 113.323007][ T7967] __lookup_slow+0x155/0x320 [ 113.324921][ T7967] lookup_slow+0x50/0x70 [ 113.326508][ T7967] path_lookupat+0x5e8/0xc40 [ 113.327975][ T7967] filename_lookup+0x202/0x590 [ 113.329494][ T7967] ? __pfx_filename_lookup+0x10/0x10 [ 113.331171][ T7967] ? strncpy_from_user+0x19d/0x2d0 [ 113.332781][ T7967] path_removexattrat+0x1f3/0x5f0 [ 113.334367][ T7967] ? __pfx_path_removexattrat+0x10/0x10 [ 113.336114][ T7967] ? xfd_validate_state+0x129/0x190 [ 113.337757][ T7967] __x64_sys_lremovexattr+0x5e/0x80 [ 113.339424][ T7967] do_syscall_64+0x123/0x790 [ 113.340887][ T7967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.342741][ T7967] RIP: 0033:0x7f974159e559 [ 113.344152][ T7967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.350102][ T7967] RSP: 002b:00007f97424aa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 113.353387][ T7967] RAX: ffffffffffffffda RBX: 00007f9741825fa0 RCX: 00007f974159e559 [ 113.356088][ T7967] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000200000000400 [ 113.359060][ T7967] RBP: 00007f97416358b0 R08: 0000000000000000 R09: 0000000000000000 [ 113.361668][ T7967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.364703][ T7967] R13: 00007f9741826038 R14: 00007f9741825fa0 R15: 00007ffd9e3e65d8 [ 113.367254][ T7967] [ 113.369149][ T7967] Kernel Offset: disabled [ 113.370923][ T7967] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:10:20 Registers: info registers vcpu 0 CPU#0 RAX=000000000013a20b RBX=ffffffff8fa91580 RCX=ffffffff8bd48275 RDX=0000000000000001 RSI=ffffffff8e3e34fe RDI=ffffffff8c625580 RBP=fffffbfff1f522b0 RSP=ffffffff8fa07cf0 R8 =0000000000000001 R9 =ffffed100d4467bd R10=ffff88806a233deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1f40fa2 R15=dffffc0000000000 RIP=ffffffff8bd467af RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4946000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f974235da08 CR3=0000000049b1d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6465756575715f6f 692e7166622e6f69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9e3e6ac6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9e3e6ac6 00007ffd9e3e6acc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9741635eda ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9741635f14 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9741636078 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9741635f06 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 Failed reading regs: qemu hmp command 'info registers' (qemu kill: ): {GenericError Parameter 'cpu-index' expects a CPU number} info registers vcpu 2 CPU#2 RAX=000000000010b9d5 RBX=ffff8880202d2580 RCX=ffffffff8bd48275 RDX=0000000000000001 RSI=ffffffff8e3e34fe RDI=ffffffff8c625580 RBP=ffffed100405a4b0 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4867bd R10=ffff88806a433deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bd467af RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4b46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b32c22ff8 CR3=000000003f337000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555796e9ae4 00005555796e9ae0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e74bf5e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e74bf5e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555796ec4f8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 388f66241c010f00 000000062444c7cb ced833022444c700 004260002444c7e5 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f0030fffffffffff ff0418e003000800 18d80300080018d0 0305f884080018c8 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060102a6000800 1990036208001988 030408001980030f ffffffffffff0418 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010108000fffffff ffffff0404017880 3810000180040a08 00048e0800010000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008060a0173f21f fffffffe080001b0 0300080001a80312 080001a003740800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0198034080080001 9003740800018803 4080080001800301 9010001880041410 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060102a6000800 1990036208001988 030408001980030f ffffffffffff0418 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3966666666666666 660a30322e79656b 5f5f206220306332 3335656339666666 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3335656339666666 66666666660a3132 2e79656b5f5f2062 2030303333356563 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2030383333356563 3966666666666666 660a32322e79656b 5f5f206220303433 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f5f206220303061 3735656339666666 66666666660a382e 79656b5f5f206220 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312e79656b5f5f20 6220303461373565 6339666666666666 66660a392e79656b ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a7379656b5f7063 74706d2062203038 6137356563396666 6666666666660a34 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b5f6b636f6c735f 706374706d206220 3063613735656339 6666666666666666 info registers vcpu 3 CPU#3 RAX=0000000000000054 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b2c955 RDI=ffffffff9cc7e660 RBP=ffffffff9cc7e620 RSP=ffffc900001379e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000036393754 R12=0000000000000000 R13=0000000000000054 R14=0000000000000000 R15=ffffc90000137da8 RIP=ffffffff85b2c97f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4c46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b32c11ff8 CR3=0000000058218000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2fe7a7e414d40632 dd53bbd487084264 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ce0c0a12c1480a6c 05e3bb516042c4bc ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 52aca71431c49787 6fc54ded51b5a903 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a50f6953f9309a2 186b8bc3bdddaf67 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000d180 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00459a690045a2d4 a571000049600000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0045a2c900000071 472c64c10045a5a6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000028d52a40000 578c0000fae80000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7190000046140000 0045a5324a320000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b83490030249b6de e0ee013abbff446c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e2f31cd4b2999847 3819da7fc0bf5b1e ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97417f55f8 00007f97417f55c8 00007f97417f5600 00007f97417f55e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000